$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/59723481-42fd-4957-8eb9-3b266c71eec3/d2fe84b7-57c7-39cb-acbe-45a354fd7ce2.roa File: d2fe84b7-57c7-39cb-acbe-45a354fd7ce2.roa (raw, json) Hash identifier: 2UN01SfEr1YFdC0LbGvvZRJECRXHFieJkp7rBrM+zgI= Subject key identifier: B8:4A:C8:53:30:B0:0C:DD:15:EB:89:EE:9D:61:27:7E:14:CA:B5:1A Certificate issuer: /CN=59723481-42fd-4957-8eb9-3b266c71eec3 Certificate serial: 010D0C9F432858494733E1B5719961216EC60DC0 Authority key identifier: B9:AA:B5:CD:67:A7:46:3B:7E:AC:36:43:C2:D4:C3:35:47:08:E7:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/59723481-42fd-4957-8eb9-3b266c71eec3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/59723481-42fd-4957-8eb9-3b266c71eec3/d2fe84b7-57c7-39cb-acbe-45a354fd7ce2.roa Signing time: Sun 23 Mar 2025 01:00:39 +0000 ROA not before: Sun 23 Mar 2025 01:00:39 +0000 ROA not after: Sat 21 Jun 2025 01:00:39 +0000 asID: 13329 IP address blocks: 174.34.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/59723481-42fd-4957-8eb9-3b266c71eec3/59723481-42fd-4957-8eb9-3b266c71eec3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/59723481-42fd-4957-8eb9-3b266c71eec3/59723481-42fd-4957-8eb9-3b266c71eec3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/59723481-42fd-4957-8eb9-3b266c71eec3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:47:33:e1:b5:71:99:61:21:6e:c6:0d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59723481-42fd-4957-8eb9-3b266c71eec3 Validity Not Before: Mar 23 01:00:39 2025 GMT Not After : Jun 21 01:00:39 2025 GMT Subject: CN=6933fc78-dd7c-474e-9e57-04a4f8fc6112 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:d6:30:5d:f0:f2:a8:58:a8:47:1f:b1:70:e8: 91:96:0f:bc:72:b0:ed:bd:4c:a6:28:d1:3f:c8:dd: 8b:c6:3f:83:40:b8:6e:63:f2:ca:4b:9c:0a:5d:39: 38:d2:90:84:8d:25:0d:4a:8f:f4:aa:0c:3b:97:06: 6f:62:54:31:3c:ee:9f:98:b1:e8:e7:7f:71:ae:54: 34:2c:94:c6:81:a7:2c:34:3f:63:00:83:55:74:17: 91:46:b4:0e:f8:e0:26:56:b6:2d:d7:9a:37:16:e5: 68:4c:55:a5:2f:02:c0:fe:d2:b1:cc:de:4a:4f:4a: 9d:ad:b7:81:f5:fb:14:a2:90:a0:5e:b6:4b:ea:d7: b6:f8:e3:a7:6e:86:bc:87:5d:6b:2e:a7:a0:33:4b: 64:10:9a:f8:34:56:87:93:7b:cd:0a:d2:c9:99:28: e8:80:89:c0:5d:6f:82:4d:a3:02:64:37:e5:32:41: 9d:e4:20:c2:80:3b:3d:ab:37:1f:e3:49:f9:8f:6d: 25:eb:54:4c:47:61:dd:1a:9b:81:4e:8f:59:cc:ad: 97:2d:96:fd:11:44:b7:d9:6b:68:d9:51:c9:fa:01: f3:6b:44:1c:f0:d7:45:01:0c:44:78:9a:c9:9d:ef: 16:b6:7e:86:8b:e5:bd:a6:c4:e3:73:4c:d4:80:4f: c1:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:4A:C8:53:30:B0:0C:DD:15:EB:89:EE:9D:61:27:7E:14:CA:B5:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/59723481-42fd-4957-8eb9-3b266c71eec3/d2fe84b7-57c7-39cb-acbe-45a354fd7ce2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/59723481-42fd-4957-8eb9-3b266c71eec3/59723481-42fd-4957-8eb9-3b266c71eec3.crl X509v3 Authority Key Identifier: keyid:B9:AA:B5:CD:67:A7:46:3B:7E:AC:36:43:C2:D4:C3:35:47:08:E7:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/59723481-42fd-4957-8eb9-3b266c71eec3.cer sbgp-ipAddrBlock: critical IPv4: 174.34.