$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cfba20cf-037e-34c2-aa42-6197010f8c12.roa File: cfba20cf-037e-34c2-aa42-6197010f8c12.roa (raw, json) Hash identifier: 3KcFbCeJBLSoK9KLK9yuukITAPgcwgmk1k2k+r/7feo= Subject key identifier: EC:E8:F8:CF:FA:E0:B3:FB:A6:09:48:B2:5D:23:53:9B:29:54:CA:44 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849C79F7BC2C08064333D35E910 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cfba20cf-037e-34c2-aa42-6197010f8c12.roa Signing time: Thu 08 May 2025 01:00:47 +0000 ROA not before: Thu 08 May 2025 01:00:47 +0000 ROA not after: Wed 06 Aug 2025 01:00:47 +0000 asID: 6167 IP address blocks: 174.245.244.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c7:9f:7b:c2:c0:80:64:33:3d:35:e9:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: May 8 01:00:47 2025 GMT Not After : Aug 6 01:00:47 2025 GMT Subject: CN=f109baab-dfd6-4c2a-8fdc-da81bcede735 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:80:79:ce:92:a7:77:4a:81:00:82:c0:19:76: 15:07:bc:a1:e6:40:bf:44:e8:8e:5a:70:0f:a5:b2: 96:57:f4:e0:20:8d:08:1e:28:e0:53:81:89:ef:3f: 71:35:92:bf:be:70:c0:f4:14:fc:9c:e8:57:76:fa: 3c:6a:c1:f6:2b:8f:12:01:96:cc:93:f6:e0:a5:11: be:22:c5:2e:4f:a4:41:f6:36:b1:71:2f:da:6c:0f: 03:21:2b:fc:31:2a:d3:07:c9:36:c1:da:30:35:ef: 19:aa:3a:1c:e1:ae:e7:a6:09:4f:be:b1:01:bd:9a: 14:3e:de:72:1b:8c:38:6e:48:c8:ac:c1:cd:40:68: 3e:5a:e6:b9:f6:ae:b3:19:00:31:6a:14:b5:37:38: e2:3d:e7:8f:86:fe:aa:f6:56:29:a3:5c:bb:8c:54: c1:b8:17:aa:b5:a3:93:dd:a2:75:9c:a8:34:8e:ba: b8:19:d9:4f:eb:09:14:29:bd:85:52:79:12:46:30: 3c:e5:04:64:5a:9c:7b:86:d3:b7:02:8d:f2:2b:c5: 5a:93:bd:53:90:16:13:9f:e3:4a:9f:b9:41:93:17: af:50:f6:00:fe:be:c7:77:4f:60:a6:78:7e:a1:18: af:65:e0:6a:1e:e7:bf:c9:dd:11:f1:66:60:30:a3: ba:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:E8:F8:CF:FA:E0:B3:FB:A6:09:48:B2:5D:23:53:9B:29:54:CA:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cfba20cf-037e-34c2-aa42-6197010f8c12.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.245.244.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:74:34:f2:64:28:8e:d3:15:6d:ef:0c:10:d2:2d:ac:6d:1b: 3e:82:93:30:e5:5d:d6:cf:7a:ca:cf:38:30:be:d4:41:2d:dd: 7e:4b:91:93:9a:d7:29:6c:3c:31:e2:86:e4:ed:5e:38:c0:79: f6:f8:ea:6c:ea:70:d9:10:ae:97:b0:c9:24:4c:05:0c:f3:bc: ff:98:cc:c1:05:30:1f:47:d4:4b:d7:79:0d:36:c6:54:0f:b9: 5a:d7:a5:b5:c8:cf:d1:e8:de:77:c4:2b:eb:98:c2:8b:9c:b5: 37:50:1d:ab:90:17:91:69:a1:4e:66:13:fb:62:14:e2:7c:50: 78:52:02:71:a2:d0:dd:d6:d7:43:56:ac:82:a7:20:82:55:5e: e1:34:69:ee:1d:84:bf:42:21:4b:eb:51:58:75:93:f1:90:b0: ec:57:c8:d9:19:23:3e:3b:b8:e2:2e:dd:a0:f5:71:f2:ce:38: 46:06:83:c1:7d:73:39:7a:7c:08:52:e8:ca:a6:a5:c3:48:e4: 16:e5:83:03:a9:58:32:3e:a6:67:af:de:8f:aa:46:01:ee:0d: 0b:36:a9:e8:47:f6:95:bf:a1:d2:04:3c:57:96:f5:fa:ef:1e: 27:ad:00:f6:8d:41:b1:13:68:cb:f2:ee:8c:12:6b:be:bd:11: 32:d1:0f:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnHn3vCwIBkMz016RAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDUwODAxMDA0N1oXDTI1MDgwNjAxMDA0N1owLzEtMCsGA1UEAxMk ZjEwOWJhYWItZGZkNi00YzJhLThmZGMtZGE4MWJjZWRlNzM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYB5zpKnd0qBAILAGXYVB7yh5kC/ROiOWnAP pbKWV/TgII0IHijgU4GJ7z9xNZK/vnDA9BT8nOhXdvo8asH2K48SAZbMk/bgpRG+ IsUuT6RB9jaxcS/abA8DISv8MSrTB8k2wdowNe8Zqjoc4a7npglPvrEBvZoUPt5y G4w4bkjIrMHNQGg+Wua59q6zGQAxahS1NzjiPeePhv6q9lYpo1y7jFTBuBeqtaOT 3aJ1nKg0jrq4GdlP6wkUKb2FUnkSRjA85QRkWpx7htO3Ao3yK8Vak71TkBYTn+NK n7lBkxevUPYA/r7Hd09gpnh+oRivZeBqHue/yd0R8WZgMKO65wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOzo+M/64LP7pglIsl0jU5spVMpEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvY2ZiYTIwY2YtMDM3ZS0z NGMyLWFhNDItNjE5NzAxMGY4YzEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrvX0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH50NPJkKI7TFW3vDBDSLaxtGz6CkzDlXdbPesrPODC+1EEt3X5LkZOa 1ylsPDHihuTtXjjAefb46mzqcNkQrpewySRMBQzzvP+YzMEFMB9H1EvXeQ02xlQP uVrXpbXIz9Ho3nfEK+uYwouctTdQHauQF5FpoU5mE/tiFOJ8UHhSAnGi0N3W10NW rIKnIIJVXuE0ae4dhL9CIUvrUVh1k/GQsOxXyNkZIz47uOIu3aD1cfLOOEYGg8F9 czl6fAhS6MqmpcNI5BblgwOpWDI+pmev3o+qRgHuDQs2qehH9pW/odIEPFeW9frv HietAPaNQbETaMvy7owSa769ETLRDxU= -----END CERTIFICATE-----Generated at Sun May 11 09:07:40 2025 by rpki-client