$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/caca24ff-244e-3f40-b4e1-8a4214624d03.roa File: caca24ff-244e-3f40-b4e1-8a4214624d03.roa (raw, json) Hash identifier: bv0u64FEiEvkP8urJTnWiVFSlrsxyvnM0skD155cCzY= Subject key identifier: 40:0E:C2:21:95:54:C3:A1:09:32:69:93:0A:41:3A:D5:E0:68:E2:D8 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849A089E10C961D6667D60A236C Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/caca24ff-244e-3f40-b4e1-8a4214624d03.roa Signing time: Thu 24 Apr 2025 01:00:47 +0000 ROA not before: Thu 24 Apr 2025 01:00:47 +0000 ROA not after: Wed 23 Jul 2025 01:00:47 +0000 asID: 6167 IP address blocks: 174.216.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a0:89:e1:0c:96:1d:66:67:d6:0a:23:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 24 01:00:47 2025 GMT Not After : Jul 23 01:00:47 2025 GMT Subject: CN=53a6fda2-0961-4415-a7c4-c3fc52a2a188 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:da:12:48:40:29:74:16:6e:38:c5:a2:52:b2: 45:4b:44:b6:ac:36:ff:b2:23:35:39:31:4a:1d:af: ea:0f:b8:9e:c8:5c:25:be:e0:46:48:76:10:91:32: 6e:d3:34:d5:e5:ed:ad:83:ae:60:23:27:1f:cb:e1: 10:2f:a6:87:ca:30:37:15:17:1a:0b:00:a7:35:4d: ca:55:ca:70:57:6a:f3:04:d7:8c:08:4c:ce:58:5e: b4:2e:9d:cb:d4:25:2f:1f:cc:89:48:21:a7:b5:d9: f9:0d:91:cc:dd:3a:c3:0f:91:2b:ee:b8:51:5c:32: 28:b2:19:6c:f2:18:c6:d7:b0:1a:f3:a2:45:da:45: 34:3b:6f:b7:09:bd:9b:f2:f4:65:1c:9c:f6:13:a3: cb:f0:f8:cd:15:68:62:9f:30:9a:d8:91:0d:59:95: 93:a8:e2:5c:54:2b:b9:4c:41:6f:b5:57:45:22:d5: b8:fa:b2:1b:f9:4e:e9:bb:e2:b7:34:f8:83:48:4d: 07:5c:7b:b0:6d:8a:e8:d7:9b:8a:48:a7:99:6f:82: 5b:55:99:6c:9c:2e:c5:12:52:44:a4:7a:84:05:b2: 5d:3a:08:a1:cb:1b:b1:8f:75:1f:8d:9e:03:73:a6: bd:51:57:79:c3:c4:78:18:b9:39:3f:1b:48:a4:9d: 1b:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:0E:C2:21:95:54:C3:A1:09:32:69:93:0A:41:3A:D5:E0:68:E2:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/caca24ff-244e-3f40-b4e1-8a4214624d03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.216.88.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:b6:0a:c1:fb:e2:e2:1e:ec:a9:88:2c:b5:c4:90:3c:4b:a5: 2e:4d:ef:ab:c3:8b:f9:18:4c:d5:30:4e:f9:3f:e8:5e:2a:66: af:b3:6c:c0:92:05:e6:ca:66:db:5f:e0:5f:ca:88:a1:8f:64: c8:9b:e4:03:17:4d:ec:67:2f:93:c8:d4:c1:0e:b0:04:8e:e5: c0:62:1f:f6:30:96:28:c3:4e:1a:82:af:4e:af:41:5e:fe:30: 28:6a:79:b6:13:0a:f6:b4:6a:ed:2e:f1:b8:a1:3f:d9:1d:78: 88:ed:ec:14:86:6a:f3:a2:f0:45:b4:04:dd:c5:ce:ac:7a:d5: 76:4a:ca:ea:f2:fb:bb:85:ce:be:2c:37:31:b1:1a:b5:63:83: 99:15:1b:4c:79:20:e5:97:2b:fb:6e:ef:16:3c:11:9f:96:dd: ca:c5:9d:7c:ef:e2:16:ad:53:26:26:ad:74:d5:10:d5:74:93: c2:bc:d4:79:e5:90:a7:37:1e:40:b1:32:ee:46:f4:bf:e1:03: 3a:3e:9d:bb:10:3e:1d:07:d8:84:4c:9d:c2:34:8b:b5:4e:4a: 50:e4:89:7b:65:cf:68:5c:74:7d:53:91:30:3c:26:e2:f1:24: c3:b9:dd:53:d2:80:a8:e9:1e:83:b5:c1:e7:e3:2b:c8:fc:6d: 44:68:e6:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmgieEMlh1mZ9YKI2wwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDQyNDAxMDA0N1oXDTI1MDcyMzAxMDA0N1owLzEtMCsGA1UEAxMk NTNhNmZkYTItMDk2MS00NDE1LWE3YzQtYzNmYzUyYTJhMTg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9oSSEApdBZuOMWiUrJFS0S2rDb/siM1OTFK Ha/qD7ieyFwlvuBGSHYQkTJu0zTV5e2tg65gIycfy+EQL6aHyjA3FRcaCwCnNU3K VcpwV2rzBNeMCEzOWF60Lp3L1CUvH8yJSCGntdn5DZHM3TrDD5Er7rhRXDIoshls 8hjG17Aa86JF2kU0O2+3Cb2b8vRlHJz2E6PL8PjNFWhinzCa2JENWZWTqOJcVCu5 TEFvtVdFItW4+rIb+U7pu+K3NPiDSE0HXHuwbYro15uKSKeZb4JbVZlsnC7FElJE pHqEBbJdOgihyxuxj3UfjZ4Dc6a9UVd5w8R4GLk5PxtIpJ0bGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEAOwiGVVMOhCTJpkwpBOtXgaOLYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvY2FjYTI0ZmYtMjQ0ZS0z ZjQwLWI0ZTEtOGE0MjE0NjI0ZDAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrthYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAy2CsH74uIe7KmILLXEkDxLpS5N76vDi/kYTNUwTvk/6F4qZq+zbMCS BebKZttf4F/KiKGPZMib5AMXTexnL5PI1MEOsASO5cBiH/YwlijDThqCr06vQV7+ MChqebYTCva0au0u8bihP9kdeIjt7BSGavOi8EW0BN3Fzqx61XZKyury+7uFzr4s NzGxGrVjg5kVG0x5IOWXK/tu7xY8EZ+W3crFnXzv4hatUyYmrXTVENV0k8K81Hnl kKc3HkCxMu5G9L/hAzo+nbsQPh0H2IRMncI0i7VOSlDkiXtlz2hcdH1TkTA8JuLx JMO53VPSgKjpHoO1wefjK8j8bURo5vQ= -----END CERTIFICATE-----Generated at Mon May 5 03:00:36 2025 by rpki-client