$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ff94214e-ec50-391b-8867-d06cd6e7d1f0.roa File: ff94214e-ec50-391b-8867-d06cd6e7d1f0.roa (raw, json) Hash identifier: wSgzvCreEDZMk1Z2qQUjeBwtcreHWXpOS8np74k5qbc= Subject key identifier: 01:F1:D1:4E:51:6F:E9:E3:B2:91:B8:A9:AB:C5:85:EF:78:86:4E:AF Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849A089DFDE214C41B200AD0F00 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ff94214e-ec50-391b-8867-d06cd6e7d1f0.roa Signing time: Thu 24 Apr 2025 01:00:47 +0000 ROA not before: Thu 24 Apr 2025 01:00:47 +0000 ROA not after: Wed 23 Jul 2025 01:00:47 +0000 asID: 6167 IP address blocks: 174.214.248.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a0:89:df:de:21:4c:41:b2:00:ad:0f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 24 01:00:47 2025 GMT Not After : Jul 23 01:00:47 2025 GMT Subject: CN=a555c0a1-c3cb-4afc-8694-b6e1b40aab1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:cf:74:e7:d3:24:72:05:96:7f:7b:39:1a:0d: ef:34:b9:2a:b7:6c:fb:af:d2:29:a1:af:4b:1f:f0: da:9c:3d:a5:c2:75:08:ab:c2:c4:5c:9d:12:71:69: 6e:d1:27:8b:2d:6a:c0:a4:6c:dc:a6:ce:ce:f6:1b: 27:31:ce:d5:8f:eb:c0:f1:3f:b2:83:d8:41:dd:16: e4:55:60:4c:8b:1f:8f:e7:79:e0:80:bf:1c:2d:ef: 9f:3a:d4:d8:d5:82:06:8d:c5:ed:f0:6e:85:19:68: 9e:7d:3a:81:66:d7:68:49:bb:37:8c:a3:6d:4a:80: 2c:fb:e7:e4:8a:87:1d:f9:27:6b:9d:34:85:cb:cc: 4d:88:46:cd:72:33:96:79:cd:8a:de:bc:65:f7:a0: 60:b6:9a:63:51:a5:f3:61:cf:95:8a:ad:05:c8:88: 2a:a8:98:51:9a:1b:95:cf:2e:bc:78:7f:0d:13:b7: 5b:f8:4d:93:fe:1e:e0:32:24:b6:c1:86:06:53:27: 92:c7:d5:38:c3:17:ab:46:3b:2c:c5:7e:07:5a:ff: 36:47:95:38:d4:60:d2:00:e1:10:b6:19:c3:4d:9c: ea:ae:c8:63:20:0c:ee:ce:12:51:da:45:9e:3f:24: 30:5a:1b:97:7b:4b:c0:9a:be:3a:cc:d4:cf:6b:a9: 21:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:F1:D1:4E:51:6F:E9:E3:B2:91:B8:A9:AB:C5:85:EF:78:86:4E:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ff94214e-ec50-391b-8867-d06cd6e7d1f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.214.248.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:9d:61:b8:39:3e:16:e9:ba:fc:ed:3e:ad:38:ac:8e:65:14: 02:3c:04:93:e9:44:b5:cf:b6:11:cf:79:30:ca:48:2d:4c:33: a0:24:d9:89:a9:9d:3e:c3:01:ac:28:23:e6:79:47:e0:58:90: fa:09:e7:c3:a9:b3:ab:c9:5e:6b:f1:a2:b5:ca:bc:5c:e1:46: 2d:43:73:d4:a5:cd:dd:a8:b1:9b:8b:b2:18:72:5c:50:56:be: d4:ff:1a:07:52:06:9b:0c:81:ae:0f:f4:db:34:e6:d0:74:4f: 6e:a7:f1:a2:59:09:c7:c3:36:6e:b0:53:91:71:e7:14:58:74: 76:fa:f0:61:44:a6:b0:26:f7:ec:1b:ac:73:fb:6a:fe:e6:b0: fe:96:41:fb:90:a3:22:95:29:4c:ba:a6:5d:42:1f:02:86:7d: 4f:8c:4e:14:3d:27:ae:97:ab:d7:c0:91:47:24:89:77:d4:df: 83:22:a0:99:20:d8:ec:24:14:d1:99:f8:41:12:39:db:6f:22: 12:47:c6:14:5a:ff:e9:2c:b3:92:91:0f:0b:1e:69:71:42:41: 3e:76:3d:4b:53:e1:9e:a0:f2:a6:8b:0f:7a:21:3d:0c:95:cb: ce:4d:de:60:09:4a:64:97:e1:0c:a1:35:ea:11:bf:29:e1:55: 7c:4a:37:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmgid/eIUxBsgCtDwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDQyNDAxMDA0N1oXDTI1MDcyMzAxMDA0N1owLzEtMCsGA1UEAxMk YTU1NWMwYTEtYzNjYi00YWZjLTg2OTQtYjZlMWI0MGFhYjFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjc9059MkcgWWf3s5Gg3vNLkqt2z7r9Ipoa9L H/DanD2lwnUIq8LEXJ0ScWlu0SeLLWrApGzcps7O9hsnMc7Vj+vA8T+yg9hB3Rbk VWBMix+P53nggL8cLe+fOtTY1YIGjcXt8G6FGWiefTqBZtdoSbs3jKNtSoAs++fk iocd+SdrnTSFy8xNiEbNcjOWec2K3rxl96BgtppjUaXzYc+Viq0FyIgqqJhRmhuV zy68eH8NE7db+E2T/h7gMiS2wYYGUyeSx9U4wxerRjssxX4HWv82R5U41GDSAOEQ thnDTZzqrshjIAzuzhJR2kWePyQwWhuXe0vAmr46zNTPa6khkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAHx0U5Rb+njspG4qavFhe94hk6vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZmY5NDIxNGUtZWM1MC0z OTFiLTg4NjctZDA2Y2Q2ZTdkMWYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrtb4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACSdYbg5PhbpuvztPq04rI5lFAI8BJPpRLXPthHPeTDKSC1MM6Ak2Ymp nT7DAawoI+Z5R+BYkPoJ58Ops6vJXmvxorXKvFzhRi1Dc9Slzd2osZuLshhyXFBW vtT/GgdSBpsMga4P9Ns05tB0T26n8aJZCcfDNm6wU5Fx5xRYdHb68GFEprAm9+wb rHP7av7msP6WQfuQoyKVKUy6pl1CHwKGfU+MThQ9J66Xq9fAkUckiXfU34MioJkg 2OwkFNGZ+EESOdtvIhJHxhRa/+kss5KRDwseaXFCQT52PUtT4Z6g8qaLD3ohPQyV y85N3mAJSmSX4QyhNeoRvynhVXxKN8Y= -----END CERTIFICATE-----Generated at Thu May 8 14:45:03 2025 by rpki-client