$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3a96e29e-955f-34d6-8d09-9babb5a164f4.roa File: 3a96e29e-955f-34d6-8d09-9babb5a164f4.roa (raw, json) Hash identifier: iw6GDBpsNYqkYhjmWr8GyJpEkJT7JWc4/JZ94b7LI0k= Subject key identifier: A1:3B:0B:6C:CB:48:C1:19:60:4E:93:BB:78:83:7F:50:2B:5F:2A:FB Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285848E86664C3AE1CF16AF6A03F80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3a96e29e-955f-34d6-8d09-9babb5a164f4.roa Signing time: Mon 17 Feb 2025 02:00:38 +0000 ROA not before: Mon 17 Feb 2025 02:00:38 +0000 ROA not after: Sun 18 May 2025 01:00:38 +0000 asID: 6167 IP address blocks: 174.229.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e8:66:64:c3:ae:1c:f1:6a:f6:a0:3f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Feb 17 02:00:38 2025 GMT Not After : May 18 01:00:38 2025 GMT Subject: CN=5d28e895-3b9b-4225-9673-cec4be94735e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:dd:e4:09:c3:8d:1e:f2:93:d0:e5:92:34:d7: f2:a5:70:6e:7b:d6:cf:0d:76:13:1e:a4:21:ab:e8: 03:7a:ab:ce:02:a7:f2:78:84:4a:2f:e5:59:0b:f7: f7:a0:56:4c:8b:99:22:ad:66:cc:83:f3:7e:89:2f: ea:63:1a:ef:41:0d:67:8c:df:a3:91:5f:75:45:af: 0c:cf:6c:3a:d2:75:6c:28:a5:c6:a0:16:93:d2:50: 91:4e:c5:a7:56:43:73:e4:1a:0a:a8:3d:c0:fa:3f: 90:df:17:39:9f:9b:a7:56:26:e1:9e:3c:da:74:52: 1e:79:de:ae:4a:92:a3:18:65:6c:aa:7b:dd:42:5f: ad:2d:e6:36:26:25:fe:a1:a0:3b:dd:c5:f9:2a:77: 7f:7a:44:98:da:6b:8f:82:b8:d3:20:fd:37:06:46: 5d:0b:a7:06:28:af:15:c3:5b:2d:af:20:aa:14:c9: 4a:a1:0b:fe:39:f4:10:86:45:5a:89:41:5e:9e:cc: 16:64:9d:cb:b8:2b:e7:ab:ad:47:05:f7:a9:f5:d8: 38:04:6f:af:b6:c2:0e:87:42:96:04:ae:88:b4:05: 42:25:cc:37:52:27:1e:58:70:8b:3b:36:76:e3:40: 42:16:fd:ab:47:26:3f:8a:66:9f:a6:a1:5d:56:31: 2b:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:3B:0B:6C:CB:48:C1:19:60:4E:93:BB:78:83:7F:50:2B:5F:2A:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3a96e29e-955f-34d6-8d09-9babb5a164f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.229.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:94:c0:ac:f5:52:52:db:47:5d:34:63:8f:ee:16:22:6a:93: 44:cf:50:70:38:81:07:b8:89:9e:ac:86:51:34:46:da:32:c7: af:34:a0:de:82:da:7c:a0:14:49:b9:70:0b:65:28:50:ff:f2: 5b:0b:b4:cd:5a:44:74:26:52:27:24:76:d3:7f:c1:91:7b:c0: 6b:9b:17:28:5e:4c:de:f7:bf:cc:c7:66:8c:2b:fd:17:9e:eb: ae:0d:77:0e:a3:39:7a:f2:74:47:88:78:10:c5:cf:bf:9b:37: ac:08:f2:e2:65:aa:e1:95:91:be:47:b7:a1:bd:d8:68:a3:87: f9:ff:50:e3:e5:b9:df:06:92:0c:98:07:33:2a:62:20:37:02: 6a:cb:ca:a3:1f:32:f8:6b:2a:72:78:9e:2f:66:5d:51:cb:4b: 2e:6c:1e:7b:af:07:43:0e:09:c1:c7:23:1b:3f:db:bf:45:eb: b8:46:b9:50:43:f8:f5:e9:86:59:46:1b:df:47:83:7a:17:41: 73:70:fd:83:ee:33:63:1f:21:56:e9:c4:a4:a8:70:41:f8:08: 49:62:63:13:4f:01:ac:0f:af:77:4c:a0:33:15:39:0b:0a:e4: b5:84:08:4c:68:b4:5f:df:c9:83:06:6d:2a:57:aa:9d:11:51: 0a:68:d5:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjoZmTDrhzxavagP4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDIxNzAyMDAzOFoXDTI1MDUxODAxMDAzOFowLzEtMCsGA1UEAxMk NWQyOGU4OTUtM2I5Yi00MjI1LTk2NzMtY2VjNGJlOTQ3MzVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzd3kCcONHvKT0OWSNNfypXBue9bPDXYTHqQh q+gDeqvOAqfyeIRKL+VZC/f3oFZMi5kirWbMg/N+iS/qYxrvQQ1njN+jkV91Ra8M z2w60nVsKKXGoBaT0lCRTsWnVkNz5BoKqD3A+j+Q3xc5n5unVibhnjzadFIeed6u SpKjGGVsqnvdQl+tLeY2JiX+oaA73cX5Knd/ekSY2muPgrjTIP03BkZdC6cGKK8V w1stryCqFMlKoQv+OfQQhkVaiUFenswWZJ3LuCvnq61HBfep9dg4BG+vtsIOh0KW BK6ItAVCJcw3UiceWHCLOzZ240BCFv2rRyY/imafpqFdVjErLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKE7C2zLSMEZYE6Tu3iDf1ArXyr7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvM2E5NmUyOWUtOTU1Zi0z NGQ2LThkMDktOWJhYmI1YTE2NGY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEruWgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKuUwKz1UlLbR100Y4/uFiJqk0TPUHA4gQe4iZ6shlE0Rtoyx680oN6C 2nygFEm5cAtlKFD/8lsLtM1aRHQmUickdtN/wZF7wGubFyheTN73v8zHZowr/Ree 664Ndw6jOXrydEeIeBDFz7+bN6wI8uJlquGVkb5Ht6G92Gijh/n/UOPlud8GkgyY BzMqYiA3AmrLyqMfMvhrKnJ4ni9mXVHLSy5sHnuvB0MOCcHHIxs/279F67hGuVBD +PXphllGG99Hg3oXQXNw/YPuM2MfIVbpxKSocEH4CEliYxNPAawPr3dMoDMVOQsK 5LWECExotF/fyYMGbSpXqp0RUQpo1UA= -----END CERTIFICATE-----Generated at Sun Apr 6 07:27:23 2025 by rpki-client