$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3ccd0255-5f27-30b7-bb71-bce5d67b16e3.roa File: 3ccd0255-5f27-30b7-bb71-bce5d67b16e3.roa (raw, json) Hash identifier: B3x/7Aj83WB+6en8Lprsg1CI0GQTnTr6VYwEiYSfpl4= Subject key identifier: 34:B2:3C:E1:78:56:90:21:A6:D7:9B:C4:1C:8F:AA:92:B9:F2:AD:A8 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849A089DDB2FFECF16829BDFA00 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3ccd0255-5f27-30b7-bb71-bce5d67b16e3.roa Signing time: Thu 24 Apr 2025 01:00:47 +0000 ROA not before: Thu 24 Apr 2025 01:00:47 +0000 ROA not after: Wed 23 Jul 2025 01:00:47 +0000 asID: 6167 IP address blocks: 174.209.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a0:89:dd:b2:ff:ec:f1:68:29:bd:fa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 24 01:00:47 2025 GMT Not After : Jul 23 01:00:47 2025 GMT Subject: CN=40606f28-9f76-4e20-9fa4-2d4591a5b5fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:34:95:bd:77:3b:fb:0c:45:df:0c:06:b9:5e: d1:4b:2a:30:39:67:d8:df:94:72:c7:50:a2:7d:5c: 7d:3a:03:1e:00:59:d9:62:ba:cf:e2:27:9e:b5:c5: 23:06:c8:c6:f4:41:47:95:fe:f7:49:8b:92:93:2e: f6:62:a9:79:95:ea:16:e3:37:cf:6b:4c:e6:c0:6b: f2:7b:ab:fa:10:7b:cd:53:cf:c3:25:3d:d3:31:54: cb:b6:31:25:27:c5:44:97:fb:9e:28:fa:a0:33:5c: a2:28:86:50:d6:d5:b8:26:8a:8d:9d:cc:7b:7a:30: 2e:23:d4:93:b0:f8:78:fc:03:0d:2c:bd:49:2e:fe: 07:38:34:7b:b4:f1:e7:39:14:1a:7e:db:63:b7:87: 82:fa:eb:55:6d:ad:b9:c4:d0:49:f7:06:3e:0b:87: 11:00:95:f6:58:6d:fb:6c:0c:4a:d7:c0:e5:14:88: 57:92:a1:d4:a6:8f:47:ca:62:3b:3f:87:57:8b:c9: 4f:ef:55:bd:14:dd:61:90:fe:73:d4:f4:02:06:40: 24:af:69:e9:7e:c8:2b:59:39:37:60:e2:8f:53:23: 69:62:e3:04:e5:21:00:a4:ca:43:76:67:7d:a4:8c: 86:90:72:da:29:db:16:04:c3:be:20:80:ea:dd:58: 49:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:B2:3C:E1:78:56:90:21:A6:D7:9B:C4:1C:8F:AA:92:B9:F2:AD:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3ccd0255-5f27-30b7-bb71-bce5d67b16e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.209.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:62:80:d3:66:e1:7b:c4:e9:14:c2:08:53:8f:f5:ee:a0:aa: e5:28:95:1e:c6:61:eb:72:58:4a:5e:c2:f4:a3:12:5a:74:b4: 0c:dd:a1:67:ab:4c:0f:70:3e:3a:ee:11:dd:1f:f5:26:97:e7: 4f:df:05:9d:40:97:36:5a:66:83:af:ea:2d:22:55:b2:47:1d: 25:84:13:51:c6:94:4c:9f:d4:d1:c0:3e:e3:72:09:e4:93:e7: a5:a3:6f:54:5c:85:8e:ba:57:e6:0e:7e:00:95:26:d6:d2:5a: 65:2d:b6:a2:8c:8b:f6:5b:34:f0:c0:a0:b3:65:c7:15:8d:67: 59:cc:f0:af:dc:72:3e:c3:8d:92:4f:f6:e0:d8:e3:df:13:b7: 2a:cb:77:10:4f:6a:f0:1c:42:94:f5:41:34:6f:2b:b7:fe:76: 7c:8b:26:1a:84:b4:57:7e:7f:71:5c:38:59:a3:07:c7:5f:db: e0:ee:4b:89:cd:08:5d:9b:2e:57:36:39:99:da:39:ed:c3:4d: da:7f:25:e2:87:7d:55:4a:86:ce:eb:ab:d9:54:fd:59:7d:83: d5:67:9c:55:b3:2f:0e:c4:43:ac:a8:0d:10:ea:12:f1:f1:3d: 9f:01:e8:b9:ee:3d:7b:c0:e5:4a:f6:59:f1:d7:46:7b:90:ea: 7a:56:6c:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmgid2y/+zxaCm9+gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDQyNDAxMDA0N1oXDTI1MDcyMzAxMDA0N1owLzEtMCsGA1UEAxMk NDA2MDZmMjgtOWY3Ni00ZTIwLTlmYTQtMmQ0NTkxYTViNWZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDSVvXc7+wxF3wwGuV7RSyowOWfY35Ryx1Ci fVx9OgMeAFnZYrrP4ieetcUjBsjG9EFHlf73SYuSky72Yql5leoW4zfPa0zmwGvy e6v6EHvNU8/DJT3TMVTLtjElJ8VEl/ueKPqgM1yiKIZQ1tW4JoqNncx7ejAuI9ST sPh4/AMNLL1JLv4HODR7tPHnORQafttjt4eC+utVba25xNBJ9wY+C4cRAJX2WG37 bAxK18DlFIhXkqHUpo9HymI7P4dXi8lP71W9FN1hkP5z1PQCBkAkr2npfsgrWTk3 YOKPUyNpYuME5SEApMpDdmd9pIyGkHLaKdsWBMO+IIDq3VhJbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDSyPOF4VpAhptebxByPqpK58q2oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvM2NjZDAyNTUtNWYyNy0z MGI3LWJiNzEtYmNlNWQ2N2IxNmUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFrtHgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJBigNNm4XvE6RTCCFOP9e6gquUolR7GYetyWEpewvSjElp0tAzdoWer TA9wPjruEd0f9SaX50/fBZ1AlzZaZoOv6i0iVbJHHSWEE1HGlEyf1NHAPuNyCeST 56Wjb1RchY66V+YOfgCVJtbSWmUttqKMi/ZbNPDAoLNlxxWNZ1nM8K/ccj7DjZJP 9uDY498TtyrLdxBPavAcQpT1QTRvK7f+dnyLJhqEtFd+f3FcOFmjB8df2+DuS4nN CF2bLlc2OZnaOe3DTdp/JeKHfVVKhs7rq9lU/Vl9g9VnnFWzLw7EQ6yoDRDqEvHx PZ8B6LnuPXvA5Ur2WfHXRnuQ6npWbHk= -----END CERTIFICATE-----Generated at Sun Apr 27 16:35:43 2025 by rpki-client