$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/52af6605-e6ee-3061-b8be-ca3adcf7bc28.roa File: 52af6605-e6ee-3061-b8be-ca3adcf7bc28.roa (raw, json) Hash identifier: 0Mfck+ZCdkJwqmCJ9IOexwDpIbdcoLRH3sGDMHHB0Os= Subject key identifier: A1:CD:36:A4:83:4B:70:AD:2A:7C:A2:CC:A8:5C:07:4D:34:96:9A:6C Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849A089DBEBA5D1F940BD8F3600 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/52af6605-e6ee-3061-b8be-ca3adcf7bc28.roa Signing time: Thu 24 Apr 2025 01:00:47 +0000 ROA not before: Thu 24 Apr 2025 01:00:47 +0000 ROA not after: Wed 23 Jul 2025 01:00:47 +0000 asID: 6167 IP address blocks: 174.206.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a0:89:db:eb:a5:d1:f9:40:bd:8f:36:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 24 01:00:47 2025 GMT Not After : Jul 23 01:00:47 2025 GMT Subject: CN=fce62a82-f98b-41f4-b963-0a6e43eb00f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:7a:82:f2:15:cf:d9:d8:e5:df:9b:0f:3b:83: b9:fa:56:55:fa:8f:1c:a6:22:22:ea:fe:b2:0f:4c: 29:e8:41:63:97:46:a8:0d:65:67:a0:4b:84:4e:75: ad:8e:9a:c9:a1:df:7b:82:ed:00:90:d2:5c:00:b9: 90:58:52:ba:a7:63:4b:2c:b3:27:cb:a4:21:69:47: 3b:87:b1:9e:f2:98:74:bd:1e:d4:ba:ca:91:10:7e: 97:c0:57:49:48:26:67:5d:a4:af:d0:ed:46:3e:d5: 95:9c:34:c2:eb:7c:15:b6:2d:93:2a:52:0a:47:a2: dc:87:ae:c2:79:16:5f:8c:52:5d:46:45:e4:75:f1: 4d:30:62:54:ee:62:43:3b:d6:28:17:ac:d6:32:93: 09:ab:4c:6c:18:cc:dc:b6:5d:38:f7:18:6c:02:52: 00:8b:a1:8e:e6:f2:24:7a:d1:f2:bb:8d:06:41:2a: 72:9b:3e:f1:a5:55:dd:e5:e8:75:e6:fe:fe:ef:22: fc:86:44:20:16:5a:b7:4b:5b:96:fa:0b:38:87:36: 48:11:f0:1d:c8:c3:12:a6:d1:cb:2a:23:bf:fc:38: 92:e7:1a:7f:06:26:60:78:fe:96:5a:6a:93:76:8d: 02:9a:a1:96:ff:da:e8:42:f3:2e:b4:c3:42:43:27: 69:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:CD:36:A4:83:4B:70:AD:2A:7C:A2:CC:A8:5C:07:4D:34:96:9A:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/52af6605-e6ee-3061-b8be-ca3adcf7bc28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.206.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:f0:6f:f7:38:fb:ad:4c:6d:12:9e:ce:c5:34:57:d6:21:cf: 37:1e:35:de:a0:54:7f:af:3f:5b:62:04:4b:4f:f7:6e:60:d1: c2:31:d7:1f:8d:30:1d:43:0c:bd:c5:c5:6e:cb:c1:48:61:91: 0d:bb:28:b9:a5:c6:5f:f4:3c:79:9e:d0:3a:75:ae:c7:0b:58: c6:4e:45:fa:13:2f:fd:77:33:dd:1e:90:60:6e:77:87:c6:18: c1:1f:ee:86:ce:e1:d1:fb:9b:86:fc:b6:a7:45:cb:e0:99:ee: f2:26:12:fa:f8:42:b2:c2:0f:40:db:e6:f0:31:72:78:d8:10: 6a:48:f7:8e:1b:ac:ba:d6:3e:5e:03:e5:84:df:cf:1d:95:dc: 81:2e:49:8b:b8:ad:f5:07:38:f2:4e:21:7c:fc:3f:50:29:95: 78:83:28:40:a8:e8:a5:84:c7:de:23:a9:2e:ca:9c:8b:8f:46: dd:8d:03:ba:45:da:fc:b7:82:98:0e:13:af:93:dd:b6:16:17: a1:f4:6c:ab:3d:85:0d:c4:3c:cf:06:e8:3d:60:b1:2b:2f:fe: 39:a4:8c:ed:22:45:ba:3c:47:db:2e:56:d9:29:4d:ac:d1:b3: 2e:dc:67:bf:f3:7a:a8:ab:76:53:c0:f6:d6:f3:db:6c:ed:08: f6:40:3f:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmgidvrpdH5QL2PNgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDQyNDAxMDA0N1oXDTI1MDcyMzAxMDA0N1owLzEtMCsGA1UEAxMk ZmNlNjJhODItZjk4Yi00MWY0LWI5NjMtMGE2ZTQzZWIwMGY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3qC8hXP2djl35sPO4O5+lZV+o8cpiIi6v6y D0wp6EFjl0aoDWVnoEuETnWtjprJod97gu0AkNJcALmQWFK6p2NLLLMny6QhaUc7 h7Ge8ph0vR7UusqREH6XwFdJSCZnXaSv0O1GPtWVnDTC63wVti2TKlIKR6Lch67C eRZfjFJdRkXkdfFNMGJU7mJDO9YoF6zWMpMJq0xsGMzctl049xhsAlIAi6GO5vIk etHyu40GQSpymz7xpVXd5eh15v7+7yL8hkQgFlq3S1uW+gs4hzZIEfAdyMMSptHL KiO//DiS5xp/BiZgeP6WWmqTdo0CmqGW/9roQvMutMNCQydpTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKHNNqSDS3CtKnyizKhcB000lppsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNTJhZjY2MDUtZTZlZS0z MDYxLWI4YmUtY2EzYWRjZjdiYzI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFrs6AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJnwb/c4+61MbRKezsU0V9YhzzceNd6gVH+vP1tiBEtP925g0cIx1x+N MB1DDL3FxW7LwUhhkQ27KLmlxl/0PHme0Dp1rscLWMZORfoTL/13M90ekGBud4fG GMEf7obO4dH7m4b8tqdFy+CZ7vImEvr4QrLCD0Db5vAxcnjYEGpI944brLrWPl4D 5YTfzx2V3IEuSYu4rfUHOPJOIXz8P1AplXiDKECo6KWEx94jqS7KnIuPRt2NA7pF 2vy3gpgOE6+T3bYWF6H0bKs9hQ3EPM8G6D1gsSsv/jmkjO0iRbo8R9suVtkpTazR sy7cZ7/zeqirdlPA9tbz22ztCPZAP0g= -----END CERTIFICATE-----Generated at Sun May 11 09:35:03 2025 by rpki-client