$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b591bd0c-715d-38be-9ba9-2b116fc592f0.roa File: b591bd0c-715d-38be-9ba9-2b116fc592f0.roa (raw, json) Hash identifier: dcTFp2ID40zwxnu6S2HG+MSz5YkqtSvBZPeSGHH0+TQ= Subject key identifier: D3:C9:63:C9:AA:FF:A3:FA:5A:53:6E:DF:7B:7E:2A:FC:A1:2B:3F:9C Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849A089E9AAF5B9041116E97800 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b591bd0c-715d-38be-9ba9-2b116fc592f0.roa Signing time: Thu 24 Apr 2025 01:00:47 +0000 ROA not before: Thu 24 Apr 2025 01:00:47 +0000 ROA not after: Wed 23 Jul 2025 01:00:47 +0000 asID: 6167 IP address blocks: 174.193.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a0:89:e9:aa:f5:b9:04:11:16:e9:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 24 01:00:47 2025 GMT Not After : Jul 23 01:00:47 2025 GMT Subject: CN=8de70045-be25-4349-b6ed-21af31ad9071 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:51:82:ea:4e:96:13:90:9e:92:a1:f0:ed:95: b5:5c:16:b1:e8:26:a4:bb:1d:50:6c:22:00:b9:56: cb:7b:2c:44:7c:28:d3:28:c0:7f:b1:58:3c:49:bb: 26:0d:c8:c1:ec:12:a3:58:0a:c9:a8:a6:d6:d5:c3: 33:fd:fb:36:f1:a4:bd:f4:ad:9b:fd:52:2f:b2:e3: 79:f1:96:de:09:34:2e:14:08:3b:27:ac:a7:0d:d3: 7d:ee:e9:8e:e1:c2:44:28:a8:ad:81:f9:b5:11:29: d9:ae:fb:6b:1d:55:9e:36:a4:74:a4:3e:44:71:3a: d5:40:ad:29:fe:f3:23:2b:cc:22:b1:0c:27:45:28: 31:ae:e3:27:a9:37:b3:d3:75:2b:bb:44:08:92:f4: 4b:ce:af:96:3c:98:6b:85:d6:76:a3:1a:7b:a8:41: d3:1c:fc:c4:8b:ea:24:f5:b8:26:4c:13:a5:94:c1: 50:61:8e:19:70:86:a4:63:7e:50:58:34:05:e2:83: 77:ba:ed:16:45:28:1d:b6:16:62:85:3d:ad:3c:75: 8d:80:c4:8a:02:37:a8:0d:50:20:49:51:8f:5f:ff: 23:92:b3:18:f2:01:94:21:12:d3:29:e5:9b:80:28: 8b:63:3b:f9:26:dd:60:9f:14:24:59:4d:5f:b3:86: f2:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:C9:63:C9:AA:FF:A3:FA:5A:53:6E:DF:7B:7E:2A:FC:A1:2B:3F:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b591bd0c-715d-38be-9ba9-2b116fc592f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.193.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:67:17:d1:3b:da:d2:13:48:1f:ac:59:08:d8:9c:de:bd:a5: e0:05:73:5f:32:a3:49:e9:25:17:37:78:81:18:bb:40:8c:50: 8d:1b:04:9e:d4:4e:a7:f6:cd:95:f3:4b:fa:39:60:9d:98:5f: 15:10:c8:95:9e:09:65:8a:5a:59:a9:1e:c3:96:06:76:6d:f6: 29:d4:96:e5:9d:58:94:a0:ee:0b:a7:8b:f8:8d:9b:d0:ef:2f: 3e:e7:43:91:e7:24:c6:e3:8f:7f:a0:d4:ed:13:05:06:cf:b9: c6:29:fa:78:dc:5e:d7:ac:84:d8:60:9d:a3:72:8c:59:1c:78: 85:06:6e:a7:88:54:02:d4:39:a8:64:52:f1:45:ab:11:4f:3a: 19:da:ce:42:1f:6d:98:e8:a6:ca:23:79:93:d5:f4:92:f6:29: 16:00:4b:c1:68:f2:5e:22:87:a0:72:c9:cb:ae:ac:6c:e9:b5: d4:fc:83:d3:8d:c9:c4:aa:79:97:43:06:04:d0:e7:84:ac:a2: 94:93:a0:5c:68:b8:f3:32:90:da:d9:af:d8:3c:f2:aa:71:ab: 19:ed:6d:6a:ee:1e:30:f0:47:9c:8b:20:ec:28:83:d8:64:80: 4a:19:cb:1a:d5:ad:7e:bf:bf:9a:57:5d:8c:01:0d:aa:48:e9: 87:0d:01:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmgiemq9bkEERbpeAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDQyNDAxMDA0N1oXDTI1MDcyMzAxMDA0N1owLzEtMCsGA1UEAxMk OGRlNzAwNDUtYmUyNS00MzQ5LWI2ZWQtMjFhZjMxYWQ5MDcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhlGC6k6WE5CekqHw7ZW1XBax6Cakux1QbCIA uVbLeyxEfCjTKMB/sVg8SbsmDcjB7BKjWArJqKbW1cMz/fs28aS99K2b/VIvsuN5 8ZbeCTQuFAg7J6ynDdN97umO4cJEKKitgfm1ESnZrvtrHVWeNqR0pD5EcTrVQK0p /vMjK8wisQwnRSgxruMnqTez03Uru0QIkvRLzq+WPJhrhdZ2oxp7qEHTHPzEi+ok 9bgmTBOllMFQYY4ZcIakY35QWDQF4oN3uu0WRSgdthZihT2tPHWNgMSKAjeoDVAg SVGPX/8jkrMY8gGUIRLTKeWbgCiLYzv5Jt1gnxQkWU1fs4byPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNPJY8mq/6P6WlNu33t+KvyhKz+cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYjU5MWJkMGMtNzE1ZC0z OGJlLTliYTktMmIxMTZmYzU5MmYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGrsGAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABhnF9E72tITSB+sWQjYnN69peAFc18yo0npJRc3eIEYu0CMUI0bBJ7U Tqf2zZXzS/o5YJ2YXxUQyJWeCWWKWlmpHsOWBnZt9inUluWdWJSg7guni/iNm9Dv Lz7nQ5HnJMbjj3+g1O0TBQbPucYp+njcXteshNhgnaNyjFkceIUGbqeIVALUOahk UvFFqxFPOhnazkIfbZjopsojeZPV9JL2KRYAS8Fo8l4ih6ByycuurGzptdT8g9ON ycSqeZdDBgTQ54SsopSToFxouPMykNrZr9g88qpxqxntbWruHjDwR5yLIOwog9hk gEoZyxrVrX6/v5pXXYwBDapI6YcNASo= -----END CERTIFICATE-----Generated at Mon May 5 02:57:16 2025 by rpki-client