$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/24184dbc-2171-3a7d-9666-7a1ac9937de5.roa File: 24184dbc-2171-3a7d-9666-7a1ac9937de5.roa (raw, json) Hash identifier: mxzJ5c6TwhGSqEGK3caPGoUKzIDHB7ODLDyv51JgJrc= Subject key identifier: BC:30:B0:C1:34:D2:2F:3D:9B:FD:9F:F7:31:E1:55:F6:89:B4:4C:6B Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849A089EF9C9FF72E858967A600 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/24184dbc-2171-3a7d-9666-7a1ac9937de5.roa Signing time: Thu 24 Apr 2025 01:00:47 +0000 ROA not before: Thu 24 Apr 2025 01:00:47 +0000 ROA not after: Wed 23 Jul 2025 01:00:47 +0000 asID: 6167 IP address blocks: 174.224.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a0:89:ef:9c:9f:f7:2e:85:89:67:a6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 24 01:00:47 2025 GMT Not After : Jul 23 01:00:47 2025 GMT Subject: CN=2e31d8ce-aa57-413d-9959-3c776a63a545 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:45:05:6d:dd:f7:2f:42:5c:96:5d:84:4f:bb: 8c:a2:36:52:52:04:d0:d3:c6:9b:cf:60:b8:6a:68: bf:5d:df:dc:5b:a1:d6:fb:9c:f8:35:98:e5:48:ec: 70:49:9b:ea:37:17:f6:36:d4:18:ec:a5:e9:b6:c3: ea:a9:6f:f1:77:13:96:bd:52:9a:1d:04:3c:2d:b4: 5f:16:cd:7e:15:a4:8e:17:c5:f3:28:64:89:44:19: 1e:e8:de:b2:f7:17:6a:62:82:ef:d5:82:61:93:cc: ca:cc:00:d5:2c:0c:60:08:3b:a9:20:65:b0:7f:17: 1d:34:56:03:b3:64:1c:1c:be:ac:f7:7b:55:4a:0f: f0:1e:52:8b:91:44:49:a9:41:37:a2:1f:50:ac:52: a6:b9:fa:d0:d7:5e:2a:15:b7:94:40:d7:b1:0a:64: e5:37:e7:05:a8:43:9b:e8:b1:12:fc:79:fd:b9:f0: 31:ef:ad:16:7c:a0:e6:c5:48:66:9d:d7:67:a6:bc: b1:11:ac:e2:c2:40:86:38:3a:83:fa:2a:61:d1:f7: 07:d1:dd:81:db:d6:22:65:58:5e:68:26:b0:0e:a1: c5:a8:11:7d:d8:6e:51:e0:54:20:18:b0:1c:5f:f0: e3:1d:9d:f4:0c:46:90:fa:8e:2f:a2:be:59:37:14: 6c:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:30:B0:C1:34:D2:2F:3D:9B:FD:9F:F7:31:E1:55:F6:89:B4:4C:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/24184dbc-2171-3a7d-9666-7a1ac9937de5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.224.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:19:a3:ab:f6:de:24:7a:f7:09:82:51:cc:9c:30:0f:d7:39: b6:cd:44:0f:4e:ca:70:40:c0:11:34:17:7d:b0:01:a5:f0:ab: f3:79:97:c6:95:e7:08:ea:d1:5b:d4:3e:ce:1e:8e:65:cb:22: d9:8c:9d:d9:55:97:f7:f4:22:77:46:07:ec:a7:8c:db:d8:06: 5a:13:51:6c:2d:43:95:b4:ef:aa:29:83:bf:fc:47:2a:34:34: 4b:3e:7d:97:4a:38:e8:32:a7:01:07:fe:43:ec:99:e1:9c:fa: 6a:b9:1d:d3:7f:4d:03:a3:0e:c5:2c:43:fb:8b:95:72:6b:ad: cb:2a:33:5b:06:9e:8e:55:78:3f:05:3b:db:ea:57:7c:dd:7f: 31:9b:fe:27:ae:84:48:fe:6e:14:2c:61:43:6c:bd:ef:b3:63: 03:30:1d:db:8b:1d:9a:fa:97:db:82:c7:81:71:c4:f1:44:c4: ce:3a:d8:b9:fa:a7:88:32:3d:6b:bc:a3:85:06:40:e0:40:1a: 0a:b4:a5:89:df:23:cf:79:51:14:3e:65:66:07:1a:50:06:51: 16:a3:58:01:ed:a3:6e:d9:d7:09:40:5d:77:5f:60:78:32:5f: 48:b2:16:5c:ca:91:aa:51:4f:56:e6:8e:50:45:d6:d9:d9:e6: 8e:1c:63:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmgie+cn/cuhYlnpgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDQyNDAxMDA0N1oXDTI1MDcyMzAxMDA0N1owLzEtMCsGA1UEAxMk MmUzMWQ4Y2UtYWE1Ny00MTNkLTk5NTktM2M3NzZhNjNhNTQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhUUFbd33L0Jcll2ET7uMojZSUgTQ08abz2C4 ami/Xd/cW6HW+5z4NZjlSOxwSZvqNxf2NtQY7KXptsPqqW/xdxOWvVKaHQQ8LbRf Fs1+FaSOF8XzKGSJRBke6N6y9xdqYoLv1YJhk8zKzADVLAxgCDupIGWwfxcdNFYD s2QcHL6s93tVSg/wHlKLkURJqUE3oh9QrFKmufrQ114qFbeUQNexCmTlN+cFqEOb 6LES/Hn9ufAx760WfKDmxUhmnddnpryxEaziwkCGODqD+iph0fcH0d2B29YiZVhe aCawDqHFqBF92G5R4FQgGLAcX/DjHZ30DEaQ+o4vor5ZNxRsfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLwwsME00i89m/2f9zHhVfaJtExrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMjQxODRkYmMtMjE3MS0z YTdkLTk2NjYtN2ExYWM5OTM3ZGU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDruCIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACAZo6v23iR69wmCUcycMA/XObbNRA9OynBAwBE0F32wAaXwq/N5l8aV 5wjq0VvUPs4ejmXLItmMndlVl/f0IndGB+ynjNvYBloTUWwtQ5W076opg7/8Ryo0 NEs+fZdKOOgypwEH/kPsmeGc+mq5HdN/TQOjDsUsQ/uLlXJrrcsqM1sGno5VeD8F O9vqV3zdfzGb/ieuhEj+bhQsYUNsve+zYwMwHduLHZr6l9uCx4FxxPFExM462Ln6 p4gyPWu8o4UGQOBAGgq0pYnfI895URQ+ZWYHGlAGURajWAHto27Z1wlAXXdfYHgy X0iyFlzKkapRT1bmjlBF1tnZ5o4cY5A= -----END CERTIFICATE-----Generated at Sat Apr 26 22:58:45 2025 by rpki-client