$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2e7e9ae2-5bf4-32f8-b4eb-1c8bc4df4bc0.roa File: 2e7e9ae2-5bf4-32f8-b4eb-1c8bc4df4bc0.roa (raw, json) Hash identifier: USze1Q1EF0Wl54XhHg6/4Qmnj/N2GwFIJUt+yr49wF4= Subject key identifier: 0C:4E:8F:B7:F4:34:67:67:44:70:76:5F:97:91:E1:C7:F0:DD:CB:AC Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858499D10828E199DB61B9444F180 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2e7e9ae2-5bf4-32f8-b4eb-1c8bc4df4bc0.roa Signing time: Tue 22 Apr 2025 19:09:00 +0000 ROA not before: Tue 22 Apr 2025 19:09:00 +0000 ROA not after: Mon 21 Jul 2025 19:09:00 +0000 asID: 6167 IP address blocks: 174.254.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9d:10:82:8e:19:9d:b6:1b:94:44:f1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 22 19:09:00 2025 GMT Not After : Jul 21 19:09:00 2025 GMT Subject: CN=1e7408d2-6074-4b6e-bbcc-be4e84e429d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:8e:ff:ba:1f:cd:52:a5:d8:84:bf:52:eb:6c: 95:e5:04:27:1f:12:b1:ef:5b:9c:5c:16:1a:d5:66: f8:57:45:34:7a:f6:06:7e:f8:98:56:dc:c7:e1:45: ae:6f:be:0b:1a:73:4e:13:6a:1e:cd:47:43:9e:a1: fe:18:d6:ab:e5:c5:1f:55:15:2a:05:8b:aa:aa:d8: 98:56:cf:f6:c5:32:4c:a5:1e:9d:d2:9c:54:44:eb: f3:84:cc:4a:6a:81:78:23:9d:f2:3f:7e:67:27:b2: 01:58:7e:7b:20:51:76:2c:df:37:1c:f0:e0:14:b2: a3:6b:d0:9c:a0:18:fa:81:1a:2d:30:a9:d2:2a:8b: 90:5d:c9:fe:3c:1f:b8:4d:76:2d:fe:d6:61:a6:46: b1:d4:b3:86:76:6a:19:b5:7c:4d:86:43:b7:a3:37: 21:29:e0:1b:a3:cf:c6:73:e7:91:f3:36:f1:88:eb: 84:dd:30:bf:df:28:13:23:c1:4f:d6:20:86:ed:cf: db:62:de:55:54:85:d7:cd:5d:45:c4:7f:08:00:38: 2b:34:01:03:f1:81:07:8f:1a:de:e9:18:49:ba:0e: 31:0b:2a:2b:69:01:2a:17:17:fc:93:cc:e2:6d:28: e1:46:67:14:76:3d:09:bd:ec:29:53:00:04:3a:3d: e0:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:4E:8F:B7:F4:34:67:67:44:70:76:5F:97:91:E1:C7:F0:DD:CB:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2e7e9ae2-5bf4-32f8-b4eb-1c8bc4df4bc0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.254.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:49:36:2f:c8:cb:af:94:e9:4b:18:04:cf:c0:72:65:1c:b7: 9b:87:37:aa:de:ff:00:e2:2c:33:32:34:6b:be:f7:8a:23:23: 3c:a0:af:3e:59:d9:6a:e2:c8:58:68:79:32:38:aa:2c:30:dc: e1:1b:f3:ae:37:24:6d:18:2d:41:2c:3b:31:76:a4:90:40:3d: c9:95:c6:22:4d:af:4e:f7:e8:ee:d5:01:4b:84:c5:f3:46:bb: b5:c2:ba:d2:18:0e:cf:d4:59:eb:46:58:39:ca:1c:9e:aa:85: 26:5d:0c:83:e3:ed:22:7e:85:86:2f:e5:c2:3d:84:93:0b:0a: 08:1b:b5:b2:d2:96:34:6b:ad:9a:45:98:78:4c:83:4e:d6:49: 10:28:09:1c:7b:bf:c8:80:06:cb:e3:46:e4:30:1c:4d:44:58: 9e:fb:cb:92:00:8b:d9:53:a0:56:78:f9:69:ed:f6:33:7f:6f: 11:77:8d:b2:35:f8:18:f5:8c:5e:de:12:9a:ea:c5:f3:56:dc: 7b:b1:d3:e7:5b:a1:32:de:e9:3a:28:99:c2:90:9f:30:1b:a8: 7d:85:6a:d6:7c:5c:88:1e:ac:70:b3:61:46:d2:3a:72:66:44: 9d:83:6b:9b:7d:37:51:77:16:c7:44:0a:72:c5:83:a4:9b:b8: fb:5e:93:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmdEIKOGZ22G5RE8YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDQyMjE5MDkwMFoXDTI1MDcyMTE5MDkwMFowLzEtMCsGA1UEAxMk MWU3NDA4ZDItNjA3NC00YjZlLWJiY2MtYmU0ZTg0ZTQyOWQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq47/uh/NUqXYhL9S62yV5QQnHxKx71ucXBYa 1Wb4V0U0evYGfviYVtzH4UWub74LGnNOE2oezUdDnqH+GNar5cUfVRUqBYuqqtiY Vs/2xTJMpR6d0pxUROvzhMxKaoF4I53yP35nJ7IBWH57IFF2LN83HPDgFLKja9Cc oBj6gRotMKnSKouQXcn+PB+4TXYt/tZhpkax1LOGdmoZtXxNhkO3ozchKeAbo8/G c+eR8zbxiOuE3TC/3ygTI8FP1iCG7c/bYt5VVIXXzV1FxH8IADgrNAED8YEHjxre 6RhJug4xCyoraQEqFxf8k8zibSjhRmcUdj0JvewpUwAEOj3gAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAxOj7f0NGdnRHB2X5eR4cfw3cusMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMmU3ZTlhZTItNWJmNC0z MmY4LWI0ZWItMWM4YmM0ZGY0YmMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErv7QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ5JNi/Iy6+U6UsYBM/AcmUct5uHN6re/wDiLDMyNGu+94ojIzygrz5Z 2WriyFhoeTI4qiww3OEb8643JG0YLUEsOzF2pJBAPcmVxiJNr0736O7VAUuExfNG u7XCutIYDs/UWetGWDnKHJ6qhSZdDIPj7SJ+hYYv5cI9hJMLCggbtbLSljRrrZpF mHhMg07WSRAoCRx7v8iABsvjRuQwHE1EWJ77y5IAi9lToFZ4+Wnt9jN/bxF3jbI1 +Bj1jF7eEprqxfNW3Hux0+dboTLe6ToomcKQnzAbqH2FatZ8XIgerHCzYUbSOnJm RJ2Da5t9N1F3FsdECnLFg6SbuPtek+E= -----END CERTIFICATE-----Generated at Mon May 5 02:19:40 2025 by rpki-client