$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4348e425-e681-3817-bd5e-06cc8d151691.roa File: 4348e425-e681-3817-bd5e-06cc8d151691.roa (raw, json) Hash identifier: PEnlu5HX/1M6dnJGKmJmkwLnmmJnHK8FLngutJmSDDg= Subject key identifier: 6B:7B:B4:F5:67:8A:21:71:C9:37:C4:D5:61:EE:C8:D0:98:5E:FB:EB Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849A089EB2A3F7B78C92C40A680 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4348e425-e681-3817-bd5e-06cc8d151691.roa Signing time: Thu 24 Apr 2025 01:00:47 +0000 ROA not before: Thu 24 Apr 2025 01:00:47 +0000 ROA not after: Wed 23 Jul 2025 01:00:47 +0000 asID: 6167 IP address blocks: 174.196.104.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a0:89:eb:2a:3f:7b:78:c9:2c:40:a6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 24 01:00:47 2025 GMT Not After : Jul 23 01:00:47 2025 GMT Subject: CN=bfcd085c-67ee-4efe-8960-4729fa7a6c06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:3e:7f:28:e0:cb:bc:94:11:d9:d1:bd:da:e4: 64:57:f7:b6:34:99:dd:18:80:31:67:cb:60:37:c1: 0d:0e:9f:d1:81:05:dd:8a:3f:5f:ef:cd:a1:dc:d5: 7e:89:53:55:1b:a8:ff:08:11:c3:01:3d:34:16:cc: d5:7c:0f:c1:43:7b:c0:b7:3e:74:37:ed:1b:d4:14: d6:80:ea:4d:6a:39:29:9c:ca:17:7a:50:b4:02:ab: b0:d3:40:cd:35:7b:a1:1d:21:79:fc:9d:00:6a:8a: bd:b3:fc:d2:e2:78:9c:92:5d:c7:21:1e:03:ab:c1: 54:20:bd:e3:1c:4a:76:5e:7a:18:fd:fd:a4:b9:97: 72:d4:37:67:66:92:34:e8:98:aa:ae:60:e4:0f:d4: a9:e2:fc:77:0d:c0:c8:b9:14:27:e0:46:3a:44:56: 7a:63:01:09:61:cf:c6:7d:cc:82:bf:36:a6:8b:60: 0c:65:f7:3f:ae:55:1c:17:19:3b:76:05:a8:cd:6a: 81:ad:81:ea:57:ef:46:2c:10:d8:33:9d:b1:a1:c6: ab:8a:70:86:68:a4:d6:68:6a:e4:eb:b3:de:a4:16: a0:ac:41:f4:d1:bf:6b:e2:46:71:15:ed:0c:f0:10: 6b:01:c8:db:ea:8c:01:43:32:02:cc:55:bf:85:0e: 33:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:7B:B4:F5:67:8A:21:71:C9:37:C4:D5:61:EE:C8:D0:98:5E:FB:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4348e425-e681-3817-bd5e-06cc8d151691.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.196.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:40:0f:3c:b6:b5:e5:2d:2b:38:a9:f5:92:27:4f:b0:54:ba: 59:62:2b:c4:4a:6d:4e:24:e6:c1:5f:29:08:b1:20:52:36:c4: bd:6d:75:3e:94:53:10:84:79:4d:70:8f:ed:06:65:89:01:df: 8e:18:4e:3c:cf:5a:64:04:6e:16:0d:9e:1b:07:a6:01:09:7e: a1:65:85:17:0d:cf:c4:78:41:9f:c2:dc:97:ef:95:2d:a8:14: b6:e2:8a:56:48:37:77:3e:54:26:8b:42:6c:ff:4b:6b:b9:d9: b5:31:58:c9:c2:2e:d3:30:20:07:68:f2:aa:34:a2:3d:b4:e5: ab:6b:45:0e:b6:d1:f3:fa:58:85:d9:8b:f7:d3:13:ba:37:62: 31:fc:6c:18:3f:ba:14:0a:85:5d:8c:37:45:96:81:68:a8:d3: dc:8f:55:97:66:43:d6:05:4c:70:93:33:44:26:98:90:fc:dd: b5:00:03:ce:06:89:dd:53:27:b6:52:17:45:05:1c:7b:4d:fd: b2:b5:05:bd:77:97:cc:5e:8c:b1:98:e7:69:22:c3:58:5b:8a: ac:9e:da:c7:7e:c4:65:31:13:5a:b5:9b:a1:83:37:fe:2c:b8: 11:e8:e0:ea:d0:40:ba:9e:0b:54:d1:1a:c0:e3:f2:7f:f0:a7: bb:80:95:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmgiesqP3t4ySxApoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDQyNDAxMDA0N1oXDTI1MDcyMzAxMDA0N1owLzEtMCsGA1UEAxMk YmZjZDA4NWMtNjdlZS00ZWZlLTg5NjAtNDcyOWZhN2E2YzA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAij5/KODLvJQR2dG92uRkV/e2NJndGIAxZ8tg N8ENDp/RgQXdij9f782h3NV+iVNVG6j/CBHDAT00FszVfA/BQ3vAtz50N+0b1BTW gOpNajkpnMoXelC0Aquw00DNNXuhHSF5/J0Aaoq9s/zS4nickl3HIR4Dq8FUIL3j HEp2XnoY/f2kuZdy1DdnZpI06JiqrmDkD9Sp4vx3DcDIuRQn4EY6RFZ6YwEJYc/G fcyCvzami2AMZfc/rlUcFxk7dgWozWqBrYHqV+9GLBDYM52xocarinCGaKTWaGrk 67PepBagrEH00b9r4kZxFe0M8BBrAcjb6owBQzICzFW/hQ4z5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGt7tPVniiFxyTfE1WHuyNCYXvvrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNDM0OGU0MjUtZTY4MS0z ODE3LWJkNWUtMDZjYzhkMTUxNjkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrsRoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHNADzy2teUtKzip9ZInT7BUulliK8RKbU4k5sFfKQixIFI2xL1tdT6U UxCEeU1wj+0GZYkB344YTjzPWmQEbhYNnhsHpgEJfqFlhRcNz8R4QZ/C3JfvlS2o FLbiilZIN3c+VCaLQmz/S2u52bUxWMnCLtMwIAdo8qo0oj205atrRQ620fP6WIXZ i/fTE7o3YjH8bBg/uhQKhV2MN0WWgWio09yPVZdmQ9YFTHCTM0QmmJD83bUAA84G id1TJ7ZSF0UFHHtN/bK1Bb13l8xejLGY52kiw1hbiqye2sd+xGUxE1q1m6GDN/4s uBHo4OrQQLqeC1TRGsDj8n/wp7uAlTs= -----END CERTIFICATE-----Generated at Tue May 13 02:43:52 2025 by rpki-client