$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3abac57a-acbf-36e5-86d0-4b174393283c.roa File: 3abac57a-acbf-36e5-86d0-4b174393283c.roa (raw, json) Hash identifier: 5vPno/hmQGCBdOmU0iIJZasAd5UeEU/0OJlF8lIkMxo= Subject key identifier: 94:15:C5:81:3A:A2:2F:6A:26:DC:FF:5D:22:8B:20:2C:96:76:99:4E Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285848E86671BC938211CD73962A80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3abac57a-acbf-36e5-86d0-4b174393283c.roa Signing time: Mon 17 Feb 2025 02:00:38 +0000 ROA not before: Mon 17 Feb 2025 02:00:38 +0000 ROA not after: Sun 18 May 2025 01:00:38 +0000 asID: 6167 IP address blocks: 174.236.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e8:66:71:bc:93:82:11:cd:73:96:2a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Feb 17 02:00:38 2025 GMT Not After : May 18 01:00:38 2025 GMT Subject: CN=c57afe5c-0838-4e26-b552-92e70f968aae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:e3:0c:7c:9b:a3:cf:2d:94:12:29:44:36:91: 09:3f:21:20:ed:88:3a:40:ba:22:d4:b3:95:5f:74: cf:bd:65:3e:47:bd:c0:bc:b3:b1:56:26:79:57:e3: 14:18:7b:0b:d3:02:ef:54:9e:41:94:5d:3b:7a:60: 4a:67:d8:24:52:c7:c9:aa:4f:bd:aa:27:df:ed:d8: 6c:21:76:a2:91:de:92:24:f3:72:01:23:3e:a4:1e: 04:c7:73:c6:ac:3f:d1:94:23:d0:ef:bb:ce:f0:6e: d6:07:a0:bf:22:fb:34:d7:fd:8d:48:30:30:24:32: 63:43:51:fa:ec:08:28:ad:51:2c:1d:44:91:52:ce: e2:de:e4:5f:fb:dd:b8:ee:57:b0:44:11:f3:6f:26: 70:f2:23:18:db:26:02:86:65:d7:3b:2a:a8:42:77: d1:20:7a:de:90:ed:19:23:2b:13:fa:a7:a8:05:6c: 40:78:d1:47:27:70:60:fd:73:5a:60:0a:79:5c:4e: d9:f7:ea:4d:6b:f5:33:c9:0c:31:fa:54:d6:79:3f: a4:ec:38:28:8a:51:5b:9e:49:bb:9c:cc:2a:b8:95: ed:14:a0:07:46:93:df:db:a4:a0:ca:03:8f:f4:cd: b9:b1:6e:2a:8b:09:76:57:a0:cb:1d:1e:56:8e:82: 8d:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:15:C5:81:3A:A2:2F:6A:26:DC:FF:5D:22:8B:20:2C:96:76:99:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3abac57a-acbf-36e5-86d0-4b174393283c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.236.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:ef:1b:30:b2:ab:56:06:21:a2:49:f1:8b:2c:d2:9d:6f:fc: 5b:38:63:a5:26:72:c5:38:8f:d7:2f:cf:35:e9:9f:85:5e:3b: 25:f0:b0:2d:e5:07:f5:77:cf:29:67:dd:84:10:84:b9:4c:a6: 7f:51:84:c9:4a:26:45:f8:54:5d:a7:6c:57:85:48:72:ef:59: 6c:e3:f8:83:46:92:05:eb:a9:d4:03:8d:66:ab:28:99:3e:d3: 70:e1:05:b4:86:af:95:26:e4:cf:27:ea:ba:9c:f5:7c:c5:59: ae:91:75:40:67:b4:0c:51:c6:3d:78:da:5f:27:21:ee:ff:c1: ba:6a:31:b8:f0:a9:93:cf:e1:c5:f8:a0:33:74:37:45:6c:d9: 0e:53:4b:9f:5a:5a:8a:33:d4:dd:81:24:4d:50:95:60:ef:c7: 0a:ed:65:2f:2f:e3:68:e5:32:55:0f:60:36:fa:53:fd:f9:47: 87:7d:d9:82:83:cf:b0:1e:a5:ba:84:71:29:17:4f:b6:9f:97: c0:5b:1b:e7:76:12:12:df:12:3c:c3:44:eb:5f:0b:55:17:78: 84:c5:fa:e7:cc:f1:6f:be:81:ff:80:52:40:ea:5a:7b:59:63: c4:c0:e5:53:d3:e9:01:54:d4:c6:71:ad:f1:21:ce:89:26:4f: 67:1e:8a:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjoZnG8k4IRzXOWKoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDIxNzAyMDAzOFoXDTI1MDUxODAxMDAzOFowLzEtMCsGA1UEAxMk YzU3YWZlNWMtMDgzOC00ZTI2LWI1NTItOTJlNzBmOTY4YWFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzeMMfJujzy2UEilENpEJPyEg7Yg6QLoi1LOV X3TPvWU+R73AvLOxViZ5V+MUGHsL0wLvVJ5BlF07emBKZ9gkUsfJqk+9qiff7dhs IXaikd6SJPNyASM+pB4Ex3PGrD/RlCPQ77vO8G7WB6C/Ivs01/2NSDAwJDJjQ1H6 7AgorVEsHUSRUs7i3uRf+9247lewRBHzbyZw8iMY2yYChmXXOyqoQnfRIHrekO0Z IysT+qeoBWxAeNFHJ3Bg/XNaYAp5XE7Z9+pNa/UzyQwx+lTWeT+k7DgoilFbnkm7 nMwquJXtFKAHRpPf26SgygOP9M25sW4qiwl2V6DLHR5WjoKN6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJQVxYE6oi9qJtz/XSKLICyWdplOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvM2FiYWM1N2EtYWNiZi0z NmU1LTg2ZDAtNGIxNzQzOTMyODNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCruyAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAETvGzCyq1YGIaJJ8Yss0p1v/Fs4Y6UmcsU4j9cvzzXpn4VeOyXwsC3l B/V3zyln3YQQhLlMpn9RhMlKJkX4VF2nbFeFSHLvWWzj+INGkgXrqdQDjWarKJk+ 03DhBbSGr5Um5M8n6rqc9XzFWa6RdUBntAxRxj142l8nIe7/wbpqMbjwqZPP4cX4 oDN0N0Vs2Q5TS59aWooz1N2BJE1QlWDvxwrtZS8v42jlMlUPYDb6U/35R4d92YKD z7AepbqEcSkXT7afl8BbG+d2EhLfEjzDROtfC1UXeITF+ufM8W++gf+AUkDqWntZ Y8TA5VPT6QFU1MZxrfEhzokmT2ceii0= -----END CERTIFICATE-----Generated at Sat Apr 26 22:57:48 2025 by rpki-client