$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b39ec023-ac87-34ae-a387-3c24998f6c03.roa File: b39ec023-ac87-34ae-a387-3c24998f6c03.roa (raw, json) Hash identifier: 4N3wkMpf1AaBkk258N4ZUekkp3N+b+bWJlQ0Ty48Jjw= Subject key identifier: C8:EB:7E:18:4C:20:46:57:11:1D:43:59:A7:A7:CF:9F:8F:B1:E6:BD Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285848E86672DF244FB3B453428480 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b39ec023-ac87-34ae-a387-3c24998f6c03.roa Signing time: Mon 17 Feb 2025 02:00:38 +0000 ROA not before: Mon 17 Feb 2025 02:00:38 +0000 ROA not after: Sun 18 May 2025 01:00:38 +0000 asID: 6167 IP address blocks: 174.238.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e8:66:72:df:24:4f:b3:b4:53:42:84:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Feb 17 02:00:38 2025 GMT Not After : May 18 01:00:38 2025 GMT Subject: CN=f059b9b3-85d7-4664-bfc6-1f0b2081d571 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:59:c3:77:79:d9:f0:75:de:1d:b5:0a:d8:e2: f1:fa:ef:a4:1c:dd:b0:df:94:55:e8:24:cd:66:a8: a9:12:a4:93:34:44:48:3e:b6:ac:79:43:e3:c9:7f: 5c:81:48:c8:7b:18:97:df:6d:5f:f8:1a:f1:d1:aa: d7:14:59:46:2a:1d:ca:02:0a:05:27:24:ae:c8:93: 4c:e5:f1:98:66:c3:ad:12:52:e8:bd:80:82:9c:90: 1b:b0:66:2d:2b:f3:3d:b9:58:89:f4:1f:96:40:b5: 3e:f4:cd:93:81:87:18:f9:0e:48:6f:42:cd:b2:b5: 53:ac:75:46:26:d7:c3:9d:66:dd:30:95:66:c2:ec: 0e:1a:0a:a7:22:d4:6e:f9:92:1c:83:3b:a1:33:0f: 44:b5:20:d1:f8:7b:ec:d7:63:7b:5e:aa:9e:58:32: 86:b7:a0:cb:b2:1a:d9:f2:b1:da:e1:09:79:aa:c5: 22:82:c9:1c:36:15:9d:51:e2:ac:94:83:85:27:42: 30:01:88:8c:23:e7:b4:11:16:da:d4:e7:5c:e3:c4: 11:eb:79:7d:a1:91:49:15:4c:d6:3d:f5:7f:99:fa: 52:6a:54:e9:d8:ed:e2:a9:aa:3d:32:ad:da:74:06: 89:e8:19:28:34:24:00:bb:c1:c1:84:6e:36:23:20: 42:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:EB:7E:18:4C:20:46:57:11:1D:43:59:A7:A7:CF:9F:8F:B1:E6:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b39ec023-ac87-34ae-a387-3c24998f6c03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.238.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:1f:a7:52:c0:bb:86:fa:c7:74:cc:51:b4:c0:e9:24:ad:c3: 84:71:4a:89:98:24:d3:3e:71:21:33:ab:52:cd:35:8d:3e:bf: 66:e0:a4:fe:b8:70:c7:2e:ea:b3:9d:fd:77:59:e9:00:66:bd: a1:e4:2f:a9:65:4c:e7:cf:7f:a2:9c:45:de:d9:e8:b5:b9:69: 0e:4f:ec:4f:96:8e:9d:59:49:a7:1e:53:df:d8:cb:4e:00:23: 58:54:df:ef:17:f4:43:96:fe:38:67:ff:ad:15:ae:3e:7e:c3: a8:e0:90:62:94:39:50:45:bb:ba:ac:b4:74:1c:d5:7f:2e:dd: 50:ce:a8:2e:c3:e4:3c:0c:2c:a4:32:2e:6d:40:c0:aa:ce:60: 6b:6a:cd:46:40:2c:2b:02:74:18:f4:6d:2c:c5:e1:a6:21:4f: 3a:67:41:6f:15:24:b9:b8:f3:0f:09:2d:8c:4a:70:b9:9f:7b: d7:23:13:03:3d:94:ac:b4:93:12:ce:03:09:1f:63:4f:d5:99: dc:c2:21:53:75:4b:f3:cf:fd:67:ad:cb:2b:9c:1b:c5:50:ea: b2:d0:5d:cc:14:77:5f:63:78:a0:84:26:6f:46:bd:60:a3:60: 36:f2:af:c1:3d:08:c3:2a:b0:f9:b1:be:59:6f:bf:4a:bd:df: d2:04:43:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjoZnLfJE+ztFNChIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDIxNzAyMDAzOFoXDTI1MDUxODAxMDAzOFowLzEtMCsGA1UEAxMk ZjA1OWI5YjMtODVkNy00NjY0LWJmYzYtMWYwYjIwODFkNTcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmVnDd3nZ8HXeHbUK2OLx+u+kHN2w35RV6CTN ZqipEqSTNERIPraseUPjyX9cgUjIexiX321f+Brx0arXFFlGKh3KAgoFJySuyJNM 5fGYZsOtElLovYCCnJAbsGYtK/M9uViJ9B+WQLU+9M2TgYcY+Q5Ib0LNsrVTrHVG JtfDnWbdMJVmwuwOGgqnItRu+ZIcgzuhMw9EtSDR+Hvs12N7XqqeWDKGt6DLshrZ 8rHa4Ql5qsUigskcNhWdUeKslIOFJ0IwAYiMI+e0ERba1Odc48QR63l9oZFJFUzW PfV/mfpSalTp2O3iqao9Mq3adAaJ6BkoNCQAu8HBhG42IyBCIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMjrfhhMIEZXER1DWaenz5+Psea9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYjM5ZWMwMjMtYWM4Ny0z NGFlLWEzODctM2MyNDk5OGY2YzAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEru4gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADwfp1LAu4b6x3TMUbTA6SStw4RxSomYJNM+cSEzq1LNNY0+v2bgpP64 cMcu6rOd/XdZ6QBmvaHkL6llTOfPf6KcRd7Z6LW5aQ5P7E+Wjp1ZSaceU9/Yy04A I1hU3+8X9EOW/jhn/60Vrj5+w6jgkGKUOVBFu7qstHQc1X8u3VDOqC7D5DwMLKQy Lm1AwKrOYGtqzUZALCsCdBj0bSzF4aYhTzpnQW8VJLm48w8JLYxKcLmfe9cjEwM9 lKy0kxLOAwkfY0/VmdzCIVN1S/PP/WetyyucG8VQ6rLQXcwUd19jeKCEJm9GvWCj YDbyr8E9CMMqsPmxvllvv0q939IEQ7g= -----END CERTIFICATE-----Generated at Thu Apr 10 19:34:12 2025 by rpki-client