$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c/71e14953-f533-3705-9850-4a6c2e06f1a1.roa File: 71e14953-f533-3705-9850-4a6c2e06f1a1.roa (raw, json) Hash identifier: nxjQnBmxFh82/qDVd6E7JLKpG1CCt3miJIi8X3K3+t4= Subject key identifier: 98:35:CD:9F:3A:D4:9C:1B:63:33:EB:92:9C:CA:7F:04:B0:0D:55:BD Certificate issuer: /CN=259fe7c8-f7fa-4637-a746-873dbeadbf3c Certificate serial: 010D0C9F43285848C150CBEA0793D0E9F70C2680 Authority key identifier: 74:52:69:C2:2F:FC:3B:AB:B9:E6:7E:15:F6:B1:FD:A3:E9:5B:E6:EA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c/71e14953-f533-3705-9850-4a6c2e06f1a1.roa Signing time: Mon 03 Feb 2025 02:00:39 +0000 ROA not before: Mon 03 Feb 2025 02:00:39 +0000 ROA not after: Sun 04 May 2025 01:00:39 +0000 asID: 36549 IP address blocks: 173.225.208.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c/259fe7c8-f7fa-4637-a746-873dbeadbf3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c/259fe7c8-f7fa-4637-a746-873dbeadbf3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c1:50:cb:ea:07:93:d0:e9:f7:0c:26:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=259fe7c8-f7fa-4637-a746-873dbeadbf3c Validity Not Before: Feb 3 02:00:39 2025 GMT Not After : May 4 01:00:39 2025 GMT Subject: CN=ad119cd6-8d5c-40fb-a603-9b61a55eb872 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ad:28:71:dd:ca:09:ae:90:56:fa:6d:5c:74: 32:13:0d:2b:48:fa:3f:03:e4:44:ad:10:56:0c:04: 06:4f:93:f3:83:7d:ea:0b:50:3a:31:f6:57:9a:ed: b6:04:d6:c4:f9:63:8f:c0:62:98:2f:cb:2e:7a:cc: 16:a7:01:96:aa:7a:9d:3b:31:40:51:72:9f:6e:e7: d0:32:58:b5:2d:03:9c:74:f1:72:a0:a1:69:ae:8e: 88:56:30:08:6c:1f:11:d0:71:50:02:d1:31:d2:aa: f6:58:ac:c8:63:5e:ee:46:fe:df:1f:35:04:c8:7b: 9b:a7:6f:ed:b2:28:b4:49:14:f7:ac:fb:5b:19:e2: 8a:25:a4:7e:39:aa:ad:b9:7e:43:75:f3:d5:03:28: 4e:b1:6c:7b:ff:c1:74:e1:c4:99:36:e4:c1:5d:89: b8:74:a9:80:8f:70:ff:9f:d6:c6:55:06:e0:1d:aa: a6:71:96:05:73:75:31:bc:4b:12:98:58:85:7a:d1: 12:69:71:30:16:3c:13:42:ff:5d:53:f2:6e:e8:5f: ca:e9:30:0d:bb:a8:46:ee:b0:f0:2a:4d:18:6e:81: 54:48:e2:0c:76:ef:40:07:1c:2a:85:f3:5f:1a:87: dd:9a:39:27:3e:bf:4c:3b:43:34:5f:59:b2:de:ce: d9:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:35:CD:9F:3A:D4:9C:1B:63:33:EB:92:9C:CA:7F:04:B0:0D:55:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c/71e14953-f533-3705-9850-4a6c2e06f1a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c/259fe7c8-f7fa-4637-a746-873dbeadbf3c.crl X509v3 Authority Key Identifier: keyid:74:52:69:C2:2F:FC:3B:AB:B9:E6:7E:15:F6:B1:FD:A3:E9:5B:E6:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c.cer sbgp-ipAddrBlock: critical IPv4: 173.225.