$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4af95962-d215-37e0-ba57-5282e25a5137.roa File: 4af95962-d215-37e0-ba57-5282e25a5137.roa (raw, json) Hash identifier: J77rPqbjRKQpV7kdlGQWsbour+dsg2+HmXEetkWSM7g= Subject key identifier: DC:28:9E:32:3B:E0:B0:7F:56:4F:D2:6D:B2:59:C0:12:22:B9:B9:F4 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285848E8666CAB5177C53650B516C0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4af95962-d215-37e0-ba57-5282e25a5137.roa Signing time: Mon 17 Feb 2025 02:00:38 +0000 ROA not before: Mon 17 Feb 2025 02:00:38 +0000 ROA not after: Sun 18 May 2025 01:00:38 +0000 asID: 6167 IP address blocks: 174.227.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e8:66:6c:ab:51:77:c5:36:50:b5:16:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Feb 17 02:00:38 2025 GMT Not After : May 18 01:00:38 2025 GMT Subject: CN=b2e99efa-142f-41db-b644-a9acc0ce34ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:7b:50:0c:b5:17:17:c5:87:b2:4e:ad:a3:87: ff:26:f4:5e:0c:7d:8f:f8:19:38:7f:28:58:f7:e0: 29:86:f6:a0:0f:69:df:58:10:e8:85:b6:fe:92:0c: ab:ff:d0:93:43:bb:18:14:06:26:19:6d:f5:4e:d2: fa:4b:67:7b:f2:3e:43:c0:4f:08:bf:56:fa:87:26: 53:49:3e:fa:cf:03:95:6e:cf:e2:d2:27:d0:36:09: 52:17:e4:56:7a:70:76:a7:aa:33:ed:ce:a7:fd:ec: e1:ea:fb:d3:4f:60:04:44:b8:04:fa:57:e8:19:a4: 6c:bb:a5:09:f3:95:bd:25:23:ce:81:54:cb:6a:8d: 06:84:b9:12:cb:ee:b4:fc:84:16:e6:14:56:95:29: 13:59:13:bb:b9:38:ab:ee:e0:78:ad:0a:ad:3d:ef: 9d:1c:54:81:44:d3:a0:08:5b:d9:b5:cf:8e:40:37: 01:4f:a8:19:9d:e1:a7:dd:85:fc:22:a4:45:09:63: 59:7c:57:dc:83:cf:0a:3d:88:4e:f7:45:b9:36:d1: e0:69:2b:0a:4f:70:b8:fe:a0:f3:06:19:00:f9:ac: 93:13:dc:f5:43:73:bd:e0:4a:bf:f5:ea:ec:98:6b: 06:26:71:9a:84:11:bb:7e:d4:d3:6e:42:f9:04:ec: e9:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:28:9E:32:3B:E0:B0:7F:56:4F:D2:6D:B2:59:C0:12:22:B9:B9:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4af95962-d215-37e0-ba57-5282e25a5137.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.227.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:97:37:7e:2f:bb:12:93:a1:82:35:d8:02:77:df:f1:9f:84: 10:42:7f:b8:9f:fc:a6:fa:61:c5:3e:0b:88:79:48:1b:72:ca: 64:eb:b8:7c:42:bd:ed:1e:ca:1b:41:2e:a3:c6:3b:65:89:f4: 2c:ef:a2:4a:24:df:88:41:b7:5c:c5:54:79:e8:93:b9:0f:c2: 2f:6c:7a:f1:bb:66:79:51:b9:ce:57:ac:1b:c8:6f:a4:e4:a6: e8:c0:54:5d:f3:a1:a4:d6:04:60:c4:b5:3b:4d:00:dc:d3:80: 8a:3f:3a:d4:86:6b:fc:97:25:e1:35:fd:ec:7c:4c:07:47:09: 8e:21:cb:e9:0c:6a:28:d3:1d:f4:c0:1a:3a:69:8e:41:45:50: 20:98:ce:ad:b5:3d:d5:77:64:c4:53:0e:83:78:19:89:0a:a0: 80:44:25:e7:b2:c5:7a:2e:fc:cd:f1:63:48:43:bc:84:e0:17: 55:be:cd:b7:76:93:a4:5a:fb:29:6b:21:d5:1a:c4:ae:09:8f: b4:9a:27:76:88:95:a3:b0:52:c9:03:43:8f:db:ff:9f:b9:03: b6:04:a7:1e:68:b0:55:21:51:ab:d7:54:1e:c3:4b:14:a9:20: a7:5b:da:b6:77:ee:0e:f9:b2:2f:c8:5e:c9:a4:0a:5f:04:37: aa:72:9b:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjoZmyrUXfFNlC1FsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDIxNzAyMDAzOFoXDTI1MDUxODAxMDAzOFowLzEtMCsGA1UEAxMk YjJlOTllZmEtMTQyZi00MWRiLWI2NDQtYTlhY2MwY2UzNGZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyXtQDLUXF8WHsk6to4f/JvReDH2P+Bk4fyhY 9+AphvagD2nfWBDohbb+kgyr/9CTQ7sYFAYmGW31TtL6S2d78j5DwE8Iv1b6hyZT ST76zwOVbs/i0ifQNglSF+RWenB2p6oz7c6n/ezh6vvTT2AERLgE+lfoGaRsu6UJ 85W9JSPOgVTLao0GhLkSy+60/IQW5hRWlSkTWRO7uTir7uB4rQqtPe+dHFSBRNOg CFvZtc+OQDcBT6gZneGn3YX8IqRFCWNZfFfcg88KPYhO90W5NtHgaSsKT3C4/qDz BhkA+ayTE9z1Q3O94Eq/9ersmGsGJnGahBG7ftTTbkL5BOzpdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNwonjI74LB/Vk/SbbJZwBIiubn0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNGFmOTU5NjItZDIxNS0z N2UwLWJhNTctNTI4MmUyNWE1MTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEruNgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIWXN34vuxKToYI12AJ33/GfhBBCf7if/Kb6YcU+C4h5SBtyymTruHxC ve0eyhtBLqPGO2WJ9Czvokok34hBt1zFVHnok7kPwi9sevG7ZnlRuc5XrBvIb6Tk pujAVF3zoaTWBGDEtTtNANzTgIo/OtSGa/yXJeE1/ex8TAdHCY4hy+kMaijTHfTA GjppjkFFUCCYzq21PdV3ZMRTDoN4GYkKoIBEJeeyxXou/M3xY0hDvITgF1W+zbd2 k6Ra+ylrIdUaxK4Jj7SaJ3aIlaOwUskDQ4/b/5+5A7YEpx5osFUhUavXVB7DSxSp IKdb2rZ37g75si/IXsmkCl8EN6pym4k= -----END CERTIFICATE-----Generated at Sun Apr 27 05:00:27 2025 by rpki-client