$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b32987b2-7a7a-3c7b-8cde-bf6b3a9427e9.roa File: b32987b2-7a7a-3c7b-8cde-bf6b3a9427e9.roa (raw, json) Hash identifier: V7boZsPSNxpqPSM1N+cb7qQG86kAlcP/TgBfWdnoqwM= Subject key identifier: 20:52:9A:E3:38:E0:AB:6C:29:D0:57:F0:18:49:DA:E8:47:8E:B9:9E Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285848E8666F91759E99258AD2E480 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b32987b2-7a7a-3c7b-8cde-bf6b3a9427e9.roa Signing time: Mon 17 Feb 2025 02:00:38 +0000 ROA not before: Mon 17 Feb 2025 02:00:38 +0000 ROA not after: Sun 18 May 2025 01:00:38 +0000 asID: 6167 IP address blocks: 174.232.234.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e8:66:6f:91:75:9e:99:25:8a:d2:e4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Feb 17 02:00:38 2025 GMT Not After : May 18 01:00:38 2025 GMT Subject: CN=df94551d-27bf-44ed-a97d-061407736484 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:d6:f8:bb:a3:bf:36:4d:8c:0f:cb:c8:ea:3a: a4:0e:59:71:1c:54:81:41:06:6a:03:c3:cb:58:55: be:d2:8c:df:77:25:9d:b9:6e:24:0b:da:1f:4b:c6: ec:61:59:c3:7b:11:61:be:5c:c3:a5:ed:20:62:d2: 7e:84:35:98:d4:6d:fc:79:bc:cb:e3:4c:d4:74:e3: b3:07:15:06:69:d2:7c:99:b5:75:ec:1d:83:0b:03: eb:91:03:5f:8e:b6:db:6a:97:38:13:dd:e1:3b:9b: 02:1b:2d:0d:16:f7:5c:5b:bb:d6:12:97:cd:38:d1: 34:58:8d:d3:1b:0b:74:c4:f4:04:3e:6b:b8:69:07: 55:31:6a:9f:88:85:b7:b9:05:61:1c:94:76:b2:ff: 23:28:9e:80:2b:16:ad:60:74:ba:6f:67:28:02:bc: df:dd:62:b7:c1:c0:af:e6:83:79:73:c5:2c:56:45: 4a:78:77:18:4e:a8:da:15:40:b8:fe:02:bd:be:2c: 7f:ba:12:8c:c7:a9:61:c2:7b:53:cd:1d:c8:3e:b2: d2:8b:9b:71:df:59:e3:d9:01:2f:d0:ae:a0:cb:3b: 64:ec:c6:04:c2:c5:93:2d:7e:d9:d7:bf:78:be:34: fe:d8:57:be:2b:b0:ab:c5:b8:a6:b8:11:69:51:40: 38:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:52:9A:E3:38:E0:AB:6C:29:D0:57:F0:18:49:DA:E8:47:8E:B9:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b32987b2-7a7a-3c7b-8cde-bf6b3a9427e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.232.234.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:d0:c8:ed:d7:08:48:72:17:bd:c7:99:14:06:5b:94:2a:8e: 02:87:fc:e1:e2:72:6d:8a:5a:74:a9:99:91:fa:1d:81:e1:ce: a9:67:bf:34:7e:65:e4:e1:44:3f:50:b6:f9:cb:d6:8f:d2:3c: a4:c6:4a:d2:ff:85:8d:e7:d5:81:b9:0b:cd:94:57:71:4f:40: f3:d2:e9:fd:7a:05:30:7c:d5:de:2b:0b:ae:1b:d2:64:40:3f: 06:43:2d:83:dd:12:6d:9b:62:2d:ef:29:a4:6f:ca:10:c8:d8: 65:fa:a4:0a:ae:41:df:0b:f3:63:cc:a5:9f:89:dd:75:99:ec: 94:e4:72:e9:63:07:a5:f3:30:eb:a9:0c:b5:7d:51:f0:58:db: 1a:3d:ea:24:6e:97:aa:5f:84:c7:31:4a:74:cd:0b:b7:8e:53: d2:8a:88:1f:32:a4:23:1b:2c:21:24:20:ed:38:96:1a:08:96: 25:2d:c0:7c:47:96:81:6d:c9:fa:38:20:74:ca:c7:02:b9:57: da:82:fb:87:e3:e8:c6:91:61:08:39:08:11:c0:1a:c9:b3:98: c0:8b:fd:1c:51:81:10:45:25:57:71:75:16:5b:8d:d7:ab:09: 7d:28:e0:99:fb:6a:24:6d:19:b4:35:26:99:2c:0a:cf:15:7f: a7:25:d0:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjoZm+RdZ6ZJYrS5IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDIxNzAyMDAzOFoXDTI1MDUxODAxMDAzOFowLzEtMCsGA1UEAxMk ZGY5NDU1MWQtMjdiZi00NGVkLWE5N2QtMDYxNDA3NzM2NDg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9b4u6O/Nk2MD8vI6jqkDllxHFSBQQZqA8PL WFW+0ozfdyWduW4kC9ofS8bsYVnDexFhvlzDpe0gYtJ+hDWY1G38ebzL40zUdOOz BxUGadJ8mbV17B2DCwPrkQNfjrbbapc4E93hO5sCGy0NFvdcW7vWEpfNONE0WI3T Gwt0xPQEPmu4aQdVMWqfiIW3uQVhHJR2sv8jKJ6AKxatYHS6b2coArzf3WK3wcCv 5oN5c8UsVkVKeHcYTqjaFUC4/gK9vix/uhKMx6lhwntTzR3IPrLSi5tx31nj2QEv 0K6gyztk7MYEwsWTLX7Z1794vjT+2Fe+K7CrxbimuBFpUUA4lQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCBSmuM44KtsKdBX8BhJ2uhHjrmeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYjMyOTg3YjItN2E3YS0z YzdiLThjZGUtYmY2YjNhOTQyN2U5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrujqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABDQyO3XCEhyF73HmRQGW5QqjgKH/OHicm2KWnSpmZH6HYHhzqlnvzR+ ZeThRD9QtvnL1o/SPKTGStL/hY3n1YG5C82UV3FPQPPS6f16BTB81d4rC64b0mRA PwZDLYPdEm2bYi3vKaRvyhDI2GX6pAquQd8L82PMpZ+J3XWZ7JTkculjB6XzMOup DLV9UfBY2xo96iRul6pfhMcxSnTNC7eOU9KKiB8ypCMbLCEkIO04lhoIliUtwHxH loFtyfo4IHTKxwK5V9qC+4fj6MaRYQg5CBHAGsmzmMCL/RxRgRBFJVdxdRZbjder CX0o4Jn7aiRtGbQ1JpksCs8Vf6cl0Ps= -----END CERTIFICATE-----Generated at Sat Apr 5 18:24:21 2025 by rpki-client