$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4d39a072-99d1-3ff3-b056-d934cf19681d.roa File: 4d39a072-99d1-3ff3-b056-d934cf19681d.roa (raw, json) Hash identifier: MrlzSNk87u3BheMYMmBYBpmF/Bjhu4eEPEx3K7MQw6o= Subject key identifier: BA:3A:77:D9:3C:09:9D:F4:02:C2:D9:03:FC:50:91:F8:12:5E:BD:1D Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285848E8666A58A95CCF0F9A785E80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4d39a072-99d1-3ff3-b056-d934cf19681d.roa Signing time: Mon 17 Feb 2025 02:00:38 +0000 ROA not before: Mon 17 Feb 2025 02:00:38 +0000 ROA not after: Sun 18 May 2025 01:00:38 +0000 asID: 6167 IP address blocks: 174.254.24.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e8:66:6a:58:a9:5c:cf:0f:9a:78:5e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Feb 17 02:00:38 2025 GMT Not After : May 18 01:00:38 2025 GMT Subject: CN=ac91f10c-c957-42eb-a048-b3e5fe78782e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:05:23:de:d5:f4:29:f1:7b:ac:df:f7:89:a2: b8:4f:5c:fe:99:34:55:1b:d3:e1:3b:0b:dc:d5:45: 66:71:4f:cd:0b:17:e8:10:09:4b:32:ec:cb:f1:45: 99:d2:cf:96:99:de:a6:af:95:a7:eb:4f:5f:64:87: 9c:2d:c0:eb:2f:7c:3c:bd:e3:51:df:26:a0:32:ee: 7c:85:2b:d9:2f:d2:66:92:6f:3c:70:54:f2:90:49: 53:a8:c3:87:a0:8a:22:54:8d:da:37:e9:18:b7:ed: 74:09:4d:25:fa:3f:b2:dd:7f:9b:ea:9c:27:05:95: 35:0d:5a:fc:46:8b:b2:95:1b:54:8d:26:68:02:f4: e4:bc:69:97:26:09:cb:a6:db:09:06:c8:78:a4:2a: 13:52:90:36:a8:d0:2c:b3:f1:61:71:23:25:06:da: 87:88:6b:4c:b4:64:63:ba:e3:13:fe:b2:fb:a6:13: 37:15:a7:a0:5d:a0:a3:bf:9a:73:25:ba:85:c7:c3: 85:e2:aa:98:f6:a8:e3:e7:80:ec:e1:c5:00:f7:68: 2d:4f:8e:16:79:62:65:b3:ac:af:d0:48:2d:e3:2c: a0:c1:70:c2:3a:b4:fa:69:90:77:ee:5b:f8:fb:33: dd:5c:21:c4:5c:de:c5:37:1b:b7:60:65:d5:8a:cf: f2:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:3A:77:D9:3C:09:9D:F4:02:C2:D9:03:FC:50:91:F8:12:5E:BD:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4d39a072-99d1-3ff3-b056-d934cf19681d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.254.24.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:a0:3b:ce:51:e0:19:8f:db:1c:c9:b2:bc:d7:21:3f:76:63: e3:fc:ad:16:40:86:25:dc:06:66:f1:bc:c1:13:79:0d:e6:ba: 99:97:2a:d8:77:22:81:b2:d7:09:76:3d:db:0d:eb:7a:48:1b: ae:1f:45:47:50:8d:b3:14:4c:9d:66:a2:54:ce:c5:4e:f8:a9: 97:ce:1d:ce:35:44:a1:6e:54:6a:2d:86:77:7e:46:59:b3:35: da:63:73:00:f9:47:99:aa:c9:2a:7b:6e:fc:b9:bc:9f:66:d6: 0e:37:73:95:6d:2b:1c:1a:54:46:ea:f3:45:42:5e:80:ae:07: 08:d1:e3:6f:b8:e5:a0:91:51:dc:4f:c7:c2:a1:26:64:03:97: a4:db:51:69:01:1d:0a:b3:c2:58:4b:c6:0a:82:7e:17:74:fa: 5f:ae:7a:be:07:71:f6:0e:e4:5d:21:c1:ac:29:6d:d1:74:8a: 23:40:90:10:aa:51:36:bc:f9:37:6c:83:bc:34:26:9c:8e:2a: 7c:44:99:62:f4:80:1c:07:6e:2c:b2:04:06:e8:20:55:4a:d0: f9:a8:f9:42:b1:3d:42:56:22:41:86:9a:c4:9b:83:6d:db:a1: 92:c3:31:d8:2c:6d:95:e4:7a:65:ff:bd:15:71:e6:6d:93:9f: 7d:84:4f:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjoZmpYqVzPD5p4XoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDIxNzAyMDAzOFoXDTI1MDUxODAxMDAzOFowLzEtMCsGA1UEAxMk YWM5MWYxMGMtYzk1Ny00MmViLWEwNDgtYjNlNWZlNzg3ODJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiwUj3tX0KfF7rN/3iaK4T1z+mTRVG9PhOwvc 1UVmcU/NCxfoEAlLMuzL8UWZ0s+Wmd6mr5Wn609fZIecLcDrL3w8veNR3yagMu58 hSvZL9Jmkm88cFTykElTqMOHoIoiVI3aN+kYt+10CU0l+j+y3X+b6pwnBZU1DVr8 RouylRtUjSZoAvTkvGmXJgnLptsJBsh4pCoTUpA2qNAss/FhcSMlBtqHiGtMtGRj uuMT/rL7phM3FaegXaCjv5pzJbqFx8OF4qqY9qjj54Ds4cUA92gtT44WeWJls6yv 0Egt4yygwXDCOrT6aZB37lv4+zPdXCHEXN7FNxu3YGXVis/yFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLo6d9k8CZ30AsLZA/xQkfgSXr0dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNGQzOWEwNzItOTlkMS0z ZmYzLWIwNTYtZDkzNGNmMTk2ODFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrv4YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB2gO85R4BmP2xzJsrzXIT92Y+P8rRZAhiXcBmbxvMETeQ3mupmXKth3 IoGy1wl2PdsN63pIG64fRUdQjbMUTJ1molTOxU74qZfOHc41RKFuVGothnd+Rlmz NdpjcwD5R5mqySp7bvy5vJ9m1g43c5VtKxwaVEbq80VCXoCuBwjR42+45aCRUdxP x8KhJmQDl6TbUWkBHQqzwlhLxgqCfhd0+l+uer4HcfYO5F0hwawpbdF0iiNAkBCq UTa8+Tdsg7w0JpyOKnxEmWL0gBwHbiyyBAboIFVK0Pmo+UKxPUJWIkGGmsSbg23b oZLDMdgsbZXkemX/vRVx5m2Tn32ET80= -----END CERTIFICATE-----Generated at Thu Apr 10 00:31:37 2025 by rpki-client