$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5df01ada-92df-3645-b1bd-26c1f6d55e00.roa File: 5df01ada-92df-3645-b1bd-26c1f6d55e00.roa (raw, json) Hash identifier: lGnDGNBjxfIzhur/WpBvJQqj+gTT8VBhHMbg9HSGWwc= Subject key identifier: E5:E4:DB:38:11:C6:0E:36:88:FC:D2:F5:F7:D7:11:02:51:4C:FD:92 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849A089E26A42B15B17A7849F00 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5df01ada-92df-3645-b1bd-26c1f6d55e00.roa Signing time: Thu 24 Apr 2025 01:00:47 +0000 ROA not before: Thu 24 Apr 2025 01:00:47 +0000 ROA not after: Wed 23 Jul 2025 01:00:47 +0000 asID: 6167 IP address blocks: 174.218.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a0:89:e2:6a:42:b1:5b:17:a7:84:9f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 24 01:00:47 2025 GMT Not After : Jul 23 01:00:47 2025 GMT Subject: CN=6829bc46-1ecf-4575-89cf-7d23a6a55d01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:77:cb:20:e3:24:17:06:32:ae:6f:2b:91:b6: dc:b1:1b:d1:38:08:07:c2:e1:96:53:ba:6e:51:d1: ac:07:69:c3:fe:1c:a7:86:ca:d8:ee:e3:a9:0a:a0: 51:02:45:0e:bd:9e:2b:8f:7a:1b:34:66:80:26:ba: ce:7c:c7:92:a6:d9:31:f5:ab:b4:b9:65:97:5f:33: 69:a6:5b:61:8a:a5:2b:85:a6:11:10:9c:0b:f3:c5: 08:46:32:9e:5d:04:52:e9:8d:8e:b1:74:aa:3a:5d: b3:ce:d9:d1:0b:ea:64:09:d6:32:a5:62:4d:43:bb: eb:39:1b:a8:b6:33:3c:4e:87:21:79:a6:4e:3f:93: ea:c8:18:80:11:55:22:22:60:a6:40:20:43:1d:c0: ac:8b:1a:49:d9:87:81:70:ec:eb:2e:30:a2:50:b1: 3b:ba:0b:a0:e1:56:82:a4:a0:c7:7a:b8:40:cb:cf: dd:18:7d:62:33:d0:c4:2a:21:d5:25:6a:66:aa:e8: de:d4:0d:1d:88:58:3f:8c:7b:26:e1:ac:ef:91:4d: fb:73:f4:b6:83:27:4c:64:ec:40:f8:cb:54:1b:ba: 99:43:ea:35:16:9f:c5:d6:ad:64:d2:f3:81:6d:38: 50:2d:b4:09:ed:ad:d4:dd:45:4f:9d:c9:50:b5:7b: cb:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:E4:DB:38:11:C6:0E:36:88:FC:D2:F5:F7:D7:11:02:51:4C:FD:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5df01ada-92df-3645-b1bd-26c1f6d55e00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.218.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:83:fb:4c:ce:da:64:ca:68:2b:07:6b:91:66:63:58:3e:12: e8:99:82:70:03:4c:0b:aa:ad:da:fb:10:fb:9d:a2:06:72:94: b0:4f:8c:a4:6f:67:db:01:1f:33:f4:31:d1:67:76:14:76:37: aa:73:a6:fb:3b:ba:3d:ac:12:b8:fc:eb:5b:25:ed:98:fa:54: 19:32:6e:63:b4:f8:70:78:3a:66:8a:1e:f0:fd:d6:b6:0b:f8: a5:fe:34:12:da:0c:4a:5c:91:53:58:f0:b7:2c:cd:34:a0:5e: 2f:7c:4f:eb:33:ae:3c:c9:34:80:14:36:e3:35:eb:65:c5:cc: b8:4c:27:48:4f:7e:93:30:96:4d:7f:97:3d:78:da:4e:5d:68: e6:e4:3d:6d:42:e7:83:ac:06:f3:f2:b9:81:bf:19:33:73:d7: 9f:3d:85:d5:cd:5e:29:28:e3:ea:fa:c0:0e:05:cd:0b:8c:d6: 1d:72:11:81:42:73:f9:8d:39:8b:05:28:04:a6:4e:19:47:9f: 2e:bc:64:89:38:77:85:7f:8b:e9:2c:c1:0d:5b:c2:71:df:13: 41:00:2f:2e:ac:94:c5:50:08:b8:fd:70:38:74:21:42:95:9c: 57:fe:c1:a5:2e:22:1d:c3:fb:42:93:98:8b:59:32:02:0a:a7: c3:fc:db:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmgieJqQrFbF6eEnwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDQyNDAxMDA0N1oXDTI1MDcyMzAxMDA0N1owLzEtMCsGA1UEAxMk NjgyOWJjNDYtMWVjZi00NTc1LTg5Y2YtN2QyM2E2YTU1ZDAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3fLIOMkFwYyrm8rkbbcsRvROAgHwuGWU7pu UdGsB2nD/hynhsrY7uOpCqBRAkUOvZ4rj3obNGaAJrrOfMeSptkx9au0uWWXXzNp plthiqUrhaYREJwL88UIRjKeXQRS6Y2OsXSqOl2zztnRC+pkCdYypWJNQ7vrORuo tjM8TocheaZOP5PqyBiAEVUiImCmQCBDHcCsixpJ2YeBcOzrLjCiULE7ugug4VaC pKDHerhAy8/dGH1iM9DEKiHVJWpmquje1A0diFg/jHsm4azvkU37c/S2gydMZOxA +MtUG7qZQ+o1Fp/F1q1k0vOBbThQLbQJ7a3U3UVPnclQtXvLxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOXk2zgRxg42iPzS9ffXEQJRTP2SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNWRmMDFhZGEtOTJkZi0z NjQ1LWIxYmQtMjZjMWY2ZDU1ZTAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrtqIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACKD+0zO2mTKaCsHa5FmY1g+EuiZgnADTAuqrdr7EPudogZylLBPjKRv Z9sBHzP0MdFndhR2N6pzpvs7uj2sErj861sl7Zj6VBkybmO0+HB4OmaKHvD91rYL +KX+NBLaDEpckVNY8LcszTSgXi98T+szrjzJNIAUNuM162XFzLhMJ0hPfpMwlk1/ lz142k5daObkPW1C54OsBvPyuYG/GTNz1589hdXNXiko4+r6wA4FzQuM1h1yEYFC c/mNOYsFKASmThlHny68ZIk4d4V/i+kswQ1bwnHfE0EALy6slMVQCLj9cDh0IUKV nFf+waUuIh3D+0KTmItZMgIKp8P82zc= -----END CERTIFICATE-----Generated at Sat Apr 26 22:55:09 2025 by rpki-client