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:01:8a:cb:d7:89:22:48:55:d1:06:6b:9a:c3:a1:3d:a5:b0: d1:24:4d:cf:c5:31:9f:c7:62:96:13:af:df:aa:76:28:db:d1: 35:61:6f:21:4a:41:be:eb:b8:63:62:af:2b:c8:7c:41:da:1a: bd:40:31:2f:91:88:42:2c:97:c1:4d:7e:21:12:c3:ec:99:97: 68:08:d6:e3:71:f0:8d:ce:3b:8f:b9:48:1e:9b:70:ec:9c:5e: 55:b4:4c:70:11:b4:62:63:72:15:37:33:dd:6d:1c:76:36:58: 21:bd:96:ab:5d:58:c3:c6:8e:90:7b:c6:37:7a:69:ea:b7:59: a3:4e:b0:ed:e8:5c:eb:6e:16:c9:c7:40:85:85:83:73:bd:79: fc:0e:03:ad:33:66:ee:f6:5a:fa:51:9f:bc:a4:6e:f3:79:60: 54:1a:27:f6:35:48:fc:99:48:69:57:e4:a9:f4:f1:37:91:2c: a3:43:b9:28:91:b9:a3:12:2f:28:8e:44:4f:9b:9b:42:b3:32: f0:cf:13:76:e0:45:f8:68:b0:f6:37:dc:d0:98:64:13:07:5c: 20:7c:87:27:fb:16:9e:7a:17:46:57:af:4a:1a:37:c4:54:f6: 8d:e6:0e:6e:27:d0:a1:0a:fe:c0:b9:8a:b9:47:63:44:c2:0d: b6:2b:70:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElHM+G1cZlhIW7GDcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTk3MjM0ODEtNDJmZC00OTU3LThlYjktM2IyNjZjNzFl ZWMzMB4XDTI1MDMyMzAxMDAzOVoXDTI1MDYyMTAxMDAzOVowLzEtMCsGA1UEAxMk NjkzM2ZjNzgtZGQ3Yy00NzRlLTllNTctMDRhNGY4ZmM2MTEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAltYwXfDyqFioRx+xcOiRlg+8crDtvUymKNE/ yN2Lxj+DQLhuY/LKS5wKXTk40pCEjSUNSo/0qgw7lwZvYlQxPO6fmLHo539xrlQ0 LJTGgacsND9jAINVdBeRRrQO+OAmVrYt15o3FuVoTFWlLwLA/tKxzN5KT0qdrbeB 9fsUopCgXrZL6te2+OOnboa8h11rLqegM0tkEJr4NFaHk3vNCtLJmSjogInAXW+C TaMCZDflMkGd5CDCgDs9qzcf40n5j20l61RMR2HdGpuBTo9ZzK2XLZb9EUS32Wto 2VHJ+gHza0Qc8NdFAQxEeJrJne8Wtn6Gi+W9psTjc0zUgE/BHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLhKyFMwsAzdFeuJ7p1hJ34UyrUaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81OTcy MzQ4MS00MmZkLTQ5NTctOGViOS0zYjI2NmM3MWVlYzMvZDJmZTg0YjctNTdjNy0z OWNiLWFjYmUtNDVhMzU0ZmQ3Y2UyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNTk3MjM0ODEtNDJmZC00OTU3LThl YjktM2IyNjZjNzFlZWMzLzU5NzIzNDgxLTQyZmQtNDk1Ny04ZWI5LTNiMjY2Yzcx ZWVjMy5jcmwwHwYDVR0jBBgwFoAUuaq1zWenRjt+rDZDwtTDNUcI54UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC81OTcyMzQ4MS00MmZkLTQ5NTctOGViOS0zYjI2 NmM3MWVlYzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAriLkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACABisvXiSJIVdEGa5rDoT2lsNEkTc/FMZ/HYpYTr9+qdijb0TVhbyFK Qb7ruGNiryvIfEHaGr1AMS+RiEIsl8FNfiESw+yZl2gI1uNx8I3OO4+5SB6bcOyc XlW0THARtGJjchU3M91tHHY2WCG9lqtdWMPGjpB7xjd6aeq3WaNOsO3oXOtuFsnH QIWFg3O9efwOA60zZu72WvpRn7ykbvN5YFQaJ/Y1SPyZSGlX5Kn08TeRLKNDuSiR uaMSLyiORE+bm0KzMvDPE3bgRfhosPY33NCYZBMHXCB8hyf7Fp56F0ZXr0oaN8RU 9o3mDm4n0KEK/sC5irlHY0TCDbYrcJI= -----END CERTIFICATE-----Generated at Sat Apr 5 10:20:36 2025 by rpki-client