$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/08dfadb1-5708-368c-99e5-288677f1ff1d.roa File: 08dfadb1-5708-368c-99e5-288677f1ff1d.roa (raw, json) Hash identifier: yGPhjyDZFZabW1eQ6YUKwX8PcT7Q7i5aa1oZOS/ZL6o= Subject key identifier: 19:04:5B:EB:BA:50:8E:19:AC:0B:54:C3:69:E9:1B:45:15:7D:92:35 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285848E8666E81E05400EFDD23FB00 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/08dfadb1-5708-368c-99e5-288677f1ff1d.roa Signing time: Mon 17 Feb 2025 02:00:38 +0000 ROA not before: Mon 17 Feb 2025 02:00:38 +0000 ROA not after: Sun 18 May 2025 01:00:38 +0000 asID: 6167 IP address blocks: 174.232.174.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e8:66:6e:81:e0:54:00:ef:dd:23:fb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Feb 17 02:00:38 2025 GMT Not After : May 18 01:00:38 2025 GMT Subject: CN=e9a7667b-60ed-4894-88ca-0506268950cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:14:ef:d6:f7:66:f1:ee:d6:da:b1:c9:bd:0d: 8c:ae:60:e2:20:ba:7b:f7:7b:81:af:94:22:68:9b: 05:f2:21:55:50:33:1f:6a:a6:dc:c4:73:88:94:51: 84:a6:e4:25:16:39:32:50:4c:7f:e1:86:b7:76:39: 0e:cc:56:bf:1a:01:45:6b:ca:df:a4:37:45:db:78: d6:1e:6a:44:59:fe:76:16:8c:77:42:07:77:f5:16: cd:8a:76:8b:89:1e:fd:42:a9:2a:95:c8:5f:86:13: a0:9d:b7:10:19:28:71:e5:d3:b0:04:d5:20:7a:86: a9:1f:bc:b1:b0:33:25:f3:03:de:59:35:6c:bd:e3: c2:29:73:ce:99:f8:a1:78:fb:9f:c9:dc:34:06:6f: 44:59:c4:49:e8:f5:6e:77:64:40:19:b3:b5:82:0b: 48:20:67:64:80:5d:13:29:09:b4:96:43:3b:8b:db: 33:fa:40:cd:e5:40:db:21:4d:c6:96:ba:0b:10:a8: de:48:3d:6a:a8:01:f9:f1:9d:cd:26:d6:cb:b0:23: 6f:99:f6:78:a4:86:06:40:b0:ed:e7:cd:38:3f:77: 03:9c:c2:d4:33:b8:0b:b8:73:5b:7a:1e:c0:30:01: 78:25:d2:36:2e:f1:33:0b:92:eb:e1:44:51:14:6d: a2:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:04:5B:EB:BA:50:8E:19:AC:0B:54:C3:69:E9:1B:45:15:7D:92:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/08dfadb1-5708-368c-99e5-288677f1ff1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.232.174.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:e3:61:a8:06:58:56:56:75:6a:60:8d:24:7f:57:06:8a:f8: 9a:51:43:d5:a5:07:c6:fa:60:1a:41:65:0c:e7:36:2b:24:a8: da:59:d9:82:20:c8:04:3a:6b:62:0f:fe:f5:7a:51:3a:63:43: 00:08:f9:13:33:dc:a5:4c:41:c6:c3:48:70:79:9c:1d:d6:9e: 0d:79:0b:b2:3e:3c:e7:40:eb:6b:62:30:43:9b:93:e8:87:ed: 2e:fb:c2:92:10:a7:9f:33:47:98:2c:ae:5f:34:5a:76:fb:d4: 9c:b8:d7:67:85:64:40:14:da:b4:ad:48:2f:42:da:62:d0:14: b5:a2:a3:8c:16:5a:cf:fe:44:7d:b1:a3:db:12:f1:45:4d:9e: f0:8e:1d:54:fa:ab:d8:1d:0e:6a:4f:fd:9d:4e:1b:00:69:96: f3:9e:eb:6c:a7:24:a0:98:8e:c4:ac:4d:fc:ba:02:4a:3e:33: f5:24:c7:bb:1b:4a:e0:6f:a0:a7:5b:cd:8c:cf:56:9c:f6:6e: 90:a3:45:fe:cd:25:00:74:68:c3:b2:21:95:11:05:2f:24:1c: a0:00:c5:1c:ca:ff:02:e0:06:4d:b7:28:7d:46:d1:67:8a:69: 0c:69:db:c8:61:c5:7b:10:1b:62:8f:19:af:84:c5:25:63:88: 2a:db:8b:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjoZm6B4FQA790j+wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDIxNzAyMDAzOFoXDTI1MDUxODAxMDAzOFowLzEtMCsGA1UEAxMk ZTlhNzY2N2ItNjBlZC00ODk0LTg4Y2EtMDUwNjI2ODk1MGNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0BTv1vdm8e7W2rHJvQ2MrmDiILp793uBr5Qi aJsF8iFVUDMfaqbcxHOIlFGEpuQlFjkyUEx/4Ya3djkOzFa/GgFFa8rfpDdF23jW HmpEWf52Fox3Qgd39RbNinaLiR79QqkqlchfhhOgnbcQGShx5dOwBNUgeoapH7yx sDMl8wPeWTVsvePCKXPOmfihePufydw0Bm9EWcRJ6PVud2RAGbO1ggtIIGdkgF0T KQm0lkM7i9sz+kDN5UDbIU3GlroLEKjeSD1qqAH58Z3NJtbLsCNvmfZ4pIYGQLDt 5804P3cDnMLUM7gLuHNbeh7AMAF4JdI2LvEzC5Lr4URRFG2iNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBkEW+u6UI4ZrAtUw2npG0UVfZI1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMDhkZmFkYjEtNTcwOC0z NjhjLTk5ZTUtMjg4Njc3ZjFmZjFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBruiuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJnjYagGWFZWdWpgjSR/VwaK+JpRQ9WlB8b6YBpBZQznNiskqNpZ2YIg yAQ6a2IP/vV6UTpjQwAI+RMz3KVMQcbDSHB5nB3Wng15C7I+POdA62tiMEObk+iH 7S77wpIQp58zR5gsrl80Wnb71Jy412eFZEAU2rStSC9C2mLQFLWio4wWWs/+RH2x o9sS8UVNnvCOHVT6q9gdDmpP/Z1OGwBplvOe62ynJKCYjsSsTfy6Ako+M/Ukx7sb SuBvoKdbzYzPVpz2bpCjRf7NJQB0aMOyIZURBS8kHKAAxRzK/wLgBk23KH1G0WeK aQxp28hhxXsQG2KPGa+ExSVjiCrbi3w= -----END CERTIFICATE-----Generated at Sat Apr 5 18:26:52 2025 by rpki-client