$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5e543a0b-cd49-373a-8853-83c45c8f4dcb.roa File: 5e543a0b-cd49-373a-8853-83c45c8f4dcb.roa (raw, json) Hash identifier: uIPp3kpXS7wp4CyoMLj6q3BVvXXZ0xtl7Qj+iOR2Qq0= Subject key identifier: 43:49:C3:EA:BE:7D:EF:05:EE:4F:EC:0A:A2:6B:25:D5:78:E3:39:93 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285848E86672B935A30234D52FB400 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5e543a0b-cd49-373a-8853-83c45c8f4dcb.roa Signing time: Mon 17 Feb 2025 02:00:38 +0000 ROA not before: Mon 17 Feb 2025 02:00:38 +0000 ROA not after: Sun 18 May 2025 01:00:38 +0000 asID: 6167 IP address blocks: 174.238.24.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e8:66:72:b9:35:a3:02:34:d5:2f:b4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Feb 17 02:00:38 2025 GMT Not After : May 18 01:00:38 2025 GMT Subject: CN=8908ec4f-0b79-46bc-aba5-f8d536db3d81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:9a:45:28:91:db:9c:30:73:9c:0c:db:ba:da: 6f:cb:ea:45:81:5c:d0:ca:84:19:49:8f:30:b6:66: 5d:f0:3f:95:06:93:70:ef:48:79:32:3a:50:9e:66: 2d:c4:62:bc:3d:64:96:48:ca:79:ac:da:27:9c:c9: 6b:63:02:2f:53:f7:50:a1:05:2d:37:81:2d:eb:dc: c5:80:7a:1e:a1:b7:58:7e:79:f8:48:fb:0c:f6:f8: 8e:b0:ec:31:55:d4:0b:49:21:a9:62:25:f2:b2:f2: 37:88:6a:b6:04:ed:67:a5:69:de:71:bc:6f:15:e0: fe:51:95:22:32:5b:80:85:21:e7:a5:cd:20:82:3e: 62:3b:57:ec:6e:b7:53:f6:6c:41:5b:54:03:15:bb: 66:d8:8f:71:66:54:eb:63:a1:9e:5b:04:76:13:13: cf:59:ff:f5:db:d4:20:8a:fb:32:61:26:f6:c8:d7: 8a:ad:0f:1c:b3:e5:7e:f6:f7:cb:0b:ee:41:0f:42: 86:e4:0f:3f:1a:1b:ca:fe:c6:f0:d5:8e:db:89:c7: 9b:d8:0e:97:0f:8d:9a:b7:ee:50:1c:f4:ae:d0:92: 86:f0:a3:3a:51:8b:9a:05:22:60:17:45:5e:6b:d3: 44:78:9a:ba:be:57:cd:4c:90:d6:a0:5a:01:c9:20: 13:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:49:C3:EA:BE:7D:EF:05:EE:4F:EC:0A:A2:6B:25:D5:78:E3:39:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5e543a0b-cd49-373a-8853-83c45c8f4dcb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.238.24.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:7c:73:f8:ed:ce:83:1b:04:69:02:93:92:8d:0e:fb:e0:b3: d6:03:0f:65:87:65:f8:cf:72:a9:a8:00:18:cb:58:3e:fc:6d: 38:ee:24:a6:98:24:06:8b:42:fc:fe:f7:b4:4a:95:ac:ff:04: 65:7b:64:d1:ca:42:32:70:4e:00:ec:0e:b0:71:80:82:8e:f1: ea:6f:c3:63:bf:87:5d:83:ed:61:d0:12:b9:6e:e1:bf:dd:65: 51:bc:45:2b:b2:07:6e:53:5c:ed:71:70:c5:ea:26:ce:a6:20: 90:4d:77:62:16:cb:d9:6a:42:93:74:b8:68:61:2c:11:19:99: a5:07:c6:f8:29:5b:b8:55:ca:a7:fd:37:70:99:b7:c6:ac:93: 3d:63:a7:f3:ca:d8:62:d6:27:44:81:d6:29:fd:f6:06:90:ba: 04:d6:16:4c:46:2c:3b:cb:68:9e:65:f4:47:03:c0:a7:60:c8: df:6b:74:1c:64:bf:b5:72:57:50:42:67:d5:73:cc:b1:1b:16: 8c:26:fc:29:e3:25:1c:22:93:fc:9e:b8:7d:97:5c:35:93:60: b7:e6:3d:be:0d:4c:dd:2c:fa:37:43:c7:7e:54:37:75:33:a9: 4c:84:22:57:51:49:c7:66:ab:d1:61:15:75:cd:8e:55:37:6c: be:e3:a5:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjoZnK5NaMCNNUvtAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDIxNzAyMDAzOFoXDTI1MDUxODAxMDAzOFowLzEtMCsGA1UEAxMk ODkwOGVjNGYtMGI3OS00NmJjLWFiYTUtZjhkNTM2ZGIzZDgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZpFKJHbnDBznAzbutpvy+pFgVzQyoQZSY8w tmZd8D+VBpNw70h5MjpQnmYtxGK8PWSWSMp5rNonnMlrYwIvU/dQoQUtN4Et69zF gHoeobdYfnn4SPsM9viOsOwxVdQLSSGpYiXysvI3iGq2BO1npWnecbxvFeD+UZUi MluAhSHnpc0ggj5iO1fsbrdT9mxBW1QDFbtm2I9xZlTrY6GeWwR2ExPPWf/129Qg ivsyYSb2yNeKrQ8cs+V+9vfLC+5BD0KG5A8/GhvK/sbw1Y7biceb2A6XD42at+5Q HPSu0JKG8KM6UYuaBSJgF0Vea9NEeJq6vlfNTJDWoFoBySATFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFENJw+q+fe8F7k/sCqJrJdV44zmTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNWU1NDNhMGItY2Q0OS0z NzNhLTg4NTMtODNjNDVjOGY0ZGNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCru4YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABR8c/jtzoMbBGkCk5KNDvvgs9YDD2WHZfjPcqmoABjLWD78bTjuJKaY JAaLQvz+97RKlaz/BGV7ZNHKQjJwTgDsDrBxgIKO8epvw2O/h12D7WHQErlu4b/d ZVG8RSuyB25TXO1xcMXqJs6mIJBNd2IWy9lqQpN0uGhhLBEZmaUHxvgpW7hVyqf9 N3CZt8askz1jp/PK2GLWJ0SB1in99gaQugTWFkxGLDvLaJ5l9EcDwKdgyN9rdBxk v7VyV1BCZ9VzzLEbFowm/CnjJRwik/yeuH2XXDWTYLfmPb4NTN0s+jdDx35UN3Uz qUyEIldRScdmq9FhFXXNjlU3bL7jpWk= -----END CERTIFICATE-----Generated at Sat Apr 5 23:22:22 2025 by rpki-client