$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/23148a79-e798-32c9-9d4b-480a8bdf6a65.roa File: 23148a79-e798-32c9-9d4b-480a8bdf6a65.roa (raw, json) Hash identifier: mZrS/y7RamweeEFcqKcZmgepCnSWUvxfBCeQpbK1+lI= Subject key identifier: C9:43:49:B7:32:47:40:95:95:13:8D:FF:FC:C2:93:A4:2C:5C:F3:FE Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849A089EFDE3CC585D8DE60B700 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/23148a79-e798-32c9-9d4b-480a8bdf6a65.roa Signing time: Thu 24 Apr 2025 01:00:47 +0000 ROA not before: Thu 24 Apr 2025 01:00:47 +0000 ROA not after: Wed 23 Jul 2025 01:00:47 +0000 asID: 6167 IP address blocks: 174.224.168.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a0:89:ef:de:3c:c5:85:d8:de:60:b7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 24 01:00:47 2025 GMT Not After : Jul 23 01:00:47 2025 GMT Subject: CN=7bc531c3-341d-42b4-82ee-6bd8a932f49d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d3:bf:f7:6a:b7:6d:e8:76:a4:08:8e:c4:17: 49:5d:43:73:b8:fa:37:82:ab:46:9c:f2:70:45:e3: 48:18:d2:69:78:d1:f4:57:85:e8:c6:19:92:67:2f: 0b:99:ce:88:14:df:8f:eb:49:d3:62:45:32:b6:d2: 75:de:d2:8f:7a:20:eb:c6:bf:ac:34:36:33:65:bb: 49:de:e4:d4:44:ca:3f:1d:2d:79:c0:84:0b:dc:f5: 3a:97:46:73:93:a2:35:49:2c:a5:0c:38:c8:5f:22: 6e:cb:5f:96:4a:ae:11:3c:06:2e:30:73:d9:21:c2: 48:35:9d:33:ac:18:9b:29:66:00:ef:cc:f8:73:41: b5:41:dc:40:61:4b:b0:75:e6:d6:68:36:50:78:3c: 90:58:c8:d3:85:89:98:bf:99:ea:13:33:13:57:71: d8:72:69:81:9b:23:47:3c:70:00:0a:ff:b4:ec:97: be:4f:6e:51:b4:91:49:e4:a2:47:7d:a0:58:8e:8c: 42:4f:31:47:3a:02:28:63:95:3f:e0:47:25:59:74: 45:3f:6c:9a:58:aa:01:9b:4d:0c:a0:22:98:02:25: eb:f2:4c:9f:5c:31:d5:39:cd:42:57:f8:95:8e:0c: e5:6f:4c:31:c2:51:c5:88:d4:51:b9:80:6a:4e:91: 78:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:43:49:B7:32:47:40:95:95:13:8D:FF:FC:C2:93:A4:2C:5C:F3:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/23148a79-e798-32c9-9d4b-480a8bdf6a65.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.224.168.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:9f:82:c0:5e:f1:00:e1:7a:8a:87:f8:41:a0:c9:bc:9c:76: 86:48:c0:bb:86:66:88:3f:05:0f:67:1f:2a:28:66:b0:5d:e9: 97:e9:66:f0:c0:d7:80:d9:44:5f:93:04:cb:e3:53:18:77:9b: ec:99:25:8b:79:ca:84:c3:a0:d4:aa:fb:26:9b:a8:d4:13:00: c5:ae:ac:52:bf:04:3a:de:0b:20:e4:ff:b0:ef:cc:cb:04:d2: 08:08:92:4a:0d:5a:dc:40:2b:2b:27:6a:47:1f:59:95:f7:01: 33:1b:ae:49:4d:97:16:e9:d2:63:7f:8b:aa:b4:ab:ae:3d:40: b1:2f:d0:f2:31:e4:5d:c5:f9:08:b7:6f:e4:6e:24:14:64:8f: aa:ef:23:8c:da:b7:a1:2d:e9:e7:ab:ad:85:14:b8:7f:40:03: 75:aa:b4:fe:01:8b:90:36:7a:b7:3d:c8:cb:52:19:08:ae:93: c7:0d:4c:93:c5:2f:aa:82:91:87:3c:82:fd:fd:3b:d2:d9:0e: 14:80:74:db:af:0f:38:cd:e4:6a:11:11:90:7f:84:db:f6:13: 84:88:89:fe:df:68:24:03:28:80:d1:28:46:3e:30:95:c5:52: 5a:75:3c:29:31:e9:7d:a3:46:8c:82:a2:8b:2a:d6:0a:1f:38: 8b:35:7b:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmgie/ePMWF2N5gtwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDQyNDAxMDA0N1oXDTI1MDcyMzAxMDA0N1owLzEtMCsGA1UEAxMk N2JjNTMxYzMtMzQxZC00MmI0LTgyZWUtNmJkOGE5MzJmNDlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9O/92q3beh2pAiOxBdJXUNzuPo3gqtGnPJw ReNIGNJpeNH0V4XoxhmSZy8Lmc6IFN+P60nTYkUyttJ13tKPeiDrxr+sNDYzZbtJ 3uTURMo/HS15wIQL3PU6l0Zzk6I1SSylDDjIXyJuy1+WSq4RPAYuMHPZIcJINZ0z rBibKWYA78z4c0G1QdxAYUuwdebWaDZQeDyQWMjThYmYv5nqEzMTV3HYcmmBmyNH PHAACv+07Je+T25RtJFJ5KJHfaBYjoxCTzFHOgIoY5U/4EclWXRFP2yaWKoBm00M oCKYAiXr8kyfXDHVOc1CV/iVjgzlb0wxwlHFiNRRuYBqTpF42QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMlDSbcyR0CVlRON//zCk6QsXPP+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMjMxNDhhNzktZTc5OC0z MmM5LTlkNGItNDgwYThiZGY2YTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDruCoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGSfgsBe8QDheoqH+EGgybycdoZIwLuGZog/BQ9nHyooZrBd6ZfpZvDA 14DZRF+TBMvjUxh3m+yZJYt5yoTDoNSq+yabqNQTAMWurFK/BDreCyDk/7DvzMsE 0ggIkkoNWtxAKysnakcfWZX3ATMbrklNlxbp0mN/i6q0q649QLEv0PIx5F3F+Qi3 b+RuJBRkj6rvI4zat6Et6eerrYUUuH9AA3WqtP4Bi5A2erc9yMtSGQiuk8cNTJPF L6qCkYc8gv39O9LZDhSAdNuvDzjN5GoREZB/hNv2E4SIif7faCQDKIDRKEY+MJXF Ulp1PCkx6X2jRoyCoosq1gofOIs1e8I= -----END CERTIFICATE-----Generated at Mon May 12 19:15:43 2025 by rpki-client