$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/35964eab-8df7-3f5b-92bd-aa1e70f54c9e.roa File: 35964eab-8df7-3f5b-92bd-aa1e70f54c9e.roa (raw, json) Hash identifier: VJq5Fs4N+6SM90zi9k1fVhRYLsmIVjIiybbGdjYXElE= Subject key identifier: 64:46:36:82:AC:AF:6B:BA:51:4A:2E:34:B7:EA:0E:7B:0E:F9:BD:DF Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849A089F0E6C76A4A0DC5738540 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/35964eab-8df7-3f5b-92bd-aa1e70f54c9e.roa Signing time: Thu 24 Apr 2025 01:00:47 +0000 ROA not before: Thu 24 Apr 2025 01:00:47 +0000 ROA not after: Wed 23 Jul 2025 01:00:47 +0000 asID: 6167 IP address blocks: 174.225.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a0:89:f0:e6:c7:6a:4a:0d:c5:73:85:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 24 01:00:47 2025 GMT Not After : Jul 23 01:00:47 2025 GMT Subject: CN=fbd94f7f-5b5e-4cd9-9c5e-671e38311476 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:67:76:61:2c:c7:7d:b9:61:93:7b:56:4c:6e: 6b:5d:17:c7:c6:b2:69:44:60:48:6d:b5:b1:41:76: 3f:3c:50:9b:51:e5:0d:08:da:f9:72:f6:09:26:86: f0:21:18:62:6b:e8:e5:95:be:12:92:7b:97:79:49: 41:18:f9:9a:4b:d1:72:38:c4:c5:73:ac:b5:3a:1a: c5:e9:77:ce:87:32:c6:cd:09:53:3c:7f:f8:76:c3: cf:70:45:90:34:eb:93:0e:79:15:1d:96:9d:ba:9b: a4:c2:f3:9e:d0:b6:25:61:bc:bc:d4:56:d0:1f:f8: 73:e4:8a:f5:95:95:cb:fd:47:6e:f3:7e:45:15:dd: 9e:f8:3f:9f:b2:98:03:49:db:1c:6c:f5:ae:a5:ed: c7:f0:62:3f:bd:ea:42:ba:14:9d:46:a3:3f:ad:a9: dc:11:b8:c9:4b:0a:88:4a:1f:fd:7a:1d:c3:fb:1f: 68:22:b9:f8:34:59:af:c7:04:46:36:d5:3f:87:f7: 24:02:8f:57:72:42:88:a0:67:c1:04:dc:49:e7:05: 34:71:eb:20:2a:8a:19:a7:1a:e5:ab:00:b4:14:f5: 48:2d:0d:a9:f3:8d:2c:dc:08:68:11:76:0f:bd:46: c7:94:dc:df:b7:44:dd:3e:be:6a:8b:2a:7e:3d:97: c9:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:46:36:82:AC:AF:6B:BA:51:4A:2E:34:B7:EA:0E:7B:0E:F9:BD:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/35964eab-8df7-3f5b-92bd-aa1e70f54c9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.225.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:40:74:60:da:c3:54:6c:5b:42:8d:6a:77:bb:57:2d:7f:0e: be:15:21:3f:a0:3c:c9:fe:3c:cf:cd:86:08:e0:af:be:81:8e: 3a:b3:5a:16:ba:38:27:6d:1c:93:3c:c4:9d:7a:fe:cd:4e:ed: 14:4a:58:67:d1:b5:4b:45:8c:80:f3:79:e7:0c:03:7f:57:92: fc:29:b4:f3:37:d7:6e:0b:d7:38:bf:67:49:23:be:85:5d:0e: 4b:5d:39:0a:18:52:46:f9:36:d6:60:5e:0a:ea:32:fc:a3:b1: e9:56:1e:7b:69:3e:59:d3:1a:10:12:5c:b3:6c:ea:45:c3:5a: b4:79:8a:e8:2a:79:ff:a4:eb:f2:d0:1e:d7:df:48:ab:56:df: d8:ef:9b:6e:3a:a2:55:66:a4:3e:1a:3d:8c:0a:df:8f:ae:4a: 21:04:20:e2:ed:b2:c3:c5:83:0a:24:f7:14:99:5b:29:7c:dd: 7b:92:96:4c:7f:0c:d1:30:c7:b5:b2:08:fb:24:78:cf:62:58: 1a:8a:2d:b7:9e:11:a0:80:03:72:42:92:5c:71:34:68:b4:9c: 5e:d7:c8:13:0b:3f:b0:87:3e:45:bc:83:4f:2e:39:79:76:07: 0b:e9:ce:63:17:3b:34:e7:f3:a2:50:dc:eb:60:62:2d:e2:89: 41:6a:cc:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmgifDmx2pKDcVzhUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDQyNDAxMDA0N1oXDTI1MDcyMzAxMDA0N1owLzEtMCsGA1UEAxMk ZmJkOTRmN2YtNWI1ZS00Y2Q5LTljNWUtNjcxZTM4MzExNDc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg2d2YSzHfblhk3tWTG5rXRfHxrJpRGBIbbWx QXY/PFCbUeUNCNr5cvYJJobwIRhia+jllb4SknuXeUlBGPmaS9FyOMTFc6y1OhrF 6XfOhzLGzQlTPH/4dsPPcEWQNOuTDnkVHZadupukwvOe0LYlYby81FbQH/hz5Ir1 lZXL/Udu835FFd2e+D+fspgDSdscbPWupe3H8GI/vepCuhSdRqM/rancEbjJSwqI Sh/9eh3D+x9oIrn4NFmvxwRGNtU/h/ckAo9XckKIoGfBBNxJ5wU0cesgKooZpxrl qwC0FPVILQ2p840s3AhoEXYPvUbHlNzft0TdPr5qiyp+PZfJ4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGRGNoKsr2u6UUouNLfqDnsO+b3fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMzU5NjRlYWItOGRmNy0z ZjViLTkyYmQtYWExZTcwZjU0YzllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEruFgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ1AdGDaw1RsW0KNane7Vy1/Dr4VIT+gPMn+PM/Nhgjgr76BjjqzWha6 OCdtHJM8xJ16/s1O7RRKWGfRtUtFjIDzeecMA39XkvwptPM3124L1zi/Z0kjvoVd DktdOQoYUkb5NtZgXgrqMvyjselWHntpPlnTGhASXLNs6kXDWrR5iugqef+k6/LQ HtffSKtW39jvm246olVmpD4aPYwK34+uSiEEIOLtssPFgwok9xSZWyl83XuSlkx/ DNEwx7WyCPskeM9iWBqKLbeeEaCAA3JCklxxNGi0nF7XyBMLP7CHPkW8g08uOXl2 BwvpzmMXOzTn86JQ3OtgYi3iiUFqzEk= -----END CERTIFICATE-----Generated at Fri May 9 05:19:05 2025 by rpki-client