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:86:dc:75:67:08:67:71:ab:98:fd:73:b0:15:47:1d:3a:c6: 63:cf:1e:9d:70:1c:94:6c:66:a1:65:0b:87:f1:32:ac:ef:46: 6c:ba:a9:d5:6d:84:eb:27:dc:66:e9:ce:53:eb:6b:1d:75:28: c0:35:da:32:1e:19:d5:65:ae:27:37:c1:51:ca:fd:4f:9e:e0: 77:59:ab:8a:28:6a:f8:21:fe:3c:69:4f:96:87:43:de:cd:ca: 46:6a:a8:43:52:fb:f0:a5:90:47:ae:7a:39:5d:41:be:3e:5a: da:e7:16:45:53:60:56:26:a8:5f:7c:a1:8a:c4:fe:8b:90:37: f5:a7:bc:37:68:d0:65:8b:aa:ed:14:46:e3:29:92:d8:2a:98: fc:fe:45:de:e8:72:80:83:70:54:3a:bd:93:98:8d:49:72:3c: 2e:9d:45:51:2f:fb:a5:1f:89:1d:30:2c:d9:0e:94:ea:0a:a5: f8:51:f2:67:9b:65:de:17:6e:19:2c:c5:21:a2:c0:47:e1:4a: 0d:75:12:7b:5e:06:2a:07:ae:2f:10:2e:ec:03:a3:db:80:49: e7:97:df:d5:9c:4a:52:11:82:f9:27:40:eb:10:04:08:e5:57: 86:a0:af:97:8f:78:60:54:b8:9b:46:ea:b3:c0:2a:b2:6d:28: 7a:cb:bd:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjBUMvqB5PQ6fcMJoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjU5ZmU3YzgtZjdmYS00NjM3LWE3NDYtODczZGJlYWRi ZjNjMB4XDTI1MDIwMzAyMDAzOVoXDTI1MDUwNDAxMDAzOVowLzEtMCsGA1UEAxMk YWQxMTljZDYtOGQ1Yy00MGZiLWE2MDMtOWI2MWE1NWViODcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtq0ocd3KCa6QVvptXHQyEw0rSPo/A+RErRBW DAQGT5Pzg33qC1A6MfZXmu22BNbE+WOPwGKYL8sueswWpwGWqnqdOzFAUXKfbufQ Mli1LQOcdPFyoKFpro6IVjAIbB8R0HFQAtEx0qr2WKzIY17uRv7fHzUEyHubp2/t sii0SRT3rPtbGeKKJaR+OaqtuX5DdfPVAyhOsWx7/8F04cSZNuTBXYm4dKmAj3D/ n9bGVQbgHaqmcZYFc3UxvEsSmFiFetESaXEwFjwTQv9dU/Ju6F/K6TANu6hG7rDw Kk0YboFUSOIMdu9ABxwqhfNfGofdmjknPr9MO0M0X1my3s7Z9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJg1zZ861JwbYzPrkpzKfwSwDVW9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yNTlm ZTdjOC1mN2ZhLTQ2MzctYTc0Ni04NzNkYmVhZGJmM2MvNzFlMTQ5NTMtZjUzMy0z NzA1LTk4NTAtNGE2YzJlMDZmMWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMjU5ZmU3YzgtZjdmYS00NjM3LWE3 NDYtODczZGJlYWRiZjNjLzI1OWZlN2M4LWY3ZmEtNDYzNy1hNzQ2LTg3M2RiZWFk YmYzYy5jcmwwHwYDVR0jBBgwFoAUdFJpwi/8O6u55n4V9rH9o+lb5uowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yNTlmZTdjOC1mN2ZhLTQ2MzctYTc0Ni04NzNk YmVhZGJmM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEreHQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADOG3HVnCGdxq5j9c7AVRx06xmPPHp1wHJRsZqFlC4fxMqzvRmy6qdVt hOsn3GbpzlPrax11KMA12jIeGdVlric3wVHK/U+e4HdZq4ooavgh/jxpT5aHQ97N ykZqqENS+/ClkEeuejldQb4+WtrnFkVTYFYmqF98oYrE/ouQN/WnvDdo0GWLqu0U RuMpktgqmPz+Rd7ocoCDcFQ6vZOYjUlyPC6dRVEv+6UfiR0wLNkOlOoKpfhR8meb Zd4XbhksxSGiwEfhSg11EnteBioHri8QLuwDo9uASeeX39WcSlIRgvknQOsQBAjl V4agr5ePeGBUuJtG6rPAKrJtKHrLvTQ= -----END CERTIFICATE-----Generated at Mon Apr 7 10:53:27 2025 by rpki-client