$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/295441ef-9281-31e4-889f-a1169db53868.roa File: 295441ef-9281-31e4-889f-a1169db53868.roa (raw, json) Hash identifier: mzIa8lYn68hWaMfieSKL7UIUzHXVeNgQpr6yeqDRDnU= Subject key identifier: 6E:61:7D:34:C6:73:F3:8A:BA:C0:C4:08:42:6F:6A:38:4D:50:0D:0D Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849A089E16B7C0B62276DF19900 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/295441ef-9281-31e4-889f-a1169db53868.roa Signing time: Thu 24 Apr 2025 01:00:47 +0000 ROA not before: Thu 24 Apr 2025 01:00:47 +0000 ROA not after: Wed 23 Jul 2025 01:00:47 +0000 asID: 6167 IP address blocks: 174.216.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a0:89:e1:6b:7c:0b:62:27:6d:f1:99:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 24 01:00:47 2025 GMT Not After : Jul 23 01:00:47 2025 GMT Subject: CN=702049fe-cf3a-4518-b5ba-ffce3764ef67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:4e:cf:3e:b4:53:e2:02:79:aa:e3:2c:75:cd: d5:2f:73:62:9f:aa:7e:7b:98:7f:be:82:88:c9:4b: b8:e3:59:eb:c9:97:65:fb:46:3b:c3:9e:cc:e6:b9: 86:53:78:55:cb:78:34:ec:98:f9:03:2f:16:31:cb: 6c:84:4a:1e:a3:fc:b9:45:03:eb:b2:b6:bc:d3:ae: 59:e8:a9:10:a7:26:ca:77:51:8a:3a:b2:14:44:86: c0:ba:09:e8:06:f9:69:a6:0c:fd:ce:32:31:e0:68: e6:5f:3c:5a:80:29:be:cd:bd:b8:8f:94:6e:df:af: 13:19:33:1d:fd:a3:47:a4:fa:13:fa:d5:3a:42:80: 63:33:29:18:64:b3:20:c4:99:0e:1f:d7:d4:01:e0: f9:ff:95:45:18:df:a8:1f:87:62:55:1c:7b:1f:ac: 96:fd:90:b9:c8:a3:9c:95:3f:14:b4:50:9a:ee:50: a9:1f:db:db:84:91:18:b2:65:ba:2a:39:6f:54:e8: 10:40:6c:11:0a:0f:6f:65:60:b4:73:4e:80:68:f7: 81:9e:4f:6e:1f:a1:85:09:a7:53:c1:54:b5:9b:f2: 13:a4:98:66:3d:f0:7e:9e:57:06:b1:b3:25:cf:12: b4:98:53:a2:ce:47:c9:46:e7:87:83:71:54:b7:76: da:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:61:7D:34:C6:73:F3:8A:BA:C0:C4:08:42:6F:6A:38:4D:50:0D:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/295441ef-9281-31e4-889f-a1169db53868.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.216.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:a0:e2:43:d1:ec:5e:e4:d8:7c:94:f4:99:a4:1b:4e:26:e5: 9f:63:c8:ff:c4:7c:45:f3:4a:09:d0:c1:61:16:bf:48:4e:b8: 4d:7e:c4:48:8c:7d:b8:fb:d0:bb:6f:49:98:74:c5:a6:c6:5b: ba:b1:af:6b:51:ca:98:dd:1e:3d:77:9a:f2:e6:2e:00:b3:38: d2:95:24:1f:af:1c:df:18:08:3b:7f:5a:e5:7a:e6:6d:00:f5: f0:9e:ad:33:b6:f4:47:12:ed:02:d2:1c:e0:03:fe:9f:bb:f4: 38:ab:95:c6:37:e0:af:5a:be:2b:d0:a1:92:9f:db:19:cc:a2: 93:15:f3:e2:87:c4:2d:5e:de:3c:b6:a5:df:68:15:3e:e8:e6: 48:78:99:81:8f:9c:86:78:d8:6a:35:e2:84:19:c2:27:4b:7d: e3:dd:d1:6b:77:a8:73:9a:22:4f:a2:58:b2:ba:51:64:e4:af: 30:32:28:84:4d:6a:f6:df:e6:10:8b:fc:91:0f:1e:c4:46:a4: 8d:ba:ea:79:0c:bb:5e:04:55:f5:38:6a:76:6e:34:70:95:34: ca:d8:81:16:14:ed:da:40:f1:46:00:0b:30:00:bd:c5:38:ea: 3e:30:0d:1f:28:b6:cb:e0:d4:c5:17:07:40:9c:9b:b3:60:d5: 1c:e8:83:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmgieFrfAtiJ23xmQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDQyNDAxMDA0N1oXDTI1MDcyMzAxMDA0N1owLzEtMCsGA1UEAxMk NzAyMDQ5ZmUtY2YzYS00NTE4LWI1YmEtZmZjZTM3NjRlZjY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhk7PPrRT4gJ5quMsdc3VL3Nin6p+e5h/voKI yUu441nryZdl+0Y7w57M5rmGU3hVy3g07Jj5Ay8WMctshEoeo/y5RQPrsra8065Z 6KkQpybKd1GKOrIURIbAugnoBvlppgz9zjIx4GjmXzxagCm+zb24j5Ru368TGTMd /aNHpPoT+tU6QoBjMykYZLMgxJkOH9fUAeD5/5VFGN+oH4diVRx7H6yW/ZC5yKOc lT8UtFCa7lCpH9vbhJEYsmW6KjlvVOgQQGwRCg9vZWC0c06AaPeBnk9uH6GFCadT wVS1m/ITpJhmPfB+nlcGsbMlzxK0mFOizkfJRueHg3FUt3bayQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG5hfTTGc/OKusDECEJvajhNUA0NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMjk1NDQxZWYtOTI4MS0z MWU0LTg4OWYtYTExNjlkYjUzODY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErtiwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFqg4kPR7F7k2HyU9JmkG04m5Z9jyP/EfEXzSgnQwWEWv0hOuE1+xEiM fbj70LtvSZh0xabGW7qxr2tRypjdHj13mvLmLgCzONKVJB+vHN8YCDt/WuV65m0A 9fCerTO29EcS7QLSHOAD/p+79DirlcY34K9avivQoZKf2xnMopMV8+KHxC1e3jy2 pd9oFT7o5kh4mYGPnIZ42Go14oQZwidLfePd0Wt3qHOaIk+iWLK6UWTkrzAyKIRN avbf5hCL/JEPHsRGpI266nkMu14EVfU4anZuNHCVNMrYgRYU7dpA8UYACzAAvcU4 6j4wDR8otsvg1MUXB0Ccm7Ng1Rzog/Q= -----END CERTIFICATE-----Generated at Sun Apr 27 04:20:10 2025 by rpki-client