$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d/73407e55-bb87-3af2-979f-f557fb0f4b02.roa File: 73407e55-bb87-3af2-979f-f557fb0f4b02.roa (raw, json) Hash identifier: 2ST5R4zfCmZ6T6If7mPWtcWygiv1AGG3EbEeLhpCF9c= Subject key identifier: D8:C2:E0:3C:C2:A4:B6:6E:D9:CD:F9:17:44:41:63:D5:C0:0B:0E:91 Certificate issuer: /CN=9a696f17-cb36-4b2b-be82-47f0c467096d Certificate serial: 010D0C9F43285849CBCFA4276C6DBFDC5539A9C0 Authority key identifier: 38:65:43:C4:A4:97:8B:F1:CC:D7:67:C1:50:02:FE:EF:BC:D4:AE:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d/73407e55-bb87-3af2-979f-f557fb0f4b02.roa Signing time: Fri 09 May 2025 13:01:00 +0000 ROA not before: Fri 09 May 2025 13:01:00 +0000 ROA not after: Thu 07 Aug 2025 13:01:00 +0000 asID: 46632 IP address blocks: 174.137.0.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d/9a696f17-cb36-4b2b-be82-47f0c467096d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d/9a696f17-cb36-4b2b-be82-47f0c467096d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cb:cf:a4:27:6c:6d:bf:dc:55:39:a9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a696f17-cb36-4b2b-be82-47f0c467096d Validity Not Before: May 9 13:01:00 2025 GMT Not After : Aug 7 13:01:00 2025 GMT Subject: CN=1bb1712f-23f1-41d6-a86a-1674f8a09943 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b9:e9:43:3f:8b:1b:a9:48:ea:db:cb:66:59: 04:77:5e:ab:ee:f2:b1:9c:dd:f0:df:67:e7:32:e9: e8:4f:b1:e0:2b:96:71:75:e8:06:c9:9c:90:ce:38: ac:e8:25:64:91:36:97:8e:ca:ad:4e:5a:e3:a1:ea: 72:fd:ec:19:3d:00:f1:db:e4:3e:11:df:e0:c1:fc: 17:bf:bc:f8:17:4f:14:4d:6c:37:19:00:78:8e:9e: a2:d5:54:25:6a:13:c8:dc:4c:c2:49:a0:7c:28:29: 39:25:29:7a:e8:1f:6d:97:67:29:a9:39:c6:bd:a2: 82:11:9f:3e:2a:e1:f7:b6:cc:9f:68:7e:06:b6:fc: e0:79:e3:af:02:e5:db:c4:c0:de:26:43:61:11:f9: b5:79:9c:0f:0b:4b:03:b1:81:e1:18:69:66:59:aa: 73:70:dc:fd:de:98:66:63:7a:5a:b1:bb:44:e3:b1: 58:a6:c6:93:7f:d4:09:02:37:65:8a:72:9b:fa:77: 0d:5c:55:a4:eb:ae:c9:4a:33:98:c1:a7:a0:d6:70: 2c:68:f2:5b:dd:90:68:bb:c8:b2:a5:a8:21:2a:83: 7c:e0:40:82:ba:72:8d:35:dc:d2:90:c0:71:d4:f7: b1:c5:7c:4f:d9:a1:2f:29:60:78:7e:9a:33:65:7d: c5:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:C2:E0:3C:C2:A4:B6:6E:D9:CD:F9:17:44:41:63:D5:C0:0B:0E:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d/73407e55-bb87-3af2-979f-f557fb0f4b02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d/9a696f17-cb36-4b2b-be82-47f0c467096d.crl X509v3 Authority Key Identifier: keyid:38:65:43:C4:A4:97:8B:F1:CC:D7:67:C1:50:02:FE:EF:BC:D4:AE:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d.cer sbgp-ipAddrBlock: critical IPv4: 174.137.