$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/25c9e139-d568-38a4-8fa4-4e33caedfd1f.roa File: 25c9e139-d568-38a4-8fa4-4e33caedfd1f.roa (raw, json) Hash identifier: Z4fhuTd6oMw30uQgR0OYOi0kX4CWBMMqZliAgsbf6cU= Subject key identifier: E5:60:63:B2:94:1C:FC:20:98:8A:27:20:0E:76:A4:2D:4C:09:5D:EB Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849A089DCDF90B787C1D7618230 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/25c9e139-d568-38a4-8fa4-4e33caedfd1f.roa Signing time: Thu 24 Apr 2025 01:00:47 +0000 ROA not before: Thu 24 Apr 2025 01:00:47 +0000 ROA not after: Wed 23 Jul 2025 01:00:47 +0000 asID: 6167 IP address blocks: 174.208.64.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a0:89:dc:df:90:b7:87:c1:d7:61:82:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 24 01:00:47 2025 GMT Not After : Jul 23 01:00:47 2025 GMT Subject: CN=215559dc-2a66-4898-a94f-b091fb068a13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a4:ae:15:16:d2:60:4e:0b:b1:94:41:43:42: 1a:90:d0:f1:02:38:90:cf:c4:4e:3e:89:aa:4d:0f: 76:21:9e:92:8e:8c:13:77:d4:47:e6:58:da:7b:13: fa:6c:03:b1:2c:c4:c8:52:45:1e:3b:27:80:af:02: 65:6f:35:40:05:4a:5a:ee:c7:85:87:83:be:0a:a9: 1a:b2:3c:53:6b:af:0b:f1:28:0f:72:bb:6b:1f:0f: 8d:cd:89:bc:fa:c0:69:34:14:66:f4:17:7f:0e:10: 13:21:bf:95:27:74:59:14:bf:d3:ac:36:11:99:53: e3:9a:1b:ce:53:de:0d:8f:cf:2e:b4:7f:da:1e:1c: ef:81:df:7f:6c:e5:8a:b2:52:b1:ad:72:3f:58:14: 32:7c:25:87:f1:6d:ca:09:51:f7:d3:ff:9a:60:c3: 99:c2:9a:62:83:ed:c0:05:5f:87:76:13:e3:01:ae: 7c:fc:97:e0:af:e4:c2:13:05:1c:94:91:68:c3:f7: 6e:50:5d:91:aa:3e:84:52:17:c0:b3:c1:a7:e6:21: 38:02:06:db:2f:51:b6:6f:8e:99:17:b8:37:ce:dd: 48:20:64:0d:c8:92:a8:d0:26:94:12:cc:3d:24:d8: 7a:8b:b0:5d:28:a6:3f:8b:e9:a7:ff:0e:46:18:8f: 08:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:60:63:B2:94:1C:FC:20:98:8A:27:20:0E:76:A4:2D:4C:09:5D:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/25c9e139-d568-38a4-8fa4-4e33caedfd1f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.208.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:6e:e1:9f:e8:5e:38:12:70:d1:ae:7f:a0:89:76:b8:20:88: b3:f1:2e:bd:2e:97:d6:60:be:67:e0:7c:9d:f1:30:20:ba:f2: 14:40:0e:13:06:c5:61:0a:b0:d5:03:3d:79:de:30:42:5e:c1: 5d:06:69:a3:05:8c:8c:2c:07:43:3c:06:96:d6:e1:28:37:3e: 0a:8d:1b:36:59:a9:74:6c:b4:89:0b:b2:9a:64:fd:10:29:78: 4e:23:c2:6c:54:16:8e:88:35:00:4a:8d:33:ad:20:05:ba:bd: bf:9a:a7:e5:2d:46:63:21:0d:3d:a3:7d:cb:f4:06:00:e7:3a: 07:f6:cb:a9:5e:31:40:f8:de:29:65:0d:69:ed:48:01:68:f3: ac:19:70:18:e5:52:e5:7d:00:9c:06:3a:80:97:6f:a1:a6:51: 62:ae:f0:c7:6f:fa:35:57:2d:5f:b7:35:bd:91:f1:81:2b:09: 31:10:1b:d9:9f:c2:09:c2:8c:a0:ed:e3:71:92:fb:b7:c8:73: 8b:2f:20:c3:e8:e5:18:2f:e2:ff:1e:1b:de:60:85:c0:82:4c: 24:90:bc:78:c1:66:0e:b2:d3:90:84:65:a3:6f:3c:44:da:56: 40:05:ac:89:68:f7:b0:ca:53:93:36:e4:a3:5f:15:80:09:9d: 63:b2:eb:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmgidzfkLeHwddhgjAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDQyNDAxMDA0N1oXDTI1MDcyMzAxMDA0N1owLzEtMCsGA1UEAxMk MjE1NTU5ZGMtMmE2Ni00ODk4LWE5NGYtYjA5MWZiMDY4YTEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqSuFRbSYE4LsZRBQ0IakNDxAjiQz8ROPomq TQ92IZ6SjowTd9RH5ljaexP6bAOxLMTIUkUeOyeArwJlbzVABUpa7seFh4O+Cqka sjxTa68L8SgPcrtrHw+NzYm8+sBpNBRm9Bd/DhATIb+VJ3RZFL/TrDYRmVPjmhvO U94Nj88utH/aHhzvgd9/bOWKslKxrXI/WBQyfCWH8W3KCVH30/+aYMOZwppig+3A BV+HdhPjAa58/Jfgr+TCEwUclJFow/duUF2Rqj6EUhfAs8Gn5iE4AgbbL1G2b46Z F7g3zt1IIGQNyJKo0CaUEsw9JNh6i7BdKKY/i+mn/w5GGI8I3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOVgY7KUHPwgmIonIA52pC1MCV3rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMjVjOWUxMzktZDU2OC0z OGE0LThmYTQtNGUzM2NhZWRmZDFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFrtBAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI1u4Z/oXjgScNGuf6CJdrggiLPxLr0ul9ZgvmfgfJ3xMCC68hRADhMG xWEKsNUDPXneMEJewV0GaaMFjIwsB0M8BpbW4Sg3PgqNGzZZqXRstIkLsppk/RAp eE4jwmxUFo6INQBKjTOtIAW6vb+ap+UtRmMhDT2jfcv0BgDnOgf2y6leMUD43ill DWntSAFo86wZcBjlUuV9AJwGOoCXb6GmUWKu8Mdv+jVXLV+3Nb2R8YErCTEQG9mf wgnCjKDt43GS+7fIc4svIMPo5Rgv4v8eG95ghcCCTCSQvHjBZg6y05CEZaNvPETa VkAFrIlo97DKU5M25KNfFYAJnWOy64w= -----END CERTIFICATE-----Generated at Mon Apr 28 13:10:06 2025 by rpki-client