$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/44d11fe3-49e0-3336-b125-dcb6fa1cf644.roa File: 44d11fe3-49e0-3336-b125-dcb6fa1cf644.roa (raw, json) Hash identifier: P1a8wJsTuD2+pQVlwIJEwLpzO5GVFhLlajDBVmd0GsA= Subject key identifier: F7:1E:F6:11:B2:4C:57:A5:93:A3:2C:F5:5E:B0:58:A9:FC:60:51:29 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849A089DE4C6923109693F098C0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/44d11fe3-49e0-3336-b125-dcb6fa1cf644.roa Signing time: Thu 24 Apr 2025 01:00:47 +0000 ROA not before: Thu 24 Apr 2025 01:00:47 +0000 ROA not after: Wed 23 Jul 2025 01:00:47 +0000 asID: 6167 IP address blocks: 174.213.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a0:89:de:4c:69:23:10:96:93:f0:98:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 24 01:00:47 2025 GMT Not After : Jul 23 01:00:47 2025 GMT Subject: CN=af6d0ffc-9bf5-4eb4-9d1e-3dee5ab3cbad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:8c:70:0c:33:8f:91:f0:91:e5:e8:af:50:48: 8d:9f:4d:b3:ec:15:53:d9:3f:14:db:6c:67:56:34: 94:b6:29:3c:05:1c:44:3f:ab:ba:cf:57:16:62:60: c2:9e:27:e5:67:6f:ef:a6:28:59:65:62:39:1c:5a: b7:6f:60:1e:b5:92:ae:a3:ea:aa:bb:5d:f0:89:71: bc:d9:c4:4e:84:ca:5b:01:d4:07:fa:8c:82:a2:fe: 1e:84:ef:cd:3c:6f:10:01:f6:4d:0c:34:28:93:b4: f5:7e:28:51:5c:9b:75:01:b1:4a:35:5b:d2:7e:94: 04:68:24:37:99:59:65:dd:25:ac:eb:0d:cd:4c:a8: fb:3a:0e:c5:66:6c:79:09:dd:d8:02:f1:eb:81:07: fa:70:92:a4:b3:d1:f8:1a:ab:f0:31:15:0c:17:11: 4b:a4:85:eb:0a:54:1b:9c:55:b6:79:11:f1:5c:f2: f6:3a:35:1b:f6:2e:32:8c:91:b2:58:13:43:d0:1a: ef:e6:61:e9:7b:2c:ac:df:cc:d6:84:9c:67:b7:50: 82:c4:82:9d:1a:9a:10:1f:86:bd:ca:e3:e7:77:ed: ad:13:cb:f1:54:e3:46:82:a8:32:8d:22:e8:37:da: a5:d4:4b:a9:dc:e0:7c:0c:59:38:30:e0:56:c1:97: bd:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:1E:F6:11:B2:4C:57:A5:93:A3:2C:F5:5E:B0:58:A9:FC:60:51:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/44d11fe3-49e0-3336-b125-dcb6fa1cf644.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.213.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:4b:90:47:03:31:c0:83:da:74:fd:a4:60:ed:46:73:58:95: 5d:06:99:36:ca:74:c3:be:6d:d6:4b:3b:9f:b0:4e:80:ab:8d: ed:33:54:30:a6:72:bd:01:4d:a4:72:fa:eb:68:f5:5c:72:97: 69:d2:99:2a:5f:7c:10:4e:31:4d:09:0c:37:05:23:b8:78:eb: 34:7c:5b:22:dc:16:9b:dd:d7:67:f1:f3:69:3f:d3:b9:6e:f0: 0c:1f:5f:e4:c5:24:cd:31:22:8e:6c:0b:6a:0c:31:91:99:8a: 34:7d:9a:d5:fd:b5:aa:b5:bc:ab:f2:0b:de:a3:22:88:88:54: 95:f6:0c:5e:46:10:70:11:fd:77:0e:83:18:5f:b6:7c:02:40: 7d:76:08:27:26:16:ed:99:ef:1e:9f:9b:05:54:e9:fe:2d:57: 2c:d9:d4:ae:b1:46:36:24:54:dd:6d:3b:0f:62:bd:f8:16:59: 60:19:85:c0:0a:24:66:35:9b:f6:f3:a5:0e:0f:5b:0f:52:4d: 56:f9:f2:60:f4:39:e0:d9:e0:fb:18:f7:49:02:22:13:cb:4d: e5:ee:50:7f:95:2d:2f:b2:7b:24:17:4a:1e:5b:b1:33:74:c5: 06:c7:81:20:a2:be:8f:e1:db:e2:70:a5:f6:f6:e1:53:b4:ce: 63:5a:f0:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmgid5MaSMQlpPwmMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDQyNDAxMDA0N1oXDTI1MDcyMzAxMDA0N1owLzEtMCsGA1UEAxMk YWY2ZDBmZmMtOWJmNS00ZWI0LTlkMWUtM2RlZTVhYjNjYmFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvoxwDDOPkfCR5eivUEiNn02z7BVT2T8U22xn VjSUtik8BRxEP6u6z1cWYmDCniflZ2/vpihZZWI5HFq3b2AetZKuo+qqu13wiXG8 2cROhMpbAdQH+oyCov4ehO/NPG8QAfZNDDQok7T1fihRXJt1AbFKNVvSfpQEaCQ3 mVll3SWs6w3NTKj7Og7FZmx5Cd3YAvHrgQf6cJKks9H4GqvwMRUMFxFLpIXrClQb nFW2eRHxXPL2OjUb9i4yjJGyWBND0Brv5mHpeyys38zWhJxnt1CCxIKdGpoQH4a9 yuPnd+2tE8vxVONGgqgyjSLoN9ql1Eup3OB8DFk4MOBWwZe9WwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPce9hGyTFelk6Ms9V6wWKn8YFEpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNDRkMTFmZTMtNDllMC0z MzM2LWIxMjUtZGNiNmZhMWNmNjQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrtWAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK5LkEcDMcCD2nT9pGDtRnNYlV0GmTbKdMO+bdZLO5+wToCrje0zVDCm cr0BTaRy+uto9Vxyl2nSmSpffBBOMU0JDDcFI7h46zR8WyLcFpvd12fx82k/07lu 8AwfX+TFJM0xIo5sC2oMMZGZijR9mtX9taq1vKvyC96jIoiIVJX2DF5GEHAR/XcO gxhftnwCQH12CCcmFu2Z7x6fmwVU6f4tVyzZ1K6xRjYkVN1tOw9ivfgWWWAZhcAK JGY1m/bzpQ4PWw9STVb58mD0OeDZ4PsY90kCIhPLTeXuUH+VLS+yeyQXSh5bsTN0 xQbHgSCivo/h2+Jwpfb24VO0zmNa8GM= -----END CERTIFICATE-----Generated at Wed Apr 30 12:22:58 2025 by rpki-client