$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5c1f2f2e-70ba-315a-af8a-8df592360422.roa File: 5c1f2f2e-70ba-315a-af8a-8df592360422.roa (raw, json) Hash identifier: KMQc+1bwstwd35eCt8PZAQRcCKlnRkMslHAYRgewIWg= Subject key identifier: 05:4F:87:6A:78:38:74:6B:C7:EF:78:B7:D1:7F:BF:FC:96:CB:5C:66 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285848E866707F745AA01D5B4FFA00 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5c1f2f2e-70ba-315a-af8a-8df592360422.roa Signing time: Mon 17 Feb 2025 02:00:38 +0000 ROA not before: Mon 17 Feb 2025 02:00:38 +0000 ROA not after: Sun 18 May 2025 01:00:38 +0000 asID: 6167 IP address blocks: 174.234.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e8:66:70:7f:74:5a:a0:1d:5b:4f:fa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Feb 17 02:00:38 2025 GMT Not After : May 18 01:00:38 2025 GMT Subject: CN=89d7b2f8-e5ce-47b4-8e3d-3b0ba1bc38d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:cd:41:5d:44:30:7e:a2:80:c1:f5:30:58:81: 68:f6:31:8c:5d:79:22:41:5b:1d:96:91:7b:4d:f2: 1e:9a:e7:12:ab:81:e3:85:f5:49:3c:e6:13:4b:db: 71:79:c1:a9:2a:be:48:87:fe:d4:e3:22:e1:d9:05: dc:96:68:18:72:14:c3:5a:28:5c:c1:27:4f:ac:1f: 84:b4:ba:a0:ae:7a:a8:4b:07:84:c7:f0:ec:62:df: 62:7b:e2:e2:45:4b:61:fd:86:9e:c8:ed:8b:8f:7c: d8:31:07:79:e3:4f:b1:58:b0:65:89:b4:50:ab:db: 20:37:b7:cb:96:f1:5a:3b:6b:99:1b:33:6a:57:d5: 66:22:cd:74:33:5d:6f:a5:5a:de:8e:12:90:83:41: af:05:d2:a0:73:86:8b:1d:b3:6f:e5:92:a6:5a:9c: 01:3f:19:07:b3:1a:d1:a9:e0:dd:50:a9:f7:ea:15: 2d:32:c4:44:40:8c:59:f4:f6:78:b0:f9:9e:96:18: 6b:1e:18:01:b4:69:dc:e1:5c:f2:02:c8:51:f9:3e: 4e:7d:83:f3:a9:03:67:8e:bd:77:cf:98:37:b0:dd: 20:fb:d4:9d:ec:ef:72:00:07:29:4b:dd:11:e8:db: 3f:f0:ae:80:31:1b:52:98:02:e2:f9:07:3f:b0:31: 2e:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:4F:87:6A:78:38:74:6B:C7:EF:78:B7:D1:7F:BF:FC:96:CB:5C:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5c1f2f2e-70ba-315a-af8a-8df592360422.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.234.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:63:72:e9:a4:cc:7c:37:0e:83:9c:e7:72:9c:2c:d4:73:97: d7:3c:06:fc:b1:b0:30:78:cd:fa:18:4e:3f:29:4b:c9:c4:6d: ba:40:66:85:c1:96:9e:2b:1d:32:2d:0b:7c:b6:80:35:0d:ff: 9e:ea:a9:ff:1c:05:1a:e4:9f:65:4d:40:ce:8e:32:80:b8:47: 69:c2:c9:ee:4f:15:2f:ea:c0:16:7b:8e:8c:4a:41:cb:19:6c: cb:5d:7f:f1:de:c4:72:46:69:d1:5a:57:13:03:6f:9c:a3:cd: 6a:6e:57:50:7a:44:37:0b:2f:75:64:cd:09:99:65:c8:f6:60: 11:f1:bb:1c:d1:60:dd:85:6e:79:fa:76:aa:8b:e0:36:09:f3: df:2c:f2:7a:df:01:c3:58:8e:18:cc:dd:fb:40:11:11:e6:63: 53:e6:79:09:99:2a:0f:26:3d:8c:b2:d2:da:63:02:af:46:4f: a1:b8:dd:6b:fc:64:23:6a:e3:14:74:6f:74:ae:ba:c7:86:4d: 7b:42:d5:8e:59:18:95:55:b8:a9:96:3d:76:ee:20:a2:cd:a6: eb:e0:c8:db:48:b9:22:ee:79:23:65:83:bc:e2:23:7b:9c:a4: 63:0d:83:1f:59:a6:5f:29:5f:c8:c3:18:3b:6b:49:4e:5a:ac: 66:18:c6:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjoZnB/dFqgHVtP+gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDIxNzAyMDAzOFoXDTI1MDUxODAxMDAzOFowLzEtMCsGA1UEAxMk ODlkN2IyZjgtZTVjZS00N2I0LThlM2QtM2IwYmExYmMzOGQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo81BXUQwfqKAwfUwWIFo9jGMXXkiQVsdlpF7 TfIemucSq4HjhfVJPOYTS9txecGpKr5Ih/7U4yLh2QXclmgYchTDWihcwSdPrB+E tLqgrnqoSweEx/DsYt9ie+LiRUth/YaeyO2Lj3zYMQd540+xWLBlibRQq9sgN7fL lvFaO2uZGzNqV9VmIs10M11vpVrejhKQg0GvBdKgc4aLHbNv5ZKmWpwBPxkHsxrR qeDdUKn36hUtMsREQIxZ9PZ4sPmelhhrHhgBtGnc4VzyAshR+T5OfYPzqQNnjr13 z5g3sN0g+9Sd7O9yAAcpS90R6Ns/8K6AMRtSmALi+Qc/sDEupwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAVPh2p4OHRrx+94t9F/v/yWy1xmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNWMxZjJmMmUtNzBiYS0z MTVhLWFmOGEtOGRmNTkyMzYwNDIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErurAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAljcumkzHw3DoOc53KcLNRzl9c8BvyxsDB4zfoYTj8pS8nEbbpAZoXB lp4rHTItC3y2gDUN/57qqf8cBRrkn2VNQM6OMoC4R2nCye5PFS/qwBZ7joxKQcsZ bMtdf/HexHJGadFaVxMDb5yjzWpuV1B6RDcLL3VkzQmZZcj2YBHxuxzRYN2Fbnn6 dqqL4DYJ898s8nrfAcNYjhjM3ftAERHmY1PmeQmZKg8mPYyy0tpjAq9GT6G43Wv8 ZCNq4xR0b3SuuseGTXtC1Y5ZGJVVuKmWPXbuIKLNpuvgyNtIuSLueSNlg7ziI3uc pGMNgx9Zpl8pX8jDGDtrSU5arGYYxlg= -----END CERTIFICATE-----Generated at Thu Apr 10 13:34:47 2025 by rpki-client