$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4baeef38-17ab-3ca7-86b3-dd5ece8b3c60.roa File: 4baeef38-17ab-3ca7-86b3-dd5ece8b3c60.roa (raw, json) Hash identifier: g/zcT91UMXRkdMpAiYJ4Y07EZNx7b3NRUag0ULScY58= Subject key identifier: 77:D7:19:07:DA:04:5D:A3:9D:4E:07:70:E6:7C:9F:E3:C8:58:80:5C Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285848C150EDD21FAA68B3C9ECF5C0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4baeef38-17ab-3ca7-86b3-dd5ece8b3c60.roa Signing time: Mon 03 Feb 2025 02:00:39 +0000 ROA not before: Mon 03 Feb 2025 02:00:39 +0000 ROA not after: Sun 04 May 2025 01:00:39 +0000 asID: 6167 IP address blocks: 174.225.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c1:50:ed:d2:1f:aa:68:b3:c9:ec:f5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Feb 3 02:00:39 2025 GMT Not After : May 4 01:00:39 2025 GMT Subject: CN=53362c07-abfe-41e2-b9cb-d03f0487ca4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:df:91:ac:de:08:a4:7c:92:62:38:5b:ee:db: a4:0d:76:73:b1:89:ed:58:a6:05:0d:fc:c9:7a:34: f9:ac:44:58:4a:a9:ad:83:de:e7:bc:12:8e:cd:c0: c7:2e:ca:5c:b1:e0:43:16:e0:73:83:bf:20:5e:3e: 73:03:60:3f:1c:7c:3f:07:c7:df:76:21:2e:9c:13: d3:05:70:b4:c2:f1:f2:83:89:28:14:b3:7d:fe:2a: 57:1a:9c:e3:f4:57:c8:81:02:26:fa:de:34:ba:1f: de:b7:9d:ac:d0:14:a0:14:10:7d:ce:92:be:51:49: 1f:c7:05:ec:c1:2b:d4:26:94:1a:17:ec:41:8c:e6: d9:70:db:c2:37:80:63:b8:52:e5:54:74:3b:14:89: b6:cb:eb:4e:8d:c3:f2:cd:42:d5:9b:e7:7c:b2:d4: 80:0a:ca:99:33:b2:04:4e:09:73:81:87:56:e0:95: 25:69:7f:91:fc:5d:63:67:8f:24:c2:f1:8a:f4:0d: 8e:d4:64:78:e3:22:fe:92:00:6b:47:7e:e6:83:52: 92:10:8d:ef:50:5e:41:db:5c:a4:a3:33:30:a3:fe: 88:d3:30:49:84:a7:ef:50:76:1a:9f:0b:40:d5:36: 44:8c:2e:ad:a0:2a:38:d2:bc:ab:dd:4b:30:94:9e: 0c:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:D7:19:07:DA:04:5D:A3:9D:4E:07:70:E6:7C:9F:E3:C8:58:80:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4baeef38-17ab-3ca7-86b3-dd5ece8b3c60.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.225.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:a1:af:60:f9:33:49:fe:06:77:56:b7:28:b4:04:53:7a:78: 8e:a2:cd:9a:d6:41:3d:78:6a:6a:5d:ff:9b:05:b9:a1:0f:72: ea:39:24:a1:2a:25:8e:83:db:2d:0f:e0:6b:97:8f:85:7f:71: f4:b2:d8:37:9b:16:f9:af:ab:ab:80:6f:5e:d8:f4:8c:96:c3: b2:f3:54:4a:f6:fd:2b:30:65:e0:1c:7d:5e:bc:f8:30:8a:78: 72:b6:37:e0:a3:ed:7c:de:66:6c:ab:b9:05:97:4b:57:2a:5d: 03:0c:62:22:a1:22:1d:8a:81:7e:42:ab:76:23:63:25:64:7f: a0:90:b1:cf:ad:8e:23:2d:71:2e:ab:eb:29:32:b5:6a:dd:8e: a6:ac:06:d5:19:2b:5a:58:be:bf:2a:c0:5e:54:ca:eb:7c:6e: 7f:34:26:54:17:22:aa:b2:68:5d:06:c2:03:e9:1d:1e:d2:bb: 0b:98:f9:a0:e7:1a:3b:9b:05:fa:b8:40:6f:7a:87:7d:fa:40: 0c:40:e8:92:26:91:3a:09:a3:bd:f2:2b:f2:ff:1c:b3:44:f1: 72:e5:a4:b2:c0:56:a3:76:4a:86:00:c1:47:7d:6f:60:d3:a6: 74:d1:97:10:3e:53:ff:db:ad:26:fd:d6:b7:26:ab:b7:9d:fc: 27:ef:3e:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjBUO3SH6pos8ns9cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDIwMzAyMDAzOVoXDTI1MDUwNDAxMDAzOVowLzEtMCsGA1UEAxMk NTMzNjJjMDctYWJmZS00MWUyLWI5Y2ItZDAzZjA0ODdjYTRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9+RrN4IpHySYjhb7tukDXZzsYntWKYFDfzJ ejT5rERYSqmtg97nvBKOzcDHLspcseBDFuBzg78gXj5zA2A/HHw/B8ffdiEunBPT BXC0wvHyg4koFLN9/ipXGpzj9FfIgQIm+t40uh/et52s0BSgFBB9zpK+UUkfxwXs wSvUJpQaF+xBjObZcNvCN4BjuFLlVHQ7FIm2y+tOjcPyzULVm+d8stSACsqZM7IE TglzgYdW4JUlaX+R/F1jZ48kwvGK9A2O1GR44yL+kgBrR37mg1KSEI3vUF5B21yk ozMwo/6I0zBJhKfvUHYanwtA1TZEjC6toCo40ryr3UswlJ4M4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHfXGQfaBF2jnU4HcOZ8n+PIWIBcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNGJhZWVmMzgtMTdhYi0z Y2E3LTg2YjMtZGQ1ZWNlOGIzYzYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEruEAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFehr2D5M0n+BndWtyi0BFN6eI6izZrWQT14ampd/5sFuaEPcuo5JKEq JY6D2y0P4GuXj4V/cfSy2DebFvmvq6uAb17Y9IyWw7LzVEr2/SswZeAcfV68+DCK eHK2N+Cj7XzeZmyruQWXS1cqXQMMYiKhIh2KgX5Cq3YjYyVkf6CQsc+tjiMtcS6r 6ykytWrdjqasBtUZK1pYvr8qwF5Uyut8bn80JlQXIqqyaF0GwgPpHR7SuwuY+aDn GjubBfq4QG96h336QAxA6JImkToJo73yK/L/HLNE8XLlpLLAVqN2SoYAwUd9b2DT pnTRlxA+U//brSb91rcmq7ed/CfvPsY= -----END CERTIFICATE-----Generated at Sat Apr 5 23:18:50 2025 by rpki-client