$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/35a6baf9-6504-389c-8368-f75a35c0fbe6.roa File: 35a6baf9-6504-389c-8368-f75a35c0fbe6.roa (raw, json) Hash identifier: WXsl+EQVAqj9Q3//B0oCsHy4eqwH2fASNYrgfJmPi6o= Subject key identifier: 25:AD:28:E9:EF:B0:4F:52:B4:D0:CF:B1:A2:82:5A:87:D6:08:2C:F9 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285848C150DE20121869207F3C6280 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/35a6baf9-6504-389c-8368-f75a35c0fbe6.roa Signing time: Mon 03 Feb 2025 02:00:39 +0000 ROA not before: Mon 03 Feb 2025 02:00:39 +0000 ROA not after: Sun 04 May 2025 01:00:39 +0000 asID: 6167 IP address blocks: 174.214.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c1:50:de:20:12:18:69:20:7f:3c:62:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Feb 3 02:00:39 2025 GMT Not After : May 4 01:00:39 2025 GMT Subject: CN=3630f99a-d51a-4b64-afdf-72ada3cea3ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:c1:87:09:bd:35:d6:d0:60:e2:7a:18:d2:92: b1:63:82:20:7e:c8:98:dc:b4:aa:c4:91:c3:ee:ac: 63:70:01:d0:ce:89:8a:6c:7b:6f:74:2d:0e:70:2d: 5f:d5:34:fa:0b:a1:cd:fc:03:f5:65:cf:0f:a1:3f: 27:58:64:ba:09:ad:64:5a:05:04:74:43:ed:7d:27: b8:62:6c:c2:35:65:b9:53:5f:e8:55:41:19:09:82: 9a:82:5c:48:2e:d3:8e:5c:b0:16:f4:5d:36:d8:85: c8:21:0f:02:70:53:63:ee:a3:a2:9e:91:bd:5b:9e: 1c:5d:6a:85:31:8e:c7:d5:2d:56:ad:cb:05:18:90: 47:3a:7f:f1:d4:1a:8d:d2:54:88:39:6f:b2:23:c6: 1e:37:cc:02:cd:4a:2f:42:b0:fc:78:c9:8b:69:22: 4f:6b:4c:2f:c2:77:0a:b0:cf:61:16:bf:96:8b:45: 81:30:52:0f:fe:d2:5e:5e:64:6b:22:04:d9:1a:aa: 34:f8:bc:79:7a:f0:57:c8:2e:e1:2f:e8:47:e3:7e: b9:de:d2:42:86:14:52:d8:36:eb:cc:cb:be:a8:1d: 34:42:1f:2b:fb:db:a3:56:91:0c:36:8f:2e:13:ee: 7f:70:5a:73:e5:a0:cd:a7:1e:05:2f:e8:45:18:75: f8:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:AD:28:E9:EF:B0:4F:52:B4:D0:CF:B1:A2:82:5A:87:D6:08:2C:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/35a6baf9-6504-389c-8368-f75a35c0fbe6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.214.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:4f:74:5b:2c:53:c2:47:34:a1:df:a4:cd:c5:7d:39:8b:ea: 51:da:0f:37:35:85:c6:05:fd:37:74:9a:1a:93:46:1d:c1:02: 0a:98:8d:7f:7f:62:c4:2a:2e:80:ab:e7:90:97:e3:4b:cd:09: 68:a4:9a:5d:ed:ef:16:bf:1f:5b:61:09:55:11:16:ad:82:5b: 83:e8:f9:23:66:4b:e1:5d:c4:33:cb:f6:42:3f:56:ba:ef:35: 3f:ad:29:28:01:a4:69:aa:56:91:a0:fe:fd:bc:b7:dc:6a:e1: 4f:83:98:e4:20:28:bd:a1:ae:16:03:14:76:ad:da:cc:dc:34: 70:2f:9f:7b:be:bc:ef:08:d9:d6:cc:65:69:ba:16:b7:b1:ae: 39:22:77:5e:62:23:af:f3:e8:fc:9e:3b:51:e1:ed:79:ca:f0: 5a:a3:4b:c0:5a:16:1a:4e:86:f2:36:bc:4d:90:5b:7d:21:4b: 86:7e:fc:39:fa:f3:3b:6d:70:ee:0d:18:f7:62:18:6b:68:05: 8e:a3:76:02:5d:ab:53:41:be:4f:db:0b:ba:03:7b:88:c2:c2: b1:85:f2:c6:c3:2c:0d:85:61:f9:1f:48:54:2c:9d:7e:39:79: 20:75:c6:05:dd:b7:b9:9e:99:a9:58:65:e1:1c:6d:4e:4b:b2: 30:22:d5:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjBUN4gEhhpIH88YoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDIwMzAyMDAzOVoXDTI1MDUwNDAxMDAzOVowLzEtMCsGA1UEAxMk MzYzMGY5OWEtZDUxYS00YjY0LWFmZGYtNzJhZGEzY2VhM2NlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsGHCb011tBg4noY0pKxY4IgfsiY3LSqxJHD 7qxjcAHQzomKbHtvdC0OcC1f1TT6C6HN/AP1Zc8PoT8nWGS6Ca1kWgUEdEPtfSe4 YmzCNWW5U1/oVUEZCYKaglxILtOOXLAW9F022IXIIQ8CcFNj7qOinpG9W54cXWqF MY7H1S1WrcsFGJBHOn/x1BqN0lSIOW+yI8YeN8wCzUovQrD8eMmLaSJPa0wvwncK sM9hFr+Wi0WBMFIP/tJeXmRrIgTZGqo0+Lx5evBXyC7hL+hH43653tJChhRS2Dbr zMu+qB00Qh8r+9ujVpEMNo8uE+5/cFpz5aDNpx4FL+hFGHX4ewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCWtKOnvsE9StNDPsaKCWofWCCz5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMzVhNmJhZjktNjUwNC0z ODljLTgzNjgtZjc1YTM1YzBmYmU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrtbwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABdPdFssU8JHNKHfpM3FfTmL6lHaDzc1hcYF/Td0mhqTRh3BAgqYjX9/ YsQqLoCr55CX40vNCWikml3t7xa/H1thCVURFq2CW4Po+SNmS+FdxDPL9kI/Vrrv NT+tKSgBpGmqVpGg/v28t9xq4U+DmOQgKL2hrhYDFHat2szcNHAvn3u+vO8I2dbM ZWm6Frexrjkid15iI6/z6PyeO1Hh7XnK8FqjS8BaFhpOhvI2vE2QW30hS4Z+/Dn6 8zttcO4NGPdiGGtoBY6jdgJdq1NBvk/bC7oDe4jCwrGF8sbDLA2FYfkfSFQsnX45 eSB1xgXdt7memalYZeEcbU5LsjAi1Vg= -----END CERTIFICATE-----Generated at Sat Apr 5 18:37:25 2025 by rpki-client