$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2ff60609-9ae0-3479-b0ed-d4b8bb8c1970.roa File: 2ff60609-9ae0-3479-b0ed-d4b8bb8c1970.roa (raw, json) Hash identifier: i0BseYPqStk87uSyN877x08iDXgE3EZ41ywubWfD2dQ= Subject key identifier: 20:66:5C:E7:BD:D1:D5:73:23:2E:66:BD:00:C7:B7:AA:2D:A1:DB:10 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849CE9A7ED334239C3F2DA01C00 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2ff60609-9ae0-3479-b0ed-d4b8bb8c1970.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 6167 IP address blocks: 174.43.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:7e:d3:34:23:9c:3f:2d:a0:1c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=d7fdb782-defe-43f0-b907-c22d78eeecab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:93:67:23:4d:fb:88:d9:b9:38:c5:1d:7c:fb: 23:5a:56:da:2d:b3:58:0c:2a:01:1b:ef:ae:95:f9: ab:d2:c0:c2:e6:14:79:4f:56:d3:5f:b0:25:40:03: 8d:9b:3d:94:f8:7a:45:75:a6:ad:b6:b7:a8:c0:05: 09:28:38:22:98:90:ff:a2:20:39:a2:60:0b:f1:7b: 39:c1:ce:f1:f3:41:3b:b3:f4:0f:fc:ef:0a:91:1d: 88:ba:66:c5:0d:ed:25:42:d6:8c:f9:69:67:69:6c: fe:36:58:4b:73:23:8e:7c:30:37:f7:31:69:b6:e1: da:89:24:dc:4a:bf:ab:f1:2f:91:60:6b:a8:8a:57: 7d:8e:0c:a4:e1:d2:46:3f:89:a3:4a:5e:76:fc:7d: 30:c8:2d:fb:f5:55:7f:8d:24:f0:14:de:8b:80:39: 9f:4d:19:d8:bc:fe:8a:3e:c2:c8:65:a4:ac:b1:e1: e9:b7:1d:0e:ca:01:97:69:2c:4d:a6:88:d6:e5:7b: 47:73:77:95:cc:30:b2:6e:d0:ff:06:13:94:bb:e0: 80:75:2c:fe:17:17:16:88:e6:a6:7a:fa:87:fd:b9: 90:e9:ad:e5:01:30:b4:ae:96:f6:b8:bc:10:e5:87: 27:bb:e2:e7:cf:c8:45:dc:e4:a8:60:0d:0f:a3:4e: 4a:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:66:5C:E7:BD:D1:D5:73:23:2E:66:BD:00:C7:B7:AA:2D:A1:DB:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2ff60609-9ae0-3479-b0ed-d4b8bb8c1970.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.43.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:87:b5:f2:16:75:ef:2f:33:f2:d6:ac:e6:8a:86:4d:e3:e8: 2f:aa:10:0d:85:d2:0f:df:a1:c0:cf:d6:12:45:b6:e9:5c:1d: 75:d4:20:36:25:ec:56:65:06:fc:73:14:f9:50:96:98:17:35: 68:32:88:3d:f6:b5:58:c8:c8:e9:00:f7:ac:84:ac:71:97:77: 93:2a:fe:d9:52:7f:ff:d1:35:41:ea:cd:36:03:bb:69:c0:c5: e6:f1:9c:c3:0f:47:f1:70:a5:d5:b2:10:d7:03:a8:a8:56:88: a9:38:92:86:f8:08:f1:6b:00:3b:25:55:40:fa:53:fb:ac:8a: 7e:54:75:dd:bc:03:6b:e8:d8:3f:28:f2:05:83:5e:44:f5:bc: de:c5:25:31:b6:a3:c2:cf:5b:46:2c:b2:ba:02:e5:60:a7:6a: 29:e0:53:c1:dc:bd:28:d4:2f:ae:de:68:fe:ae:66:70:66:b4: 9e:12:6a:3a:fd:2b:54:89:6e:e4:98:d4:92:83:5c:f4:ca:ec: 66:a9:40:e4:a2:3b:8a:fb:6c:3a:62:64:da:36:e1:8e:4a:42: 21:8f:7f:88:4e:be:25:ee:04:86:a1:62:d3:b0:d0:75:0a:70: 00:15:e1:ea:49:3b:29:4a:65:3c:64:88:b7:d6:b0:92:8f:27: 57:29:f0:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnOmn7TNCOcPy2gHAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk ZDdmZGI3ODItZGVmZS00M2YwLWI5MDctYzIyZDc4ZWVlY2FiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgJNnI037iNm5OMUdfPsjWlbaLbNYDCoBG++u lfmr0sDC5hR5T1bTX7AlQAONmz2U+HpFdaattreowAUJKDgimJD/oiA5omAL8Xs5 wc7x80E7s/QP/O8KkR2IumbFDe0lQtaM+WlnaWz+NlhLcyOOfDA39zFptuHaiSTc Sr+r8S+RYGuoild9jgyk4dJGP4mjSl52/H0wyC379VV/jSTwFN6LgDmfTRnYvP6K PsLIZaSsseHptx0OygGXaSxNpojW5XtHc3eVzDCybtD/BhOUu+CAdSz+FxcWiOam evqH/bmQ6a3lATC0rpb2uLwQ5Ycnu+Lnz8hF3OSoYA0Po05KhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCBmXOe90dVzIy5mvQDHt6otodsQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMmZmNjA2MDktOWFlMC0z NDc5LWIwZWQtZDRiOGJiOGMxOTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEritAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALOHtfIWde8vM/LWrOaKhk3j6C+qEA2F0g/focDP1hJFtulcHXXUIDYl 7FZlBvxzFPlQlpgXNWgyiD32tVjIyOkA96yErHGXd5Mq/tlSf//RNUHqzTYDu2nA xebxnMMPR/FwpdWyENcDqKhWiKk4kob4CPFrADslVUD6U/usin5Udd28A2vo2D8o 8gWDXkT1vN7FJTG2o8LPW0YssroC5WCnaingU8HcvSjUL67eaP6uZnBmtJ4Sajr9 K1SJbuSY1JKDXPTK7GapQOSiO4r7bDpiZNo24Y5KQiGPf4hOviXuBIahYtOw0HUK cAAV4epJOylKZTxkiLfWsJKPJ1cp8Ms= -----END CERTIFICATE-----Generated at Tue Jun 17 19:43:04 2025 by rpki-client