$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e631685f-16b8-3f82-b0d7-4fd2df02099c.roa File: e631685f-16b8-3f82-b0d7-4fd2df02099c.roa (raw, json) Hash identifier: sysRCvQPeg5nrL4iFgoZjDK9zbUXErKRmxqXhZGlEts= Subject key identifier: DE:B5:D1:0A:77:0E:BA:39:1E:B6:B7:B5:60:EB:92:E4:08:B6:EB:DA Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285848E866697E32A702DB5164C800 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e631685f-16b8-3f82-b0d7-4fd2df02099c.roa Signing time: Mon 17 Feb 2025 02:00:38 +0000 ROA not before: Mon 17 Feb 2025 02:00:38 +0000 ROA not after: Sun 18 May 2025 01:00:38 +0000 asID: 6167 IP address blocks: 174.252.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e8:66:69:7e:32:a7:02:db:51:64:c8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Feb 17 02:00:38 2025 GMT Not After : May 18 01:00:38 2025 GMT Subject: CN=d8ad384e-40eb-4a78-ab54-ab231ad4a165 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:40:3c:8f:3a:58:3f:33:b7:e4:db:3b:3b:bf: 9e:29:d8:72:71:89:29:dc:51:bb:ad:ec:b9:25:d1: 79:92:75:84:75:00:50:e1:ff:9e:60:23:ea:b0:e3: 41:84:28:33:12:38:a5:ec:11:73:3c:69:14:5e:39: b5:09:99:e9:19:cc:a8:3c:00:85:aa:50:de:b3:20: 68:2b:2b:41:9c:fb:87:94:21:a6:64:6b:9e:57:70: ab:18:92:9c:a0:11:dc:7a:b1:fe:80:23:bb:bc:06: bf:84:7b:ba:c6:b7:0c:26:9e:22:40:b0:5e:f7:eb: 10:5a:7c:9f:fe:f6:14:7a:fe:83:04:3e:97:a7:c8: 63:7d:bb:1a:93:36:8b:7b:14:30:d3:b4:9d:ad:f9: e1:4b:60:d6:fe:18:5a:b7:63:b0:ea:be:2e:e5:f5: 4e:ba:02:7a:57:02:fe:3c:8d:21:86:66:a2:b7:4c: 96:1c:63:89:7b:11:30:32:43:69:69:21:6e:78:86: 17:0f:20:ce:29:c6:ba:99:8e:2f:f0:c8:6c:7e:fb: 7a:22:0b:d7:8e:e5:2a:09:5e:04:7c:a1:ff:c0:21: eb:4e:41:c4:95:35:cd:fd:f1:f7:c5:16:4b:68:57: f2:4e:00:d2:10:38:d5:9e:62:03:b1:60:0f:d2:82: 73:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:B5:D1:0A:77:0E:BA:39:1E:B6:B7:B5:60:EB:92:E4:08:B6:EB:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e631685f-16b8-3f82-b0d7-4fd2df02099c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.252.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:c8:9b:45:27:d4:ef:13:97:7d:43:c8:7a:6b:2f:0e:c0:1e: 5e:10:3d:b8:da:cb:00:21:fb:0d:8b:e0:3e:a7:2b:a0:33:94: ea:5e:2a:d0:b1:0d:39:6d:36:e7:77:5a:2d:d9:49:5b:40:02: 6e:bc:91:82:ef:05:f2:ae:43:bd:7d:da:22:22:b8:96:99:39: cf:c0:5b:9a:39:85:c3:2b:44:e2:94:ae:1e:f7:c9:c5:ab:09: 3a:7c:bf:87:20:22:ce:80:3a:88:91:00:d9:42:5d:cd:f2:b4: 8a:69:dd:1b:46:22:23:4b:96:59:a9:33:1c:06:f6:34:bc:fc: 50:d0:36:87:7c:0b:51:ea:de:96:bf:03:bf:45:e8:b2:3e:d3: 5c:b0:06:f0:44:c9:8c:21:54:0f:5c:cb:d9:d8:7e:60:8a:3e: 1d:ca:79:c8:4b:51:c8:df:f5:c5:94:9f:c8:9d:e3:b0:ef:db: 17:5e:f9:5d:9b:0c:e2:2d:44:bc:2e:44:cb:71:61:27:af:03: 98:54:ec:5f:72:e5:1f:93:ac:3e:60:1e:5e:84:70:d4:a6:2d: c7:27:d9:8a:c7:85:a2:56:19:df:e2:d8:2e:21:01:64:09:dd: 99:70:85:e5:e4:64:b5:aa:0d:7f:b1:a6:82:90:5e:0b:2d:46: 13:a3:33:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjoZml+MqcC21FkyAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDIxNzAyMDAzOFoXDTI1MDUxODAxMDAzOFowLzEtMCsGA1UEAxMk ZDhhZDM4NGUtNDBlYi00YTc4LWFiNTQtYWIyMzFhZDRhMTY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0A8jzpYPzO35Ns7O7+eKdhycYkp3FG7rey5 JdF5knWEdQBQ4f+eYCPqsONBhCgzEjil7BFzPGkUXjm1CZnpGcyoPACFqlDesyBo KytBnPuHlCGmZGueV3CrGJKcoBHcerH+gCO7vAa/hHu6xrcMJp4iQLBe9+sQWnyf /vYUev6DBD6Xp8hjfbsakzaLexQw07SdrfnhS2DW/hhat2Ow6r4u5fVOugJ6VwL+ PI0hhmait0yWHGOJexEwMkNpaSFueIYXDyDOKca6mY4v8Mhsfvt6IgvXjuUqCV4E fKH/wCHrTkHElTXN/fH3xRZLaFfyTgDSEDjVnmIDsWAP0oJzpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN610Qp3Dro5Hra3tWDrkuQItuvaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZTYzMTY4NWYtMTZiOC0z ZjgyLWIwZDctNGZkMmRmMDIwOTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErvwAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIzIm0Un1O8Tl31DyHprLw7AHl4QPbjaywAh+w2L4D6nK6AzlOpeKtCx DTltNud3Wi3ZSVtAAm68kYLvBfKuQ7192iIiuJaZOc/AW5o5hcMrROKUrh73ycWr CTp8v4cgIs6AOoiRANlCXc3ytIpp3RtGIiNLllmpMxwG9jS8/FDQNod8C1Hq3pa/ A79F6LI+01ywBvBEyYwhVA9cy9nYfmCKPh3KechLUcjf9cWUn8id47Dv2xde+V2b DOItRLwuRMtxYSevA5hU7F9y5R+TrD5gHl6EcNSmLccn2YrHhaJWGd/i2C4hAWQJ 3ZlwheXkZLWqDX+xpoKQXgstRhOjM14= -----END CERTIFICATE-----Generated at Sun Apr 6 07:20:16 2025 by rpki-client