$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7ccbbff4-78ac-392e-a300-aacc67a9b79e.roa File: 7ccbbff4-78ac-392e-a300-aacc67a9b79e.roa (raw, json) Hash identifier: 81aVxcFdN3BdtXOwt5+k+DSYjuASKwx5t0JOiQ3qI4w= Subject key identifier: 36:89:C8:FF:E2:5E:B9:34:51:22:85:59:41:9B:30:B5:6B:63:D7:4A Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285848E86669ECC16C213918C94A80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7ccbbff4-78ac-392e-a300-aacc67a9b79e.roa Signing time: Mon 17 Feb 2025 02:00:38 +0000 ROA not before: Mon 17 Feb 2025 02:00:38 +0000 ROA not after: Sun 18 May 2025 01:00:38 +0000 asID: 6167 IP address blocks: 174.252.116.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e8:66:69:ec:c1:6c:21:39:18:c9:4a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Feb 17 02:00:38 2025 GMT Not After : May 18 01:00:38 2025 GMT Subject: CN=3e960750-0a2a-45fc-a83d-034f70960d3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:2d:aa:f1:24:c7:04:d6:84:8f:3d:38:c9:1d: ad:3e:44:bc:b3:0a:01:05:2b:a1:74:bf:a9:75:02: 4b:e5:9c:48:d7:86:c2:03:d0:1e:e9:a2:66:54:a7: ce:0f:83:42:b6:b4:80:cb:84:99:d1:fd:22:7f:0d: 83:7d:23:5c:83:fe:6d:ea:b1:f1:89:30:86:73:b7: 23:9d:8a:1b:19:3f:ed:fd:8e:8e:87:6b:a8:b9:6b: c8:72:ee:40:1c:84:77:fa:0e:7f:21:04:0b:2c:cb: 29:eb:ee:05:d2:0d:c0:79:8c:53:a7:58:20:ed:61: da:8b:8a:e2:e2:5d:00:ac:77:53:7f:03:94:a0:bc: 9e:d9:78:49:6f:ab:33:7e:6b:b6:14:89:ca:33:42: 51:70:28:30:73:b2:07:56:e8:74:d1:f7:34:b3:87: 15:ea:1f:58:cc:58:f7:9e:d7:a5:64:2c:21:c5:e6: e1:d2:16:45:50:67:d9:c0:27:f1:00:93:8c:fb:f7: 91:ed:e0:46:44:18:fc:c3:47:8a:93:ea:2c:e3:ea: f3:10:95:89:8f:6f:f5:5b:db:71:44:9a:33:80:88: e6:4b:22:d9:5f:82:f8:ee:c0:5c:4e:84:8e:51:74: a2:1b:31:5d:b3:a2:ba:10:86:35:71:5b:b2:ca:98: 47:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:89:C8:FF:E2:5E:B9:34:51:22:85:59:41:9B:30:B5:6B:63:D7:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7ccbbff4-78ac-392e-a300-aacc67a9b79e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.252.116.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:87:55:ef:3c:c0:bd:51:92:79:26:9e:d8:6d:5d:26:2a:d0: f2:a8:21:98:45:2f:29:3f:80:4a:bf:a7:2e:e8:b1:11:6f:06: bb:af:df:ca:83:0c:29:98:fe:0c:70:dc:20:75:e3:0f:f3:4b: 0c:31:87:01:5b:a1:b8:54:65:77:00:0d:ce:4e:4d:c9:81:73: ba:f8:50:b7:2d:aa:12:00:f2:6c:6a:cb:8d:fc:6b:58:34:8f: 1c:35:8c:11:48:f7:f9:5c:cd:83:c4:e1:cb:b7:35:6f:26:8f: e7:55:44:ee:aa:af:b1:f8:2e:21:f8:69:6a:5f:32:a5:8c:dc: 1d:7b:6f:08:87:99:f6:0e:59:2c:95:04:25:06:31:f2:8f:0e: 31:d6:de:0b:e2:6b:ec:c3:e2:7c:92:8d:a0:38:82:f3:65:c3: d9:8c:97:d4:c1:9d:ef:9b:c2:80:65:90:81:b4:3c:0b:5e:b8: ac:f8:b3:be:44:e3:74:7e:61:16:80:38:cd:4d:ae:12:3a:e1: a6:b9:dd:d4:b2:fe:d9:ff:82:b8:14:c7:ba:e0:00:11:1a:15: 53:85:fa:6f:a7:d1:f2:fc:15:3c:9a:92:98:ec:7d:01:c8:e9: 76:bf:28:b1:57:53:1f:fa:83:09:d3:b6:fa:9f:57:52:19:5d: 18:55:6d:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjoZmnswWwhORjJSoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDIxNzAyMDAzOFoXDTI1MDUxODAxMDAzOFowLzEtMCsGA1UEAxMk M2U5NjA3NTAtMGEyYS00NWZjLWE4M2QtMDM0ZjcwOTYwZDNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApi2q8STHBNaEjz04yR2tPkS8swoBBSuhdL+p dQJL5ZxI14bCA9Ae6aJmVKfOD4NCtrSAy4SZ0f0ifw2DfSNcg/5t6rHxiTCGc7cj nYobGT/t/Y6Oh2uouWvIcu5AHIR3+g5/IQQLLMsp6+4F0g3AeYxTp1gg7WHai4ri 4l0ArHdTfwOUoLye2XhJb6szfmu2FInKM0JRcCgwc7IHVuh00fc0s4cV6h9YzFj3 ntelZCwhxebh0hZFUGfZwCfxAJOM+/eR7eBGRBj8w0eKk+os4+rzEJWJj2/1W9tx RJozgIjmSyLZX4L47sBcToSOUXSiGzFds6K6EIY1cVuyyphHUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDaJyP/iXrk0USKFWUGbMLVrY9dKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvN2NjYmJmZjQtNzhhYy0z OTJlLWEzMDAtYWFjYzY3YTliNzllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrvx0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF6HVe88wL1RknkmnthtXSYq0PKoIZhFLyk/gEq/py7osRFvBruv38qD DCmY/gxw3CB14w/zSwwxhwFbobhUZXcADc5OTcmBc7r4ULctqhIA8mxqy438a1g0 jxw1jBFI9/lczYPE4cu3NW8mj+dVRO6qr7H4LiH4aWpfMqWM3B17bwiHmfYOWSyV BCUGMfKPDjHW3gvia+zD4nySjaA4gvNlw9mMl9TBne+bwoBlkIG0PAteuKz4s75E 43R+YRaAOM1NrhI64aa53dSy/tn/grgUx7rgABEaFVOF+m+n0fL8FTyakpjsfQHI 6Xa/KLFXUx/6gwnTtvqfV1IZXRhVbYs= -----END CERTIFICATE-----Generated at Sat Apr 5 18:24:03 2025 by rpki-client