$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/33ff7ba8-36ba-3fdd-b50b-f361feb8c817.roa File: 33ff7ba8-36ba-3fdd-b50b-f361feb8c817.roa (raw, json) Hash identifier: 2HwITNjJbe/5FLdbZ/85qhRifEFxrajDSSFTyaiSqLY= Subject key identifier: 9A:A1:A8:D0:20:13:99:0D:A2:BE:A5:0F:78:8D:9C:1F:8C:71:88:B1 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849A089DD80963D23DEA6FB5640 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/33ff7ba8-36ba-3fdd-b50b-f361feb8c817.roa Signing time: Thu 24 Apr 2025 01:00:47 +0000 ROA not before: Thu 24 Apr 2025 01:00:47 +0000 ROA not after: Wed 23 Jul 2025 01:00:47 +0000 asID: 6167 IP address blocks: 174.209.96.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a0:89:dd:80:96:3d:23:de:a6:fb:56:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 24 01:00:47 2025 GMT Not After : Jul 23 01:00:47 2025 GMT Subject: CN=f01c423f-b91d-4197-b9ba-04e6b905f8f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:d8:41:5f:58:fa:87:d1:0d:d8:4a:a8:2a:23: 69:59:bb:05:06:cf:a4:19:16:d9:4a:67:5c:95:00: 9a:9b:26:32:06:9b:64:57:b9:71:36:93:2b:7c:26: 95:2b:99:92:29:b7:6f:d6:fb:0a:43:1f:93:2b:04: 96:10:54:20:d0:6d:5c:d1:6b:3b:a7:0b:b5:74:90: b4:ae:e8:d3:83:94:8c:2b:9c:ef:29:80:a3:6b:75: 8b:0d:f9:62:f6:f6:39:91:26:86:5d:cd:4f:55:fe: 56:a3:6c:b8:7f:ff:65:57:88:ad:80:cb:bd:fa:53: cd:cf:4b:27:7e:e6:b0:49:9f:d2:41:bc:ff:4a:1a: 5f:b4:e5:2f:3f:47:96:ca:03:88:c7:80:06:68:b0: d0:75:db:58:44:9b:7f:a2:63:d7:18:81:e6:ec:6b: 39:5f:54:ea:db:25:e8:ae:b7:ab:a9:89:7e:c9:8c: 68:82:2d:a7:10:58:c5:a4:ba:3e:ac:b5:91:c5:ea: 02:5a:6b:2e:c1:40:3b:c9:42:23:78:39:6d:81:ef: 8f:3b:1e:3f:6b:e3:8e:aa:59:ca:11:6a:ba:af:df: 14:b5:1f:f0:fe:f5:53:61:89:2e:84:1a:76:b9:fc: 8c:51:8f:58:92:83:d5:0c:55:08:02:72:50:9a:0b: 7b:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:A1:A8:D0:20:13:99:0D:A2:BE:A5:0F:78:8D:9C:1F:8C:71:88:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/33ff7ba8-36ba-3fdd-b50b-f361feb8c817.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.209.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:81:1c:37:af:e3:c4:76:2e:89:cd:5f:ed:a8:c4:dd:a3:da: 9b:68:af:cf:da:65:e3:9b:d5:71:ea:3f:87:7a:d7:79:ba:1c: 08:cc:dc:df:f6:e5:25:83:0c:f1:21:23:95:da:2e:e5:71:8b: ff:27:89:64:c9:dd:7a:3d:7d:8e:51:a7:07:9f:28:9f:94:97: a6:6a:84:07:f8:4b:4b:f5:9d:c1:cc:20:4c:30:c5:76:22:fb: ae:90:b0:f5:a8:84:b4:38:6a:4d:3d:d7:dc:14:09:fd:15:24: f4:7c:9d:e0:7c:e6:9b:db:62:62:c8:da:14:ac:fa:4f:d4:9c: be:8c:a8:4f:49:79:c0:55:5e:93:e9:86:20:09:0d:bb:01:c1: 7c:7a:47:69:36:02:4c:66:ad:02:2b:30:1e:8b:39:1c:e9:79: 7e:9b:c9:4d:7d:bf:68:00:a9:0f:cc:92:de:3d:dc:1e:c1:1b: 60:31:6c:ee:e8:57:1c:17:ab:99:c8:a8:b3:c8:36:ad:db:86: 5d:fa:85:38:fb:5a:7d:58:53:1d:da:30:bf:49:8c:87:13:56: 8e:2e:db:2a:33:3e:0e:89:2b:a6:ad:a4:cb:b8:df:d2:11:ab: 95:43:77:1b:33:26:7d:1b:16:12:96:a8:14:63:a0:bf:b4:9a: b2:c3:a5:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmgid2Alj0j3qb7VkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDQyNDAxMDA0N1oXDTI1MDcyMzAxMDA0N1owLzEtMCsGA1UEAxMk ZjAxYzQyM2YtYjkxZC00MTk3LWI5YmEtMDRlNmI5MDVmOGYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhthBX1j6h9EN2EqoKiNpWbsFBs+kGRbZSmdc lQCamyYyBptkV7lxNpMrfCaVK5mSKbdv1vsKQx+TKwSWEFQg0G1c0Ws7pwu1dJC0 rujTg5SMK5zvKYCja3WLDfli9vY5kSaGXc1PVf5Wo2y4f/9lV4itgMu9+lPNz0sn fuawSZ/SQbz/ShpftOUvP0eWygOIx4AGaLDQddtYRJt/omPXGIHm7Gs5X1Tq2yXo rrerqYl+yYxogi2nEFjFpLo+rLWRxeoCWmsuwUA7yUIjeDltge+POx4/a+OOqlnK EWq6r98UtR/w/vVTYYkuhBp2ufyMUY9YkoPVDFUIAnJQmgt7WQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJqhqNAgE5kNor6lD3iNnB+McYixMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMzNmZjdiYTgtMzZiYS0z ZmRkLWI1MGItZjM2MWZlYjhjODE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFrtFgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAESBHDev48R2LonNX+2oxN2j2ptor8/aZeOb1XHqP4d613m6HAjM3N/2 5SWDDPEhI5XaLuVxi/8niWTJ3Xo9fY5RpwefKJ+Ul6ZqhAf4S0v1ncHMIEwwxXYi +66QsPWohLQ4ak0919wUCf0VJPR8neB85pvbYmLI2hSs+k/UnL6MqE9JecBVXpPp hiAJDbsBwXx6R2k2AkxmrQIrMB6LORzpeX6byU19v2gAqQ/Mkt493B7BG2AxbO7o VxwXq5nIqLPINq3bhl36hTj7Wn1YUx3aML9JjIcTVo4u2yozPg6JK6atpMu439IR q5VDdxszJn0bFhKWqBRjoL+0mrLDpZA= -----END CERTIFICATE-----Generated at Sun Apr 27 01:35:53 2025 by rpki-client