$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4cf0200f-e3ee-3d16-86eb-25c32e6fda68.roa File: 4cf0200f-e3ee-3d16-86eb-25c32e6fda68.roa (raw, json) Hash identifier: GNqQOvlw9lNO+nilbeax+Gx4y0GHGAgSNaGzZ4E6iiY= Subject key identifier: CB:FB:A3:28:67:88:AC:80:A7:95:C0:C1:DE:4B:EC:5D:B4:D5:A0:E9 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849A089ED6A7D6680EC11D4C380 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4cf0200f-e3ee-3d16-86eb-25c32e6fda68.roa Signing time: Thu 24 Apr 2025 01:00:47 +0000 ROA not before: Thu 24 Apr 2025 01:00:47 +0000 ROA not after: Wed 23 Jul 2025 01:00:47 +0000 asID: 6167 IP address blocks: 174.213.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a0:89:ed:6a:7d:66:80:ec:11:d4:c3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 24 01:00:47 2025 GMT Not After : Jul 23 01:00:47 2025 GMT Subject: CN=7d0aaffa-d8f7-4d24-baef-e6e71cc43376 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:e3:2b:40:98:2e:93:04:99:4f:63:18:df:4b: 86:19:cb:b4:e2:de:21:c1:d6:05:b4:d5:30:b7:2d: 5e:79:45:bc:8f:9f:18:8e:f1:fa:6d:0d:4c:2e:b2: 02:7a:fc:73:f8:f5:9f:50:7c:8f:63:a0:8c:34:c0: 2c:43:c8:4d:b6:65:05:9c:a8:af:94:90:3e:59:9b: f5:30:06:55:73:f9:87:69:a0:c9:df:3f:92:96:b7: 80:54:41:ee:b5:ce:b6:af:45:f6:b0:e8:d7:8f:20: 3f:52:da:06:5a:7b:33:36:0e:28:de:7c:e0:3f:b5: 93:18:6a:a4:30:f4:bb:69:20:0d:db:eb:ee:7f:0d: 15:01:9a:2f:16:b8:37:74:1c:e3:47:76:da:f7:d9: 78:12:0b:82:35:96:e0:cb:e8:da:d1:8a:51:d9:23: d1:61:c7:8e:ca:8f:3d:f9:fb:92:e4:5a:01:31:2a: 28:7b:3d:33:ae:7c:a1:77:b9:f3:c5:54:fa:69:5a: ba:94:cc:d5:b6:66:cf:a7:c1:56:50:9a:79:c5:bc: c8:24:a7:dc:eb:f9:c7:49:24:9d:ec:a4:48:83:2f: 12:e0:d5:f5:99:93:9f:4b:f3:1d:24:38:c0:c2:d2: c5:5d:0d:1b:9c:a9:ff:55:1b:98:d7:ae:08:cc:56: a1:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:FB:A3:28:67:88:AC:80:A7:95:C0:C1:DE:4B:EC:5D:B4:D5:A0:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4cf0200f-e3ee-3d16-86eb-25c32e6fda68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.213.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:5d:36:e1:23:e0:2f:7d:4c:b5:61:ca:07:88:8c:25:7d:84: de:a2:a4:2f:07:ed:e2:f0:69:08:d0:ff:79:9b:53:a5:cf:d4: 00:ae:ae:fe:22:91:23:14:b3:1a:f9:34:5e:1a:dc:8d:69:ad: 9f:4d:b2:ca:08:5d:6c:51:b5:a4:00:dd:06:34:c5:36:2c:f9: 55:c7:0a:81:47:01:01:20:1f:4d:4f:eb:0f:c1:52:19:f4:56: b3:2b:93:3c:dc:af:6c:9b:6e:61:6d:ac:21:cd:10:0f:58:55: f2:f1:ff:58:26:36:66:e3:74:1d:39:bd:19:8b:42:b9:b4:8c: 42:f8:cd:c3:ea:67:79:d8:91:74:f7:94:b3:a5:17:24:2c:75: 6e:06:dc:8c:aa:69:3e:48:7a:16:2b:bf:8d:90:2a:d4:62:c7: 81:eb:b9:cb:1f:19:4c:dd:1c:2c:5b:7a:5b:c4:d2:fe:dd:11: 15:cb:21:07:b6:6f:9f:dd:48:8b:b2:b8:74:47:82:33:92:a6: 31:29:21:16:a5:96:b9:bb:6a:e2:09:80:94:dd:05:52:e6:01: 59:b8:e7:07:43:95:ef:e4:6f:4d:1f:f4:b9:83:72:ca:8e:12: 47:a7:88:82:e3:c2:5c:f9:43:29:9a:ab:20:96:f4:f1:1c:1b: 88:c6:bf:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmgie1qfWaA7BHUw4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDQyNDAxMDA0N1oXDTI1MDcyMzAxMDA0N1owLzEtMCsGA1UEAxMk N2QwYWFmZmEtZDhmNy00ZDI0LWJhZWYtZTZlNzFjYzQzMzc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkeMrQJgukwSZT2MY30uGGcu04t4hwdYFtNUw ty1eeUW8j58YjvH6bQ1MLrICevxz+PWfUHyPY6CMNMAsQ8hNtmUFnKivlJA+WZv1 MAZVc/mHaaDJ3z+SlreAVEHutc62r0X2sOjXjyA/UtoGWnszNg4o3nzgP7WTGGqk MPS7aSAN2+vufw0VAZovFrg3dBzjR3ba99l4EguCNZbgy+ja0YpR2SPRYceOyo89 +fuS5FoBMSooez0zrnyhd7nzxVT6aVq6lMzVtmbPp8FWUJp5xbzIJKfc6/nHSSSd 7KRIgy8S4NX1mZOfS/MdJDjAwtLFXQ0bnKn/VRuY164IzFah4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMv7oyhniKyAp5XAwd5L7F201aDpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNGNmMDIwMGYtZTNlZS0z ZDE2LTg2ZWItMjVjMzJlNmZkYTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrtUAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKVdNuEj4C99TLVhygeIjCV9hN6ipC8H7eLwaQjQ/3mbU6XP1ACurv4i kSMUsxr5NF4a3I1prZ9NssoIXWxRtaQA3QY0xTYs+VXHCoFHAQEgH01P6w/BUhn0 VrMrkzzcr2ybbmFtrCHNEA9YVfLx/1gmNmbjdB05vRmLQrm0jEL4zcPqZ3nYkXT3 lLOlFyQsdW4G3IyqaT5IehYrv42QKtRix4HrucsfGUzdHCxbelvE0v7dERXLIQe2 b5/dSIuyuHRHgjOSpjEpIRallrm7auIJgJTdBVLmAVm45wdDle/kb00f9LmDcsqO EkeniILjwlz5QymaqyCW9PEcG4jGv6M= -----END CERTIFICATE-----Generated at Sun Apr 27 10:42:12 2025 by rpki-client