$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7d7acfe5-d246-37e0-89f7-6ad2c1b8dc33.roa File: 7d7acfe5-d246-37e0-89f7-6ad2c1b8dc33.roa (raw, json) Hash identifier: YbX23scI3WrHmU9Ef9z0O6Yl4RXd08xMyIuFqzh8FEQ= Subject key identifier: 8B:02:9D:BF:52:99:11:60:82:33:C9:53:5B:94:B4:FA:CD:D4:9D:03 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285848C150E2AB69FDE8DD95F3E9C0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7d7acfe5-d246-37e0-89f7-6ad2c1b8dc33.roa Signing time: Mon 03 Feb 2025 02:00:39 +0000 ROA not before: Mon 03 Feb 2025 02:00:39 +0000 ROA not after: Sun 04 May 2025 01:00:39 +0000 asID: 6167 IP address blocks: 174.219.48.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c1:50:e2:ab:69:fd:e8:dd:95:f3:e9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Feb 3 02:00:39 2025 GMT Not After : May 4 01:00:39 2025 GMT Subject: CN=8bd7421f-f314-43c5-b02d-a427f6687ae9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:95:59:c3:bb:63:12:ad:1f:a1:1d:7b:a0:f1: e0:7f:a8:0a:3d:7b:28:21:c5:94:b0:ba:f8:e2:34: c6:be:a7:0e:91:b0:f9:93:53:8b:22:e2:5f:89:fe: 5a:39:1c:f8:48:b3:01:70:e8:e8:12:eb:f3:da:81: 9b:6c:3a:5b:3b:af:90:88:ca:c6:d8:f5:f3:5f:c4: 0a:7e:db:01:3e:5d:36:37:ca:19:73:ec:96:6e:21: be:f7:0d:81:c9:50:23:a3:0b:fd:15:d2:6e:a6:1e: 8c:26:50:db:89:fa:17:ec:d4:b0:cf:b4:59:14:b5: 19:6a:b8:a7:0b:b6:61:4e:b9:34:6c:50:25:0b:a0: 09:9b:7e:d5:64:ea:cc:55:09:2e:a3:aa:cc:8c:c8: 38:d7:88:20:a3:f2:75:51:5b:4a:b1:a7:7f:32:2b: ab:09:65:af:57:fb:94:1a:c7:37:26:92:d0:0e:7e: 0d:91:b5:2e:4f:18:b9:2e:1d:58:11:89:23:37:36: e2:e1:54:f6:15:1f:fe:12:19:75:ec:8e:f4:18:94: 6e:ce:cc:f6:e5:47:11:c2:ee:c0:ca:21:64:46:6a: e4:59:58:84:cc:4c:cf:1a:6e:e4:1d:a6:fb:f6:dd: 7c:37:e9:86:54:dc:9c:37:3a:42:af:12:51:1c:12: 06:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:02:9D:BF:52:99:11:60:82:33:C9:53:5B:94:B4:FA:CD:D4:9D:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7d7acfe5-d246-37e0-89f7-6ad2c1b8dc33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.219.48.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:70:e7:f5:17:2f:e2:fd:cd:51:88:d7:13:5e:23:ec:23:97: 60:7d:7c:dc:26:62:cc:94:ac:39:09:3a:66:ec:60:53:40:a5: ab:77:8c:b4:d3:e5:c8:3b:96:90:a3:57:92:14:ce:5b:86:93: e4:d0:c8:88:e2:e1:96:7b:d9:62:83:05:c5:ba:57:c7:9d:ca: 93:cd:42:8a:a8:bb:3c:89:be:52:cd:86:42:c0:3a:37:cf:02: a9:5b:e1:53:8e:45:73:ea:83:06:f8:89:cd:a7:f2:5c:80:71: 6e:f2:15:4c:1c:69:4b:3e:33:6c:be:b0:c7:9e:d0:04:2b:b3: c0:34:63:d6:9b:34:df:bf:95:71:ef:24:0a:00:80:00:e6:9c: ab:0d:c2:d4:76:90:77:8f:b1:8d:83:3b:f4:fb:9d:d6:d7:05: 9d:7e:b9:2b:e5:12:7b:f4:2b:a3:30:76:04:f3:2d:89:f5:32: 56:9b:76:48:9e:78:fb:ff:70:c2:80:b6:e3:2c:45:b0:76:9d: 06:e6:aa:f2:78:72:7e:a2:44:a4:cd:74:a5:46:83:6c:1c:66: 38:c5:5a:12:9e:97:da:ac:09:82:19:f8:ea:9a:07:41:c6:c0: 2c:87:24:82:9d:a9:ea:cf:22:9e:f6:2d:c8:02:73:95:63:d1: be:a8:a3:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjBUOKraf3o3ZXz6cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDIwMzAyMDAzOVoXDTI1MDUwNDAxMDAzOVowLzEtMCsGA1UEAxMk OGJkNzQyMWYtZjMxNC00M2M1LWIwMmQtYTQyN2Y2Njg3YWU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJVZw7tjEq0foR17oPHgf6gKPXsoIcWUsLr4 4jTGvqcOkbD5k1OLIuJfif5aORz4SLMBcOjoEuvz2oGbbDpbO6+QiMrG2PXzX8QK ftsBPl02N8oZc+yWbiG+9w2ByVAjowv9FdJuph6MJlDbifoX7NSwz7RZFLUZarin C7ZhTrk0bFAlC6AJm37VZOrMVQkuo6rMjMg414ggo/J1UVtKsad/MiurCWWvV/uU Gsc3JpLQDn4NkbUuTxi5Lh1YEYkjNzbi4VT2FR/+Ehl17I70GJRuzsz25UcRwu7A yiFkRmrkWViEzEzPGm7kHab79t18N+mGVNycNzpCrxJRHBIGGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIsCnb9SmRFggjPJU1uUtPrN1J0DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvN2Q3YWNmZTUtZDI0Ni0z N2UwLTg5ZjctNmFkMmMxYjhkYzMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrtswMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF1w5/UXL+L9zVGI1xNeI+wjl2B9fNwmYsyUrDkJOmbsYFNApat3jLTT 5cg7lpCjV5IUzluGk+TQyIji4ZZ72WKDBcW6V8edypPNQoqouzyJvlLNhkLAOjfP Aqlb4VOORXPqgwb4ic2n8lyAcW7yFUwcaUs+M2y+sMee0AQrs8A0Y9abNN+/lXHv JAoAgADmnKsNwtR2kHePsY2DO/T7ndbXBZ1+uSvlEnv0K6MwdgTzLYn1Mlabdkie ePv/cMKAtuMsRbB2nQbmqvJ4cn6iRKTNdKVGg2wcZjjFWhKel9qsCYIZ+OqaB0HG wCyHJIKdqerPIp72LcgCc5Vj0b6oo8I= -----END CERTIFICATE-----Generated at Sun Apr 6 00:18:08 2025 by rpki-client