$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cecd56b1-7e2b-3f23-9635-89b5421c2af2.roa File: cecd56b1-7e2b-3f23-9635-89b5421c2af2.roa (raw, json) Hash identifier: se3RcOnvFxjF8oiuS27jVoJFyAIwDt96DO2x4A+sZRI= Subject key identifier: 76:0C:3F:C7:B5:A6:51:65:AB:18:A8:3F:29:6B:59:E0:19:76:81:90 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849CE9A7E475C5ACF0C3477ED80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cecd56b1-7e2b-3f23-9635-89b5421c2af2.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 22394 IP address blocks: 174.41.238.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:7e:47:5c:5a:cf:0c:34:77:ed:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=9044e451-40be-4191-8a3b-da796f97237e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:77:e9:a7:88:07:e4:aa:33:fa:98:77:02:bd: 9f:48:a3:ca:d9:c4:7d:3e:d1:60:f7:a6:16:56:e3: 1d:06:85:5c:02:84:b6:6f:18:87:4c:90:d3:a0:f0: 5f:92:d9:91:5b:95:22:cb:6b:60:d6:5d:2d:a4:0a: cf:7d:6d:d9:55:f8:ac:b6:34:e4:bc:8b:bc:a5:14: 2c:f6:9e:54:e4:1d:73:5e:58:3e:2f:07:a0:61:44: 82:a8:83:51:30:2d:19:e9:b0:7c:fc:bc:5f:6f:fa: 8b:28:c8:d3:85:48:92:c4:6f:14:e8:48:2a:61:94: f3:33:80:09:54:f2:bb:9c:f0:aa:cb:1f:e1:9c:29: 29:2b:7f:65:db:a4:f4:60:90:8d:9e:88:8f:ce:43: 17:21:4b:d5:f3:73:e0:c6:68:ca:70:68:74:4a:a1: 49:b5:fc:66:ae:5e:d6:ba:f8:65:ab:58:a0:a0:0c: 97:35:fe:83:0a:5d:b7:b5:e4:51:46:34:6e:b9:c4: 16:cc:4f:2b:2d:54:8e:c8:4c:9b:b7:7b:38:4c:af: 3d:29:53:f7:ce:aa:a5:4d:bc:b2:1c:1a:db:6b:20: b5:ca:96:dd:2c:eb:a7:98:82:99:d9:76:05:24:bd: 23:c3:d8:bc:6f:81:fc:87:cf:67:03:22:71:bc:9f: 03:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:0C:3F:C7:B5:A6:51:65:AB:18:A8:3F:29:6B:59:E0:19:76:81:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cecd56b1-7e2b-3f23-9635-89b5421c2af2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.41.238.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:12:d8:22:25:0d:69:39:cd:9e:a8:fd:91:ec:8f:30:ec:2b: c6:0f:6f:4d:2a:d4:09:7d:70:71:39:6a:17:b4:4b:88:ba:d5: 61:86:ed:cc:4d:f9:7c:2b:c9:82:84:c7:95:73:7d:cc:b6:c2: 43:b1:ab:17:63:d5:b5:77:20:f8:3f:0b:7d:bd:4c:15:66:f1: 88:e1:a6:59:09:0c:c3:21:36:65:9c:2b:22:11:6f:42:0e:56: 02:b7:a1:c5:54:a9:71:1a:63:20:4a:31:2a:bb:d8:2c:af:8a: ba:3b:4b:a2:33:a0:d8:45:34:1a:72:ff:3b:51:b9:c2:81:e6: 56:86:f6:0f:62:81:fd:7c:62:a1:0e:60:51:0b:b3:13:c9:fc: 1c:42:3a:44:9f:56:ee:2b:57:74:49:21:eb:b8:b6:38:e7:81: 6d:b4:c3:b0:b9:3f:bc:25:05:59:ce:9a:38:dc:a0:57:f7:f4: ab:3a:30:ac:9c:aa:c4:ca:8d:6d:03:9d:e5:65:f4:ee:95:55: 0e:f0:c3:d9:2c:b8:bc:da:23:4f:ba:cd:33:bf:19:90:9a:76: 85:47:d9:6f:f7:4f:76:a2:d5:8b:52:4f:13:a0:b2:0a:1e:20: 4d:db:d2:9c:55:53:f6:6a:8f:37:8e:58:f1:ee:97:60:75:61: 27:04:fc:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnOmn5HXFrPDDR37YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk OTA0NGU0NTEtNDBiZS00MTkxLThhM2ItZGE3OTZmOTcyMzdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3fpp4gH5Koz+ph3Ar2fSKPK2cR9PtFg96YW VuMdBoVcAoS2bxiHTJDToPBfktmRW5Uiy2tg1l0tpArPfW3ZVfistjTkvIu8pRQs 9p5U5B1zXlg+LwegYUSCqINRMC0Z6bB8/Lxfb/qLKMjThUiSxG8U6EgqYZTzM4AJ VPK7nPCqyx/hnCkpK39l26T0YJCNnoiPzkMXIUvV83PgxmjKcGh0SqFJtfxmrl7W uvhlq1igoAyXNf6DCl23teRRRjRuucQWzE8rLVSOyEybt3s4TK89KVP3zqqlTbyy HBrbayC1ypbdLOunmIKZ2XYFJL0jw9i8b4H8h89nAyJxvJ8DnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHYMP8e1plFlqxioPylrWeAZdoGQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvY2VjZDU2YjEtN2UyYi0z ZjIzLTk2MzUtODliNTQyMWMyYWYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrinuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEsS2CIlDWk5zZ6o/ZHsjzDsK8YPb00q1Al9cHE5ahe0S4i61WGG7cxN +XwryYKEx5Vzfcy2wkOxqxdj1bV3IPg/C329TBVm8YjhplkJDMMhNmWcKyIRb0IO VgK3ocVUqXEaYyBKMSq72Cyviro7S6IzoNhFNBpy/ztRucKB5laG9g9igf18YqEO YFELsxPJ/BxCOkSfVu4rV3RJIeu4tjjngW20w7C5P7wlBVnOmjjcoFf39Ks6MKyc qsTKjW0DneVl9O6VVQ7ww9ksuLzaI0+6zTO/GZCadoVH2W/3T3ai1YtSTxOgsgoe IE3b0pxVU/ZqjzeOWPHul2B1YScE/O8= -----END CERTIFICATE-----Generated at Sun May 11 10:37:17 2025 by rpki-client