$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/04138cf1-146f-3d29-9512-6cbecb09249d.roa File: 04138cf1-146f-3d29-9512-6cbecb09249d.roa (raw, json) Hash identifier: 5Kspsckp6U5upkmGoGWpitujYNrwiXx48cVw2ZI2AS0= Subject key identifier: D2:4B:31:48:68:75:6B:95:3F:B0:9B:57:1C:B5:3B:18:93:23:21:15 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849A089DAFDA88F2D95D4DB7C00 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/04138cf1-146f-3d29-9512-6cbecb09249d.roa Signing time: Thu 24 Apr 2025 01:00:47 +0000 ROA not before: Thu 24 Apr 2025 01:00:47 +0000 ROA not after: Wed 23 Jul 2025 01:00:47 +0000 asID: 6167 IP address blocks: 174.204.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a0:89:da:fd:a8:8f:2d:95:d4:db:7c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 24 01:00:47 2025 GMT Not After : Jul 23 01:00:47 2025 GMT Subject: CN=38422ea6-9cf0-4a42-b048-0ef0d49d63ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:7f:b8:07:4e:7b:f3:c3:e0:1b:5d:f9:66:83: ae:3a:1e:53:aa:25:50:b5:92:33:23:2e:a4:69:50: b3:ba:f4:b5:19:0f:7e:7e:a8:c3:9d:dc:54:94:ee: 1d:d3:27:30:ec:54:c1:ed:2a:68:d0:89:42:91:f1: 5d:11:c4:a1:2a:42:e4:c4:59:14:30:b4:dc:df:8f: 8f:8b:ad:42:e9:7b:6b:48:2c:77:35:24:c6:d1:67: 0f:79:ad:d8:57:8b:bc:c8:bf:20:98:39:b1:e1:04: 9f:7d:b6:37:4d:d6:16:02:e7:5f:1a:2c:3f:5d:a7: d8:a3:0d:2c:f2:e3:98:e9:52:1e:9c:f3:2e:ee:83: 14:d8:47:b0:99:ca:f6:38:4e:e2:a2:c2:66:e9:1b: f6:7d:f7:1b:5f:d1:f0:56:e4:9f:06:7e:16:1e:e4: 06:cf:52:57:cf:20:2d:8e:42:cc:d6:9a:5b:86:fe: b6:2b:fd:b1:d1:af:48:92:a0:3b:68:b7:d7:2b:d1: 26:4f:a3:61:de:60:5a:c3:87:ec:c7:54:4e:37:35: 47:f7:62:56:02:00:b1:0b:e6:3f:e1:43:d6:80:2b: 73:4b:8d:39:f7:94:32:14:21:68:ee:b4:55:3c:20: 69:a8:8f:a9:c3:5f:0a:f3:da:81:a9:48:f8:19:0e: 18:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:4B:31:48:68:75:6B:95:3F:B0:9B:57:1C:B5:3B:18:93:23:21:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/04138cf1-146f-3d29-9512-6cbecb09249d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.204.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:bb:9a:94:8d:67:23:f9:17:b3:c8:d3:f8:c2:17:57:17:23: a7:11:3e:85:0f:fc:60:fb:9f:89:63:17:91:a4:bc:97:05:e4: 77:34:ab:73:e2:ea:43:cf:e2:0d:60:ef:86:20:96:ea:39:65: a6:7e:fc:cf:5b:da:b6:93:51:c9:91:84:6c:94:90:85:bd:91: d8:11:04:4e:b7:26:03:a9:6e:fc:da:89:07:83:2d:08:ba:e3: 31:07:b9:34:d6:cb:de:bf:4e:f1:d9:8a:e0:c9:04:b5:39:39: 08:7a:01:95:5a:75:06:68:26:6b:90:13:4c:27:9b:13:88:24: d0:1c:d6:20:c0:7d:56:ed:1d:db:8f:de:06:ee:89:db:bf:2d: bb:0e:ac:35:b9:3f:40:c7:8e:5d:5e:fd:80:c3:c0:b4:58:f4: c1:71:32:4b:29:ef:c1:5b:39:80:fd:f5:29:6d:a1:c2:5a:21: f7:7c:86:a2:28:05:a1:be:c0:5f:02:e4:75:d4:e4:57:3e:fb: f6:4c:eb:88:4f:9a:41:a8:7b:e7:71:96:4d:91:02:84:79:64: f2:54:9b:8f:92:0c:d1:6a:b3:85:f8:4d:25:e2:c0:df:b7:17: 1a:0a:50:b2:84:32:20:14:09:ad:7d:a4:eb:d9:fa:27:a4:e8: c1:27:a0:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmgidr9qI8tldTbfAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDQyNDAxMDA0N1oXDTI1MDcyMzAxMDA0N1owLzEtMCsGA1UEAxMk Mzg0MjJlYTYtOWNmMC00YTQyLWIwNDgtMGVmMGQ0OWQ2M2NhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiX+4B05788PgG135ZoOuOh5TqiVQtZIzIy6k aVCzuvS1GQ9+fqjDndxUlO4d0ycw7FTB7Spo0IlCkfFdEcShKkLkxFkUMLTc34+P i61C6XtrSCx3NSTG0WcPea3YV4u8yL8gmDmx4QSffbY3TdYWAudfGiw/XafYow0s 8uOY6VIenPMu7oMU2Eewmcr2OE7iosJm6Rv2ffcbX9HwVuSfBn4WHuQGz1JXzyAt jkLM1ppbhv62K/2x0a9IkqA7aLfXK9EmT6Nh3mBaw4fsx1RONzVH92JWAgCxC+Y/ 4UPWgCtzS40595QyFCFo7rRVPCBpqI+pw18K89qBqUj4GQ4YJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNJLMUhodWuVP7CbVxy1OxiTIyEVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMDQxMzhjZjEtMTQ2Zi0z ZDI5LTk1MTItNmNiZWNiMDkyNDlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGrsyAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACi7mpSNZyP5F7PI0/jCF1cXI6cRPoUP/GD7n4ljF5GkvJcF5Hc0q3Pi 6kPP4g1g74Ygluo5ZaZ+/M9b2raTUcmRhGyUkIW9kdgRBE63JgOpbvzaiQeDLQi6 4zEHuTTWy96/TvHZiuDJBLU5OQh6AZVadQZoJmuQE0wnmxOIJNAc1iDAfVbtHduP 3gbuidu/LbsOrDW5P0DHjl1e/YDDwLRY9MFxMksp78FbOYD99SltocJaIfd8hqIo BaG+wF8C5HXU5Fc++/ZM64hPmkGoe+dxlk2RAoR5ZPJUm4+SDNFqs4X4TSXiwN+3 FxoKULKEMiAUCa19pOvZ+iek6MEnoL8= -----END CERTIFICATE-----Generated at Sun May 11 15:03:41 2025 by rpki-client