$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d823a06e-0290-3ac0-b538-5940bf91d63c.roa File: d823a06e-0290-3ac0-b538-5940bf91d63c.roa (raw, json) Hash identifier: wGRYoiaKy9fud+G/QrVQFO3ovUSQm44YWoiRLjUGI7Y= Subject key identifier: 45:62:1A:2A:47:DA:18:89:01:16:6B:9A:B9:D0:78:7C:D6:D4:F0:95 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849C79F741519BD9AE3D2AB6AE0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d823a06e-0290-3ac0-b538-5940bf91d63c.roa Signing time: Thu 08 May 2025 01:00:47 +0000 ROA not before: Thu 08 May 2025 01:00:47 +0000 ROA not after: Wed 06 Aug 2025 01:00:47 +0000 asID: 6167 IP address blocks: 174.234.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c7:9f:74:15:19:bd:9a:e3:d2:ab:6a:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: May 8 01:00:47 2025 GMT Not After : Aug 6 01:00:47 2025 GMT Subject: CN=baadf71f-4f0d-47b6-99e1-ac0b67c111b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:0d:f0:31:31:6e:59:f4:46:42:cf:3d:0b:0d: 6c:d2:47:36:0e:48:b5:ab:d2:43:94:2b:3f:5f:6d: a1:cf:3b:ae:e8:e5:bb:fe:c6:4c:f5:de:3e:a7:9b: 7e:03:74:2f:0f:e7:ff:6e:61:4f:02:a9:24:95:87: ae:30:d6:e5:95:b7:16:44:fc:62:c7:0e:15:ed:29: 76:71:0b:e7:d3:11:b3:7b:49:bd:a6:c8:76:74:93: 74:c6:70:35:0f:6b:c3:44:e1:e4:eb:2f:7a:b8:49: 28:22:3b:a9:86:69:60:04:2e:03:66:5b:fe:02:84: 79:39:ab:2b:6f:60:3f:5a:97:0b:2e:af:b9:a8:a2: b2:dd:77:2d:38:8f:b6:73:98:b6:bb:f9:3e:42:57: bf:8b:fe:d2:7b:01:b3:bb:bd:8e:8d:94:dc:06:6d: 0e:52:5c:44:fd:25:a9:1b:c8:9e:8a:a9:ca:b0:5d: 49:09:c4:77:8d:e3:52:5e:cb:c8:74:80:82:1c:07: 37:7a:09:d4:ed:30:8b:eb:ac:ee:71:bf:3b:0b:8b: 2a:75:82:94:ee:a4:13:ba:4b:46:81:55:21:e8:af: ae:fe:e2:0b:cd:41:f3:e4:be:ae:f0:eb:e3:16:7e: f8:2e:ce:4d:fa:48:ad:b7:6e:27:e7:4f:cd:d7:17: 32:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:62:1A:2A:47:DA:18:89:01:16:6B:9A:B9:D0:78:7C:D6:D4:F0:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d823a06e-0290-3ac0-b538-5940bf91d63c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.234.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:5a:3d:f9:c9:f8:52:d1:06:ba:42:5e:bf:6f:90:ac:05:e5: 82:b3:6a:4f:02:fe:29:60:b3:a1:42:a2:5e:b9:42:b2:ea:10: 5f:b2:aa:bf:94:ea:6d:df:25:38:6b:31:64:9e:f7:00:c8:dd: 7d:b7:f4:da:08:c0:cb:ec:45:47:82:55:2c:0d:b5:91:c6:f9: 0f:fe:c2:19:e6:fe:82:00:a9:d2:17:9e:33:3f:29:26:42:2b: 3f:2f:37:db:7f:d7:df:3e:17:0d:08:75:72:94:31:53:62:57: 58:0a:72:4f:e8:1f:26:43:7f:45:29:7e:a5:88:92:dc:85:48: fc:c2:eb:e2:b3:7b:88:a1:41:f5:1f:42:fe:f1:d0:19:ee:30: da:ba:9c:b3:01:45:df:c3:82:04:0d:fb:4a:f8:00:39:f1:b7: 09:1c:36:2b:e1:6f:d2:f6:b4:c2:ed:7e:03:6b:89:21:d5:cc: 54:7d:2c:27:11:6d:75:57:b3:fe:aa:bb:40:0d:e8:80:4a:b0: a4:09:73:75:40:34:c1:4c:61:a4:99:61:9e:3d:25:23:b4:23: c4:53:4a:7c:6c:74:5b:c7:58:b1:eb:02:95:05:2c:8d:cd:bf: 28:18:81:68:f9:d4:42:00:d8:42:6e:c7:3d:08:77:77:61:24: c3:75:0b:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnHn3QVGb2a49KrauAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDUwODAxMDA0N1oXDTI1MDgwNjAxMDA0N1owLzEtMCsGA1UEAxMk YmFhZGY3MWYtNGYwZC00N2I2LTk5ZTEtYWMwYjY3YzExMWIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAug3wMTFuWfRGQs89Cw1s0kc2Dki1q9JDlCs/ X22hzzuu6OW7/sZM9d4+p5t+A3QvD+f/bmFPAqkklYeuMNbllbcWRPxixw4V7Sl2 cQvn0xGze0m9psh2dJN0xnA1D2vDROHk6y96uEkoIjuphmlgBC4DZlv+AoR5Oasr b2A/WpcLLq+5qKKy3XctOI+2c5i2u/k+Qle/i/7SewGzu72OjZTcBm0OUlxE/SWp G8ieiqnKsF1JCcR3jeNSXsvIdICCHAc3egnU7TCL66zucb87C4sqdYKU7qQTuktG gVUh6K+u/uILzUHz5L6u8OvjFn74Ls5N+kitt24n50/N1xcyWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEViGipH2hiJARZrmrnQeHzW1PCVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZDgyM2EwNmUtMDI5MC0z YWMwLWI1MzgtNTk0MGJmOTFkNjNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEruqwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKxaPfnJ+FLRBrpCXr9vkKwF5YKzak8C/ilgs6FCol65QrLqEF+yqr+U 6m3fJThrMWSe9wDI3X239NoIwMvsRUeCVSwNtZHG+Q/+whnm/oIAqdIXnjM/KSZC Kz8vN9t/198+Fw0IdXKUMVNiV1gKck/oHyZDf0UpfqWIktyFSPzC6+Kze4ihQfUf Qv7x0BnuMNq6nLMBRd/DggQN+0r4ADnxtwkcNivhb9L2tMLtfgNriSHVzFR9LCcR bXVXs/6qu0AN6IBKsKQJc3VANMFMYaSZYZ49JSO0I8RTSnxsdFvHWLHrApUFLI3N vygYgWj51EIA2EJuxz0Id3dhJMN1C0o= -----END CERTIFICATE-----Generated at Sat May 10 20:51:42 2025 by rpki-client