$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/52532e5c-6799-3897-9bdf-f9d53ca2c1c4.roa File: 52532e5c-6799-3897-9bdf-f9d53ca2c1c4.roa (raw, json) Hash identifier: pyVEa/118kU2V0j4daxny151HPltXM78+8ejYtL1r3c= Subject key identifier: ED:E2:D0:F8:06:6C:45:2F:02:22:C3:7B:A8:FD:07:41:38:0C:CA:99 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285848C150E4E38A2E2A3D0B4D9980 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/52532e5c-6799-3897-9bdf-f9d53ca2c1c4.roa Signing time: Mon 03 Feb 2025 02:00:39 +0000 ROA not before: Mon 03 Feb 2025 02:00:39 +0000 ROA not after: Sun 04 May 2025 01:00:39 +0000 asID: 6167 IP address blocks: 174.224.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c1:50:e4:e3:8a:2e:2a:3d:0b:4d:99:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Feb 3 02:00:39 2025 GMT Not After : May 4 01:00:39 2025 GMT Subject: CN=6b54ec11-b394-40ce-85cb-da4003884a66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:fa:da:bd:5c:b6:c1:b4:0c:de:ca:d4:b5:4e: fc:ba:97:e6:4d:1f:3a:04:fc:10:55:3c:d8:ad:25: 95:86:39:28:35:6e:28:85:89:71:68:0b:97:2e:78: 1e:c2:11:41:86:7d:1d:52:74:20:c1:59:d7:d2:3d: 01:56:35:f8:41:41:99:bd:30:2c:61:27:7e:22:87: 28:8b:2f:16:94:eb:cd:b4:26:7a:6e:89:4a:3d:eb: e7:b3:15:db:64:4d:2e:fd:7c:ab:ce:6f:36:ed:10: 7f:d1:b5:67:eb:76:b8:36:4c:20:b6:b2:8c:9f:35: ca:2f:81:6f:cf:fe:dd:7e:d7:16:f5:2b:29:3c:dc: a7:6e:90:0e:80:fc:6c:65:7a:33:05:06:46:f0:ec: 06:f4:93:64:b0:2f:17:c2:c4:66:2b:e8:87:48:37: 37:7d:fa:ed:91:61:ae:6d:25:20:65:32:7d:22:93: 24:c6:de:0a:70:69:a2:83:c9:99:98:04:1a:d4:0d: e3:7f:3a:cb:70:3b:28:57:2a:68:a4:81:e1:dc:2b: ef:4b:cb:4e:53:a1:f1:4b:c2:9a:c9:e9:5f:e1:54: 4e:6e:51:10:57:5a:eb:e9:a3:80:53:05:56:a6:fc: 0c:73:40:7f:62:62:d8:a2:55:17:8c:13:33:11:45: ec:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:E2:D0:F8:06:6C:45:2F:02:22:C3:7B:A8:FD:07:41:38:0C:CA:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/52532e5c-6799-3897-9bdf-f9d53ca2c1c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.224.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:12:ed:bc:8d:da:6c:df:7e:7a:fa:fb:56:ed:b2:d6:9e:8c: e7:3e:0c:42:b8:b8:a8:2b:1d:4b:a3:71:1b:93:64:f2:c4:89: 4f:29:2f:12:f1:62:d3:dc:1a:86:ad:48:78:a2:54:b7:6e:6a: 00:83:5e:37:90:0a:54:0d:87:02:9d:f3:d6:57:17:66:17:55: 89:fb:1b:de:92:80:16:45:26:db:2f:24:57:1b:dd:b5:5d:2e: 17:23:18:84:9d:a0:85:05:2e:1a:06:8c:87:3d:16:da:dc:8f: 93:97:df:7b:1a:e8:03:f7:e8:36:d3:a2:b7:aa:d5:b6:65:6f: 8d:ed:c8:25:ec:d1:ce:2b:12:21:13:fa:74:21:17:43:80:b4: f3:6d:c6:06:b6:ae:0c:3a:16:24:be:92:c1:ad:18:ad:dd:4d: 86:a6:63:ac:68:a1:0d:9e:d3:c2:5c:8e:16:d4:ba:65:c1:de: fa:d8:e2:1c:e0:a1:ff:43:a9:0e:fc:8f:ab:ff:fe:70:89:d6: 82:25:c7:19:7c:a6:24:1c:7f:94:31:59:a1:b3:78:51:dd:e9: 69:b3:5b:d5:9f:ab:07:19:c0:1f:11:00:46:b8:92:1d:9c:32: c3:44:68:87:55:97:6b:3a:a7:09:72:fc:d8:f6:35:1f:87:a3: 14:0b:31:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjBUOTjii4qPQtNmYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDIwMzAyMDAzOVoXDTI1MDUwNDAxMDAzOVowLzEtMCsGA1UEAxMk NmI1NGVjMTEtYjM5NC00MGNlLTg1Y2ItZGE0MDAzODg0YTY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfravVy2wbQM3srUtU78upfmTR86BPwQVTzY rSWVhjkoNW4ohYlxaAuXLngewhFBhn0dUnQgwVnX0j0BVjX4QUGZvTAsYSd+Ioco iy8WlOvNtCZ6bolKPevnsxXbZE0u/Xyrzm827RB/0bVn63a4NkwgtrKMnzXKL4Fv z/7dftcW9SspPNynbpAOgPxsZXozBQZG8OwG9JNksC8XwsRmK+iHSDc3ffrtkWGu bSUgZTJ9IpMkxt4KcGmig8mZmAQa1A3jfzrLcDsoVypopIHh3CvvS8tOU6HxS8Ka yelf4VROblEQV1rr6aOAUwVWpvwMc0B/YmLYolUXjBMzEUXsrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO3i0PgGbEUvAiLDe6j9B0E4DMqZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNTI1MzJlNWMtNjc5OS0z ODk3LTliZGYtZjlkNTNjYTJjMWM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDruAoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKkS7byN2mzffnr6+1btstaejOc+DEK4uKgrHUujcRuTZPLEiU8pLxLx YtPcGoatSHiiVLduagCDXjeQClQNhwKd89ZXF2YXVYn7G96SgBZFJtsvJFcb3bVd LhcjGISdoIUFLhoGjIc9Ftrcj5OX33sa6AP36DbToreq1bZlb43tyCXs0c4rEiET +nQhF0OAtPNtxga2rgw6FiS+ksGtGK3dTYamY6xooQ2e08JcjhbUumXB3vrY4hzg of9DqQ78j6v//nCJ1oIlxxl8piQcf5QxWaGzeFHd6WmzW9WfqwcZwB8RAEa4kh2c MsNEaIdVl2s6pwly/Nj2NR+HoxQLMRo= -----END CERTIFICATE-----Generated at Thu Apr 10 14:04:40 2025 by rpki-client