$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0a2fe2ba-a63e-377d-8267-11a345a38439.roa File: 0a2fe2ba-a63e-377d-8267-11a345a38439.roa (raw, json) Hash identifier: KZk9r6EnoN0nnBYp5nkPHbtBPpL+mNz78XqNPihpj9c= Subject key identifier: 1A:A6:AA:F1:DF:C4:56:24:82:61:C3:FB:03:FD:9C:1D:FD:41:37:C4 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849A089DE23C87D394EA7B34900 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0a2fe2ba-a63e-377d-8267-11a345a38439.roa Signing time: Thu 24 Apr 2025 01:00:47 +0000 ROA not before: Thu 24 Apr 2025 01:00:47 +0000 ROA not after: Wed 23 Jul 2025 01:00:47 +0000 asID: 6167 IP address blocks: 174.213.116.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a0:89:de:23:c8:7d:39:4e:a7:b3:49:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 24 01:00:47 2025 GMT Not After : Jul 23 01:00:47 2025 GMT Subject: CN=3f02a29b-149e-47e0-8af1-7bd3865ad876 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:70:6b:03:76:4d:52:66:d8:9b:fc:05:81:60: ec:b1:2c:27:d4:b8:aa:39:fc:ff:eb:0b:c0:c8:f2: 29:5d:12:2c:17:35:0c:b5:47:9f:07:ed:42:08:36: 55:ec:95:02:c7:e1:28:dd:43:24:e2:70:3d:56:67: e7:5a:70:3b:ea:51:a5:58:ac:dd:dd:8e:86:c2:ba: 88:70:bb:57:ff:e7:11:62:dd:2f:7f:20:62:e6:65: 80:59:6f:40:8a:f9:81:02:42:7c:8d:09:de:27:74: 3b:01:90:ba:b0:1c:00:3b:6f:e1:3f:c2:56:e3:e8: 80:81:8b:8f:6e:6b:7f:bc:a6:50:01:db:8f:40:0b: c2:b7:aa:c1:cf:47:aa:40:c1:e8:fe:9e:c7:8b:ed: 94:67:80:45:27:75:a7:05:45:f0:c7:8c:af:aa:e0: 25:ff:f5:a4:9b:27:fc:c8:ec:e7:bf:d0:6f:a3:9c: c8:75:e2:f6:88:70:63:b3:6e:a2:1d:da:db:97:a3: a2:23:44:d9:c2:50:02:b4:9e:c6:c9:c2:a8:6d:b5: 58:9a:b2:81:1e:1a:2b:24:4d:15:58:64:ca:d1:4f: bc:91:b3:ad:f3:18:99:80:1c:80:a1:e8:21:c7:38: bf:83:6a:d7:8c:60:a5:3e:b3:74:0c:5c:d2:37:cb: 83:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:A6:AA:F1:DF:C4:56:24:82:61:C3:FB:03:FD:9C:1D:FD:41:37:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0a2fe2ba-a63e-377d-8267-11a345a38439.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.213.116.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:12:ef:9b:59:2c:c3:b5:94:a5:f3:11:1a:8a:37:b6:21:fc: b1:8a:60:8b:3d:56:2b:70:ea:41:65:d6:93:15:73:48:ae:c5: 90:88:aa:a1:ff:31:90:9f:b2:ae:8d:52:3b:74:7a:17:e8:0f: 35:8f:25:57:6c:3f:ad:c5:4d:5d:65:31:31:f1:dc:ad:ac:7a: ef:54:14:56:b7:9a:e7:ba:7d:7b:f7:4b:a2:db:d3:6f:71:88: 89:3c:fc:73:ab:75:8c:fe:99:db:0d:a4:4c:00:e8:8c:e9:2a: 55:83:8b:42:f8:89:af:89:be:66:bd:f8:d8:2c:89:45:d3:51: a9:88:69:8b:ac:ed:ec:9c:1e:8d:1b:b1:30:c5:08:34:14:0f: 27:0c:f1:1e:14:6d:f0:bc:03:ea:cd:6f:98:12:dc:35:7e:f8: ec:31:c9:96:f3:a1:9a:d4:fe:85:37:af:1c:65:78:f7:0e:e7: 59:e9:ae:d9:81:a2:3c:ad:75:20:fd:df:fe:42:e6:69:a9:87: 77:b2:35:99:1b:97:fc:d7:98:7c:a2:f7:4a:4e:78:db:c0:5a: d3:f4:7d:d6:c5:03:11:55:b5:b6:e9:7f:f4:a4:70:0a:19:70: eb:eb:8c:c8:19:a5:cc:28:ae:ba:db:9a:f4:da:f1:6f:e2:f1: e7:4c:d5:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmgid4jyH05TqezSQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDQyNDAxMDA0N1oXDTI1MDcyMzAxMDA0N1owLzEtMCsGA1UEAxMk M2YwMmEyOWItMTQ5ZS00N2UwLThhZjEtN2JkMzg2NWFkODc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0XBrA3ZNUmbYm/wFgWDssSwn1LiqOfz/6wvA yPIpXRIsFzUMtUefB+1CCDZV7JUCx+Eo3UMk4nA9VmfnWnA76lGlWKzd3Y6GwrqI cLtX/+cRYt0vfyBi5mWAWW9AivmBAkJ8jQneJ3Q7AZC6sBwAO2/hP8JW4+iAgYuP bmt/vKZQAduPQAvCt6rBz0eqQMHo/p7Hi+2UZ4BFJ3WnBUXwx4yvquAl//Wkmyf8 yOznv9Bvo5zIdeL2iHBjs26iHdrbl6OiI0TZwlACtJ7GycKobbVYmrKBHhorJE0V WGTK0U+8kbOt8xiZgByAoeghxzi/g2rXjGClPrN0DFzSN8uDcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBqmqvHfxFYkgmHD+wP9nB39QTfEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMGEyZmUyYmEtYTYzZS0z NzdkLTgyNjctMTFhMzQ1YTM4NDM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrtV0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIYS75tZLMO1lKXzERqKN7Yh/LGKYIs9Vitw6kFl1pMVc0iuxZCIqqH/ MZCfsq6NUjt0ehfoDzWPJVdsP63FTV1lMTHx3K2seu9UFFa3mue6fXv3S6Lb029x iIk8/HOrdYz+mdsNpEwA6IzpKlWDi0L4ia+Jvma9+NgsiUXTUamIaYus7eycHo0b sTDFCDQUDycM8R4UbfC8A+rNb5gS3DV++OwxyZbzoZrU/oU3rxxlePcO51nprtmB ojytdSD93/5C5mmph3eyNZkbl/zXmHyi90pOeNvAWtP0fdbFAxFVtbbpf/SkcAoZ cOvrjMgZpcworrrbmvTa8W/i8edM1bA= -----END CERTIFICATE-----Generated at Sat May 10 22:30:06 2025 by rpki-client