$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/98d5e6a4-a62e-33be-b6b2-f3f22b0c663d.roa File: 98d5e6a4-a62e-33be-b6b2-f3f22b0c663d.roa (raw, json) Hash identifier: YcY0BhasCQyX7aemFvZ8HrdfVhwfy4p8UHgGFeJpADc= Subject key identifier: F4:FB:7D:2F:0E:3F:E0:78:F8:62:C4:EA:F8:26:F6:C3:3E:09:42:19 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285848E866737663304D6A89697700 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/98d5e6a4-a62e-33be-b6b2-f3f22b0c663d.roa Signing time: Mon 17 Feb 2025 02:00:38 +0000 ROA not before: Mon 17 Feb 2025 02:00:38 +0000 ROA not after: Sun 18 May 2025 01:00:38 +0000 asID: 6167 IP address blocks: 174.239.24.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e8:66:73:76:63:30:4d:6a:89:69:77:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Feb 17 02:00:38 2025 GMT Not After : May 18 01:00:38 2025 GMT Subject: CN=ba6c7542-a920-4a26-8952-cf0e99358de0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:a3:7e:b0:3b:9c:49:79:12:e9:14:16:43:cf: 0e:47:96:fd:bb:4e:a8:86:d1:ba:3e:2c:0a:15:34: 29:8d:f0:af:85:2b:ee:af:53:ee:bb:b8:65:81:51: 04:d7:62:12:79:b2:55:d2:de:b2:27:b2:a2:96:37: b4:a1:a9:1c:12:a5:b1:90:c3:1e:a0:e6:1d:85:e0: 79:89:b9:bc:72:48:90:ce:7a:de:e6:16:62:53:fd: 6a:b2:68:f5:08:08:13:cb:39:ff:58:67:b0:fa:c7: 3e:74:be:f5:44:d1:cc:4e:11:37:e7:2b:05:90:fc: 79:9e:df:d0:4f:da:b7:1b:db:24:78:bd:0a:bd:05: 84:37:51:2a:99:1e:93:02:16:17:47:b9:8b:bc:10: c5:fa:80:b3:d4:4f:a4:00:b2:22:04:60:e8:39:2c: ed:67:70:6a:02:70:46:ae:94:f4:8c:8f:22:7a:e1: c3:7c:c1:50:2e:78:fa:10:5c:b3:77:ca:3e:51:7a: 3e:b1:55:6b:8c:d7:57:d1:46:d6:9b:4c:ff:8e:4b: b3:6b:9b:a5:0d:b4:66:ef:91:0a:b0:78:9b:a6:95: 7e:be:41:e4:fc:a4:d9:dd:e4:7b:de:c3:3d:ff:3a: 49:dd:b6:42:0b:61:1f:94:6a:ba:c9:65:96:82:ed: 53:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:FB:7D:2F:0E:3F:E0:78:F8:62:C4:EA:F8:26:F6:C3:3E:09:42:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/98d5e6a4-a62e-33be-b6b2-f3f22b0c663d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.239.24.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:c7:e3:86:e9:6e:a9:ff:10:fa:b2:78:b9:ba:5c:c1:96:58: ce:06:72:dc:18:cc:e6:07:d2:57:1b:47:95:55:04:fb:71:7d: 31:8d:16:ad:1f:b7:bf:a0:46:98:70:64:fb:33:73:11:55:c2: b7:d5:40:ae:c7:8e:69:4f:bf:18:a8:aa:ea:2c:75:64:1a:5f: 8f:b9:7e:55:7f:e5:a4:98:b7:9b:7d:b6:0c:92:47:1a:32:6e: 18:d8:74:f0:24:a4:4c:ef:1e:74:42:cf:8f:84:8a:bf:00:ee: 0e:2f:f8:2e:2a:f5:f9:a8:bb:cf:3b:72:c7:bd:95:53:8f:e6: 41:22:30:da:5f:44:09:ae:be:61:42:dc:5e:85:de:12:66:de: 97:46:8b:5f:95:6f:d2:16:46:b0:41:ae:be:39:7c:b1:5c:71: 9d:66:84:80:89:5e:11:db:b6:35:85:8b:f2:1d:9f:33:7c:3d: ff:25:68:2c:62:10:59:8f:61:c5:d3:86:15:09:6c:43:93:52: eb:92:64:23:ae:63:96:e7:8e:d1:15:63:67:70:32:c2:1d:65: 69:4c:f8:80:a3:f4:5b:33:ea:6a:8e:be:bc:b2:d8:3e:b7:49: 0b:41:06:e2:ec:49:79:86:d3:e2:01:e2:44:89:f6:2d:1d:f5: ad:8a:b6:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjoZnN2YzBNaolpdwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDIxNzAyMDAzOFoXDTI1MDUxODAxMDAzOFowLzEtMCsGA1UEAxMk YmE2Yzc1NDItYTkyMC00YTI2LTg5NTItY2YwZTk5MzU4ZGUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkaN+sDucSXkS6RQWQ88OR5b9u06ohtG6PiwK FTQpjfCvhSvur1Puu7hlgVEE12ISebJV0t6yJ7Kilje0oakcEqWxkMMeoOYdheB5 ibm8ckiQznre5hZiU/1qsmj1CAgTyzn/WGew+sc+dL71RNHMThE35ysFkPx5nt/Q T9q3G9skeL0KvQWEN1EqmR6TAhYXR7mLvBDF+oCz1E+kALIiBGDoOSztZ3BqAnBG rpT0jI8ieuHDfMFQLnj6EFyzd8o+UXo+sVVrjNdX0UbWm0z/jkuza5ulDbRm75EK sHibppV+vkHk/KTZ3eR73sM9/zpJ3bZCC2EflGq6yWWWgu1TqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPT7fS8OP+B4+GLE6vgm9sM+CUIZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOThkNWU2YTQtYTYyZS0z M2JlLWI2YjItZjNmMjJiMGM2NjNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCru8YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAfH44bpbqn/EPqyeLm6XMGWWM4GctwYzOYH0lcbR5VVBPtxfTGNFq0f t7+gRphwZPszcxFVwrfVQK7HjmlPvxioquosdWQaX4+5flV/5aSYt5t9tgySRxoy bhjYdPAkpEzvHnRCz4+Eir8A7g4v+C4q9fmou887cse9lVOP5kEiMNpfRAmuvmFC 3F6F3hJm3pdGi1+Vb9IWRrBBrr45fLFccZ1mhICJXhHbtjWFi/IdnzN8Pf8laCxi EFmPYcXThhUJbEOTUuuSZCOuY5bnjtEVY2dwMsIdZWlM+ICj9Fsz6mqOvryy2D63 SQtBBuLsSXmG0+IB4kSJ9i0d9a2Ktpk= -----END CERTIFICATE-----Generated at Sat Apr 5 18:26:55 2025 by rpki-client