$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0a7a019e-36d0-3947-bf8c-317960f60a72.roa File: 0a7a019e-36d0-3947-bf8c-317960f60a72.roa (raw, json) Hash identifier: kWQfELnpO4S73LFoQGR85ZCwYnEVV5TqsmRWNeZz1lk= Subject key identifier: D7:D9:D0:7E:EF:63:F1:C9:EE:29:97:FD:16:B6:AE:C0:E2:71:37:14 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285848E86670FF654F1C6DC4F88400 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0a7a019e-36d0-3947-bf8c-317960f60a72.roa Signing time: Mon 17 Feb 2025 02:00:38 +0000 ROA not before: Mon 17 Feb 2025 02:00:38 +0000 ROA not after: Sun 18 May 2025 01:00:38 +0000 asID: 6167 IP address blocks: 174.235.112.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e8:66:70:ff:65:4f:1c:6d:c4:f8:84:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Feb 17 02:00:38 2025 GMT Not After : May 18 01:00:38 2025 GMT Subject: CN=58c4fa6f-c856-46ab-9697-e647c2cdf9ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:8c:00:b2:fb:ba:04:e2:5b:f3:16:75:89:72: ec:03:ce:6b:a4:04:54:42:65:fe:24:61:c0:15:14: 3e:68:1c:32:9f:b2:98:16:6e:d8:92:93:d1:0e:ae: c1:47:78:f5:e3:8e:64:93:16:38:d4:0c:1e:b1:b6: 8b:b5:7e:28:39:76:2f:a3:68:6c:7c:38:53:d1:21: 42:79:f9:d6:74:8d:a8:07:73:e7:64:89:58:50:5b: e9:cf:d6:22:49:75:b5:4f:80:61:c8:c8:8f:57:ac: 6c:ea:d1:07:05:91:7c:fb:21:13:dd:08:98:27:20: f9:a9:62:48:73:7a:c1:20:09:43:c1:8d:39:b1:7f: a3:7b:72:38:92:ca:e7:20:c8:30:0c:b8:2c:98:70: 2d:4d:d1:45:54:5b:2c:dc:f4:cf:4a:73:bd:f3:1b: 29:71:6b:4b:39:68:7d:cb:c0:73:bb:04:f0:f9:e0: 2a:96:29:0f:12:49:f6:36:f9:6d:90:91:43:21:0d: 5d:3c:78:d1:00:0c:c9:cd:d2:2e:87:8e:f4:13:85: 39:40:c5:69:34:b1:aa:fb:80:dd:c5:ce:50:e4:58: b6:6b:07:5f:5f:ee:a5:5a:e0:ca:b0:83:39:7b:25: 8f:4e:67:4c:fa:26:c6:39:34:72:96:48:5a:43:05: 18:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:D9:D0:7E:EF:63:F1:C9:EE:29:97:FD:16:B6:AE:C0:E2:71:37:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0a7a019e-36d0-3947-bf8c-317960f60a72.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.235.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:90:b5:30:7f:1d:cf:98:93:2d:9f:0c:57:94:18:2d:4b:e5: fa:e8:75:48:33:a1:77:cc:79:46:b8:d4:6f:6d:e7:2c:96:75: d7:b4:e0:cc:09:c4:77:be:63:1f:dd:df:b6:1b:a1:61:f5:df: a2:22:ba:fb:67:ec:22:05:a7:7b:fc:49:32:23:c3:c6:e3:53: 94:98:c7:23:75:8e:64:94:15:1f:92:c6:49:21:1b:26:16:f4: 75:92:10:b1:08:9b:40:d6:a3:14:e5:1e:ee:b0:35:a3:7c:c6: 5b:78:9f:ff:c5:e1:d8:39:c2:38:7a:ad:a6:91:7c:24:30:82: 83:c6:91:40:89:4e:7b:9b:f1:aa:d5:50:2c:c8:57:30:90:7b: 81:d8:0c:75:a6:23:a4:ff:0d:10:31:09:27:21:96:d0:80:b0: 3b:96:83:b7:f6:c9:18:6c:13:03:04:cb:14:fc:29:33:4c:c9: 7b:74:70:ca:d5:4c:52:17:fb:7b:27:f4:b8:6c:54:3d:55:6a: 1b:0f:01:97:9c:a5:71:71:53:6f:17:4a:b7:a6:36:c9:e0:f0: 69:20:cf:ed:46:bc:4d:fa:c7:2e:72:d0:0a:ee:d4:3c:05:ff: 3f:c5:c5:b4:a5:a2:33:c7:8b:74:10:86:3c:45:f8:8a:fd:d5: 48:b3:00:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjoZnD/ZU8cbcT4hAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDIxNzAyMDAzOFoXDTI1MDUxODAxMDAzOFowLzEtMCsGA1UEAxMk NThjNGZhNmYtYzg1Ni00NmFiLTk2OTctZTY0N2MyY2RmOWFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx4wAsvu6BOJb8xZ1iXLsA85rpARUQmX+JGHA FRQ+aBwyn7KYFm7YkpPRDq7BR3j1445kkxY41AwesbaLtX4oOXYvo2hsfDhT0SFC efnWdI2oB3PnZIlYUFvpz9YiSXW1T4BhyMiPV6xs6tEHBZF8+yET3QiYJyD5qWJI c3rBIAlDwY05sX+je3I4ksrnIMgwDLgsmHAtTdFFVFss3PTPSnO98xspcWtLOWh9 y8BzuwTw+eAqlikPEkn2NvltkJFDIQ1dPHjRAAzJzdIuh470E4U5QMVpNLGq+4Dd xc5Q5Fi2awdfX+6lWuDKsIM5eyWPTmdM+ibGOTRylkhaQwUYgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNfZ0H7vY/HJ7imX/Ra2rsDicTcUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMGE3YTAxOWUtMzZkMC0z OTQ3LWJmOGMtMzE3OTYwZjYwYTcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrutwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALSQtTB/Hc+Yky2fDFeUGC1L5frodUgzoXfMeUa41G9t5yyWdde04MwJ xHe+Yx/d37YboWH136Iiuvtn7CIFp3v8STIjw8bjU5SYxyN1jmSUFR+SxkkhGyYW 9HWSELEIm0DWoxTlHu6wNaN8xlt4n//F4dg5wjh6raaRfCQwgoPGkUCJTnub8arV UCzIVzCQe4HYDHWmI6T/DRAxCSchltCAsDuWg7f2yRhsEwMEyxT8KTNMyXt0cMrV TFIX+3sn9LhsVD1VahsPAZecpXFxU28XSremNsng8Gkgz+1GvE36xy5y0Aru1DwF /z/FxbSlojPHi3QQhjxF+Ir91UizAGo= -----END CERTIFICATE-----Generated at Sat Apr 5 18:26:54 2025 by rpki-client