$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d5a41d72-de62-31af-a776-d58ec1ef355b.roa File: d5a41d72-de62-31af-a776-d58ec1ef355b.roa (raw, json) Hash identifier: k523CVGKOtKZRPD4ygAxHuQXSDW6d6tHjGs9xUVHhZk= Subject key identifier: F6:21:2A:AA:83:F0:C8:41:3B:BE:3F:AF:BE:96:C8:31:5E:C4:0A:BF Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849D7AFC790DEC6D7FF42F5EBAC Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d5a41d72-de62-31af-a776-d58ec1ef355b.roa Signing time: Tue 13 May 2025 19:06:48 +0000 ROA not before: Tue 13 May 2025 19:06:48 +0000 ROA not after: Mon 11 Aug 2025 19:06:48 +0000 asID: 6167 IP address blocks: 174.209.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d7:af:c7:90:de:c6:d7:ff:42:f5:eb:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: May 13 19:06:48 2025 GMT Not After : Aug 11 19:06:48 2025 GMT Subject: CN=c63af540-6e8f-4da0-9042-c799c39c258b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:05:8a:ec:8b:a7:4f:ce:33:6b:ce:22:f5:85: b8:32:e1:1b:5f:01:68:be:ff:20:b5:d5:15:15:8c: 58:df:5a:39:22:c1:84:dc:32:bb:b2:1e:75:07:05: 54:85:21:b9:5a:dc:22:4c:dd:18:ea:14:ec:23:ac: 65:51:18:e7:bb:94:7b:73:9a:c9:5f:58:4f:da:99: 47:62:91:86:23:27:ea:25:16:bc:6f:25:fa:9f:cd: 8f:53:ff:73:f2:a0:e0:09:cf:4a:3e:d0:fb:11:0b: 06:7d:dd:54:1c:96:9b:e2:73:a3:c5:73:d1:8e:0c: e3:de:47:5a:56:55:5b:d5:46:c7:02:30:d3:32:87: df:e7:ce:51:60:63:bf:97:49:d6:ec:ee:32:bd:61: 2f:88:d4:b4:42:aa:11:e0:67:8f:8c:64:87:8e:0f: b6:87:20:b1:92:ce:d4:63:6c:11:b8:e9:2c:23:54: 64:75:46:e2:bd:84:73:5b:4e:fb:86:73:fc:56:70: f7:7b:48:51:43:cb:f2:4a:b3:fd:64:58:21:fb:2d: 49:84:4d:99:29:80:7a:ee:c4:73:24:29:81:83:f5: 11:8d:7b:b4:35:6f:72:18:5a:3e:1b:80:ec:b3:47: a4:52:d6:c3:65:7c:0f:6e:28:45:84:19:83:27:e1: 28:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:21:2A:AA:83:F0:C8:41:3B:BE:3F:AF:BE:96:C8:31:5E:C4:0A:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d5a41d72-de62-31af-a776-d58ec1ef355b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.209.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:a6:41:48:51:cd:28:99:52:b1:0d:ed:ab:64:a9:dc:bc:21: 6f:12:af:1e:f9:d4:21:70:36:b0:e6:e3:93:ae:00:22:80:a8: 14:86:f5:7b:89:46:7a:63:f1:29:8f:83:c1:4c:65:57:ed:a2: 08:ca:9f:64:87:ec:c5:8e:ed:97:0e:36:6c:55:9d:47:77:9a: 1d:a8:e1:7e:19:1d:47:99:f5:01:94:72:96:b5:c3:e0:e0:2e: 7b:a5:0f:61:e1:b6:de:38:9c:d9:a8:48:90:28:80:ab:f4:7b: 13:da:0a:a9:29:47:97:0e:0d:5f:86:c2:55:96:37:af:71:35: 9d:4b:e6:b3:1c:f8:ad:ba:b7:a8:69:49:bd:76:5f:a5:17:13: d8:32:85:78:13:24:62:9a:00:68:cf:ba:5e:d5:ef:1f:cb:b0: 69:19:04:56:e9:2f:da:bb:34:28:20:cd:82:9c:8f:8f:12:a3: 57:fc:b0:9d:eb:bb:56:21:4a:61:18:49:7e:42:6f:a1:04:9e: b1:3b:23:8e:09:77:cc:02:00:3e:f8:49:7c:b2:b7:11:b2:7e: b1:6a:89:5b:4f:81:21:56:8f:3d:ee:f3:4d:cb:c3:ed:9b:b5: 40:80:22:0d:1f:a7:77:e0:e9:70:3d:8f:ca:51:c9:3e:8c:5f: 4b:23:76:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnXr8eQ3sbX/0L166wwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDUxMzE5MDY0OFoXDTI1MDgxMTE5MDY0OFowLzEtMCsGA1UEAxMk YzYzYWY1NDAtNmU4Zi00ZGEwLTkwNDItYzc5OWMzOWMyNThiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjAWK7IunT84za84i9YW4MuEbXwFovv8gtdUV FYxY31o5IsGE3DK7sh51BwVUhSG5WtwiTN0Y6hTsI6xlURjnu5R7c5rJX1hP2plH YpGGIyfqJRa8byX6n82PU/9z8qDgCc9KPtD7EQsGfd1UHJab4nOjxXPRjgzj3kda VlVb1UbHAjDTMoff585RYGO/l0nW7O4yvWEviNS0QqoR4GePjGSHjg+2hyCxks7U Y2wRuOksI1RkdUbivYRzW077hnP8VnD3e0hRQ8vySrP9ZFgh+y1JhE2ZKYB67sRz JCmBg/URjXu0NW9yGFo+G4Dss0ekUtbDZXwPbihFhBmDJ+Eo/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPYhKqqD8MhBO74/r76WyDFexAq/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZDVhNDFkNzItZGU2Mi0z MWFmLWE3NzYtZDU4ZWMxZWYzNTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErtGwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACqmQUhRzSiZUrEN7atkqdy8IW8Srx751CFwNrDm45OuACKAqBSG9XuJ Rnpj8SmPg8FMZVftogjKn2SH7MWO7ZcONmxVnUd3mh2o4X4ZHUeZ9QGUcpa1w+Dg LnulD2Hhtt44nNmoSJAogKv0exPaCqkpR5cODV+GwlWWN69xNZ1L5rMc+K26t6hp Sb12X6UXE9gyhXgTJGKaAGjPul7V7x/LsGkZBFbpL9q7NCggzYKcj48So1f8sJ3r u1YhSmEYSX5Cb6EEnrE7I44Jd8wCAD74SXyytxGyfrFqiVtPgSFWjz3u803Lw+2b tUCAIg0fp3fg6XA9j8pRyT6MX0sjdkQ= -----END CERTIFICATE-----Generated at Tue Jun 17 04:42:23 2025 by rpki-client