$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b7317df8-7dc9-3699-94e2-7dcf13d5ee0a.roa File: b7317df8-7dc9-3699-94e2-7dcf13d5ee0a.roa (raw, json) Hash identifier: N6GiOVL5CGVdlpatB3o08IgtBM4TTu1oGJqtuO2L9M8= Subject key identifier: 37:AF:26:BB:27:77:B3:DA:68:E5:8A:5B:BC:79:37:0B:9B:E1:BD:AC Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285848E866710BDA613DCCE76BD880 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b7317df8-7dc9-3699-94e2-7dcf13d5ee0a.roa Signing time: Mon 17 Feb 2025 02:00:38 +0000 ROA not before: Mon 17 Feb 2025 02:00:38 +0000 ROA not after: Sun 18 May 2025 01:00:38 +0000 asID: 6167 IP address blocks: 174.235.120.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e8:66:71:0b:da:61:3d:cc:e7:6b:d8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Feb 17 02:00:38 2025 GMT Not After : May 18 01:00:38 2025 GMT Subject: CN=39ca3b34-89a9-445e-a0c1-f7155499b347 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:d3:df:80:ca:48:85:e0:e5:ee:fa:c9:45:0d: 57:22:d8:91:ac:a5:5e:38:9d:ee:ab:ed:50:40:68: 9a:18:09:50:c9:32:e7:83:27:f2:ba:ed:f6:78:0c: 08:f7:6b:3a:18:cf:a7:4c:85:c4:d1:c5:b2:73:56: cd:b3:dd:d4:dc:45:cf:eb:02:a5:2d:b1:24:a8:21: 93:79:c7:97:5d:c0:06:eb:35:a3:c9:ea:55:2e:81: 96:55:c5:c3:2a:71:e1:bd:7e:42:09:4a:c6:d7:d1: fb:56:6e:35:4d:6f:4a:b6:99:be:a1:6a:5b:28:a5: 8d:16:41:e0:d1:9e:79:ec:0d:1e:1d:78:59:da:dd: 81:8b:ab:b0:27:aa:14:47:78:5d:4d:45:84:81:a3: 34:2d:c7:a8:49:5e:0e:18:90:bf:ad:31:46:f0:7a: 32:2b:34:69:8a:b3:10:f7:6b:2a:23:0d:c6:18:7c: ac:80:ad:44:27:d9:25:c1:18:77:ab:0c:03:a7:c0: c3:52:e4:99:f4:6d:c4:00:68:14:a3:40:0b:dd:dc: 50:60:9b:17:66:5a:c3:3d:34:01:a5:54:97:5c:15: 2d:d5:3c:27:26:9f:e2:5e:bf:fa:a4:58:a1:d6:7e: 64:0c:99:c7:ed:17:c3:5d:5f:ba:2b:b9:c7:9f:d3: 21:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:AF:26:BB:27:77:B3:DA:68:E5:8A:5B:BC:79:37:0B:9B:E1:BD:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b7317df8-7dc9-3699-94e2-7dcf13d5ee0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.235.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:b5:0b:86:ba:6c:11:b5:90:3f:94:2c:c4:2b:8b:f2:69:6e: 5d:8d:ea:de:fd:f4:e1:7f:8f:a8:ea:27:e3:ad:77:3e:8c:a4: a3:70:03:9a:2b:78:1c:6f:46:49:17:26:86:6b:8c:f1:d1:75: 7d:7d:7e:0c:90:13:b1:da:23:3b:b4:23:18:0a:1b:fd:ba:87: 79:ac:99:86:1e:41:22:26:61:2d:7d:c3:ed:df:19:c6:8a:0a: 24:14:88:74:4b:f7:db:9d:51:9e:8c:2f:c6:78:b3:d2:00:84: b9:b0:20:11:b2:d0:43:04:10:1b:1a:30:ff:25:dc:f5:e6:1f: 01:ad:f0:fe:ae:3e:58:a2:12:6d:0c:5c:23:b5:3f:4f:f3:fb: 66:d0:cf:83:10:e6:54:6f:a5:14:3a:40:87:a8:eb:a8:1f:67: b4:10:84:d7:a7:af:6e:1d:eb:38:b0:dd:3d:ea:8c:b6:43:18: a8:1e:7f:8f:cc:7e:26:8f:f7:9d:4b:3e:83:0b:95:4a:3c:53: c4:43:8c:1b:2f:c3:24:19:e1:71:bf:1f:5f:d0:aa:5e:d3:b4: 20:69:de:89:4c:2b:3c:db:cd:e7:5e:f9:84:04:0e:93:2b:50: bb:07:50:bb:02:bd:3f:d8:a8:01:39:17:7f:c2:a9:6c:76:0f: ed:dc:e6:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjoZnEL2mE9zOdr2IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDIxNzAyMDAzOFoXDTI1MDUxODAxMDAzOFowLzEtMCsGA1UEAxMk MzljYTNiMzQtODlhOS00NDVlLWEwYzEtZjcxNTU0OTliMzQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodPfgMpIheDl7vrJRQ1XItiRrKVeOJ3uq+1Q QGiaGAlQyTLngyfyuu32eAwI92s6GM+nTIXE0cWyc1bNs93U3EXP6wKlLbEkqCGT eceXXcAG6zWjyepVLoGWVcXDKnHhvX5CCUrG19H7Vm41TW9Ktpm+oWpbKKWNFkHg 0Z557A0eHXhZ2t2Bi6uwJ6oUR3hdTUWEgaM0LceoSV4OGJC/rTFG8HoyKzRpirMQ 92sqIw3GGHysgK1EJ9klwRh3qwwDp8DDUuSZ9G3EAGgUo0AL3dxQYJsXZlrDPTQB pVSXXBUt1TwnJp/iXr/6pFih1n5kDJnH7RfDXV+6K7nHn9Mh9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDevJrsnd7PaaOWKW7x5Nwub4b2sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYjczMTdkZjgtN2RjOS0z Njk5LTk0ZTItN2RjZjEzZDVlZTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrut4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAy1C4a6bBG1kD+ULMQri/Jpbl2N6t799OF/j6jqJ+Otdz6MpKNwA5or eBxvRkkXJoZrjPHRdX19fgyQE7HaIzu0IxgKG/26h3msmYYeQSImYS19w+3fGcaK CiQUiHRL99udUZ6ML8Z4s9IAhLmwIBGy0EMEEBsaMP8l3PXmHwGt8P6uPliiEm0M XCO1P0/z+2bQz4MQ5lRvpRQ6QIeo66gfZ7QQhNenr24d6ziw3T3qjLZDGKgef4/M fiaP951LPoMLlUo8U8RDjBsvwyQZ4XG/H1/Qql7TtCBp3olMKzzbzede+YQEDpMr ULsHULsCvT/YqAE5F3/CqWx2D+3c5uQ= -----END CERTIFICATE-----Generated at Sat Apr 5 18:27:04 2025 by rpki-client