$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d83df8d4-1fd9-3c13-a3f0-41579fcda9b8.roa File: d83df8d4-1fd9-3c13-a3f0-41579fcda9b8.roa (raw, json) Hash identifier: DR2EpZhc275djhqqKyuoKInlmqiqfx6az7l/fDTfKAw= Subject key identifier: D4:C0:34:07:F0:CF:34:0C:96:01:2A:77:5B:2C:0E:8E:C2:65:7D:C3 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285848E86676B935C87A0073D7AA40 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d83df8d4-1fd9-3c13-a3f0-41579fcda9b8.roa Signing time: Mon 17 Feb 2025 02:00:38 +0000 ROA not before: Mon 17 Feb 2025 02:00:38 +0000 ROA not after: Sun 18 May 2025 01:00:38 +0000 asID: 6167 IP address blocks: 174.243.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e8:66:76:b9:35:c8:7a:00:73:d7:aa:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Feb 17 02:00:38 2025 GMT Not After : May 18 01:00:38 2025 GMT Subject: CN=e72dfe97-7cc5-44ad-a114-f27e8b529b31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:8b:b3:77:46:19:cf:ed:7d:18:5e:b3:15:3d: f7:7d:fb:63:e6:53:e0:37:69:0b:ad:9b:92:0e:ba: 54:3c:10:45:fb:c2:59:20:5c:74:0a:19:61:c2:12: 46:0d:78:3c:ff:4b:53:c6:8f:ea:e9:3c:35:d9:11: 29:6e:49:8c:8d:62:8b:35:f7:29:ec:77:2a:a9:d6: ef:30:6b:e4:24:eb:8a:0a:e7:59:01:c6:88:d3:01: 3a:c8:5d:03:cd:92:85:32:8b:17:9f:a6:4a:f3:3a: c0:08:a1:42:a2:76:b0:95:6a:0a:07:72:7b:51:bf: e6:75:42:f0:f2:d5:fa:aa:59:21:fb:b2:8b:19:52: e3:63:9d:4c:91:8e:d2:3b:43:3b:e1:db:5e:0a:ce: 03:b2:e7:08:d8:a3:13:75:84:1e:cf:36:24:09:b8: b1:68:e8:31:6f:16:41:0a:9c:85:cc:eb:6d:9e:25: 51:74:bb:a7:f9:35:a5:63:50:f3:2b:3e:80:3c:05: f4:a9:8d:e1:60:ed:44:b6:ae:60:4f:df:72:ed:02: 8c:32:0d:df:49:aa:8a:8e:8d:a4:cb:15:4c:c4:9b: ce:a1:2a:8a:c9:56:29:b0:38:60:b2:50:b6:e7:2c: 1f:41:be:0c:75:fa:72:5b:d9:1c:4e:a7:1f:5d:10: 5e:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:C0:34:07:F0:CF:34:0C:96:01:2A:77:5B:2C:0E:8E:C2:65:7D:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d83df8d4-1fd9-3c13-a3f0-41579fcda9b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.243.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:85:00:9d:a8:d2:a7:c2:f2:9e:ea:e0:46:5b:ea:14:eb:34: 6b:2f:de:9d:fe:78:20:0f:73:21:92:ec:71:bc:08:2e:15:62: f3:ac:22:58:00:15:96:1b:05:6d:1f:77:71:6e:5c:de:a6:23: 48:dc:d7:70:a5:b0:26:5f:21:1b:00:fe:3b:ce:d6:e0:0d:f5: e6:dd:f7:43:1b:c0:00:8a:2c:f3:70:17:46:4e:3d:2a:9c:9c: f1:72:0b:1b:ba:ba:80:09:2e:3f:fe:bc:7a:3f:f2:f2:b5:d4: 74:8b:1f:e2:04:d3:48:22:aa:e6:04:d3:d5:43:6c:28:37:01: dd:8e:0b:1d:a5:b2:b9:a3:0b:4e:76:bf:f8:c3:b8:3b:0f:00: b1:96:8f:84:50:88:60:37:ca:40:2c:bb:2f:df:fc:77:f9:27: e6:c9:77:33:22:06:9f:fa:a5:e2:c5:bf:a5:bc:19:94:67:7c: f3:f6:85:6b:ba:39:bd:b1:2d:b3:f8:ce:b6:7d:8b:8f:f8:28: 88:65:84:d7:75:5a:7b:ff:c2:b7:03:3d:ea:ec:6d:1d:82:cd: 2a:78:54:57:6f:73:9f:58:04:b2:f0:dc:d9:cf:1f:c7:f4:67: 3d:d2:d0:a7:45:e6:c0:55:5f:f7:66:b2:2a:33:5b:a9:e2:5b: 5a:6c:1e:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjoZna5Nch6AHPXqkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDIxNzAyMDAzOFoXDTI1MDUxODAxMDAzOFowLzEtMCsGA1UEAxMk ZTcyZGZlOTctN2NjNS00NGFkLWExMTQtZjI3ZThiNTI5YjMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjouzd0YZz+19GF6zFT33fftj5lPgN2kLrZuS DrpUPBBF+8JZIFx0ChlhwhJGDXg8/0tTxo/q6Tw12REpbkmMjWKLNfcp7Hcqqdbv MGvkJOuKCudZAcaI0wE6yF0DzZKFMosXn6ZK8zrACKFConawlWoKB3J7Ub/mdULw 8tX6qlkh+7KLGVLjY51MkY7SO0M74dteCs4DsucI2KMTdYQezzYkCbixaOgxbxZB CpyFzOttniVRdLun+TWlY1DzKz6APAX0qY3hYO1Etq5gT99y7QKMMg3fSaqKjo2k yxVMxJvOoSqKyVYpsDhgslC25ywfQb4MdfpyW9kcTqcfXRBebwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNTANAfwzzQMlgEqd1ssDo7CZX3DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZDgzZGY4ZDQtMWZkOS0z YzEzLWEzZjAtNDE1NzlmY2RhOWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErvPQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH+FAJ2o0qfC8p7q4EZb6hTrNGsv3p3+eCAPcyGS7HG8CC4VYvOsIlgA FZYbBW0fd3FuXN6mI0jc13ClsCZfIRsA/jvO1uAN9ebd90MbwACKLPNwF0ZOPSqc nPFyCxu6uoAJLj/+vHo/8vK11HSLH+IE00giquYE09VDbCg3Ad2OCx2lsrmjC052 v/jDuDsPALGWj4RQiGA3ykAsuy/f/Hf5J+bJdzMiBp/6peLFv6W8GZRnfPP2hWu6 Ob2xLbP4zrZ9i4/4KIhlhNd1Wnv/wrcDPersbR2CzSp4VFdvc59YBLLw3NnPH8f0 Zz3S0KdF5sBVX/dmsiozW6niW1psHlc= -----END CERTIFICATE-----Generated at Sat Apr 5 18:27:21 2025 by rpki-client