$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0e4e29a8-7f20-3ed4-9978-2ab968a73079.roa File: 0e4e29a8-7f20-3ed4-9978-2ab968a73079.roa (raw, json) Hash identifier: 7IVi4J2NZrj/zWdaK9i8AuvDZ1FVSHgazCWPDC0nsnU= Subject key identifier: FD:77:BD:47:D1:5F:FB:31:63:0B:4B:F1:44:C9:8D:31:0F:EC:8B:F4 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849A089DFBC84B7CC1EC1F26E80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0e4e29a8-7f20-3ed4-9978-2ab968a73079.roa Signing time: Thu 24 Apr 2025 01:00:47 +0000 ROA not before: Thu 24 Apr 2025 01:00:47 +0000 ROA not after: Wed 23 Jul 2025 01:00:47 +0000 asID: 6167 IP address blocks: 174.214.232.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a0:89:df:bc:84:b7:cc:1e:c1:f2:6e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 24 01:00:47 2025 GMT Not After : Jul 23 01:00:47 2025 GMT Subject: CN=fd401970-4aea-4874-9473-07c39ccd4d78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:60:fa:94:6e:91:d4:2a:53:34:50:8a:ae:f2: 5e:47:22:30:4c:74:60:23:6b:86:f5:b1:bf:bb:e1: c3:af:94:13:87:df:6f:9b:b3:ac:45:43:6a:e5:86: 00:8f:3d:c2:8a:9b:d5:78:e6:f1:13:0f:9a:55:60: 4d:53:bb:33:7c:45:5c:1c:07:df:0c:76:f2:49:96: 5b:34:5a:18:aa:41:48:00:99:70:af:ba:c0:ee:91: 57:af:4a:26:58:b7:46:4c:41:08:a5:f3:13:fd:7e: 9d:5c:37:e8:e3:0d:66:17:b4:27:f4:e3:d9:35:97: 16:ee:c0:36:0e:d4:11:8c:c7:46:68:02:a4:92:72: 20:0f:3a:96:ce:cf:bc:d6:f0:74:e9:bb:38:11:d6: 7c:b6:96:dc:19:ad:0e:64:b5:9f:63:f6:be:eb:01: 1e:bb:ca:e0:9b:03:e3:15:6f:f6:5a:f7:90:d1:90: c9:8c:59:ad:9d:08:97:94:bd:60:f2:d5:95:21:af: ce:95:9f:66:e6:16:c8:ae:89:64:a1:60:d3:23:c7: f8:8c:80:ac:66:b4:d1:88:27:af:60:0b:3f:d2:18: 18:1f:e7:0d:2a:84:1d:f5:23:5e:11:91:b3:71:f0: e1:95:f9:e7:46:0d:9b:e8:66:9c:35:af:14:36:62: e8:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:77:BD:47:D1:5F:FB:31:63:0B:4B:F1:44:C9:8D:31:0F:EC:8B:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0e4e29a8-7f20-3ed4-9978-2ab968a73079.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.214.232.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:37:12:05:85:d5:d7:eb:25:b3:f8:06:28:d2:33:a8:39:5d: 53:97:fa:34:3d:c4:cb:37:90:e0:fa:95:b3:84:e7:cd:1b:ff: 1c:a6:3e:59:2c:0d:d8:5d:17:5a:74:dc:22:27:38:79:8f:b2: 78:00:c7:ba:4c:8e:36:2f:5e:4a:b8:22:89:d2:76:5f:87:34: 24:72:c3:99:d1:4e:46:28:6e:74:3b:29:b7:f8:9a:d1:73:cf: 45:37:19:b1:38:e8:67:b4:5f:62:b1:97:68:e6:6e:d5:96:16: 7b:dc:c3:8b:bd:69:14:08:9e:e6:d3:d7:56:7f:d5:3c:f9:8a: 36:1c:ce:48:1d:ab:84:32:3b:54:86:9a:cb:17:79:ec:dd:27: dd:1b:fe:c2:56:29:e3:90:4e:f2:de:6c:32:ee:db:a1:fe:d6: a9:4b:38:11:29:4e:19:bf:49:be:c1:cd:a6:98:e1:0a:01:b0: 44:38:b3:33:69:80:ca:43:c9:d2:43:32:71:28:a9:49:bf:12: f5:1b:5c:5e:73:ef:7e:bf:b1:ed:5c:d1:76:b1:94:94:45:de: 52:64:e1:79:67:71:9c:d6:d9:9c:5c:62:f5:b3:79:27:6d:96: 04:a5:86:ee:b2:52:e2:75:de:7f:02:62:fb:46:6e:6c:8f:9f: 70:df:20:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmgid+8hLfMHsHyboAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDQyNDAxMDA0N1oXDTI1MDcyMzAxMDA0N1owLzEtMCsGA1UEAxMk ZmQ0MDE5NzAtNGFlYS00ODc0LTk0NzMtMDdjMzljY2Q0ZDc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2D6lG6R1CpTNFCKrvJeRyIwTHRgI2uG9bG/ u+HDr5QTh99vm7OsRUNq5YYAjz3CipvVeObxEw+aVWBNU7szfEVcHAffDHbySZZb NFoYqkFIAJlwr7rA7pFXr0omWLdGTEEIpfMT/X6dXDfo4w1mF7Qn9OPZNZcW7sA2 DtQRjMdGaAKkknIgDzqWzs+81vB06bs4EdZ8tpbcGa0OZLWfY/a+6wEeu8rgmwPj FW/2WveQ0ZDJjFmtnQiXlL1g8tWVIa/OlZ9m5hbIrolkoWDTI8f4jICsZrTRiCev YAs/0hgYH+cNKoQd9SNeEZGzcfDhlfnnRg2b6GacNa8UNmLofwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP13vUfRX/sxYwtL8UTJjTEP7Iv0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMGU0ZTI5YTgtN2YyMC0z ZWQ0LTk5NzgtMmFiOTY4YTczMDc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrtboMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGA3EgWF1dfrJbP4BijSM6g5XVOX+jQ9xMs3kOD6lbOE580b/xymPlks DdhdF1p03CInOHmPsngAx7pMjjYvXkq4IonSdl+HNCRyw5nRTkYobnQ7Kbf4mtFz z0U3GbE46Ge0X2Kxl2jmbtWWFnvcw4u9aRQInubT11Z/1Tz5ijYczkgdq4QyO1SG mssXeezdJ90b/sJWKeOQTvLebDLu26H+1qlLOBEpThm/Sb7BzaaY4QoBsEQ4szNp gMpDydJDMnEoqUm/EvUbXF5z736/se1c0XaxlJRF3lJk4XlncZzW2ZxcYvWzeSdt lgSlhu6yUuJ13n8CYvtGbmyPn3DfIHw= -----END CERTIFICATE-----Generated at Sun Apr 27 03:44:51 2025 by rpki-client