$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b8e1beb1-e1d5-3a1b-a0e8-5949fead1bb5.roa File: b8e1beb1-e1d5-3a1b-a0e8-5949fead1bb5.roa (raw, json) Hash identifier: mZeNHCP2/Yz9bUL/jMNJetd/d/CBkX7UZxzO8Hevvno= Subject key identifier: E4:22:91:C0:77:D5:FE:15:67:6D:AD:18:B9:69:ED:39:1B:0D:60:BC Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849CE9A7E7BF506685676861380 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b8e1beb1-e1d5-3a1b-a0e8-5949fead1bb5.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 22394 IP address blocks: 174.41.248.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:7e:7b:f5:06:68:56:76:86:13:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=35073867-28a4-4759-a0de-272691d7a1b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:f1:7b:57:dd:dc:b6:22:37:08:d0:74:7a:2a: 39:22:15:26:2d:1f:4a:41:db:ec:b3:a9:51:34:b1: bc:91:b3:f6:30:e1:c5:17:4c:7b:17:96:f7:0f:e4: 74:ab:50:9b:54:48:18:d4:8f:fd:d5:a3:fd:83:ef: 32:64:a0:75:6e:7b:9d:f0:be:36:e8:d0:f4:39:59: 82:5e:d7:f1:a2:35:dd:91:87:89:bf:26:5f:ab:7f: 53:2f:dd:85:bd:fb:fb:45:3b:41:f0:89:d3:cc:41: 81:f7:6e:6a:30:c0:75:a7:1e:58:20:bc:6f:8a:ba: ba:f3:d6:72:98:81:fc:4e:0b:85:2e:c4:ae:ea:e4: f3:d0:dc:6d:99:93:73:10:eb:5f:68:0d:9e:48:dc: 56:c2:1f:15:18:b2:40:ea:2f:6a:b3:11:53:36:a8: 47:96:d0:5d:2e:69:7e:c5:26:3a:b4:04:a5:38:15: 25:97:99:74:2e:a0:35:06:10:9b:f7:8b:ed:a8:1b: 02:2e:8c:f1:a7:2e:cd:55:f7:36:c7:69:f1:6e:68: 52:22:a3:cf:0f:36:52:61:de:42:8c:e2:cb:c8:1e: eb:75:1d:ba:27:e0:9b:f2:be:36:40:79:7d:1e:5b: 77:b8:b2:83:25:fc:18:eb:ac:24:7b:d8:28:50:ba: d0:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:22:91:C0:77:D5:FE:15:67:6D:AD:18:B9:69:ED:39:1B:0D:60:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b8e1beb1-e1d5-3a1b-a0e8-5949fead1bb5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.41.248.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:5e:e7:ce:c2:be:aa:90:08:52:6b:00:09:4b:68:12:3d:84: 63:6b:a2:b8:83:88:35:dc:2e:0d:8c:7d:66:e6:92:d2:fc:07: 0b:7e:79:3c:5d:a6:e8:62:6a:41:4b:13:0c:b6:aa:aa:fe:f7: cc:6b:79:5a:44:2e:9d:18:bb:82:fb:7f:0a:41:a7:ec:9c:2b: ba:1b:6f:16:52:03:44:a8:a9:e0:c2:ad:ec:66:27:74:35:28: 42:18:a9:fd:dc:12:33:d9:3c:b9:92:99:93:51:b8:ba:a9:0d: 26:e0:88:52:a0:4b:7d:3c:0f:ce:4d:cb:02:4f:ed:22:b4:b6: 1c:01:ac:55:50:08:b4:ab:1c:c3:be:8e:15:a9:19:f9:1b:ba: e7:d4:e1:6e:18:4b:2d:22:85:7e:90:63:7e:79:c8:30:e2:47: 02:1c:8f:bd:11:ce:38:9c:bf:c5:e6:2a:89:db:c7:67:bb:0e: 0e:31:e2:b3:03:0d:2f:45:23:53:f5:78:fa:1f:ea:6b:cc:72: e3:b2:22:f1:aa:db:b5:2e:e0:5d:53:f3:04:99:da:84:b6:0a: 37:06:04:f1:21:f5:6a:c4:a7:24:95:8c:72:f9:14:4d:02:b7: eb:42:91:66:8a:e9:0f:6f:93:2d:76:b0:36:cf:20:da:4f:1c: 05:cd:f3:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnOmn579QZoVnaGE4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk MzUwNzM4NjctMjhhNC00NzU5LWEwZGUtMjcyNjkxZDdhMWIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPF7V93ctiI3CNB0eio5IhUmLR9KQdvss6lR NLG8kbP2MOHFF0x7F5b3D+R0q1CbVEgY1I/91aP9g+8yZKB1bnud8L426ND0OVmC XtfxojXdkYeJvyZfq39TL92Fvfv7RTtB8InTzEGB925qMMB1px5YILxvirq689Zy mIH8TguFLsSu6uTz0NxtmZNzEOtfaA2eSNxWwh8VGLJA6i9qsxFTNqhHltBdLml+ xSY6tASlOBUll5l0LqA1BhCb94vtqBsCLozxpy7NVfc2x2nxbmhSIqPPDzZSYd5C jOLLyB7rdR26J+Cb8r42QHl9Hlt3uLKDJfwY66wke9goULrQRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOQikcB31f4VZ22tGLlp7TkbDWC8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYjhlMWJlYjEtZTFkNS0z YTFiLWEwZTgtNTk0OWZlYWQxYmI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrin4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ1e587CvqqQCFJrAAlLaBI9hGNroriDiDXcLg2MfWbmktL8Bwt+eTxd puhiakFLEwy2qqr+98xreVpELp0Yu4L7fwpBp+ycK7obbxZSA0SoqeDCrexmJ3Q1 KEIYqf3cEjPZPLmSmZNRuLqpDSbgiFKgS308D85NywJP7SK0thwBrFVQCLSrHMO+ jhWpGfkbuufU4W4YSy0ihX6QY355yDDiRwIcj70Rzjicv8XmKonbx2e7Dg4x4rMD DS9FI1P1ePof6mvMcuOyIvGq27Uu4F1T8wSZ2oS2CjcGBPEh9WrEpySVjHL5FE0C t+tCkWaK6Q9vky12sDbPINpPHAXN810= -----END CERTIFICATE-----Generated at Sun Jun 1 07:25:16 2025 by rpki-client