$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/67e91417-fb88-3fc6-8abd-967524c8e7bf.roa File: 67e91417-fb88-3fc6-8abd-967524c8e7bf.roa (raw, json) Hash identifier: QXVHDJpSpPSw/WkfYqlby6AsX6sC/nj89zLXK4oAGNU= Subject key identifier: 43:67:85:EA:A5:27:03:4F:55:7E:DE:6D:93:00:14:30:A4:8C:58:26 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285848C150EB7638A0FCF8963BFC40 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/67e91417-fb88-3fc6-8abd-967524c8e7bf.roa Signing time: Mon 03 Feb 2025 02:00:39 +0000 ROA not before: Mon 03 Feb 2025 02:00:39 +0000 ROA not after: Sun 04 May 2025 01:00:39 +0000 asID: 6167 IP address blocks: 174.213.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c1:50:eb:76:38:a0:fc:f8:96:3b:fc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Feb 3 02:00:39 2025 GMT Not After : May 4 01:00:39 2025 GMT Subject: CN=1e225407-9690-4519-881e-7388786669c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:50:a1:12:f4:61:17:5c:f0:b8:56:18:9d:29: 85:f0:cb:0e:12:df:f8:bb:47:db:7d:6f:f6:21:64: 22:16:f3:ef:5a:69:a0:01:1b:67:cc:3b:fa:7e:da: f3:7f:ce:2e:00:da:eb:f3:e6:fd:5b:1f:5c:fc:c2: cf:31:e3:40:a7:d3:9b:72:35:0f:f5:cb:cb:f6:da: b9:83:c3:3c:e5:a5:85:b4:c2:af:48:36:56:6a:77: 08:58:58:36:58:ea:f1:b2:74:4e:23:d2:41:54:e0: 1a:12:88:a3:8c:3d:75:17:78:23:39:e7:eb:5f:c4: 45:e4:a8:0b:d5:86:28:96:cd:a4:da:a4:b9:08:c6: 6f:8d:c9:34:ec:e5:a0:11:f7:c6:1a:93:05:8b:cb: c9:01:3f:ac:8c:6e:af:4e:a7:78:0d:8b:b9:92:44: 1e:91:43:28:53:64:7f:76:ab:90:5f:3f:08:f3:cb: 8f:4e:b8:85:ad:c7:8d:18:c8:f0:89:2d:eb:7c:5d: 93:8b:30:5b:e8:c6:48:b3:7c:c2:ae:5a:ee:ef:73: 11:be:4d:8a:9d:1e:80:be:df:49:94:9a:08:91:bd: ed:d7:90:47:14:4b:46:29:76:7d:20:3b:6f:01:b7: 16:4f:d8:8d:47:36:6f:58:e5:a9:94:d9:3d:e6:0a: 2b:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:67:85:EA:A5:27:03:4F:55:7E:DE:6D:93:00:14:30:A4:8C:58:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/67e91417-fb88-3fc6-8abd-967524c8e7bf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.213.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:8f:d2:b9:5c:9e:35:ef:ed:04:bd:68:b6:61:d1:32:86:28: 5c:cf:b7:58:af:3b:9d:af:af:0e:43:76:32:80:a6:47:54:f4: 68:6e:a5:6a:d8:c9:e7:59:b9:2d:cf:d6:e4:c9:b3:f2:1d:04: 85:37:a1:b2:9b:a3:47:6b:bc:23:4a:44:15:9c:db:d9:da:22: 88:84:1e:f0:38:b4:e6:2b:fa:9d:bd:72:8a:c8:5f:c9:55:87: a4:29:05:b0:7c:17:78:be:2e:fc:dd:31:7f:80:68:fe:93:18: b3:23:22:5d:af:b0:d6:f2:83:f1:b5:81:19:b9:e6:59:bb:06: 00:71:4d:8a:d6:fa:45:c7:92:be:05:f1:31:db:b1:c5:61:83: 20:2c:17:ed:05:9c:a3:1a:e6:97:de:21:8c:45:e4:df:46:bd: cb:8e:98:68:fc:12:ce:1c:90:b6:48:20:e6:cb:90:7f:99:2d: 4e:19:27:9b:2e:9e:18:84:9b:35:13:bb:35:00:76:85:14:a6: 72:0a:6a:01:50:b4:28:fa:ac:4a:3d:8f:33:27:5c:33:a8:80: 8d:2e:f3:29:50:49:f4:36:24:c8:09:88:dd:51:96:11:49:9b: 01:ea:92:b4:e2:c7:61:b1:c1:c1:0a:90:b9:91:80:ab:22:21: 54:67:03:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjBUOt2OKD8+JY7/EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDIwMzAyMDAzOVoXDTI1MDUwNDAxMDAzOVowLzEtMCsGA1UEAxMk MWUyMjU0MDctOTY5MC00NTE5LTg4MWUtNzM4ODc4NjY2OWM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1ChEvRhF1zwuFYYnSmF8MsOEt/4u0fbfW/2 IWQiFvPvWmmgARtnzDv6ftrzf84uANrr8+b9Wx9c/MLPMeNAp9ObcjUP9cvL9tq5 g8M85aWFtMKvSDZWancIWFg2WOrxsnROI9JBVOAaEoijjD11F3gjOefrX8RF5KgL 1YYols2k2qS5CMZvjck07OWgEffGGpMFi8vJAT+sjG6vTqd4DYu5kkQekUMoU2R/ dquQXz8I88uPTriFrceNGMjwiS3rfF2TizBb6MZIs3zCrlru73MRvk2KnR6Avt9J lJoIkb3t15BHFEtGKXZ9IDtvAbcWT9iNRzZvWOWplNk95gorWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFENnheqlJwNPVX7ebZMAFDCkjFgmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNjdlOTE0MTctZmI4OC0z ZmM2LThhYmQtOTY3NTI0YzhlN2JmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrtUgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJOP0rlcnjXv7QS9aLZh0TKGKFzPt1ivO52vrw5DdjKApkdU9GhupWrY yedZuS3P1uTJs/IdBIU3obKbo0drvCNKRBWc29naIoiEHvA4tOYr+p29corIX8lV h6QpBbB8F3i+LvzdMX+AaP6TGLMjIl2vsNbyg/G1gRm55lm7BgBxTYrW+kXHkr4F 8THbscVhgyAsF+0FnKMa5pfeIYxF5N9GvcuOmGj8Es4ckLZIIObLkH+ZLU4ZJ5su nhiEmzUTuzUAdoUUpnIKagFQtCj6rEo9jzMnXDOogI0u8ylQSfQ2JMgJiN1RlhFJ mwHqkrTix2GxwcEKkLmRgKsiIVRnAyM= -----END CERTIFICATE-----Generated at Sun Apr 6 05:27:40 2025 by rpki-client