$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4348e425-e681-3817-bd5e-06cc8d151691.roa File: 4348e425-e681-3817-bd5e-06cc8d151691.roa (raw, json) Hash identifier: tsmk6WoPBmoRL51k/Tf2JPDYxgmJOb8TQ8d9SHTxZc0= Subject key identifier: 36:05:61:8D:72:81:AE:F8:CA:79:0F:94:AA:69:57:83:62:DF:27:7B Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285848C150E8B4F32E1A8D74C2D3C0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4348e425-e681-3817-bd5e-06cc8d151691.roa Signing time: Mon 03 Feb 2025 02:00:39 +0000 ROA not before: Mon 03 Feb 2025 02:00:39 +0000 ROA not after: Sun 04 May 2025 01:00:39 +0000 asID: 6167 IP address blocks: 174.196.104.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c1:50:e8:b4:f3:2e:1a:8d:74:c2:d3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Feb 3 02:00:39 2025 GMT Not After : May 4 01:00:39 2025 GMT Subject: CN=8ac620d6-a3a9-47ac-9c5a-7bfd3c6015df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:ea:f8:2b:da:5e:84:75:e8:c6:96:84:3e:94: 60:6f:f3:9a:1f:e7:43:ed:e0:5d:cb:fa:04:17:6d: 37:91:6e:b9:e4:76:db:cc:dd:85:4b:c8:3c:cb:ab: 4a:06:f5:2c:84:d6:41:18:d6:f8:ed:22:ee:42:05: d0:33:e3:f3:f1:e4:be:80:38:d7:09:6a:0e:9a:81: 1e:47:0b:ef:f0:2f:fa:69:25:ae:90:6a:05:f2:46: 18:fe:13:7b:25:3c:9f:b9:de:a4:1d:e9:a4:1d:8b: 6f:a8:ae:ef:01:f5:a1:9b:29:1e:44:2e:01:24:89: 96:1b:be:c5:3a:64:b5:54:3a:6f:3a:a9:6b:0a:6e: 57:e6:7a:eb:33:62:d3:4e:ce:18:9e:bd:f3:31:bf: b7:27:2c:cd:5f:97:8d:37:af:21:cb:50:25:31:d8: 26:71:42:cd:d3:7a:c2:f6:c4:d4:25:2b:bb:ba:d8: e9:87:b3:1a:1b:13:02:19:f6:01:33:84:ed:46:c8: 59:e3:7e:06:59:46:a8:02:32:f7:79:2c:6c:85:9c: 10:b5:b2:6e:57:1e:7e:1d:62:fd:12:28:34:ce:9c: 9b:31:d5:06:7e:10:59:25:0a:3b:0a:b1:5a:4f:fe: 9d:f2:4c:21:30:27:28:e7:ec:37:16:0d:0b:21:4e: 4a:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:05:61:8D:72:81:AE:F8:CA:79:0F:94:AA:69:57:83:62:DF:27:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4348e425-e681-3817-bd5e-06cc8d151691.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.196.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:da:de:a7:91:68:32:1d:e7:f3:cb:a9:ea:0f:fa:fe:34:d0: a2:76:7b:ed:17:aa:25:99:45:18:89:23:47:e4:dc:fa:4c:2e: 2d:97:1d:91:07:80:a1:7a:48:16:95:a2:a7:6f:7d:25:10:95: fa:d3:e9:1f:70:00:54:37:4e:13:51:83:34:11:49:d9:fd:8f: d7:59:b6:7c:b1:23:d8:8d:08:d7:62:8f:64:b8:de:0d:e7:0f: 18:a7:04:6f:1a:bc:f2:7f:a4:7c:dd:dd:c7:f1:fb:ad:9e:4f: a9:99:cf:f2:97:b9:ab:4f:8f:25:04:1c:0d:97:4b:37:58:c3: 0c:48:ac:9d:6f:5d:2d:f1:ae:ed:cd:54:b5:94:ff:93:b1:30: ba:6a:98:be:b7:99:07:98:cf:8b:7d:a7:ee:90:7a:a1:dd:a9: 2f:9b:27:92:52:6a:45:16:5f:9b:83:53:54:57:cb:30:12:2a: d3:8c:71:34:35:00:6c:53:30:0c:5b:5d:7a:d8:c4:72:01:0e: e9:49:0b:a9:a7:be:ea:c4:f1:71:ad:7e:62:90:f8:6f:ba:03: cc:ef:e7:ff:b6:6e:7d:5a:72:d8:18:3b:63:19:56:75:7c:42: db:40:ce:7e:4b:dc:e8:c9:1e:2f:dc:bb:96:b4:68:e5:93:9c: ef:45:48:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjBUOi08y4ajXTC08AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDIwMzAyMDAzOVoXDTI1MDUwNDAxMDAzOVowLzEtMCsGA1UEAxMk OGFjNjIwZDYtYTNhOS00N2FjLTljNWEtN2JmZDNjNjAxNWRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAher4K9pehHXoxpaEPpRgb/OaH+dD7eBdy/oE F203kW655HbbzN2FS8g8y6tKBvUshNZBGNb47SLuQgXQM+Pz8eS+gDjXCWoOmoEe Rwvv8C/6aSWukGoF8kYY/hN7JTyfud6kHemkHYtvqK7vAfWhmykeRC4BJImWG77F OmS1VDpvOqlrCm5X5nrrM2LTTs4Ynr3zMb+3JyzNX5eNN68hy1AlMdgmcULN03rC 9sTUJSu7utjph7MaGxMCGfYBM4TtRshZ434GWUaoAjL3eSxshZwQtbJuVx5+HWL9 Eig0zpybMdUGfhBZJQo7CrFaT/6d8kwhMCco5+w3Fg0LIU5KwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDYFYY1yga74ynkPlKppV4Ni3yd7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNDM0OGU0MjUtZTY4MS0z ODE3LWJkNWUtMDZjYzhkMTUxNjkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrsRoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEPa3qeRaDId5/PLqeoP+v400KJ2e+0XqiWZRRiJI0fk3PpMLi2XHZEH gKF6SBaVoqdvfSUQlfrT6R9wAFQ3ThNRgzQRSdn9j9dZtnyxI9iNCNdij2S43g3n DxinBG8avPJ/pHzd3cfx+62eT6mZz/KXuatPjyUEHA2XSzdYwwxIrJ1vXS3xru3N VLWU/5OxMLpqmL63mQeYz4t9p+6QeqHdqS+bJ5JSakUWX5uDU1RXyzASKtOMcTQ1 AGxTMAxbXXrYxHIBDulJC6mnvurE8XGtfmKQ+G+6A8zv5/+2bn1actgYO2MZVnV8 QttAzn5L3OjJHi/cu5a0aOWTnO9FSOI= -----END CERTIFICATE-----Generated at Thu Apr 10 23:56:37 2025 by rpki-client