$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/500978f3-c4cc-3f8f-b956-839c562a2430.roa File: 500978f3-c4cc-3f8f-b956-839c562a2430.roa (raw, json) Hash identifier: lqzWpc9bDfxjSNwv53Qx8L1Sqg/Ex7n6D6dY7BmNuJg= Subject key identifier: D8:08:8C:99:F8:3B:70:9E:62:A2:34:9C:CF:44:2D:BB:D6:82:4C:58 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285848E86677026C8A0F9839446000 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/500978f3-c4cc-3f8f-b956-839c562a2430.roa Signing time: Mon 17 Feb 2025 02:00:38 +0000 ROA not before: Mon 17 Feb 2025 02:00:38 +0000 ROA not after: Sun 18 May 2025 01:00:38 +0000 asID: 6167 IP address blocks: 174.244.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e8:66:77:02:6c:8a:0f:98:39:44:60:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Feb 17 02:00:38 2025 GMT Not After : May 18 01:00:38 2025 GMT Subject: CN=0ebc9246-1815-41d5-a9ae-27785602ee64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:42:45:fc:ca:c7:fb:01:90:54:24:47:54:02: c9:6b:0e:84:31:9d:bf:f5:a3:c3:04:0e:b9:99:3d: b3:04:df:8c:3b:d1:64:fd:cd:b6:5c:06:1f:fd:f2: 8d:c5:9e:70:55:73:6f:8b:9f:14:54:a4:0c:81:7a: 07:70:8d:e7:41:ca:8b:21:75:ad:b6:fc:07:e7:16: b1:1b:5b:80:4f:4d:8b:f4:71:21:47:5a:07:40:70: 04:da:42:f9:7a:f1:14:a1:19:0f:2f:44:06:b1:96: 32:51:e1:8c:c0:e4:13:c6:b5:57:df:3f:7b:b6:a9: f6:d9:f0:d9:bb:14:0f:60:aa:07:45:e7:10:60:6c: a6:c2:24:29:7f:ef:e5:bb:2a:43:47:33:d6:57:5a: 93:69:88:98:e7:24:21:6e:c8:1c:b6:0d:5a:7a:e3: b8:f6:ae:b0:91:a3:8b:d2:ea:fb:a3:4a:ef:63:88: f6:8f:7b:c3:6c:dd:da:fd:a0:53:94:04:0f:69:b1: 6f:75:54:9f:5d:d8:48:e3:2e:19:b4:b7:de:e0:5a: 5e:6f:ee:fa:06:54:e9:21:e9:e4:f8:48:99:d0:2d: 05:85:7f:35:90:c4:93:d3:ca:89:d8:38:10:c7:89: cc:4f:0e:ec:69:19:18:d1:32:1b:bc:85:b6:6f:8c: f3:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:08:8C:99:F8:3B:70:9E:62:A2:34:9C:CF:44:2D:BB:D6:82:4C:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/500978f3-c4cc-3f8f-b956-839c562a2430.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.244.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:18:11:10:a4:aa:e6:94:22:20:ff:09:49:09:98:99:9c:64: f1:1b:f6:2c:7f:95:37:4a:59:13:99:72:87:61:ae:41:0b:97: d4:d0:02:e2:bc:a3:9c:13:68:be:a4:c2:9c:27:be:38:ff:47: ee:50:4d:1f:44:40:59:88:16:48:cb:23:36:ea:37:fc:7a:78: 96:df:2a:e8:83:74:99:17:d8:a0:37:e9:03:2e:3e:d0:d9:05: 4f:28:2a:fc:a7:e2:64:26:ce:52:34:c8:89:b0:a9:b8:2c:3d: 7b:1f:d4:5d:78:c2:2c:6e:40:76:ff:ef:fb:e4:60:fc:37:e0: 50:ce:54:31:03:4d:ee:63:9d:24:4c:8e:2d:27:f0:fb:c5:4e: 47:fa:9e:88:0a:77:7d:3f:32:5c:18:a7:ee:7c:cf:c0:0f:b2: 1f:30:04:de:13:7f:62:ef:e4:9d:f6:2c:0d:a2:3c:55:ef:21: 60:59:14:52:1c:eb:13:70:96:96:4b:44:3f:ef:24:0d:69:09: a6:ef:f1:26:08:76:9f:52:4c:53:2f:dc:db:a8:78:33:41:3f: 59:4d:17:3a:16:3b:5e:9e:7f:79:a5:20:b7:b4:c5:e1:66:e3: 9a:0f:6b:61:de:ff:fb:02:ad:f4:dd:e3:b9:5e:ed:e8:d4:cb: 5f:e7:fc:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjoZncCbIoPmDlEYAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDIxNzAyMDAzOFoXDTI1MDUxODAxMDAzOFowLzEtMCsGA1UEAxMk MGViYzkyNDYtMTgxNS00MWQ1LWE5YWUtMjc3ODU2MDJlZTY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkJF/MrH+wGQVCRHVALJaw6EMZ2/9aPDBA65 mT2zBN+MO9Fk/c22XAYf/fKNxZ5wVXNvi58UVKQMgXoHcI3nQcqLIXWttvwH5xax G1uAT02L9HEhR1oHQHAE2kL5evEUoRkPL0QGsZYyUeGMwOQTxrVX3z97tqn22fDZ uxQPYKoHRecQYGymwiQpf+/luypDRzPWV1qTaYiY5yQhbsgctg1aeuO49q6wkaOL 0ur7o0rvY4j2j3vDbN3a/aBTlAQPabFvdVSfXdhI4y4ZtLfe4Fpeb+76BlTpIenk +EiZ0C0FhX81kMST08qJ2DgQx4nMTw7saRkY0TIbvIW2b4zz8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNgIjJn4O3CeYqI0nM9ELbvWgkxYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNTAwOTc4ZjMtYzRjYy0z ZjhmLWI5NTYtODM5YzU2MmEyNDMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErvRAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC4YERCkquaUIiD/CUkJmJmcZPEb9ix/lTdKWROZcodhrkELl9TQAuK8 o5wTaL6kwpwnvjj/R+5QTR9EQFmIFkjLIzbqN/x6eJbfKuiDdJkX2KA36QMuPtDZ BU8oKvyn4mQmzlI0yImwqbgsPXsf1F14wixuQHb/7/vkYPw34FDOVDEDTe5jnSRM ji0n8PvFTkf6nogKd30/MlwYp+58z8APsh8wBN4Tf2Lv5J32LA2iPFXvIWBZFFIc 6xNwlpZLRD/vJA1pCabv8SYIdp9STFMv3NuoeDNBP1lNFzoWO16ef3mlILe0xeFm 45oPa2He//sCrfTd47le7ejUy1/n/DI= -----END CERTIFICATE-----Generated at Sun Apr 6 06:07:43 2025 by rpki-client