$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053/43fc3f5d-7da6-3394-990c-e086579daa0f.roa File: 43fc3f5d-7da6-3394-990c-e086579daa0f.roa (raw, json) Hash identifier: 5c8OlB324nhnUeMmyFdUwtT8GjfupSPgj/cECernYfI= Subject key identifier: 2B:B6:68:65:EC:4C:03:3F:CA:4C:0C:AF:68:E9:C9:7F:4B:64:85:52 Certificate issuer: /CN=9825dda6-0df7-4c35-af65-4bb69cf71053 Certificate serial: 010D0C9F43285849EA851E6336D26D0FE87B0500 Authority key identifier: 0F:56:7D:09:72:ED:0B:C9:0F:3C:0C:1F:33:01:04:38:6B:DA:DC:5C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053/43fc3f5d-7da6-3394-990c-e086579daa0f.roa Signing time: Tue 20 May 2025 13:01:05 +0000 ROA not before: Tue 20 May 2025 13:01:05 +0000 ROA not after: Mon 18 Aug 2025 13:01:05 +0000 asID: 29909 IP address blocks: 208.74.60.0/22 maxlen: 22 208.74.62.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053/9825dda6-0df7-4c35-af65-4bb69cf71053.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053/9825dda6-0df7-4c35-af65-4bb69cf71053.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 10 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ea:85:1e:63:36:d2:6d:0f:e8:7b:05:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9825dda6-0df7-4c35-af65-4bb69cf71053 Validity Not Before: May 20 13:01:05 2025 GMT Not After : Aug 18 13:01:05 2025 GMT Subject: CN=6054e57b-ad9f-4db0-8d95-f56cae31f23f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:5d:0f:1b:fb:dd:bf:28:e2:e8:c1:02:5d:2e: fa:16:0e:66:90:a4:be:c3:25:e2:2b:3e:a1:36:e1: 1e:21:4c:2e:79:d9:50:dd:f7:38:04:83:06:e0:a6: ba:05:77:f8:52:0b:db:dc:af:e2:04:b8:f9:8c:d1: 93:75:8e:6e:38:2a:b1:4a:74:17:cb:59:8c:98:83: 20:fc:1e:01:a8:54:f0:92:8a:21:21:4e:41:a3:70: 6f:59:e3:6d:6a:05:48:5f:35:71:9a:81:59:88:7e: 6f:eb:0e:8d:2f:62:4d:11:6b:ae:85:1a:63:6b:61: 1d:76:c0:b2:e6:54:80:4c:55:bc:49:3a:fa:c1:c3: 37:79:b2:24:ba:1a:9b:9c:9b:4e:b9:1c:2a:0f:f4: d2:b2:93:a5:17:ac:02:f5:20:d7:e4:23:44:2e:08: b2:eb:0c:33:f5:11:3e:43:8d:91:ee:2f:bc:b4:21: 65:1d:19:dc:61:56:67:33:1d:b1:98:b9:30:7d:05: 67:08:2c:2e:4e:0e:26:7e:b6:19:f5:82:a4:d9:80: 2f:46:9d:c4:5b:29:fe:1f:5c:a5:c3:4f:a2:35:af: 56:7f:af:7b:44:ca:f5:7b:ff:4c:b6:2c:84:6d:fa: 56:9d:21:d1:1f:0c:56:03:59:6b:e3:4d:65:0d:c9: e3:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:B6:68:65:EC:4C:03:3F:CA:4C:0C:AF:68:E9:C9:7F:4B:64:85:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053/43fc3f5d-7da6-3394-990c-e086579daa0f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053/9825dda6-0df7-4c35-af65-4bb69cf71053.crl X509v3 Authority Key Identifier: keyid:0F:56:7D:09:72:ED:0B:C9:0F:3C:0C:1F:33:01:04:38:6B:DA:DC:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053.cer sbgp-ipAddrBlock: critical IPv4: 208.74.60.