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:0e:03:1b:d5:7a:e5:2d:f3:35:08:d1:50:96:f4:12:11:3b: f6:be:d2:f1:2d:1b:24:9a:fd:ed:89:fd:b4:cb:88:13:4c:68: 1d:24:71:e0:b6:02:6a:4e:95:82:ff:70:2c:82:49:72:eb:d1: fc:62:7a:28:7b:4c:15:c4:66:22:74:d1:e9:ec:d8:7a:ff:dc: d2:51:10:a8:b1:38:ef:a2:c4:fa:d8:76:e6:17:8c:b3:f2:ce: 1a:6a:3e:cf:d2:14:40:0e:2d:71:51:c5:2a:99:e6:18:46:c1: 1c:7a:94:a7:a3:09:ae:33:5a:c6:18:20:12:08:10:a3:ef:c9: 4a:28:d7:2a:12:ae:3f:78:0c:51:20:4b:12:a0:f9:1a:54:06: 7c:dc:ec:06:4f:2b:2f:0b:ba:34:c4:26:be:f5:0a:a6:b0:e2: b4:5c:f2:7a:46:3e:a8:88:29:43:fe:69:9d:43:81:33:be:37: 63:50:b0:51:b6:ec:16:2c:2b:fe:0b:5a:30:85:7a:6f:04:90: ce:4c:ca:16:18:4e:ae:4e:db:b5:95:8e:f6:f6:e4:54:1b:94: 2a:40:b5:ac:46:84:d7:2a:37:52:64:73:49:0a:5b:91:67:9a: 67:5b:9c:5d:12:66:d0:c5:67:d1:a7:e6:c2:2c:79:98:9c:b4: c8:65:8b:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnLz6QnbG2/3FU5qcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWE2OTZmMTctY2IzNi00YjJiLWJlODItNDdmMGM0Njcw OTZkMB4XDTI1MDUwOTEzMDEwMFoXDTI1MDgwNzEzMDEwMFowLzEtMCsGA1UEAxMk MWJiMTcxMmYtMjNmMS00MWQ2LWE4NmEtMTY3NGY4YTA5OTQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyrnpQz+LG6lI6tvLZlkEd16r7vKxnN3w32fn MunoT7HgK5ZxdegGyZyQzjis6CVkkTaXjsqtTlrjoepy/ewZPQDx2+Q+Ed/gwfwX v7z4F08UTWw3GQB4jp6i1VQlahPI3EzCSaB8KCk5JSl66B9tl2cpqTnGvaKCEZ8+ KuH3tsyfaH4GtvzgeeOvAuXbxMDeJkNhEfm1eZwPC0sDsYHhGGlmWapzcNz93phm Y3pasbtE47FYpsaTf9QJAjdlinKb+ncNXFWk667JSjOYwaeg1nAsaPJb3ZBou8iy paghKoN84ECCunKNNdzSkMBx1PexxXxP2aEvKWB4fpozZX3FQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNjC4DzCpLZu2c35F0RBY9XACw6RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85YTY5 NmYxNy1jYjM2LTRiMmItYmU4Mi00N2YwYzQ2NzA5NmQvNzM0MDdlNTUtYmI4Ny0z YWYyLTk3OWYtZjU1N2ZiMGY0YjAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOWE2OTZmMTctY2IzNi00YjJiLWJl ODItNDdmMGM0NjcwOTZkLzlhNjk2ZjE3LWNiMzYtNGIyYi1iZTgyLTQ3ZjBjNDY3 MDk2ZC5jcmwwHwYDVR0jBBgwFoAUOGVDxKSXi/HM12fBUAL+77zUroAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy85YTY5NmYxNy1jYjM2LTRiMmItYmU4Mi00N2Yw YzQ2NzA5NmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErokAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIUOAxvVeuUt8zUI0VCW9BIRO/a+0vEtGySa/e2J/bTLiBNMaB0kceC2 AmpOlYL/cCyCSXLr0fxieih7TBXEZiJ00ens2Hr/3NJREKixOO+ixPrYduYXjLPy zhpqPs/SFEAOLXFRxSqZ5hhGwRx6lKejCa4zWsYYIBIIEKPvyUoo1yoSrj94DFEg SxKg+RpUBnzc7AZPKy8LujTEJr71Cqaw4rRc8npGPqiIKUP+aZ1DgTO+N2NQsFG2 7BYsK/4LWjCFem8EkM5MyhYYTq5O27WVjvb25FQblCpAtaxGhNcqN1Jkc0kKW5Fn mmdbnF0SZtDFZ9Gn5sIseZictMhlizk= -----END CERTIFICATE-----Generated at Sun Jun 15 13:10:50 2025 by rpki-client