$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f9b20a50-2689-37c9-9341-c1a3b6aff5be.roa File: f9b20a50-2689-37c9-9341-c1a3b6aff5be.roa (raw, json) Hash identifier: VIKVJ4UERNLwSTz9ka+aQwIC47382jilmj+SNB/uKMk= Subject key identifier: C9:CC:D1:F4:72:64:A3:49:B9:80:DF:1F:3A:85:EB:66:14:59:2F:39 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285848C150EAD765055AC5EF42E680 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f9b20a50-2689-37c9-9341-c1a3b6aff5be.roa Signing time: Mon 03 Feb 2025 02:00:39 +0000 ROA not before: Mon 03 Feb 2025 02:00:39 +0000 ROA not after: Sun 04 May 2025 01:00:39 +0000 asID: 6167 IP address blocks: 174.212.244.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c1:50:ea:d7:65:05:5a:c5:ef:42:e6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Feb 3 02:00:39 2025 GMT Not After : May 4 01:00:39 2025 GMT Subject: CN=45f7716f-af0f-44fc-99f8-c7b3c57d5ba9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:cf:66:af:d3:92:67:63:9a:88:a8:08:9e:bd: 8f:25:01:cf:51:b8:3a:d5:fb:6a:9e:cf:2e:b3:1e: 08:0e:68:da:56:4b:7f:65:59:74:36:10:d2:1e:c9: b8:e4:8d:c7:00:37:3b:d9:b1:68:a5:1d:39:21:f6: 94:d6:c5:9e:a7:5e:1b:aa:1d:47:c1:5d:61:5c:48: e1:74:80:bd:75:b7:fb:b7:10:1a:b2:c9:6d:5a:8b: a1:8f:2a:69:35:9d:da:0a:7d:81:87:80:f7:7f:0d: 31:d7:3b:2d:38:bf:a3:49:4e:31:d2:05:ff:49:6f: 21:20:bf:51:9d:63:8e:00:dd:78:23:47:cc:75:cb: a5:bd:b6:cc:3f:e1:ae:16:b9:46:09:86:5f:19:90: 20:7e:b6:2c:39:0a:76:a5:d3:ca:b6:99:b4:24:f7: 84:ff:e5:5d:ab:5a:43:aa:f9:21:b5:5c:23:b1:2e: df:29:ac:5c:8f:39:a2:e0:02:fd:e6:63:c1:47:e1: 09:75:e2:f0:10:b9:5d:85:10:21:56:1e:ae:ef:1d: 90:9d:aa:cd:52:fa:6a:0a:be:63:a4:63:2f:fd:61: bc:e8:cd:33:45:b7:e0:30:cd:4c:d7:e0:57:18:80: f9:31:3c:7e:a1:c7:f6:b3:79:ad:92:2d:c4:67:1e: a8:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:CC:D1:F4:72:64:A3:49:B9:80:DF:1F:3A:85:EB:66:14:59:2F:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f9b20a50-2689-37c9-9341-c1a3b6aff5be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.212.244.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:5f:01:93:36:74:a4:3a:67:87:c3:8a:99:2e:ba:47:72:01: 3f:b2:78:10:51:54:55:6e:75:1f:65:c4:32:dc:ce:c7:b1:e1: b8:4b:17:b2:1e:c8:e6:fe:e9:e2:33:31:3f:d5:f6:91:97:6b: 6c:b5:5a:af:3b:ce:c2:d0:7a:f5:e8:48:27:ca:a3:fb:c1:ec: c5:c0:75:84:4c:81:97:81:39:01:3d:77:d6:e3:fa:9c:44:28: 60:dd:27:76:5e:ee:b6:55:47:6d:00:80:61:90:36:4e:6f:ed: 66:c6:b8:26:ef:9b:a4:2b:92:0f:b1:74:01:ed:95:83:ed:cd: 59:26:f7:a2:33:37:1c:ed:bb:ef:09:03:08:4c:0f:f3:88:bc: 7a:25:a2:15:9b:3a:b5:41:52:d2:16:b4:90:e6:ef:f4:d9:23: 69:9d:54:e9:02:a6:bf:46:3f:eb:ea:b6:3c:00:4a:a4:1c:06: 11:14:c4:37:4f:60:96:80:52:94:41:00:f5:a0:11:50:6e:9e: 86:b8:bd:a3:d9:05:77:27:2c:7f:42:40:67:d5:df:55:bc:1f: ec:95:be:95:89:13:1a:c3:9e:f4:8d:42:ec:41:b9:bc:1d:2a: bb:27:cf:59:07:69:e4:97:12:47:2e:cb:29:8a:47:ab:4c:d6: a4:3b:07:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjBUOrXZQVaxe9C5oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDIwMzAyMDAzOVoXDTI1MDUwNDAxMDAzOVowLzEtMCsGA1UEAxMk NDVmNzcxNmYtYWYwZi00NGZjLTk5ZjgtYzdiM2M1N2Q1YmE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmc9mr9OSZ2OaiKgInr2PJQHPUbg61ftqns8u sx4IDmjaVkt/ZVl0NhDSHsm45I3HADc72bFopR05IfaU1sWep14bqh1HwV1hXEjh dIC9dbf7txAassltWouhjyppNZ3aCn2Bh4D3fw0x1zstOL+jSU4x0gX/SW8hIL9R nWOOAN14I0fMdculvbbMP+GuFrlGCYZfGZAgfrYsOQp2pdPKtpm0JPeE/+Vdq1pD qvkhtVwjsS7fKaxcjzmi4AL95mPBR+EJdeLwELldhRAhVh6u7x2QnarNUvpqCr5j pGMv/WG86M0zRbfgMM1M1+BXGID5MTx+ocf2s3mtki3EZx6olQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMnM0fRyZKNJuYDfHzqF62YUWS85MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZjliMjBhNTAtMjY4OS0z N2M5LTkzNDEtYzFhM2I2YWZmNWJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrtT0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFxfAZM2dKQ6Z4fDipkuukdyAT+yeBBRVFVudR9lxDLczsex4bhLF7Ie yOb+6eIzMT/V9pGXa2y1Wq87zsLQevXoSCfKo/vB7MXAdYRMgZeBOQE9d9bj+pxE KGDdJ3Ze7rZVR20AgGGQNk5v7WbGuCbvm6Qrkg+xdAHtlYPtzVkm96IzNxztu+8J AwhMD/OIvHolohWbOrVBUtIWtJDm7/TZI2mdVOkCpr9GP+vqtjwASqQcBhEUxDdP YJaAUpRBAPWgEVBunoa4vaPZBXcnLH9CQGfV31W8H+yVvpWJExrDnvSNQuxBubwd Krsnz1kHaeSXEkcuyymKR6tM1qQ7B7k= -----END CERTIFICATE-----Generated at Sat Apr 5 21:49:56 2025 by rpki-client