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:8e:b1:8f:ab:8b:27:27:b0:74:56:12:19:c8:99:7d:81:1f: 2e:e3:f3:13:7c:e1:f2:4f:0c:a8:13:89:1d:4f:e3:53:01:5d: 43:c5:93:4b:39:52:ff:22:86:98:ab:f2:ea:36:83:44:32:25: 09:fa:c9:69:66:33:e7:8d:d7:d0:96:e3:6b:85:58:18:22:e0: d4:4d:77:4d:33:a9:5f:4e:a6:a0:19:74:79:6b:98:dd:83:5f: 68:be:4f:a4:39:68:ff:10:a6:38:9c:d9:ec:57:25:c5:82:b0: d8:6e:e6:71:b7:e7:98:c4:70:c9:67:b7:a9:26:4e:27:12:b1: 64:b6:0a:9d:c8:03:f6:6f:d7:db:7f:44:2b:0c:51:9c:8a:10: e1:45:ab:d7:9b:12:06:6c:c5:86:f2:46:62:f7:37:dc:5d:00: 5b:a1:d4:ac:57:ad:46:6c:0d:3d:91:cf:f6:d4:b7:ed:0b:0b: a7:de:8b:7b:40:d2:75:8a:93:f8:f1:ec:f4:ce:38:6e:96:66: 18:e1:68:99:33:7e:56:bd:ae:a7:45:1e:31:c3:b5:cb:fd:b6: 70:67:75:d4:65:b9:6f:4e:dc:b8:9e:e6:fb:b6:f0:59:6b:df: 48:ce:65:03:3c:d6:f3:92:78:d7:f1:49:85:86:91:a7:48:b7: aa:37:4c:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnqhR5jNtJtD+h7BQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTgyNWRkYTYtMGRmNy00YzM1LWFmNjUtNGJiNjljZjcx MDUzMB4XDTI1MDUyMDEzMDEwNVoXDTI1MDgxODEzMDEwNVowLzEtMCsGA1UEAxMk NjA1NGU1N2ItYWQ5Zi00ZGIwLThkOTUtZjU2Y2FlMzFmMjNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv10PG/vdvyji6MECXS76Fg5mkKS+wyXiKz6h NuEeIUwuedlQ3fc4BIMG4Ka6BXf4Ugvb3K/iBLj5jNGTdY5uOCqxSnQXy1mMmIMg /B4BqFTwkoohIU5Bo3BvWeNtagVIXzVxmoFZiH5v6w6NL2JNEWuuhRpja2EddsCy 5lSATFW8STr6wcM3ebIkuhqbnJtOuRwqD/TSspOlF6wC9SDX5CNELgiy6wwz9RE+ Q42R7i+8tCFlHRncYVZnMx2xmLkwfQVnCCwuTg4mfrYZ9YKk2YAvRp3EWyn+H1yl w0+iNa9Wf697RMr1e/9MtiyEbfpWnSHRHwxWA1lr401lDcnjrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCu2aGXsTAM/ykwMr2jpyX9LZIVSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85ODI1 ZGRhNi0wZGY3LTRjMzUtYWY2NS00YmI2OWNmNzEwNTMvNDNmYzNmNWQtN2RhNi0z Mzk0LTk5MGMtZTA4NjU3OWRhYTBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTgyNWRkYTYtMGRmNy00YzM1LWFm NjUtNGJiNjljZjcxMDUzLzk4MjVkZGE2LTBkZjctNGMzNS1hZjY1LTRiYjY5Y2Y3 MTA1My5jcmwwHwYDVR0jBBgwFoAUD1Z9CXLtC8kPPAwfMwEEOGva3FwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85ODI1ZGRhNi0wZGY3LTRjMzUtYWY2NS00YmI2 OWNmNzEwNTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0Eo8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKWOsY+riycnsHRWEhnImX2BHy7j8xN84fJPDKgTiR1P41MBXUPFk0s5 Uv8ihpir8uo2g0QyJQn6yWlmM+eN19CW42uFWBgi4NRNd00zqV9OpqAZdHlrmN2D X2i+T6Q5aP8Qpjic2exXJcWCsNhu5nG355jEcMlnt6kmTicSsWS2Cp3IA/Zv19t/ RCsMUZyKEOFFq9ebEgZsxYbyRmL3N9xdAFuh1KxXrUZsDT2Rz/bUt+0LC6fei3tA 0nWKk/jx7PTOOG6WZhjhaJkzfla9rqdFHjHDtcv9tnBnddRluW9O3Lie5vu28Flr 30jOZQM81vOSeNfxSYWGkadIt6o3TJI= -----END CERTIFICATE-----Generated at Sun Jun 8 18:30:30 2025 by rpki-client