$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/af9f6641-b648-32d9-abe2-b54b4879ea4f.roa File: af9f6641-b648-32d9-abe2-b54b4879ea4f.roa (raw, json) Hash identifier: 2vjt3iCaMmtsKqyvepkzoPduLo/8zCKAKSralClFAjM= Subject key identifier: F4:1A:69:DF:2E:18:8F:59:49:06:CE:84:C8:72:92:E7:7F:DA:B7:74 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849C79F7E004DE08976521AB440 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/af9f6641-b648-32d9-abe2-b54b4879ea4f.roa Signing time: Thu 08 May 2025 01:00:47 +0000 ROA not before: Thu 08 May 2025 01:00:47 +0000 ROA not after: Wed 06 Aug 2025 01:00:47 +0000 asID: 6167 IP address blocks: 174.248.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c7:9f:7e:00:4d:e0:89:76:52:1a:b4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: May 8 01:00:47 2025 GMT Not After : Aug 6 01:00:47 2025 GMT Subject: CN=474f3be7-ca6c-4b1f-b197-f704e68dc396 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:12:55:c5:e1:35:68:d7:45:6e:ce:f0:3c:bb: 11:1f:fa:1a:b2:69:9d:00:ea:5d:84:eb:da:98:83: 4e:68:66:f7:2b:d8:d0:f9:95:a6:fd:8b:bd:0d:59: 98:32:66:bf:f2:57:f9:5a:d3:00:28:c7:7a:62:d5: 5c:ac:9b:34:36:68:84:f5:cd:65:8b:e7:5a:e5:5a: 37:48:02:eb:b0:df:8f:8b:5b:0c:af:a7:0f:5d:9e: 13:80:95:dd:d3:c0:a0:23:50:3e:4f:a4:ed:fb:d1: 81:71:5f:c7:0e:54:ab:80:ad:26:43:72:a4:8d:eb: d0:ca:94:10:0c:5b:75:80:e2:fb:8e:b2:13:a5:4c: 1a:14:8f:be:6d:a6:5a:7f:e8:d6:99:f9:a0:3c:9e: 4d:c7:c7:80:9e:d9:2b:79:e5:89:cf:f8:a4:31:9d: 9b:c7:08:f4:a5:a5:08:3b:87:2b:85:6c:0e:27:77: 34:56:0d:40:7a:8a:cb:6a:b1:ba:30:77:4c:45:55: 40:e6:a9:5d:c2:b4:00:5d:cf:b0:5d:e2:7a:25:6f: 7a:43:a2:f0:a3:9d:11:39:8d:07:d3:1e:e0:86:1f: 65:7e:32:9b:cc:d3:46:56:d4:aa:79:d3:81:26:55: c8:8b:03:dc:f1:8b:9a:7a:07:8b:57:34:4d:04:06: 4a:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:1A:69:DF:2E:18:8F:59:49:06:CE:84:C8:72:92:E7:7F:DA:B7:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/af9f6641-b648-32d9-abe2-b54b4879ea4f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.248.212.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:81:be:d1:05:18:af:4d:14:25:64:a4:7d:1d:4c:45:f3:d1: 75:fc:fa:27:b2:a6:44:31:7b:f6:f7:38:38:b6:47:dc:62:12: f2:6f:77:74:75:a6:65:15:cd:be:85:67:c0:8d:4f:6c:49:fb: cc:d0:bb:7c:9d:a1:5f:64:5e:f8:47:ff:ab:36:70:6e:ce:41: 08:db:6c:7d:e4:01:dd:0c:e0:3f:a4:1a:2b:2b:df:4f:fd:fa: 4d:d3:b0:be:dc:13:5f:cc:66:ea:cd:35:65:a2:45:e5:d4:da: bf:95:c6:2d:15:a1:73:da:8a:3a:ab:86:7a:8b:79:b6:4c:67: d3:78:a8:1f:52:46:4d:50:c0:41:b1:bd:47:78:92:92:98:89: 44:f7:96:bc:56:a0:ce:69:84:9e:be:d9:3b:4e:95:f0:9c:c1: eb:55:85:8f:30:dd:af:be:a7:7e:00:62:c9:81:e7:17:15:21: d2:d8:1e:3a:d1:c5:28:61:8c:50:52:a4:32:81:21:7b:07:1d: 07:64:4d:28:3d:d9:ef:c3:5f:96:6c:82:37:9b:a3:39:d2:59: bc:d9:8e:2c:ed:a4:8f:8f:70:8f:f5:09:ab:45:c6:da:c2:10: fd:6b:7c:c4:e3:de:11:f5:1f:83:0a:2f:76:22:78:a4:89:b6: dd:0a:4d:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnHn34ATeCJdlIatEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDUwODAxMDA0N1oXDTI1MDgwNjAxMDA0N1owLzEtMCsGA1UEAxMk NDc0ZjNiZTctY2E2Yy00YjFmLWIxOTctZjcwNGU2OGRjMzk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAihJVxeE1aNdFbs7wPLsRH/oasmmdAOpdhOva mINOaGb3K9jQ+ZWm/Yu9DVmYMma/8lf5WtMAKMd6YtVcrJs0NmiE9c1li+da5Vo3 SALrsN+Pi1sMr6cPXZ4TgJXd08CgI1A+T6Tt+9GBcV/HDlSrgK0mQ3KkjevQypQQ DFt1gOL7jrITpUwaFI++baZaf+jWmfmgPJ5Nx8eAntkreeWJz/ikMZ2bxwj0paUI O4crhWwOJ3c0Vg1AeorLarG6MHdMRVVA5qldwrQAXc+wXeJ6JW96Q6Lwo50ROY0H 0x7ghh9lfjKbzNNGVtSqedOBJlXIiwPc8YuaegeLVzRNBAZKCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPQaad8uGI9ZSQbOhMhykud/2rd0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYWY5ZjY2NDEtYjY0OC0z MmQ5LWFiZTItYjU0YjQ4NzllYTRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrvjUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI+BvtEFGK9NFCVkpH0dTEXz0XX8+ieypkQxe/b3ODi2R9xiEvJvd3R1 pmUVzb6FZ8CNT2xJ+8zQu3ydoV9kXvhH/6s2cG7OQQjbbH3kAd0M4D+kGisr30/9 +k3TsL7cE1/MZurNNWWiReXU2r+Vxi0VoXPaijqrhnqLebZMZ9N4qB9SRk1QwEGx vUd4kpKYiUT3lrxWoM5phJ6+2TtOlfCcwetVhY8w3a++p34AYsmB5xcVIdLYHjrR xShhjFBSpDKBIXsHHQdkTSg92e/DX5ZsgjeboznSWbzZjiztpI+PcI/1CatFxtrC EP1rfMTj3hH1H4MKL3YieKSJtt0KTfI= -----END CERTIFICATE-----Generated at Sun May 11 21:58:24 2025 by rpki-client