$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d10c169a-ae70-3a68-9f57-5160dba5487d.roa File: d10c169a-ae70-3a68-9f57-5160dba5487d.roa (raw, json) Hash identifier: sQlXtcTXZ7nP3seFj1MPnm6j/MukOowElYDNT8ic4x4= Subject key identifier: 0A:B2:39:11:95:83:00:31:01:2E:A0:A2:77:C9:7C:45:71:8F:96:BC Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858490B4C333C4DBE1C9932BB2E30 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d10c169a-ae70-3a68-9f57-5160dba5487d.roa Signing time: Sat 01 Mar 2025 14:00:52 +0000 ROA not before: Sat 01 Mar 2025 14:00:52 +0000 ROA not after: Fri 30 May 2025 13:00:52 +0000 asID: 701 IP address blocks: 74.98.0.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0b:4c:33:3c:4d:be:1c:99:32:bb:2e:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 1 14:00:52 2025 GMT Not After : May 30 13:00:52 2025 GMT Subject: CN=159a65aa-6ac4-435d-a75b-81486131db51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:65:f9:9f:59:59:e3:64:61:bf:4b:d9:d7:04: 53:e0:54:4f:c1:1f:c1:cf:61:d4:50:cb:a6:ef:65: 59:d2:62:e9:70:08:21:f6:cd:5e:99:86:ba:d4:5e: 09:7b:72:b1:53:1c:a7:a1:b3:ea:9e:30:66:8a:73: 50:ee:1c:f5:3b:c8:c8:5a:4d:40:28:7e:0b:cd:75: ad:1e:90:f9:35:c0:a5:6b:ad:1e:5e:62:87:44:b5: 26:37:f4:0b:cd:d8:72:69:ac:0b:c4:de:14:ea:7f: 48:b4:7d:9a:25:e9:0f:a1:70:b3:9d:5f:b6:2f:47: 85:e6:43:a2:17:8c:d4:5f:be:a3:86:45:ff:c2:fe: ea:bb:2b:09:dc:5f:35:94:4a:38:50:99:0e:37:6e: 69:cb:38:d3:cf:5c:7d:c2:ea:f0:cf:27:87:f6:01: 97:6b:44:22:2e:14:43:05:64:32:52:5b:ae:ca:d8: af:d0:73:d9:63:88:de:df:46:8d:12:bd:d4:bc:7e: fb:01:bb:38:ac:0f:49:66:63:39:b9:ed:9a:fc:f5: 84:f7:a7:bd:c6:ec:7f:b7:65:12:fa:44:a4:90:3f: ae:d8:3e:14:e8:c3:26:59:6a:4f:9b:52:69:07:1a: 8c:c4:fb:7e:cb:20:7a:d4:ef:71:c8:63:28:d4:0e: 74:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:B2:39:11:95:83:00:31:01:2E:A0:A2:77:C9:7C:45:71:8F:96:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d10c169a-ae70-3a68-9f57-5160dba5487d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 74.98.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:c4:78:5f:21:73:01:af:54:0c:1a:7d:1d:d0:f4:b9:36:90: 68:69:b9:76:5c:57:52:ae:51:eb:46:ee:f8:98:0b:9f:0d:f4: 85:c2:43:fc:31:7a:97:5b:e5:36:d5:eb:01:20:16:f5:cc:22: 7a:52:a8:1d:63:fa:7e:0c:0c:0d:4c:1d:d3:d8:38:ed:87:74: 4b:15:b2:99:39:42:ee:27:c6:04:59:21:1a:74:13:42:c6:f8: 90:a5:ac:61:93:a6:a4:7c:c6:99:e7:70:04:7d:a9:55:52:21: 9d:68:dd:3d:e5:15:a5:bd:56:46:03:dd:71:95:73:2c:e8:6f: c0:55:bf:32:a5:1c:85:a4:84:22:bf:d1:53:85:bf:75:aa:29: bd:fc:1f:60:0b:92:c3:02:12:f4:ab:e6:af:6d:3a:b3:46:ed: 8a:5d:b8:cc:ff:ae:db:3a:28:c4:39:42:5b:2b:4b:00:ec:9b: 41:ee:6f:7d:ff:2f:90:72:c7:cf:0c:36:f6:70:dc:90:1d:15: 2b:46:43:e3:75:d3:82:e7:bc:84:4a:7c:84:09:48:85:67:6a: 01:fa:7f:1a:4c:a7:78:6d:ca:ad:c1:45:70:2a:5c:03:1a:cb: 71:b4:da:27:51:c0:84:69:fb:00:17:f5:73:c7:8a:06:02:72: ac:76:5b:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkLTDM8Tb4cmTK7LjAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMwMTE0MDA1MloXDTI1MDUzMDEzMDA1MlowLzEtMCsGA1UEAxMk MTU5YTY1YWEtNmFjNC00MzVkLWE3NWItODE0ODYxMzFkYjUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGX5n1lZ42Rhv0vZ1wRT4FRPwR/Bz2HUUMum 72VZ0mLpcAgh9s1emYa61F4Je3KxUxynobPqnjBminNQ7hz1O8jIWk1AKH4LzXWt HpD5NcCla60eXmKHRLUmN/QLzdhyaawLxN4U6n9ItH2aJekPoXCznV+2L0eF5kOi F4zUX76jhkX/wv7quysJ3F81lEo4UJkON25pyzjTz1x9wurwzyeH9gGXa0QiLhRD BWQyUluuytiv0HPZY4je30aNEr3UvH77Abs4rA9JZmM5ue2a/PWE96e9xux/t2US +kSkkD+u2D4U6MMmWWpPm1JpBxqMxPt+yyB61O9xyGMo1A507QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAqyORGVgwAxAS6gonfJfEVxj5a8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZDEwYzE2OWEtYWU3MC0z YTY4LTlmNTctNTE2MGRiYTU0ODdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFSmIAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEHEeF8hcwGvVAwafR3Q9Lk2kGhpuXZcV1KuUetG7viYC58N9IXCQ/wx epdb5TbV6wEgFvXMInpSqB1j+n4MDA1MHdPYOO2HdEsVspk5Qu4nxgRZIRp0E0LG +JClrGGTpqR8xpnncAR9qVVSIZ1o3T3lFaW9VkYD3XGVcyzob8BVvzKlHIWkhCK/ 0VOFv3WqKb38H2ALksMCEvSr5q9tOrNG7YpduMz/rts6KMQ5QlsrSwDsm0Hub33/ L5Byx88MNvZw3JAdFStGQ+N104LnvIRKfIQJSIVnagH6fxpMp3htyq3BRXAqXAMa y3G02idRwIRp+wAX9XPHigYCcqx2W5A= -----END CERTIFICATE-----Generated at Fri May 9 23:44:43 2025 by rpki-client