$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/69c1a05f-e49c-3682-a20f-51da947ccac8.roa File: 69c1a05f-e49c-3682-a20f-51da947ccac8.roa (raw, json) Hash identifier: kcPswHA02Na7MVmH4fgJQ7td+xZ17S0wnYtDeBYg050= Subject key identifier: 29:4B:5C:96:06:02:46:5E:EB:97:C6:69:88:E8:3A:91:07:2A:C8:31 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584925B3B1267E35E3A8DF1D2700 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/69c1a05f-e49c-3682-a20f-51da947ccac8.roa Signing time: Tue 11 Mar 2025 01:00:40 +0000 ROA not before: Tue 11 Mar 2025 01:00:40 +0000 ROA not after: Mon 09 Jun 2025 01:00:40 +0000 asID: 6167 IP address blocks: 174.220.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:25:b3:b1:26:7e:35:e3:a8:df:1d:27:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 11 01:00:40 2025 GMT Not After : Jun 9 01:00:40 2025 GMT Subject: CN=6630e946-e655-4cd9-be6c-858a6f4a549a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:45:ce:8c:65:a3:03:de:76:b3:35:6a:f9:bc: 3d:53:2f:f5:b3:b2:90:bb:20:34:ad:44:01:57:dc: 1f:96:ae:da:c4:9f:ec:77:b1:c6:ce:f4:40:8a:05: 21:b5:87:14:fd:32:ff:b0:79:cd:d6:4f:f9:d8:df: 6b:3e:17:0b:71:6a:43:6f:6c:87:10:5e:2c:db:2d: 9c:f9:4c:d2:80:af:21:2c:8c:e1:72:4f:42:c8:66: c8:da:9c:c7:84:7f:01:5f:bc:a3:7c:cf:54:9b:b3: d6:42:e1:f8:87:c7:55:2c:82:dd:11:25:f1:26:23: 68:88:75:60:10:57:1a:82:78:a3:65:de:80:22:a7: 70:1a:96:99:0a:75:af:0c:ff:da:c6:0d:0f:32:38: 6e:a7:e7:78:0e:9d:66:9b:21:dc:cf:98:d9:cb:82: 2b:22:d5:5a:eb:81:80:b2:8d:5e:ca:b9:79:36:fe: 54:c6:32:5a:80:74:68:89:1a:74:76:18:c0:56:a2: 14:a8:3f:31:1e:9d:20:ca:7a:19:92:da:ad:7b:39: 5b:3f:a2:65:a3:08:44:4e:e0:2d:c1:63:c9:f3:35: ea:7d:30:47:9c:27:11:46:75:ca:2b:0a:ed:a9:83: 53:64:bf:ac:0b:25:0f:5a:9b:19:bf:f0:c1:84:f3: ca:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:4B:5C:96:06:02:46:5E:EB:97:C6:69:88:E8:3A:91:07:2A:C8:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/69c1a05f-e49c-3682-a20f-51da947ccac8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.220.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:94:c8:73:a5:72:25:f8:07:f4:40:f7:06:d7:7b:c0:f1:9b: 92:5b:33:7a:48:8a:24:f7:41:d4:15:8d:ad:2c:1e:7e:9a:85: 39:ca:51:2e:30:12:49:4e:ed:26:57:8c:d1:ce:bb:7d:4c:9b: 70:2f:19:d5:d8:e2:46:ce:58:2d:60:a9:24:93:38:2e:aa:7b: bc:56:f9:b6:4c:a0:02:04:97:a0:a1:03:c4:f0:ad:bb:b0:34: 24:27:3b:ea:91:37:32:25:29:4b:9b:93:2c:84:46:56:b2:2f: 69:33:e1:4d:d8:35:42:d3:58:60:f2:7f:50:44:cf:53:71:7d: 56:3e:01:36:be:ec:5c:da:30:0b:76:61:65:5a:ba:91:93:78: 43:fd:c8:9e:74:a3:96:6c:0b:1a:aa:8f:4a:1b:e5:ad:15:b3: 14:b8:60:6d:20:e0:a5:10:0c:d4:bf:7e:e7:a7:52:20:58:03: 4a:07:5e:ec:0e:ba:fb:7d:b6:37:c8:79:c2:0e:c3:53:86:b6: a9:0c:11:24:df:e9:36:02:87:90:2b:70:35:60:7d:1b:00:d4: 85:54:ed:02:3a:0b:18:6b:ac:e8:b3:c6:0f:fe:a0:d0:13:d2: ef:bb:89:a5:a8:b4:4b:c2:b1:4f:a9:3d:88:4c:6f:ec:cb:49: 8e:dc:79:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkls7EmfjXjqN8dJwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMxMTAxMDA0MFoXDTI1MDYwOTAxMDA0MFowLzEtMCsGA1UEAxMk NjYzMGU5NDYtZTY1NS00Y2Q5LWJlNmMtODU4YTZmNGE1NDlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx0XOjGWjA952szVq+bw9Uy/1s7KQuyA0rUQB V9wflq7axJ/sd7HGzvRAigUhtYcU/TL/sHnN1k/52N9rPhcLcWpDb2yHEF4s2y2c +UzSgK8hLIzhck9CyGbI2pzHhH8BX7yjfM9Um7PWQuH4h8dVLILdESXxJiNoiHVg EFcagnijZd6AIqdwGpaZCnWvDP/axg0PMjhup+d4Dp1mmyHcz5jZy4IrItVa64GA so1eyrl5Nv5UxjJagHRoiRp0dhjAVqIUqD8xHp0gynoZktqtezlbP6JlowhETuAt wWPJ8zXqfTBHnCcRRnXKKwrtqYNTZL+sCyUPWpsZv/DBhPPKtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFClLXJYGAkZe65fGaYjoOpEHKsgxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNjljMWEwNWYtZTQ5Yy0z NjgyLWEyMGYtNTFkYTk0N2NjYWM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErtxgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI+UyHOlciX4B/RA9wbXe8Dxm5JbM3pIiiT3QdQVja0sHn6ahTnKUS4w EklO7SZXjNHOu31Mm3AvGdXY4kbOWC1gqSSTOC6qe7xW+bZMoAIEl6ChA8Twrbuw NCQnO+qRNzIlKUubkyyERlayL2kz4U3YNULTWGDyf1BEz1NxfVY+ATa+7FzaMAt2 YWVaupGTeEP9yJ50o5ZsCxqqj0ob5a0VsxS4YG0g4KUQDNS/fuenUiBYA0oHXuwO uvt9tjfIecIOw1OGtqkMESTf6TYCh5ArcDVgfRsA1IVU7QI6CxhrrOizxg/+oNAT 0u+7iaWotEvCsU+pPYhMb+zLSY7cefk= -----END CERTIFICATE-----Generated at Sat Apr 5 23:19:47 2025 by rpki-client