$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e8909cf0-e05b-382c-baf7-117c89d7cc5b.roa File: e8909cf0-e05b-382c-baf7-117c89d7cc5b.roa (raw, json) Hash identifier: Om9HZAOTXbJdkDV8lzRi0XSLJWN72HP2rgRe4HwK5DY= Subject key identifier: AA:89:DC:41:31:E2:61:29:70:98:2E:27:44:8B:09:44:85:9C:D1:05 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849EA853C3E4EADF42D297B0CA0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e8909cf0-e05b-382c-baf7-117c89d7cc5b.roa Signing time: Tue 20 May 2025 13:01:05 +0000 ROA not before: Tue 20 May 2025 13:01:05 +0000 ROA not after: Mon 18 Aug 2025 13:01:05 +0000 asID: 701 IP address blocks: 74.97.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ea:85:3c:3e:4e:ad:f4:2d:29:7b:0c:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: May 20 13:01:05 2025 GMT Not After : Aug 18 13:01:05 2025 GMT Subject: CN=266fd685-6fc2-4ead-99da-5027db72a05a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:a5:2f:3c:14:3c:74:9a:5f:5e:18:5d:8e:76: b5:d8:6b:d1:0d:7b:8f:a6:3b:f8:2c:b9:bf:a4:4d: 48:ca:69:35:6d:df:bb:76:1e:b0:ca:55:7b:7a:1b: 50:cc:e6:b8:ff:98:d6:ba:78:83:e3:96:e5:28:93: 5f:dc:e1:1d:1d:7f:ec:93:d5:e1:11:ee:02:c3:a0: a3:57:12:1e:9c:24:91:8d:a2:01:46:42:31:a4:02: 01:8e:fe:4e:9a:ee:2c:6b:20:03:c5:eb:1e:7b:78: e8:2a:60:51:cb:9c:1d:2c:d9:85:2b:25:da:50:ff: ee:15:f4:dd:6b:a8:0b:ce:7d:5f:db:6c:89:2d:91: 3c:af:24:2c:a7:af:b8:f9:93:d2:f2:d6:ff:fd:9e: c5:7a:f9:31:88:d1:d0:43:ee:98:a8:04:7b:9e:20: 39:ff:57:b1:99:4d:8c:32:50:7e:bc:56:22:a4:ba: 5f:10:ca:5d:ca:13:6b:60:b6:2a:20:8b:29:e4:8a: 45:e6:4b:65:03:94:23:66:0e:39:b9:d1:a2:96:dd: 4f:2e:61:19:b3:2b:0f:f9:64:48:ab:5b:f6:a9:d4: 55:e5:eb:8b:67:62:12:ec:31:93:56:b0:d8:0c:32: ec:97:69:c4:4c:2c:fc:62:91:28:39:b0:cf:2b:bf: 78:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:89:DC:41:31:E2:61:29:70:98:2E:27:44:8B:09:44:85:9C:D1:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e8909cf0-e05b-382c-baf7-117c89d7cc5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 74.97.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:99:9c:d2:53:08:9c:3d:d8:bf:c8:d2:be:db:49:86:34:27: 71:71:ee:47:e8:46:be:3e:09:e4:60:79:5c:45:07:1f:6f:70: 86:ae:88:c3:87:5c:5d:5c:10:36:ff:c0:ef:2b:11:6b:ec:23: 75:05:26:99:e2:9f:91:02:7a:49:d9:e8:a1:7a:fe:0b:42:1e: 07:61:57:4d:ab:c1:18:a5:06:2f:35:f8:1f:75:d3:21:42:c2: 89:f8:f5:dc:18:5a:78:28:03:13:8f:c9:e5:ac:18:3b:af:2e: 7d:24:41:a9:ac:13:f0:6c:5f:5f:d7:bb:7f:55:d1:1d:7f:c6: bc:29:12:2e:43:b7:1a:92:1f:9c:41:a1:30:46:3c:1b:cd:c9: 26:bd:88:30:f0:e4:5a:33:61:68:86:c5:70:a5:c8:ec:b8:c2: 91:fe:10:b5:9a:fd:ee:73:cd:17:e0:9d:ab:81:d6:91:24:b1: a9:73:cc:a4:65:d8:e4:37:c7:3b:58:a9:00:d2:1e:32:74:6e: a4:40:20:33:08:4c:1e:ff:99:67:f6:a1:44:9f:f2:03:18:f4: b6:0f:8f:46:72:28:f9:13:47:1c:f7:56:31:51:dc:a1:83:05: 5e:b6:11:aa:da:34:21:59:ea:bf:f0:9d:7b:63:ae:92:89:53: fd:5e:b3:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnqhTw+Tq30LSl7DKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDUyMDEzMDEwNVoXDTI1MDgxODEzMDEwNVowLzEtMCsGA1UEAxMk MjY2ZmQ2ODUtNmZjMi00ZWFkLTk5ZGEtNTAyN2RiNzJhMDVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkaUvPBQ8dJpfXhhdjna12GvRDXuPpjv4LLm/ pE1Iymk1bd+7dh6wylV7ehtQzOa4/5jWuniD45blKJNf3OEdHX/sk9XhEe4Cw6Cj VxIenCSRjaIBRkIxpAIBjv5Omu4sayADxesee3joKmBRy5wdLNmFKyXaUP/uFfTd a6gLzn1f22yJLZE8ryQsp6+4+ZPS8tb//Z7FevkxiNHQQ+6YqAR7niA5/1exmU2M MlB+vFYipLpfEMpdyhNrYLYqIIsp5IpF5ktlA5QjZg45udGilt1PLmEZsysP+WRI q1v2qdRV5euLZ2IS7DGTVrDYDDLsl2nETCz8YpEoObDPK794fQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKqJ3EEx4mEpcJguJ0SLCUSFnNEFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZTg5MDljZjAtZTA1Yi0z ODJjLWJhZjctMTE3Yzg5ZDdjYzViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGSmEAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK6ZnNJTCJw92L/I0r7bSYY0J3Fx7kfoRr4+CeRgeVxFBx9vcIauiMOH XF1cEDb/wO8rEWvsI3UFJpnin5ECeknZ6KF6/gtCHgdhV02rwRilBi81+B910yFC won49dwYWngoAxOPyeWsGDuvLn0kQamsE/BsX1/Xu39V0R1/xrwpEi5DtxqSH5xB oTBGPBvNySa9iDDw5FozYWiGxXClyOy4wpH+ELWa/e5zzRfgnauB1pEksalzzKRl 2OQ3xztYqQDSHjJ0bqRAIDMITB7/mWf2oUSf8gMY9LYPj0ZyKPkTRxz3VjFR3KGD BV62EaraNCFZ6r/wnXtjrpKJU/1es+A= -----END CERTIFICATE-----Generated at Mon Jun 16 13:11:51 2025 by rpki-client