$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0438900c-039e-3fc8-9a9f-0af3e8d14e25.roa File: 0438900c-039e-3fc8-9a9f-0af3e8d14e25.roa (raw, json) Hash identifier: DMNsLfHuBILHkHMISGOAiJ4xnEmaWT/2Hu9reJTaYA0= Subject key identifier: 2F:0B:B2:A6:48:58:05:DA:AA:1E:F2:C5:FF:09:9A:70:BA:21:A2:AC Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285848E86678CADA206974CD6F4D80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0438900c-039e-3fc8-9a9f-0af3e8d14e25.roa Signing time: Mon 17 Feb 2025 02:00:38 +0000 ROA not before: Mon 17 Feb 2025 02:00:38 +0000 ROA not after: Sun 18 May 2025 01:00:38 +0000 asID: 6167 IP address blocks: 174.247.56.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e8:66:78:ca:da:20:69:74:cd:6f:4d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Feb 17 02:00:38 2025 GMT Not After : May 18 01:00:38 2025 GMT Subject: CN=f423b810-2565-4f31-b154-30f8572c040c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:fd:4f:d6:b2:49:95:1d:64:ea:9c:0c:92:a5: 05:39:6a:2a:50:15:0a:38:a2:ce:c9:3e:a7:82:1a: 6e:0b:13:ff:a2:1f:69:8c:cd:4e:6f:ce:1a:41:a8: d3:93:7b:7e:7c:e0:4a:fc:71:89:76:11:64:be:5b: b1:d1:1c:6b:85:5f:e0:83:e2:5f:99:3f:50:34:f4: 7c:6e:f7:78:7e:d5:d9:5f:e4:ab:80:64:a8:3c:f8: ed:db:8b:a8:2b:41:39:71:1d:e1:5c:57:ad:5b:5b: 98:65:00:92:1c:61:b8:57:06:78:80:16:91:c3:96: b8:df:86:05:f9:25:d9:d2:20:11:01:a4:31:50:52: 00:9f:bb:b3:d4:d0:77:96:21:94:44:a2:e0:13:81: bc:49:09:69:8b:95:50:50:d7:18:63:c8:2e:cb:85: 33:aa:c8:32:63:c9:7a:23:35:d4:0e:df:a5:65:ac: 0a:c8:11:04:53:22:85:19:68:b3:b9:85:b8:40:5d: cd:39:ea:a9:f1:05:4a:83:6b:27:02:f5:37:8e:cb: 32:3a:c8:1f:69:ed:29:a1:95:0d:d9:55:ef:ea:ab: 80:0d:4f:7b:2b:fd:ce:97:db:88:58:c5:92:52:1e: 9b:d4:46:96:69:be:59:97:3e:8b:33:80:6e:99:5b: 4e:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:0B:B2:A6:48:58:05:DA:AA:1E:F2:C5:FF:09:9A:70:BA:21:A2:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0438900c-039e-3fc8-9a9f-0af3e8d14e25.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.247.56.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:48:c6:47:98:27:b0:85:74:ea:58:ef:1c:cc:66:32:b3:b9: 6e:65:0d:a4:2e:9f:f2:70:56:fe:d9:80:77:c7:9e:93:cd:49: 85:a0:5a:70:54:ce:3b:f1:d9:2e:c6:56:ca:eb:0c:82:3a:dd: 99:37:ab:fc:5b:95:7a:af:83:82:b1:48:c4:de:22:2b:13:48: 61:7c:5b:c8:39:83:9b:82:93:99:04:fe:21:2f:ff:6c:24:56: fe:8a:a4:fd:20:ec:1f:b6:2f:22:bf:47:b5:66:5c:58:fe:12: 87:4c:b4:e7:1a:9f:55:34:2e:bd:be:5f:5d:92:80:21:60:e8: 83:fd:3d:a6:bb:10:0d:d5:93:97:78:03:bf:31:34:19:48:55: f3:f2:35:48:ca:e7:3f:ed:f9:5a:10:ac:13:82:12:fb:09:5f: 92:df:3a:f6:88:d8:65:2f:57:f3:7e:cf:71:4d:b2:b5:c0:41: 68:8d:58:93:8c:3f:d8:8a:1b:cf:a4:a3:e9:86:38:f2:c5:b3: 10:4b:b3:db:54:a6:bd:97:ed:3a:54:26:ef:b0:1d:d1:4d:21: 5a:95:95:24:20:07:26:96:c4:67:a1:ee:d5:27:a0:01:ac:c2: 03:34:45:5f:db:d1:71:ac:81:04:bb:7c:6d:ae:94:32:e2:92: 7a:3e:f4:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjoZnjK2iBpdM1vTYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDIxNzAyMDAzOFoXDTI1MDUxODAxMDAzOFowLzEtMCsGA1UEAxMk ZjQyM2I4MTAtMjU2NS00ZjMxLWIxNTQtMzBmODU3MmMwNDBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmf1P1rJJlR1k6pwMkqUFOWoqUBUKOKLOyT6n ghpuCxP/oh9pjM1Ob84aQajTk3t+fOBK/HGJdhFkvlux0RxrhV/gg+JfmT9QNPR8 bvd4ftXZX+SrgGSoPPjt24uoK0E5cR3hXFetW1uYZQCSHGG4VwZ4gBaRw5a434YF +SXZ0iARAaQxUFIAn7uz1NB3liGURKLgE4G8SQlpi5VQUNcYY8guy4UzqsgyY8l6 IzXUDt+lZawKyBEEUyKFGWizuYW4QF3NOeqp8QVKg2snAvU3jssyOsgfae0poZUN 2VXv6quADU97K/3Ol9uIWMWSUh6b1EaWab5Zlz6LM4BumVtOUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC8LsqZIWAXaqh7yxf8JmnC6IaKsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMDQzODkwMGMtMDM5ZS0z ZmM4LTlhOWYtMGFmM2U4ZDE0ZTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrvc4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACxIxkeYJ7CFdOpY7xzMZjKzuW5lDaQun/JwVv7ZgHfHnpPNSYWgWnBU zjvx2S7GVsrrDII63Zk3q/xblXqvg4KxSMTeIisTSGF8W8g5g5uCk5kE/iEv/2wk Vv6KpP0g7B+2LyK/R7VmXFj+EodMtOcan1U0Lr2+X12SgCFg6IP9Paa7EA3Vk5d4 A78xNBlIVfPyNUjK5z/t+VoQrBOCEvsJX5LfOvaI2GUvV/N+z3FNsrXAQWiNWJOM P9iKG8+ko+mGOPLFsxBLs9tUpr2X7TpUJu+wHdFNIVqVlSQgByaWxGeh7tUnoAGs wgM0RV/b0XGsgQS7fG2ulDLikno+9Gc= -----END CERTIFICATE-----Generated at Sun Apr 27 01:00:09 2025 by rpki-client