$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3f325b3a-136c-3d1c-9b70-cf492b7ea673.roa File: 3f325b3a-136c-3d1c-9b70-cf492b7ea673.roa (raw, json) Hash identifier: DRrPne3Fwi1OQhcXFIN+KrGzw6UX/K7ov6z3+8Sno6U= Subject key identifier: 2B:58:14:A5:5A:4B:92:8B:78:D2:91:83:DF:8D:96:DF:AC:F4:0C:DB Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849EB4ACD8AC0C6D92D1FCCC104 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3f325b3a-136c-3d1c-9b70-cf492b7ea673.roa Signing time: Tue 20 May 2025 19:39:30 +0000 ROA not before: Tue 20 May 2025 19:39:30 +0000 ROA not after: Mon 18 Aug 2025 19:39:30 +0000 asID: 6167 IP address blocks: 174.221.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:eb:4a:cd:8a:c0:c6:d9:2d:1f:cc:c1:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: May 20 19:39:30 2025 GMT Not After : Aug 18 19:39:30 2025 GMT Subject: CN=425121f0-255e-4a03-beb2-3538539adcca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:40:3e:77:4e:87:25:a4:a6:16:b0:41:24:c4: 8d:96:5b:28:24:e8:d1:5c:36:8c:99:4b:c1:57:87: 63:fd:1a:96:0f:f8:d6:2c:56:4e:ef:61:82:16:4b: 03:ee:cb:20:86:21:cf:28:46:16:6d:46:4d:85:c7: f0:ab:3c:e4:05:82:93:2c:7d:ad:4e:a0:73:a6:05: 09:f1:a1:e8:a2:a2:1c:a2:83:77:28:19:e7:5e:94: 62:a4:c3:5c:01:c0:d2:8f:a9:46:fa:31:25:46:d8: 02:43:e0:42:eb:73:a2:a9:89:2c:82:3a:d8:74:e4: b0:97:ec:0c:c6:c1:df:38:35:df:d9:fb:ba:00:d7: 58:44:ee:06:7f:d1:ef:4b:8e:09:41:fb:0e:cf:51: 04:8b:09:c7:cc:64:8b:7b:e8:b3:ef:1d:a2:72:8c: e8:73:be:67:4e:e1:77:36:73:40:25:fb:30:88:94: 32:34:0f:7b:94:fd:f2:d0:35:57:ed:ff:8e:fc:88: 67:c7:aa:7c:ef:7e:65:76:1c:f6:1f:be:d9:6e:00: 96:c9:1b:41:f0:a1:4c:b0:48:c2:ca:f1:04:43:e9: 18:77:24:1c:0e:4f:24:a9:79:21:60:52:c5:ae:d9: 27:2c:32:39:03:10:5c:f2:59:03:4c:45:72:de:77: c9:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:58:14:A5:5A:4B:92:8B:78:D2:91:83:DF:8D:96:DF:AC:F4:0C:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3f325b3a-136c-3d1c-9b70-cf492b7ea673.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.221.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:48:09:56:1b:03:6b:85:d0:8f:86:8c:19:28:d9:79:63:a8: fc:f9:c1:4c:5b:de:fb:44:1a:c1:85:7a:0f:26:47:ca:49:ee: a9:a8:cc:6b:36:cb:5d:cb:da:39:a0:59:15:43:37:d8:f7:2d: b1:8e:20:4d:42:71:ea:22:13:07:f8:af:eb:cf:b2:43:f6:64: 15:f4:ef:08:ba:be:d7:c4:ff:6e:d0:d9:c0:d5:2e:48:c2:c0: 08:77:49:69:bb:50:43:98:7c:d1:f8:a5:ba:92:97:66:3e:87: 90:b7:3b:60:f3:8c:f4:4f:68:d4:13:15:2a:9c:ed:8e:8e:82: 7e:bd:6d:ba:fa:e4:15:9f:d3:81:09:23:1b:a4:a7:3a:1d:4c: 2d:23:e3:58:f9:81:2d:dd:db:c1:21:1a:ae:bb:25:c7:a0:bd: 16:0d:91:c7:94:4a:cb:17:f7:84:a9:1c:38:2e:8c:bf:fa:7a: 68:b7:b4:e1:85:10:32:cc:99:71:31:97:f8:76:49:4b:fe:af: 8a:5a:92:d4:d6:ba:21:29:07:d0:34:17:55:dc:bc:bf:5f:5c: ab:7a:09:3a:29:f9:13:67:16:71:80:ef:a3:89:29:de:2a:55: 30:2c:32:9d:b8:0c:38:59:b7:7d:94:6b:9d:5f:94:77:e8:dd: 4d:82:84:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnrSs2KwMbZLR/MwQQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDUyMDE5MzkzMFoXDTI1MDgxODE5MzkzMFowLzEtMCsGA1UEAxMk NDI1MTIxZjAtMjU1ZS00YTAzLWJlYjItMzUzODUzOWFkY2NhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjUA+d06HJaSmFrBBJMSNllsoJOjRXDaMmUvB V4dj/RqWD/jWLFZO72GCFksD7ssghiHPKEYWbUZNhcfwqzzkBYKTLH2tTqBzpgUJ 8aHooqIcooN3KBnnXpRipMNcAcDSj6lG+jElRtgCQ+BC63OiqYksgjrYdOSwl+wM xsHfODXf2fu6ANdYRO4Gf9HvS44JQfsOz1EEiwnHzGSLe+iz7x2icozoc75nTuF3 NnNAJfswiJQyNA97lP3y0DVX7f+O/Ihnx6p8735ldhz2H77ZbgCWyRtB8KFMsEjC yvEEQ+kYdyQcDk8kqXkhYFLFrtknLDI5AxBc8lkDTEVy3nfJ6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCtYFKVaS5KLeNKRg9+Nlt+s9AzbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvM2YzMjViM2EtMTM2Yy0z ZDFjLTliNzAtY2Y0OTJiN2VhNjczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErt2gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK1ICVYbA2uF0I+GjBko2XljqPz5wUxb3vtEGsGFeg8mR8pJ7qmozGs2 y13L2jmgWRVDN9j3LbGOIE1CceoiEwf4r+vPskP2ZBX07wi6vtfE/27Q2cDVLkjC wAh3SWm7UEOYfNH4pbqSl2Y+h5C3O2DzjPRPaNQTFSqc7Y6Ogn69bbr65BWf04EJ IxukpzodTC0j41j5gS3d28EhGq67JcegvRYNkceUSssX94SpHDgujL/6emi3tOGF EDLMmXExl/h2SUv+r4paktTWuiEpB9A0F1XcvL9fXKt6CTop+RNnFnGA76OJKd4q VTAsMp24DDhZt32Ua51flHfo3U2ChL4= -----END CERTIFICATE-----Generated at Mon Jun 16 05:16:43 2025 by rpki-client