$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4452fc35-de15-38fd-ad9f-0ab0e4e16b2a.roa File: 4452fc35-de15-38fd-ad9f-0ab0e4e16b2a.roa (raw, json) Hash identifier: 0dE2CE8r2al5C2+yPS7YgFnix2/q3/O/2tzS5eJ7Fos= Subject key identifier: 5E:79:21:8E:C4:B2:73:93:46:D1:EF:18:F3:59:93:21:D5:82:86:F2 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584949FEA34E3890C7B0024EEFC0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4452fc35-de15-38fd-ad9f-0ab0e4e16b2a.roa Signing time: Mon 24 Mar 2025 01:00:38 +0000 ROA not before: Mon 24 Mar 2025 01:00:38 +0000 ROA not after: Sun 22 Jun 2025 01:00:38 +0000 asID: 22394 IP address blocks: 199.74.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:49:fe:a3:4e:38:90:c7:b0:02:4e:ef:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 24 01:00:38 2025 GMT Not After : Jun 22 01:00:38 2025 GMT Subject: CN=eaabe58d-e5b6-4191-a3ef-2076f316b0be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:96:57:d4:97:e7:48:9e:19:77:9a:99:1b:e5: 99:45:f8:1f:bf:59:49:42:c8:1c:69:58:d9:e8:02: 27:45:b1:b4:4e:81:70:8a:05:2b:7d:02:5e:25:b7: 39:d3:f0:96:95:ed:c5:24:d1:a4:af:fc:5e:d5:99: e4:2e:07:01:e3:56:ef:35:05:df:e5:a6:eb:0b:7f: 01:cb:6e:c6:0c:95:d6:e3:12:57:80:53:59:d7:ab: 1a:7c:30:e7:af:9d:0a:8c:10:40:49:6f:11:34:8b: 11:1c:f4:23:d4:6f:ca:bf:e9:bb:ac:32:d6:d4:4d: 23:0a:12:31:87:64:29:7b:26:d1:4f:b0:7e:bf:4b: 21:75:a2:14:3f:30:55:05:28:4e:27:2f:20:a2:f3: ef:e1:ed:67:d3:97:c0:9c:53:cb:c4:8b:05:92:01: 44:e9:c1:ad:3b:00:f4:90:bb:a3:a7:b3:c1:96:1e: 80:0f:70:66:2e:d8:97:ff:e8:e0:d5:b0:bc:81:8c: 7e:96:e9:a9:e9:b1:b1:39:12:8e:e9:56:9f:32:8c: 21:3d:18:76:ff:2f:22:f3:10:cb:93:34:22:60:14: fd:22:e9:fd:72:6a:ff:f4:39:f0:02:4e:ee:76:50: 9c:24:18:4f:e0:f7:ea:b1:a0:c7:0e:37:94:d5:ab: a0:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:79:21:8E:C4:B2:73:93:46:D1:EF:18:F3:59:93:21:D5:82:86:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4452fc35-de15-38fd-ad9f-0ab0e4e16b2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 199.74.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:56:43:a0:67:46:8a:14:81:70:6b:f1:c5:fc:11:f6:12:d6: 24:10:18:e2:9b:e8:73:94:4b:93:8b:2f:2d:12:80:22:76:c2: 1d:38:9c:02:69:bb:ef:52:eb:2b:ef:3a:12:74:cd:5b:42:18: 9e:7f:70:90:9c:60:29:d5:24:ef:a0:f9:7a:66:05:47:36:65: 58:32:8f:d7:d4:39:13:20:08:80:fc:e2:cd:28:31:fc:ac:29: 3a:37:5c:eb:1d:06:51:cf:40:2e:aa:77:44:0d:92:34:2b:91: 7a:a3:ef:86:a6:ee:3e:8f:6c:c7:d9:07:bd:5f:2a:1e:2d:e4: bd:5e:84:6f:a3:54:43:01:2a:84:c7:21:66:68:e6:99:d2:cd: 8b:09:b5:d0:29:4e:d5:7f:0c:99:33:5f:54:3b:1b:18:07:47: 1f:21:03:c1:eb:ab:4c:04:fc:a8:bd:9e:cb:77:57:12:17:f1: ee:4d:10:bc:ae:36:c2:6f:83:ca:06:da:c6:44:df:a4:ff:22: 7b:82:b9:81:eb:93:b4:91:7c:69:03:94:74:30:4d:5b:05:ca: fc:c2:d5:fd:9f:cb:fd:d6:21:42:10:1f:fc:9f:4e:3b:1d:6b: 0a:c9:6e:8f:d5:76:37:c4:2a:52:f5:55:a3:70:44:3c:f7:79: ca:ce:97:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElJ/qNOOJDHsAJO78AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMyNDAxMDAzOFoXDTI1MDYyMjAxMDAzOFowLzEtMCsGA1UEAxMk ZWFhYmU1OGQtZTViNi00MTkxLWEzZWYtMjA3NmYzMTZiMGJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5ZX1JfnSJ4Zd5qZG+WZRfgfv1lJQsgcaVjZ 6AInRbG0ToFwigUrfQJeJbc50/CWle3FJNGkr/xe1ZnkLgcB41bvNQXf5abrC38B y27GDJXW4xJXgFNZ16safDDnr50KjBBASW8RNIsRHPQj1G/Kv+m7rDLW1E0jChIx h2QpeybRT7B+v0shdaIUPzBVBShOJy8govPv4e1n05fAnFPLxIsFkgFE6cGtOwD0 kLujp7PBlh6AD3BmLtiX/+jg1bC8gYx+lump6bGxORKO6VafMowhPRh2/y8i8xDL kzQiYBT9Iun9cmr/9DnwAk7udlCcJBhP4PfqsaDHDjeU1aug6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF55IY7EsnOTRtHvGPNZkyHVgobyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNDQ1MmZjMzUtZGUxNS0z OGZkLWFkOWYtMGFiMGU0ZTE2YjJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx0qeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKBWQ6BnRooUgXBr8cX8EfYS1iQQGOKb6HOUS5OLLy0SgCJ2wh04nAJp u+9S6yvvOhJ0zVtCGJ5/cJCcYCnVJO+g+XpmBUc2ZVgyj9fUORMgCID84s0oMfys KTo3XOsdBlHPQC6qd0QNkjQrkXqj74am7j6PbMfZB71fKh4t5L1ehG+jVEMBKoTH IWZo5pnSzYsJtdApTtV/DJkzX1Q7GxgHRx8hA8Hrq0wE/Ki9nst3VxIX8e5NELyu NsJvg8oG2sZE36T/InuCuYHrk7SRfGkDlHQwTVsFyvzC1f2fy/3WIUIQH/yfTjsd awrJbo/VdjfEKlL1VaNwRDz3ecrOl64= -----END CERTIFICATE-----Generated at Sun Apr 27 16:46:13 2025 by rpki-client