$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4c8339e7-51a3-3e7a-b731-7f602bcb1a0c.roa File: 4c8339e7-51a3-3e7a-b731-7f602bcb1a0c.roa (raw, json) Hash identifier: q0gudTHtc2vga21BPdy3sPUdGXV7yW2jak+iuNTDEgk= Subject key identifier: BB:D4:F7:F2:65:F5:0A:19:7D:A8:2C:77:C4:AC:3E:4F:19:C1:4C:FA Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285848EF6176CA0E531E1E1AF74280 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4c8339e7-51a3-3e7a-b731-7f602bcb1a0c.roa Signing time: Wed 19 Feb 2025 14:00:52 +0000 ROA not before: Wed 19 Feb 2025 14:00:52 +0000 ROA not after: Tue 20 May 2025 13:00:52 +0000 asID: 22394 IP address blocks: 174.41.186.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ef:61:76:ca:0e:53:1e:1e:1a:f7:42:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Feb 19 14:00:52 2025 GMT Not After : May 20 13:00:52 2025 GMT Subject: CN=25dee64b-d8a1-4fd2-ac97-450eb4a1f0ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f6:b7:62:58:a7:0b:cd:55:b0:9b:11:1e:e6: 9c:0c:a7:ea:c0:97:6d:d5:29:ae:57:14:80:07:e7: 27:ad:ff:73:ed:b4:e3:74:3c:64:be:6d:48:8f:72: 7e:ae:d6:4f:6b:66:26:c5:a0:c7:b4:38:e2:7a:b7: 47:14:28:e1:ff:aa:3f:20:87:c2:d9:31:ef:6f:d5: 2d:17:2d:0c:ed:a5:35:1a:dc:22:41:97:43:36:96: f0:a9:3e:01:b8:a1:dd:d9:cc:73:69:9b:d6:d1:e0: 38:c3:f7:d0:bd:8d:30:27:f0:c4:7a:24:d5:31:f3: 17:f7:91:96:9a:17:f2:76:3b:4b:0e:7c:cf:e3:57: 25:a3:3b:10:69:d8:2e:dd:44:63:7a:ad:17:6b:0f: 6e:3d:85:f1:f9:97:a5:0a:28:88:a2:ac:4b:a2:7f: 1d:f6:1c:ff:f8:3d:3b:70:e6:be:18:9e:70:20:c5: 58:13:02:ef:9d:c9:c6:44:42:f9:0d:f7:53:b9:b0: 4f:35:03:a0:89:49:94:ae:f2:19:6d:94:dd:b3:5b: 3d:bb:be:87:d7:58:17:d6:fe:79:23:11:f9:33:05: ee:f8:02:1e:52:ff:06:c7:84:de:71:56:b3:2e:bb: 31:6a:f9:1e:1c:09:4b:92:a3:b9:5a:32:ba:b5:4d: 91:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:D4:F7:F2:65:F5:0A:19:7D:A8:2C:77:C4:AC:3E:4F:19:C1:4C:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4c8339e7-51a3-3e7a-b731-7f602bcb1a0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.41.186.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:fe:c4:4d:f0:31:14:82:9a:32:9f:53:15:fc:31:e7:0a:7a: 31:29:74:c4:66:be:7a:b0:e3:e3:56:1e:56:8f:21:04:62:05: fa:f5:cf:25:10:19:73:4f:77:5f:50:a1:1b:15:78:a4:f7:f8: 5b:f7:ea:52:c1:27:8d:e0:c8:b4:98:03:0b:3a:75:95:21:64: 3b:39:55:62:96:da:e4:d0:43:b9:97:68:af:83:d2:59:98:50: f8:a0:58:91:19:cb:9a:d4:a0:4c:92:de:a8:50:04:cb:79:6a: 4d:88:d8:92:d5:9b:47:d5:c7:6f:90:9e:11:66:f0:2b:c8:56: 48:bb:b8:25:3d:ee:31:2f:09:6d:dd:25:c8:f3:1a:3f:45:62: e2:3c:d1:b6:98:e3:f4:fd:b4:f3:b4:03:53:d6:12:6a:c4:2e: 63:37:35:9d:be:02:bb:d9:ef:fe:7b:e7:72:55:32:a7:2d:11: b4:cd:f7:02:3f:a0:5c:b7:df:47:67:07:1b:2f:5f:66:28:9d: b5:27:53:63:15:91:6e:8c:dc:73:47:25:45:ba:e1:b4:ab:ec: 77:3f:60:f7:3a:86:4f:2f:9e:67:79:45:c4:fc:41:b7:50:ab: c0:45:4d:38:ba:20:21:29:be:d8:d8:62:5b:75:d8:dc:79:7d: d0:1d:25:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjvYXbKDlMeHhr3QoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk MjVkZWU2NGItZDhhMS00ZmQyLWFjOTctNDUwZWI0YTFmMGNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPa3YlinC81VsJsRHuacDKfqwJdt1SmuVxSA B+cnrf9z7bTjdDxkvm1Ij3J+rtZPa2YmxaDHtDjierdHFCjh/6o/IIfC2THvb9Ut Fy0M7aU1GtwiQZdDNpbwqT4BuKHd2cxzaZvW0eA4w/fQvY0wJ/DEeiTVMfMX95GW mhfydjtLDnzP41clozsQadgu3URjeq0Xaw9uPYXx+ZelCiiIoqxLon8d9hz/+D07 cOa+GJ5wIMVYEwLvncnGREL5DfdTubBPNQOgiUmUrvIZbZTds1s9u76H11gX1v55 IxH5MwXu+AIeUv8Gx4TecVazLrsxavkeHAlLkqO5WjK6tU2RNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLvU9/Jl9QoZfagsd8SsPk8ZwUz6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNGM4MzM5ZTctNTFhMy0z ZTdhLWI3MzEtN2Y2MDJiY2IxYTBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrim6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB/+xE3wMRSCmjKfUxX8MecKejEpdMRmvnqw4+NWHlaPIQRiBfr1zyUQ GXNPd19QoRsVeKT3+Fv36lLBJ43gyLSYAws6dZUhZDs5VWKW2uTQQ7mXaK+D0lmY UPigWJEZy5rUoEyS3qhQBMt5ak2I2JLVm0fVx2+QnhFm8CvIVki7uCU97jEvCW3d JcjzGj9FYuI80baY4/T9tPO0A1PWEmrELmM3NZ2+ArvZ7/5753JVMqctEbTN9wI/ oFy330dnBxsvX2YonbUnU2MVkW6M3HNHJUW64bSr7Hc/YPc6hk8vnmd5RcT8QbdQ q8BFTTi6ICEpvtjYYlt12Nx5fdAdJTU= -----END CERTIFICATE-----Generated at Wed Apr 9 11:38:29 2025 by rpki-client