$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2151f746-4b21-3073-ab93-d8d0e56a37ba.roa File: 2151f746-4b21-3073-ab93-d8d0e56a37ba.roa (raw, json) Hash identifier: k94qUe9qkz+kaR0ansDmA6IrsHGdU+ge3c9fcc6zReE= Subject key identifier: B3:8C:ED:27:52:A7:3C:DC:F1:F0:B9:EE:B9:3E:5C:6E:0F:5A:41:6D Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849A089EFED6472054B76B08410 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2151f746-4b21-3073-ab93-d8d0e56a37ba.roa Signing time: Thu 24 Apr 2025 01:00:47 +0000 ROA not before: Thu 24 Apr 2025 01:00:47 +0000 ROA not after: Wed 23 Jul 2025 01:00:47 +0000 asID: 6167 IP address blocks: 174.224.176.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a0:89:ef:ed:64:72:05:4b:76:b0:84:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 24 01:00:47 2025 GMT Not After : Jul 23 01:00:47 2025 GMT Subject: CN=bd80279c-fc30-4735-a8f3-9b4623c5896e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:45:8f:24:72:c5:72:39:a8:e1:54:66:c7:14: 35:5d:7b:a8:62:bc:d2:c8:fa:ab:52:40:2f:d6:d2: e3:80:f7:1d:b2:76:90:cc:1a:99:9e:75:c4:87:32: bd:b9:91:29:cf:b3:50:b4:65:e9:b2:2a:9b:9a:14: bb:ab:81:03:b9:be:30:48:fb:39:26:9e:c8:d1:20: 15:d1:c7:37:9c:14:fc:f0:f5:96:00:b9:59:53:cc: 0b:f7:67:18:81:ee:55:61:72:0f:64:3e:1f:6f:1c: d0:d1:36:28:a9:38:c2:57:ce:5b:33:f2:79:37:11: 31:94:9a:1e:2a:61:e0:f7:a7:49:7c:83:0a:d2:ea: 52:13:16:81:e4:79:4a:67:85:3e:21:b8:a5:24:f1: 2e:c9:42:67:54:42:d1:1d:cb:56:e4:9e:4f:29:53: cd:24:98:27:b3:b5:16:4f:0f:c0:31:c2:94:0e:58: 94:0f:0f:d5:97:97:aa:c6:8f:94:83:b1:47:37:f6: 27:64:01:d4:35:8b:49:20:79:0c:b6:f2:33:ce:c6: 17:dd:ac:b5:8b:76:75:d1:4a:fe:7c:24:83:8b:23: 1f:cc:d1:89:f1:82:98:e4:7c:8b:a2:c6:76:0b:2e: df:10:b3:f6:64:f9:da:98:54:d4:1e:b7:03:d5:7f: f7:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:8C:ED:27:52:A7:3C:DC:F1:F0:B9:EE:B9:3E:5C:6E:0F:5A:41:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2151f746-4b21-3073-ab93-d8d0e56a37ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.224.176.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:d1:21:e8:b1:ec:c4:68:b5:28:2a:6f:9a:9c:ba:5b:60:38: 6e:cb:95:f2:18:d3:8a:1a:67:28:e5:9b:fd:78:7e:87:59:03: d5:35:39:17:52:5f:6e:6c:b3:81:35:83:f4:c9:6e:55:56:9a: fa:68:e7:d0:6e:cb:b3:71:6b:4d:d3:47:95:98:70:9d:b6:82: af:7e:fa:20:e9:c6:01:14:e1:25:dd:f8:eb:01:1d:97:46:f8: f0:2a:ba:f2:66:ba:55:14:93:76:57:80:6d:ba:19:83:24:a3: 3e:18:1b:80:40:07:c6:7b:99:0b:90:82:5d:ec:9c:46:7e:48: a8:bf:36:67:78:0c:c9:58:18:c8:82:4b:f9:9e:e4:13:7c:80: c1:00:e2:fc:a6:48:d0:a5:cd:70:9a:c9:5f:be:7d:f9:34:64: 64:5c:a8:38:21:7e:20:97:67:75:f1:0c:4d:35:2b:4e:8d:54: 84:ee:3a:f5:e9:6b:85:2e:97:2e:66:7d:96:4a:4d:1b:56:12: 8a:c9:15:b4:75:d0:02:ba:f6:e2:d5:ff:be:15:3e:4c:23:55: 4a:c1:c3:ec:50:26:20:c3:4d:54:c3:f2:ce:32:af:04:20:42: 67:dc:72:4e:c8:66:7d:37:de:a9:3f:9f:6f:a0:8d:2a:d2:31: 0d:84:14:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmgie/tZHIFS3awhBAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDQyNDAxMDA0N1oXDTI1MDcyMzAxMDA0N1owLzEtMCsGA1UEAxMk YmQ4MDI3OWMtZmMzMC00NzM1LWE4ZjMtOWI0NjIzYzU4OTZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5EWPJHLFcjmo4VRmxxQ1XXuoYrzSyPqrUkAv 1tLjgPcdsnaQzBqZnnXEhzK9uZEpz7NQtGXpsiqbmhS7q4EDub4wSPs5Jp7I0SAV 0cc3nBT88PWWALlZU8wL92cYge5VYXIPZD4fbxzQ0TYoqTjCV85bM/J5NxExlJoe KmHg96dJfIMK0upSExaB5HlKZ4U+IbilJPEuyUJnVELRHctW5J5PKVPNJJgns7UW Tw/AMcKUDliUDw/Vl5eqxo+Ug7FHN/YnZAHUNYtJIHkMtvIzzsYX3ay1i3Z10Ur+ fCSDiyMfzNGJ8YKY5HyLosZ2Cy7fELP2ZPnamFTUHrcD1X/3lQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLOM7SdSpzzc8fC57rk+XG4PWkFtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMjE1MWY3NDYtNGIyMS0z MDczLWFiOTMtZDhkMGU1NmEzN2JhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDruCwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIjRIeix7MRotSgqb5qcultgOG7LlfIY04oaZyjlm/14fodZA9U1ORdS X25ss4E1g/TJblVWmvpo59Buy7Nxa03TR5WYcJ22gq9++iDpxgEU4SXd+OsBHZdG +PAquvJmulUUk3ZXgG26GYMkoz4YG4BAB8Z7mQuQgl3snEZ+SKi/Nmd4DMlYGMiC S/me5BN8gMEA4vymSNClzXCayV++ffk0ZGRcqDghfiCXZ3XxDE01K06NVITuOvXp a4Uuly5mfZZKTRtWEorJFbR10AK69uLV/74VPkwjVUrBw+xQJiDDTVTD8s4yrwQg Qmfcck7IZn033qk/n2+gjSrSMQ2EFFg= -----END CERTIFICATE-----Generated at Sat Apr 26 22:52:11 2025 by rpki-client