$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e91be0ea-2840-3c92-a2d0-dc11f4dd593e.roa File: e91be0ea-2840-3c92-a2d0-dc11f4dd593e.roa (raw, json) Hash identifier: 8jtVyI7b3XEdWsJNW4/Tfvi06zSPYt3UkwPNS12xjts= Subject key identifier: C2:A1:B2:91:E2:8C:6C:24:78:1C:72:F5:D0:72:C7:92:8E:11:39:51 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285848E8666F73A702641EC6CC7E80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e91be0ea-2840-3c92-a2d0-dc11f4dd593e.roa Signing time: Mon 17 Feb 2025 02:00:38 +0000 ROA not before: Mon 17 Feb 2025 02:00:38 +0000 ROA not after: Sun 18 May 2025 01:00:38 +0000 asID: 6167 IP address blocks: 174.232.230.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e8:66:6f:73:a7:02:64:1e:c6:cc:7e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Feb 17 02:00:38 2025 GMT Not After : May 18 01:00:38 2025 GMT Subject: CN=ce66f952-7829-431a-9b25-5123d35cd242 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:bd:aa:72:14:08:42:96:3b:cd:f7:2f:11:97: 92:ec:3a:d6:c9:61:47:ae:30:88:bf:6c:12:0a:dd: a4:f4:c9:46:da:92:b4:3a:4d:56:5a:94:d4:03:11: 96:30:db:e7:9f:38:5e:3e:31:ca:9c:87:71:9e:b9: c8:53:2f:5b:cb:9a:d3:c2:c9:3d:e2:3e:af:58:af: 46:a4:a5:42:fa:b1:5f:c8:fb:56:ca:c1:a7:3a:8f: 37:bf:19:42:54:37:73:70:a8:b2:c7:94:30:46:8c: c4:f3:11:7b:b7:20:86:3d:fe:b7:0f:c6:51:2d:80: 1c:0e:a0:dc:78:3f:4f:75:29:95:b0:0b:94:06:2b: ee:78:e9:1d:34:f5:c7:a2:5c:c2:2a:e1:0a:4a:cb: f4:99:79:39:a5:b0:3d:a8:ad:82:d3:28:1b:f7:9f: 90:e7:4e:dc:da:cc:a7:00:8d:4a:73:7b:de:46:90: 46:e8:a8:07:cd:69:03:8c:d6:f7:2c:4d:17:88:6e: d9:32:cf:47:91:fd:bc:40:34:9a:bd:99:fb:f0:0a: d7:75:eb:80:84:5d:e3:f7:48:18:34:d5:07:1d:b0: 1c:ab:00:44:c9:e0:c8:ff:aa:9c:8e:22:36:49:9d: f6:c4:ea:4c:90:fd:18:31:b6:38:69:58:2e:8a:46: 4d:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:A1:B2:91:E2:8C:6C:24:78:1C:72:F5:D0:72:C7:92:8E:11:39:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e91be0ea-2840-3c92-a2d0-dc11f4dd593e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.232.230.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:60:94:bb:1c:30:c2:30:c7:4c:6f:cf:67:85:3e:96:71:35: 15:d2:08:1d:73:0b:bc:52:0e:cb:5d:47:88:ca:46:50:2c:95: a5:ce:e2:9d:18:71:40:68:e8:27:5d:16:bb:52:58:1f:36:ff: 32:eb:3e:13:f6:fd:6e:51:6b:e2:2f:01:00:f3:bb:48:05:72: c6:35:33:f6:04:52:1c:8f:43:c5:54:fd:ba:c0:c1:fe:30:4d: 46:bf:6a:20:af:58:a4:f1:35:0a:59:9e:86:81:f5:80:36:a2: 5b:ce:fb:76:ec:f9:1d:e8:ae:82:c8:83:ef:d0:a0:63:17:5e: 46:65:ab:91:0e:5d:b2:b8:58:09:a4:c8:2c:8b:8f:4b:f9:f5: ec:c5:d5:91:2b:0c:38:a1:df:6f:91:0f:14:25:63:63:1c:fe: d3:e7:08:d9:07:fb:05:92:24:65:3b:79:79:72:dd:d3:2a:a6: a6:c8:b7:ff:64:de:0d:0a:a8:27:67:a8:dd:d3:49:64:11:64: de:dd:ea:6c:51:cb:5d:c5:42:91:3e:6e:51:84:f2:39:aa:bf: df:96:25:70:22:21:39:74:04:81:f9:9e:14:28:3d:17:48:56: d1:6a:10:a0:02:2e:87:96:c8:d4:d5:f8:42:3f:4f:45:fc:26: 4f:8d:7b:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjoZm9zpwJkHsbMfoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDIxNzAyMDAzOFoXDTI1MDUxODAxMDAzOFowLzEtMCsGA1UEAxMk Y2U2NmY5NTItNzgyOS00MzFhLTliMjUtNTEyM2QzNWNkMjQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwr2qchQIQpY7zfcvEZeS7DrWyWFHrjCIv2wS Ct2k9MlG2pK0Ok1WWpTUAxGWMNvnnzhePjHKnIdxnrnIUy9by5rTwsk94j6vWK9G pKVC+rFfyPtWysGnOo83vxlCVDdzcKiyx5QwRozE8xF7tyCGPf63D8ZRLYAcDqDc eD9PdSmVsAuUBivueOkdNPXHolzCKuEKSsv0mXk5pbA9qK2C0ygb95+Q507c2syn AI1Kc3veRpBG6KgHzWkDjNb3LE0XiG7ZMs9Hkf28QDSavZn78ArXdeuAhF3j90gY NNUHHbAcqwBEyeDI/6qcjiI2SZ32xOpMkP0YMbY4aVguikZNsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMKhspHijGwkeBxy9dByx5KOETlRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZTkxYmUwZWEtMjg0MC0z YzkyLWEyZDAtZGMxMWY0ZGQ1OTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrujmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABpglLscMMIwx0xvz2eFPpZxNRXSCB1zC7xSDstdR4jKRlAslaXO4p0Y cUBo6CddFrtSWB82/zLrPhP2/W5Ra+IvAQDzu0gFcsY1M/YEUhyPQ8VU/brAwf4w TUa/aiCvWKTxNQpZnoaB9YA2olvO+3bs+R3oroLIg+/QoGMXXkZlq5EOXbK4WAmk yCyLj0v59ezF1ZErDDih32+RDxQlY2Mc/tPnCNkH+wWSJGU7eXly3dMqpqbIt/9k 3g0KqCdnqN3TSWQRZN7d6mxRy13FQpE+blGE8jmqv9+WJXAiITl0BIH5nhQoPRdI VtFqEKACLoeWyNTV+EI/T0X8Jk+Ne3o= -----END CERTIFICATE-----Generated at Sat Apr 5 23:24:37 2025 by rpki-client