$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6b8a21cc-7206-330a-af6f-9796d65a4b02.roa File: 6b8a21cc-7206-330a-af6f-9796d65a4b02.roa (raw, json) Hash identifier: tTJdQx9pchHuDGcmydLjqobgeZ5yegUuas1KmUed+pg= Subject key identifier: BA:41:4E:BC:A0:5F:B2:2B:BA:B6:97:CB:DF:4C:19:C0:33:F8:58:9C Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285848C150DBACDB8BD04D33B19200 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6b8a21cc-7206-330a-af6f-9796d65a4b02.roa Signing time: Mon 03 Feb 2025 02:00:39 +0000 ROA not before: Mon 03 Feb 2025 02:00:39 +0000 ROA not after: Sun 04 May 2025 01:00:39 +0000 asID: 6167 IP address blocks: 174.209.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c1:50:db:ac:db:8b:d0:4d:33:b1:92:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Feb 3 02:00:39 2025 GMT Not After : May 4 01:00:39 2025 GMT Subject: CN=bd56cb79-9f0f-4b14-93ec-5695dd5895d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:1e:2d:c7:b6:16:f8:b3:44:a8:81:e5:d0:76: 2b:cb:6e:6d:64:da:54:23:90:0b:77:04:b3:d5:7d: 73:a0:29:ff:4b:c8:55:ef:b1:dc:65:92:d5:13:c8: 9d:48:0b:58:f6:6c:a4:d1:d2:d3:21:ae:18:5b:ef: ba:71:ca:d3:1f:50:5d:7b:f4:32:32:54:c5:a4:dd: 42:c3:ad:9d:70:52:db:01:8c:ef:01:59:9e:65:b6: bf:81:86:10:99:99:5f:04:79:6a:23:18:99:c0:f7: 13:48:94:88:02:8a:8c:90:68:e2:3f:bd:98:30:c6: d0:14:fe:5c:f2:f3:03:c4:7c:e8:e6:47:a5:37:b5: a3:70:6f:aa:1c:f9:d3:3e:12:33:92:d2:2f:87:ab: f4:35:3e:c3:68:61:66:83:a1:8a:68:dc:12:34:fc: a0:01:f9:b6:05:d4:84:dc:bb:eb:38:87:d8:07:1d: b1:aa:f0:0d:b2:b7:95:6c:ba:f1:9d:17:d0:fa:b8: 7a:46:9a:23:36:3b:16:de:0a:36:93:87:e6:92:e2: 03:7c:47:27:0a:54:52:41:92:09:8c:58:f3:b7:fd: d1:67:a9:8a:c5:33:3c:29:98:e5:ef:d3:7d:c3:bb: 54:bd:bb:bd:7b:f6:0c:77:8a:e6:a0:70:a1:43:50: c7:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:41:4E:BC:A0:5F:B2:2B:BA:B6:97:CB:DF:4C:19:C0:33:F8:58:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6b8a21cc-7206-330a-af6f-9796d65a4b02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.209.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:07:a0:e1:6a:4f:d7:f6:31:d9:a5:b1:7f:ad:e2:0f:8f:9d: d3:55:8b:7b:60:aa:e0:00:c6:b0:75:4b:fa:e0:d5:57:8b:3f: 2b:d6:55:75:7b:ff:17:67:75:d4:30:83:f8:9b:57:f6:7b:4a: bd:d5:51:13:c5:d8:71:e2:22:c9:d8:86:aa:97:11:fd:36:0d: 70:e3:48:0e:f4:a2:c7:e0:de:ba:3a:8d:99:22:a2:0e:db:76: 81:8c:8b:c6:14:98:c4:74:79:31:bd:e6:d5:5a:30:a1:b3:ce: 1d:f1:df:9c:c3:3f:bb:44:7b:b0:c4:c2:10:a8:73:af:73:47: cd:02:81:a9:e1:b3:1c:0e:99:05:dc:9d:5e:3e:c8:d3:e7:df: 91:6e:76:51:02:a2:fe:53:e5:ad:bd:2c:16:17:34:2f:ab:73: ab:ac:39:8e:24:7a:1e:cf:e8:47:56:e6:e5:e6:af:97:78:ab: 53:89:ec:2d:56:8d:60:df:f2:b9:67:ca:ee:73:bb:02:dd:75: 94:9c:06:f8:8b:2d:ac:39:0c:e9:a8:ce:cf:8f:b7:a6:67:5b: 85:dd:01:5d:d7:95:25:6c:4f:78:8b:3f:6f:68:f6:e9:15:7c: c8:b3:f2:a9:58:b1:6a:e5:a8:62:ec:a2:ab:ce:41:28:25:3b: 85:75:a1:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjBUNus24vQTTOxkgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDIwMzAyMDAzOVoXDTI1MDUwNDAxMDAzOVowLzEtMCsGA1UEAxMk YmQ1NmNiNzktOWYwZi00YjE0LTkzZWMtNTY5NWRkNTg5NWQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyB4tx7YW+LNEqIHl0HYry25tZNpUI5ALdwSz 1X1zoCn/S8hV77HcZZLVE8idSAtY9myk0dLTIa4YW++6ccrTH1Bde/QyMlTFpN1C w62dcFLbAYzvAVmeZba/gYYQmZlfBHlqIxiZwPcTSJSIAoqMkGjiP72YMMbQFP5c 8vMDxHzo5kelN7WjcG+qHPnTPhIzktIvh6v0NT7DaGFmg6GKaNwSNPygAfm2BdSE 3LvrOIfYBx2xqvANsreVbLrxnRfQ+rh6RpojNjsW3go2k4fmkuIDfEcnClRSQZIJ jFjzt/3RZ6mKxTM8KZjl79N9w7tUvbu9e/YMd4rmoHChQ1DHdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLpBTrygX7IruraXy99MGcAz+FicMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNmI4YTIxY2MtNzIwNi0z MzBhLWFmNmYtOTc5NmQ2NWE0YjAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFrtGAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIgHoOFqT9f2MdmlsX+t4g+PndNVi3tgquAAxrB1S/rg1VeLPyvWVXV7 /xdnddQwg/ibV/Z7Sr3VURPF2HHiIsnYhqqXEf02DXDjSA70osfg3ro6jZkiog7b doGMi8YUmMR0eTG95tVaMKGzzh3x35zDP7tEe7DEwhCoc69zR80CganhsxwOmQXc nV4+yNPn35FudlECov5T5a29LBYXNC+rc6usOY4keh7P6EdW5uXmr5d4q1OJ7C1W jWDf8rlnyu5zuwLddZScBviLLaw5DOmozs+Pt6ZnW4XdAV3XlSVsT3iLP29o9ukV fMiz8qlYsWrlqGLsoqvOQSglO4V1oRc= -----END CERTIFICATE-----Generated at Sun Apr 6 08:47:23 2025 by rpki-client