$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/63a6474b-a6a7-3626-8a56-59196517ca50.roa File: 63a6474b-a6a7-3626-8a56-59196517ca50.roa (raw, json) Hash identifier: ZT8haKOtxSgMgeAGeQkFCEaHitDg/HevHE0ggGfIouE= Subject key identifier: 10:E7:5A:2C:AE:CB:AE:CD:35:B3:0F:C9:41:26:5B:39:DC:ED:68:C4 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285848EF61785DE4316708D01609A0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/63a6474b-a6a7-3626-8a56-59196517ca50.roa Signing time: Wed 19 Feb 2025 14:00:52 +0000 ROA not before: Wed 19 Feb 2025 14:00:52 +0000 ROA not after: Tue 20 May 2025 13:00:52 +0000 asID: 6167 IP address blocks: 174.40.0.0/14 maxlen: 14 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ef:61:78:5d:e4:31:67:08:d0:16:09:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Feb 19 14:00:52 2025 GMT Not After : May 20 13:00:52 2025 GMT Subject: CN=d236f7db-120f-4bd6-90a9-4b168833cb14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:4c:92:9d:8e:c5:89:28:9b:cc:6d:fb:a9:5c: 2d:1e:35:34:9b:c0:cf:4c:05:ff:3c:b7:7d:8d:93: 08:dd:1f:56:bb:72:ce:9c:cb:39:dd:cc:c3:99:5b: 43:16:77:53:0a:61:35:e4:4c:ef:b2:bc:58:ff:95: 52:2f:4b:ff:52:4e:3c:b8:c4:ee:a7:fa:8e:86:e1: b0:5e:38:c8:b9:8e:8b:2f:d4:ea:06:5c:89:a2:4b: 31:9f:03:c9:78:5c:d0:28:15:b0:8f:3b:4e:d1:4a: ae:25:27:bd:52:68:bc:42:60:75:d1:39:80:73:63: ba:64:ff:15:90:2f:ad:6c:b4:b1:2a:04:4d:26:2f: d6:18:8d:2f:40:cd:6e:65:47:3b:59:4a:6f:49:8d: af:ba:ae:d5:5d:ee:f2:f5:58:45:a7:6a:59:dd:88: 0a:6a:fb:42:62:d9:e7:af:55:4b:23:37:97:3a:b4: 99:72:a3:59:e7:2f:5d:1a:b7:d2:7c:85:88:e2:05: 6c:59:25:26:16:3e:eb:47:eb:b8:73:23:31:a8:70: 16:88:e7:8c:74:4d:24:48:4b:9e:3d:b9:62:14:32: c9:b9:b3:16:1b:2a:bd:c1:88:74:b2:bb:af:09:8b: 73:f8:d7:69:3a:bd:ff:2a:48:52:ad:fa:40:93:d9: c1:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:E7:5A:2C:AE:CB:AE:CD:35:B3:0F:C9:41:26:5B:39:DC:ED:68:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/63a6474b-a6a7-3626-8a56-59196517ca50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.40.0.0/14 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:0c:e8:72:c8:b6:7e:ed:c5:b7:54:8e:98:48:70:02:6b:96: b6:7d:5c:9c:e3:a3:fe:6e:58:6f:85:76:1e:ef:2a:25:bd:22: a4:9c:ad:a7:d3:a1:ec:2c:c4:29:93:b4:f6:c4:7b:d6:9c:0d: ef:04:09:fe:34:68:72:74:85:d7:bf:87:02:16:95:b7:c5:51: f7:0f:ba:bd:a6:dd:68:67:ac:0d:81:53:43:51:97:44:db:52: 96:6c:01:a3:3a:c4:1c:cb:f0:50:f4:7f:b0:4c:c9:0c:ab:b9: 80:d6:1f:f9:a2:1d:f2:31:3c:6b:d2:a3:78:d1:a1:89:6a:47: 2c:39:28:f8:c6:b3:07:7f:a8:fe:1a:42:10:6f:8f:ac:29:c8: 31:f6:f4:72:7c:d8:bc:69:dd:1d:e5:3b:b1:24:45:3e:b9:58: e5:2c:31:ed:0a:e8:12:f6:4f:78:bc:83:45:55:81:c1:fe:97: a5:2a:a7:12:1d:35:42:08:92:40:d0:0b:e5:c7:42:21:26:6e: d3:f3:38:b3:38:5d:05:a1:33:4e:00:6d:88:f0:f6:7c:29:e1: 49:58:66:6d:65:82:de:27:d5:d1:2b:0e:8d:c8:fd:2e:51:6b: 25:70:4c:4c:a2:ff:5d:d9:05:14:fb:71:1d:c7:70:8b:84:e4: ae:7c:c3:37 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEjvYXhd5DFnCNAWCaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk ZDIzNmY3ZGItMTIwZi00YmQ2LTkwYTktNGIxNjg4MzNjYjE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhEySnY7FiSibzG37qVwtHjU0m8DPTAX/PLd9 jZMI3R9Wu3LOnMs53czDmVtDFndTCmE15EzvsrxY/5VSL0v/Uk48uMTup/qOhuGw XjjIuY6LL9TqBlyJoksxnwPJeFzQKBWwjztO0UquJSe9Umi8QmB10TmAc2O6ZP8V kC+tbLSxKgRNJi/WGI0vQM1uZUc7WUpvSY2vuq7VXe7y9VhFp2pZ3YgKavtCYtnn r1VLIzeXOrSZcqNZ5y9dGrfSfIWI4gVsWSUmFj7rR+u4cyMxqHAWiOeMdE0kSEue PbliFDLJubMWGyq9wYh0sruvCYtz+NdpOr3/KkhSrfpAk9nBrQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFBDnWiyuy67NNbMPyUEmWznc7WjEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNjNhNjQ3NGItYTZhNy0z NjI2LThhNTYtNTkxOTY1MTdjYTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCrigwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEArQzocsi2fu3Ft1SOmEhwAmuWtn1cnOOj/m5Yb4V2Hu8qJb0ipJytp9Oh 7CzEKZO09sR71pwN7wQJ/jRocnSF17+HAhaVt8VR9w+6vabdaGesDYFTQ1GXRNtS lmwBozrEHMvwUPR/sEzJDKu5gNYf+aId8jE8a9KjeNGhiWpHLDko+MazB3+o/hpC EG+PrCnIMfb0cnzYvGndHeU7sSRFPrlY5Swx7QroEvZPeLyDRVWBwf6XpSqnEh01 QgiSQNAL5cdCISZu0/M4szhdBaEzTgBtiPD2fCnhSVhmbWWC3ifV0SsOjcj9LlFr JXBMTKL/XdkFFPtxHcdwi4TkrnzDNw== -----END CERTIFICATE-----Generated at Sun Apr 6 06:05:12 2025 by rpki-client