$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/00c39d43-6059-39f9-86e1-f8a9284a3b4d.roa File: 00c39d43-6059-39f9-86e1-f8a9284a3b4d.roa (raw, json) Hash identifier: rtfWISEWDaTpoBg66Ca0jpEvvHU0OcGCeGCDkfYeK6Y= Subject key identifier: EF:C3:B3:62:0F:32:5F:7C:D3:8E:40:2C:BA:32:F6:5A:98:4E:43:36 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849C79F7A5FB8EAF7C5C0A4A880 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/00c39d43-6059-39f9-86e1-f8a9284a3b4d.roa Signing time: Thu 08 May 2025 01:00:47 +0000 ROA not before: Thu 08 May 2025 01:00:47 +0000 ROA not after: Wed 06 Aug 2025 01:00:47 +0000 asID: 6167 IP address blocks: 174.243.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c7:9f:7a:5f:b8:ea:f7:c5:c0:a4:a8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: May 8 01:00:47 2025 GMT Not After : Aug 6 01:00:47 2025 GMT Subject: CN=5397f873-54c9-47a9-a25d-a510782f1c90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ec:55:66:98:39:0f:82:2c:be:51:77:27:a6: fd:fc:cc:ca:ed:08:bf:52:d6:3d:ba:40:dd:a6:c0: db:90:01:80:61:3e:4d:28:90:3f:bf:da:5c:6c:ef: 34:94:44:5a:38:26:91:fb:c3:90:24:81:d4:19:3c: 95:dc:63:d7:8d:5a:43:31:a7:bc:1b:5e:3d:d5:de: b6:39:04:26:1c:52:61:a4:a5:ea:cc:a0:32:3b:2f: 2c:c7:74:bd:86:f7:39:dc:ad:b0:5f:28:42:8e:dc: e9:17:e2:99:96:6c:08:85:cf:a9:96:18:86:1b:a2: ef:a0:94:33:53:58:02:c3:63:91:74:b8:26:32:86: 24:03:b9:7f:3e:ca:fc:2b:9b:9f:71:8f:cc:43:c7: e1:11:59:58:61:44:cb:01:d5:13:b1:04:3a:bd:62: 80:ce:b9:04:71:2c:1f:d5:bc:29:3b:83:73:ec:bb: 0f:b2:da:9f:e4:9e:39:cb:61:35:4c:9f:c0:ba:a3: 38:9a:89:0e:e4:0f:d8:d3:87:8a:9d:24:67:bf:61: 27:82:35:ac:f8:8a:1e:1d:03:f0:13:bb:05:84:a7: da:3f:31:4f:d4:91:b7:49:0d:89:68:bf:89:17:1f: 3f:3d:bc:da:67:eb:72:92:2f:de:97:23:b4:be:18: 69:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:C3:B3:62:0F:32:5F:7C:D3:8E:40:2C:BA:32:F6:5A:98:4E:43:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/00c39d43-6059-39f9-86e1-f8a9284a3b4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.243.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:32:89:32:08:4a:c0:a4:b8:5d:9d:cb:ec:63:26:d9:7b:86: 7d:ec:e6:3a:82:fe:13:a8:91:de:5b:83:c2:b7:4b:41:40:d2: bd:80:b9:8c:ab:c0:01:d1:58:cb:39:00:13:39:d9:f3:6c:44: 4b:af:a5:dd:79:50:23:50:10:73:14:2d:7f:2c:3b:b7:26:09: bd:d9:3e:b0:ed:99:aa:0d:91:e0:2c:9d:32:a0:4b:a6:c8:3b: 9e:43:96:4a:44:e2:6f:6f:94:95:b1:66:5f:2c:05:6e:2a:f3: 9d:6e:6f:b5:56:24:e5:5f:36:3b:7f:7a:5d:1e:95:de:e2:46: b6:ea:73:a0:9c:a8:ed:48:69:58:f2:51:18:1b:4e:ee:00:91: 0b:f4:81:c2:97:ea:5f:b6:22:62:51:08:96:bb:06:53:be:54: 60:d3:c2:66:0d:d4:c4:c9:21:73:fc:20:e1:da:dd:51:1a:84: 05:db:71:45:85:e2:b9:86:c5:bc:11:95:a2:9f:d0:af:4c:a3: 40:f6:66:e5:78:04:31:f3:ac:bf:c9:76:16:e9:20:bf:01:69: 49:94:61:5c:5e:06:16:44:de:38:6f:8c:2b:27:07:52:8e:94: 55:b9:90:47:60:f6:f8:bf:71:a7:47:38:ff:00:4c:53:1f:d3: 55:86:b0:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnHn3pfuOr3xcCkqIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDUwODAxMDA0N1oXDTI1MDgwNjAxMDA0N1owLzEtMCsGA1UEAxMk NTM5N2Y4NzMtNTRjOS00N2E5LWEyNWQtYTUxMDc4MmYxYzkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAouxVZpg5D4IsvlF3J6b9/MzK7Qi/UtY9ukDd psDbkAGAYT5NKJA/v9pcbO80lERaOCaR+8OQJIHUGTyV3GPXjVpDMae8G1491d62 OQQmHFJhpKXqzKAyOy8sx3S9hvc53K2wXyhCjtzpF+KZlmwIhc+plhiGG6LvoJQz U1gCw2ORdLgmMoYkA7l/Psr8K5ufcY/MQ8fhEVlYYUTLAdUTsQQ6vWKAzrkEcSwf 1bwpO4Nz7LsPstqf5J45y2E1TJ/AuqM4mokO5A/Y04eKnSRnv2EngjWs+IoeHQPw E7sFhKfaPzFP1JG3SQ2JaL+JFx8/PbzaZ+tyki/elyO0vhhpQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO/Ds2IPMl98045ALLoy9lqYTkM2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMDBjMzlkNDMtNjA1OS0z OWY5LTg2ZTEtZjhhOTI4NGEzYjRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErvPwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADQyiTIISsCkuF2dy+xjJtl7hn3s5jqC/hOokd5bg8K3S0FA0r2AuYyr wAHRWMs5ABM52fNsREuvpd15UCNQEHMULX8sO7cmCb3ZPrDtmaoNkeAsnTKgS6bI O55DlkpE4m9vlJWxZl8sBW4q851ub7VWJOVfNjt/el0eld7iRrbqc6CcqO1IaVjy URgbTu4AkQv0gcKX6l+2ImJRCJa7BlO+VGDTwmYN1MTJIXP8IOHa3VEahAXbcUWF 4rmGxbwRlaKf0K9Mo0D2ZuV4BDHzrL/JdhbpIL8BaUmUYVxeBhZE3jhvjCsnB1KO lFW5kEdg9vi/cadHOP8ATFMf01WGsPw= -----END CERTIFICATE-----Generated at Sun Jun 1 03:36:34 2025 by rpki-client