$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f7c521b7-016a-3368-965c-5c7f01090a13.roa File: f7c521b7-016a-3368-965c-5c7f01090a13.roa (raw, json) Hash identifier: LMrReZd6NpY5wJrgSCARgjr9XxoP5ptx19Joc2ztGso= Subject key identifier: 94:95:1E:0C:37:58:F6:A9:71:37:A1:48:CD:88:2F:0C:84:FC:FC:53 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285848A15B5E2CB91BF66195557500 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f7c521b7-016a-3368-965c-5c7f01090a13.roa Signing time: Wed 22 Jan 2025 15:16:08 +0000 ROA not before: Wed 22 Jan 2025 15:16:08 +0000 ROA not after: Tue 22 Apr 2025 14:16:08 +0000 asID: 6167 IP address blocks: 174.235.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a1:5b:5e:2c:b9:1b:f6:61:95:55:75:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jan 22 15:16:08 2025 GMT Not After : Apr 22 14:16:08 2025 GMT Subject: CN=913d5c82-a5ba-4b96-aa17-af2726d2db47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:af:97:87:b4:64:8a:f2:7f:46:5f:92:5e:73: a1:b1:c7:4d:81:a9:24:62:8f:04:3a:96:5b:70:9d: 17:d0:a1:6a:ce:9c:c9:d1:70:b0:81:26:62:8d:12: 70:70:44:26:8e:66:2d:c5:d0:4d:bc:14:8b:2e:1f: 4a:ff:76:9c:cd:ec:ca:81:59:cd:af:e4:b6:1c:ce: 93:8d:31:86:08:ef:3e:7d:55:ba:d1:8e:e4:2d:6b: c7:ac:f8:b4:06:9f:26:0f:6e:86:33:d9:7f:f6:fa: 10:c5:e3:6b:20:ef:15:2a:89:56:aa:f5:9e:61:b5: 44:61:c7:27:3e:f6:1e:1e:1a:96:f1:ba:e1:59:a7: 14:bd:16:86:72:60:c0:e1:bd:5b:07:24:72:26:08: 24:34:cc:96:57:b7:17:9b:63:bd:c0:67:34:85:fc: 89:27:0a:f3:7c:44:62:cf:89:30:21:15:d1:f1:5a: 1a:24:c5:6a:88:cb:f5:06:4f:55:cc:93:62:37:b1: fe:b6:91:68:4f:3a:5b:aa:f1:9f:2b:42:9c:af:34: 62:04:53:4c:15:a8:a9:ab:71:d6:d9:66:ce:f9:86: 42:74:82:85:8c:2c:dd:4b:51:ad:e5:00:79:33:b5: 13:6b:a8:81:40:65:46:a6:87:d3:c6:79:a0:9b:4e: 68:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:95:1E:0C:37:58:F6:A9:71:37:A1:48:CD:88:2F:0C:84:FC:FC:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f7c521b7-016a-3368-965c-5c7f01090a13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.235.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:d3:b7:05:a4:6e:55:ef:3c:5a:55:3a:ad:3e:6d:4b:ec:f2: 0f:d7:8c:f9:42:27:05:19:f2:a5:7c:79:31:64:35:a9:98:68: 97:81:62:53:ee:8c:7d:81:60:89:3a:bd:77:47:7b:d6:9b:9c: 8c:cd:6d:65:09:53:46:04:6d:f6:10:d3:c7:a0:bd:01:d0:69: 12:00:5a:7f:89:c7:10:48:23:eb:9d:92:e0:37:ad:8f:0f:6f: 7e:64:0f:63:a6:d2:79:6b:3f:4c:b6:67:06:e6:95:64:4b:09: 7e:61:2b:1b:b5:0e:66:27:03:18:b0:e4:d1:2c:21:c4:73:8f: aa:e0:dc:27:fe:ea:58:c9:15:83:b7:b1:1a:17:d3:67:ac:c1: fe:6b:e3:a9:9f:b6:1f:be:65:63:a5:fe:d0:94:02:a8:68:6d: 97:49:71:bd:e5:97:14:49:ba:84:10:83:36:33:6c:7d:7b:5d: 17:0a:0d:45:e8:9a:8c:55:ad:d6:e4:e2:f3:bb:20:11:85:b9: df:47:55:0e:f6:67:31:25:a2:8e:64:84:d5:03:55:e9:0b:88: 2c:1b:65:1a:46:14:97:a1:3a:d3:55:dc:09:73:03:65:8d:0c: 37:c6:56:57:f7:80:e8:2a:6e:9a:0d:aa:68:da:7d:6f:0a:90: 98:54:b7:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEihW14suRv2YZVVdQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDEyMjE1MTYwOFoXDTI1MDQyMjE0MTYwOFowLzEtMCsGA1UEAxMk OTEzZDVjODItYTViYS00Yjk2LWFhMTctYWYyNzI2ZDJkYjQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg6+Xh7RkivJ/Rl+SXnOhscdNgakkYo8EOpZb cJ0X0KFqzpzJ0XCwgSZijRJwcEQmjmYtxdBNvBSLLh9K/3aczezKgVnNr+S2HM6T jTGGCO8+fVW60Y7kLWvHrPi0Bp8mD26GM9l/9voQxeNrIO8VKolWqvWeYbVEYccn PvYeHhqW8brhWacUvRaGcmDA4b1bByRyJggkNMyWV7cXm2O9wGc0hfyJJwrzfERi z4kwIRXR8VoaJMVqiMv1Bk9VzJNiN7H+tpFoTzpbqvGfK0KcrzRiBFNMFaipq3HW 2WbO+YZCdIKFjCzdS1Gt5QB5M7UTa6iBQGVGpofTxnmgm05oPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJSVHgw3WPapcTehSM2ILwyE/PxTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZjdjNTIxYjctMDE2YS0z MzY4LTk2NWMtNWM3ZjAxMDkwYTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEruvwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABvTtwWkblXvPFpVOq0+bUvs8g/XjPlCJwUZ8qV8eTFkNamYaJeBYlPu jH2BYIk6vXdHe9abnIzNbWUJU0YEbfYQ08egvQHQaRIAWn+JxxBII+udkuA3rY8P b35kD2Om0nlrP0y2ZwbmlWRLCX5hKxu1DmYnAxiw5NEsIcRzj6rg3Cf+6ljJFYO3 sRoX02eswf5r46mfth++ZWOl/tCUAqhobZdJcb3llxRJuoQQgzYzbH17XRcKDUXo moxVrdbk4vO7IBGFud9HVQ72ZzEloo5khNUDVekLiCwbZRpGFJehOtNV3AlzA2WN DDfGVlf3gOgqbpoNqmjafW8KkJhUt7U= -----END CERTIFICATE-----Generated at Sat Apr 5 23:25:02 2025 by rpki-client