$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/21d04f0f-5e15-3c83-8d3f-eb6accb5df35.roa File: 21d04f0f-5e15-3c83-8d3f-eb6accb5df35.roa (raw, json) Hash identifier: scXBKvvcsnIi4RjlJ4l2Ck/KCEBhR1AU6GO708th4+g= Subject key identifier: 68:8E:84:F9:DC:66:EB:AC:29:E4:79:64:30:E5:94:6B:EE:43:AA:05 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584962604381C8AB9DF1B36A7680 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/21d04f0f-5e15-3c83-8d3f-eb6accb5df35.roa Signing time: Tue 01 Apr 2025 18:37:00 +0000 ROA not before: Tue 01 Apr 2025 18:37:00 +0000 ROA not after: Mon 30 Jun 2025 18:37:00 +0000 asID: 6167 IP address blocks: 174.221.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:62:60:43:81:c8:ab:9d:f1:b3:6a:76:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 1 18:37:00 2025 GMT Not After : Jun 30 18:37:00 2025 GMT Subject: CN=60a9315d-2cc3-4d56-914c-bc2248f26003 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:9a:f3:54:c4:e4:f4:25:06:9e:44:59:81:a7: 26:28:48:55:ce:b3:84:c1:dd:b4:cc:17:c4:41:60: 96:33:17:db:db:69:d6:cf:b9:4b:6c:6c:c1:bf:eb: 89:01:b9:a3:2d:12:ff:93:2f:83:2e:2f:ce:a4:8d: c4:38:ee:9d:74:a9:42:1d:14:df:28:ff:83:97:2e: 54:fe:fb:8f:cd:8e:59:13:80:1d:80:a7:56:4b:f9: 49:3c:c7:8f:06:14:5c:13:22:bd:49:2e:2a:df:8a: e6:9c:9e:db:c1:84:44:f8:35:a3:3b:3a:80:15:4e: 38:3f:93:59:79:bf:5b:36:be:cb:22:1a:6a:9a:f0: 60:2c:02:1e:c5:8f:ca:39:9b:4b:53:65:24:ad:63: 40:21:ea:e9:e7:19:29:4c:4a:ff:a3:75:24:6a:45: 5c:02:68:5b:14:e7:9a:d4:51:e7:cd:25:84:84:d3: 0d:3f:d3:e0:92:34:5b:cf:8d:4f:3f:1e:31:b0:65: 0c:b7:21:41:31:3c:1e:96:22:70:44:1b:de:e3:76: f1:05:db:7e:34:5b:3b:b7:e7:87:2b:e9:06:5a:d0: 01:a8:e7:c4:22:20:39:7b:90:d1:61:ec:17:b2:b9: 2a:41:46:a1:aa:28:92:fe:a1:57:1d:50:e4:a1:68: 7f:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:8E:84:F9:DC:66:EB:AC:29:E4:79:64:30:E5:94:6B:EE:43:AA:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/21d04f0f-5e15-3c83-8d3f-eb6accb5df35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.221.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:49:6a:36:8a:34:59:3a:26:d7:2f:f1:2d:4c:87:21:e6:8a: ce:69:03:0a:c7:d4:6b:aa:46:9c:bc:9f:13:23:b3:df:95:2e: d2:7e:88:6a:42:a3:b8:cd:f3:4d:0f:51:de:ad:bc:7e:12:29: 46:5d:92:3a:9b:a2:fa:e3:f1:a1:b5:d4:97:d7:7a:d1:ef:30: 27:94:fc:1c:f2:82:fc:21:a2:2f:8a:94:0c:6d:42:7a:30:87: 08:df:51:88:3d:51:6f:f4:69:6e:c7:c8:49:af:5a:13:da:68: 8d:07:29:c7:a1:54:fb:ad:95:de:39:9c:de:c3:d0:29:32:e8: 47:2d:f0:4e:c2:46:83:4c:e7:98:53:3e:42:b0:3c:5c:c8:f6: d1:f9:a1:cb:b6:e4:54:57:2e:1a:1a:5d:41:78:0a:24:91:d6: 50:62:cf:44:39:ae:72:6c:da:31:63:ed:22:53:3b:85:79:d1: c6:4d:69:15:9e:3e:02:87:ea:0d:ba:0a:24:81:10:3d:1d:84: a7:7d:fb:9a:c5:04:86:b6:1e:f5:ef:9d:f7:e9:42:d2:3c:1d: 0b:7f:1c:68:27:8c:90:97:29:80:08:20:81:70:be:19:ad:af: be:fb:61:28:0b:df:8e:a4:63:92:1f:1e:b4:9b:34:9e:95:f6: a3:5e:2b:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEliYEOByKud8bNqdoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDQwMTE4MzcwMFoXDTI1MDYzMDE4MzcwMFowLzEtMCsGA1UEAxMk NjBhOTMxNWQtMmNjMy00ZDU2LTkxNGMtYmMyMjQ4ZjI2MDAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyprzVMTk9CUGnkRZgacmKEhVzrOEwd20zBfE QWCWMxfb22nWz7lLbGzBv+uJAbmjLRL/ky+DLi/OpI3EOO6ddKlCHRTfKP+Dly5U /vuPzY5ZE4AdgKdWS/lJPMePBhRcEyK9SS4q34rmnJ7bwYRE+DWjOzqAFU44P5NZ eb9bNr7LIhpqmvBgLAIexY/KOZtLU2UkrWNAIerp5xkpTEr/o3UkakVcAmhbFOea 1FHnzSWEhNMNP9PgkjRbz41PPx4xsGUMtyFBMTweliJwRBve43bxBdt+NFs7t+eH K+kGWtABqOfEIiA5e5DRYewXsrkqQUahqiiS/qFXHVDkoWh/4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGiOhPncZuusKeR5ZDDllGvuQ6oFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMjFkMDRmMGYtNWUxNS0z YzgzLThkM2YtZWI2YWNjYjVkZjM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErt0gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGhJajaKNFk6Jtcv8S1MhyHmis5pAwrH1GuqRpy8nxMjs9+VLtJ+iGpC o7jN800PUd6tvH4SKUZdkjqbovrj8aG11JfXetHvMCeU/Bzygvwhoi+KlAxtQnow hwjfUYg9UW/0aW7HyEmvWhPaaI0HKcehVPutld45nN7D0Cky6Ect8E7CRoNM55hT PkKwPFzI9tH5ocu25FRXLhoaXUF4CiSR1lBiz0Q5rnJs2jFj7SJTO4V50cZNaRWe PgKH6g26CiSBED0dhKd9+5rFBIa2HvXvnffpQtI8HQt/HGgnjJCXKYAIIIFwvhmt r777YSgL346kY5IfHrSbNJ6V9qNeK9A= -----END CERTIFICATE-----Generated at Sun Apr 6 17:52:50 2025 by rpki-client