$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4ef9f3a6-010a-3c55-ab1c-71d29c916f63.roa File: 4ef9f3a6-010a-3c55-ab1c-71d29c916f63.roa (raw, json) Hash identifier: sFGKDykL035QrVP1nPfHpiCEj/V+SYPOCUpTiiAbLZc= Subject key identifier: 46:19:92:25:EE:C0:44:BC:5D:D8:4A:23:0C:56:78:C0:6A:B6:DD:DB Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849A089E61CCA268C7FEACC9980 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4ef9f3a6-010a-3c55-ab1c-71d29c916f63.roa Signing time: Thu 24 Apr 2025 01:00:47 +0000 ROA not before: Thu 24 Apr 2025 01:00:47 +0000 ROA not after: Wed 23 Jul 2025 01:00:47 +0000 asID: 6167 IP address blocks: 174.219.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a0:89:e6:1c:ca:26:8c:7f:ea:cc:99:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 24 01:00:47 2025 GMT Not After : Jul 23 01:00:47 2025 GMT Subject: CN=58e499f4-f08c-4587-96da-3bb3b28c776d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:d4:b6:84:67:f1:65:7c:aa:8f:db:a1:82:cb: a1:a6:c0:af:03:b5:44:75:ef:b8:f5:bd:c4:ca:b7: c6:10:b9:c0:34:46:8d:2d:3d:ff:25:6a:d1:bc:44: 8a:32:e2:21:43:04:38:e4:28:d0:2a:94:95:3b:e3: b5:40:d6:0b:d4:c7:6a:24:7e:fb:7d:12:bc:70:22: c6:0b:30:3f:a4:88:65:4b:60:d6:d6:bd:cd:40:2a: cd:e9:bc:e3:19:e2:b5:74:17:56:48:2c:7f:fb:70: 14:a9:77:bf:20:0c:a9:fd:41:fa:e4:1d:cd:6d:83: e0:dc:c6:14:39:83:f7:df:6c:df:e4:02:bc:4f:64: 20:2e:2d:f4:9a:64:28:02:dd:e6:0e:ca:7b:28:00: 85:d0:a8:12:d1:03:69:ae:f4:90:42:d1:0d:85:ed: 52:77:e2:9d:1e:e7:d6:ae:00:08:f3:85:8e:aa:19: b4:26:36:c0:4e:aa:8f:f2:11:69:dc:90:d7:cb:56: 52:14:da:db:ce:09:61:44:9a:7d:bd:e5:4b:17:3e: c4:24:cb:87:6c:1f:ba:f8:1c:68:cc:55:93:55:99: d2:0d:83:68:30:40:d3:64:53:34:58:0f:b4:b9:8f: 08:13:d9:ec:d3:af:43:f3:c9:16:a8:10:82:11:40: 49:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:19:92:25:EE:C0:44:BC:5D:D8:4A:23:0C:56:78:C0:6A:B6:DD:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4ef9f3a6-010a-3c55-ab1c-71d29c916f63.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.219.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:b1:b7:fe:a4:2e:d8:7f:32:a2:76:2d:05:3d:09:44:a4:42: d2:9a:0f:c5:11:7b:7a:d4:63:b0:76:5a:85:f8:2b:f8:11:43: cc:ff:a7:e9:b0:16:9a:24:d7:d2:46:8a:b7:0a:39:3e:05:db: aa:29:f5:e7:50:b8:37:d3:f8:23:ff:a3:78:71:57:ec:7a:03: ff:4c:31:c3:3a:37:96:7c:27:c0:76:fe:74:5c:e0:fe:5e:31: 7a:4c:61:5b:10:c5:1e:d1:18:39:8f:2f:5c:f5:52:e5:8c:50: bb:13:8b:17:35:9e:07:75:3b:24:e4:e8:eb:f1:f1:37:8c:64: 0b:df:8f:09:a0:20:ab:a5:e1:03:2f:32:f2:2f:af:ab:3a:e8: f0:26:4a:a1:04:d7:aa:f5:35:fb:a1:01:7c:9d:70:62:70:f8: 37:20:39:30:92:99:17:de:16:27:59:1c:3c:ae:93:92:c7:77: 4d:03:5f:8d:b0:56:51:c6:d3:b4:ca:93:02:23:dd:d7:aa:f5: d4:bb:7d:81:c2:28:08:0b:b9:78:1d:0f:f3:d8:96:18:fa:83: 5a:93:cd:21:a2:df:8b:dc:b0:c2:c9:97:f0:50:70:f8:19:76: 0d:c9:d8:a8:12:e5:f9:27:99:8e:63:56:38:81:bd:64:55:1d: 72:46:b6:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmgieYcyiaMf+rMmYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDQyNDAxMDA0N1oXDTI1MDcyMzAxMDA0N1owLzEtMCsGA1UEAxMk NThlNDk5ZjQtZjA4Yy00NTg3LTk2ZGEtM2JiM2IyOGM3NzZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7tS2hGfxZXyqj9uhgsuhpsCvA7VEde+49b3E yrfGELnANEaNLT3/JWrRvESKMuIhQwQ45CjQKpSVO+O1QNYL1MdqJH77fRK8cCLG CzA/pIhlS2DW1r3NQCrN6bzjGeK1dBdWSCx/+3AUqXe/IAyp/UH65B3NbYPg3MYU OYP332zf5AK8T2QgLi30mmQoAt3mDsp7KACF0KgS0QNprvSQQtENhe1Sd+KdHufW rgAI84WOqhm0JjbATqqP8hFp3JDXy1ZSFNrbzglhRJp9veVLFz7EJMuHbB+6+Bxo zFWTVZnSDYNoMEDTZFM0WA+0uY8IE9ns069D88kWqBCCEUBJjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEYZkiXuwES8XdhKIwxWeMBqtt3bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNGVmOWYzYTYtMDEwYS0z YzU1LWFiMWMtNzFkMjljOTE2ZjYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrtvYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJmxt/6kLth/MqJ2LQU9CUSkQtKaD8URe3rUY7B2WoX4K/gRQ8z/p+mw Fpok19JGircKOT4F26op9edQuDfT+CP/o3hxV+x6A/9MMcM6N5Z8J8B2/nRc4P5e MXpMYVsQxR7RGDmPL1z1UuWMULsTixc1ngd1OyTk6Ovx8TeMZAvfjwmgIKul4QMv MvIvr6s66PAmSqEE16r1NfuhAXydcGJw+DcgOTCSmRfeFidZHDyuk5LHd00DX42w VlHG07TKkwIj3deq9dS7fYHCKAgLuXgdD/PYlhj6g1qTzSGi34vcsMLJl/BQcPgZ dg3J2KgS5fknmY5jVjiBvWRVHXJGtps= -----END CERTIFICATE-----Generated at Sun Apr 27 00:12:30 2025 by rpki-client