$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3419ba6c-0f82-38ec-9e54-036464ac2036.roa File: 3419ba6c-0f82-38ec-9e54-036464ac2036.roa (raw, json) Hash identifier: hPxrQmB9ziJfFNhAaDmFkH7G69Jh5xiWDwVKv4S1IXc= Subject key identifier: 0E:06:B9:90:4F:F7:5B:57:C0:C1:17:D0:4E:03:79:D9:28:36:13:81 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849A089EFCCE122DF8BE2006FC0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3419ba6c-0f82-38ec-9e54-036464ac2036.roa Signing time: Thu 24 Apr 2025 01:00:47 +0000 ROA not before: Thu 24 Apr 2025 01:00:47 +0000 ROA not after: Wed 23 Jul 2025 01:00:47 +0000 asID: 6167 IP address blocks: 174.224.160.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a0:89:ef:cc:e1:22:df:8b:e2:00:6f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 24 01:00:47 2025 GMT Not After : Jul 23 01:00:47 2025 GMT Subject: CN=e52c3301-68a6-4319-95a9-7936a33e88c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:7f:b6:aa:98:3c:c5:33:33:09:5c:89:e9:aa: c3:8f:30:63:6d:0a:49:81:54:f2:56:f4:07:38:a8: 1f:76:4e:79:ad:f9:92:bb:48:f0:c5:cc:9d:17:f8: 1e:67:bc:ed:de:de:e4:b7:02:dc:d4:b8:cd:7b:55: 0a:0d:53:94:18:08:af:84:05:b9:8c:13:70:c7:32: a8:48:c6:0d:13:12:48:b0:96:b9:23:14:d7:75:ad: 1f:2a:9d:e4:3f:47:67:f9:4f:22:68:b2:da:93:af: 5f:b4:64:ae:64:2e:94:94:e7:7b:bc:75:f5:b7:3e: 2a:ba:91:32:f9:f1:94:d0:13:b7:d0:a8:a5:b7:22: bf:88:d2:61:d8:34:32:99:4f:8a:4c:d7:aa:5c:cb: 25:0c:d1:df:71:64:60:e6:6c:10:6e:6a:54:71:fe: fe:83:ca:36:1d:e5:cd:74:c7:cc:d1:a9:f8:ca:a5: 16:5f:ba:1e:29:20:04:a0:1c:c2:fb:43:c3:6d:80: bd:e4:48:d2:71:3a:d3:0d:36:42:23:de:86:72:af: bd:cd:21:7e:1a:a5:06:1c:59:f0:f2:93:1a:66:95: 4f:07:7f:29:1d:77:61:ec:84:ee:6e:e6:0f:48:ab: 3b:18:f3:9a:24:1a:1b:ee:4d:ce:e7:5f:bb:ac:ca: d7:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:06:B9:90:4F:F7:5B:57:C0:C1:17:D0:4E:03:79:D9:28:36:13:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3419ba6c-0f82-38ec-9e54-036464ac2036.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.224.160.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:65:da:28:95:0a:07:63:c1:3e:1f:de:8f:fd:2f:11:d3:11: 6f:88:52:5a:7e:e5:ea:22:20:f5:4f:31:cd:d4:1c:20:55:99: 6a:65:cb:89:48:dd:f2:18:46:bf:2e:94:11:bf:70:87:56:f1: f3:b6:a2:10:25:e9:cb:ba:c7:19:79:68:13:5b:57:0f:54:1b: 6b:09:62:bd:7a:4b:cd:1f:d7:03:28:59:69:9d:7d:71:af:da: 5a:42:61:e2:ac:44:2a:19:73:45:13:53:28:a3:79:31:a0:e2: 6a:c5:2a:c5:52:e9:68:06:d4:19:78:f7:01:3a:8f:51:20:e3: 98:fd:4f:4d:53:f0:97:f6:3e:a0:aa:c7:7a:b1:75:db:e2:e1: 38:25:77:59:c0:22:b6:c3:fd:48:09:04:5c:3c:49:2f:e7:01: f5:6a:ac:73:a2:41:c0:20:73:3c:42:cf:af:cc:e2:00:89:83: 00:e4:ca:69:7c:07:d0:d1:81:dc:cf:67:cb:63:20:6e:8d:1a: c7:63:64:17:43:98:ea:a6:1a:0d:fe:bc:d4:e1:42:49:9d:32: 44:ee:4d:2b:be:cd:6f:f3:ce:e0:9d:0e:d7:33:50:64:62:fd: bb:f5:a0:4c:ee:ff:07:30:ee:27:72:02:c9:11:14:9d:7b:fe: b8:b4:cb:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmgie/M4SLfi+IAb8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDQyNDAxMDA0N1oXDTI1MDcyMzAxMDA0N1owLzEtMCsGA1UEAxMk ZTUyYzMzMDEtNjhhNi00MzE5LTk1YTktNzkzNmEzM2U4OGM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmn+2qpg8xTMzCVyJ6arDjzBjbQpJgVTyVvQH OKgfdk55rfmSu0jwxcydF/geZ7zt3t7ktwLc1LjNe1UKDVOUGAivhAW5jBNwxzKo SMYNExJIsJa5IxTXda0fKp3kP0dn+U8iaLLak69ftGSuZC6UlOd7vHX1tz4qupEy +fGU0BO30KiltyK/iNJh2DQymU+KTNeqXMslDNHfcWRg5mwQbmpUcf7+g8o2HeXN dMfM0an4yqUWX7oeKSAEoBzC+0PDbYC95EjScTrTDTZCI96Gcq+9zSF+GqUGHFnw 8pMaZpVPB38pHXdh7ITubuYPSKs7GPOaJBob7k3O51+7rMrXLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA4GuZBP91tXwMEX0E4DedkoNhOBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMzQxOWJhNmMtMGY4Mi0z OGVjLTllNTQtMDM2NDY0YWMyMDM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDruCgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGhl2iiVCgdjwT4f3o/9LxHTEW+IUlp+5eoiIPVPMc3UHCBVmWply4lI 3fIYRr8ulBG/cIdW8fO2ohAl6cu6xxl5aBNbVw9UG2sJYr16S80f1wMoWWmdfXGv 2lpCYeKsRCoZc0UTUyijeTGg4mrFKsVS6WgG1Bl49wE6j1Eg45j9T01T8Jf2PqCq x3qxddvi4Tgld1nAIrbD/UgJBFw8SS/nAfVqrHOiQcAgczxCz6/M4gCJgwDkyml8 B9DRgdzPZ8tjIG6NGsdjZBdDmOqmGg3+vNThQkmdMkTuTSu+zW/zzuCdDtczUGRi /bv1oEzu/wcw7idyAskRFJ17/ri0y6g= -----END CERTIFICATE-----Generated at Sat Apr 26 23:33:59 2025 by rpki-client