$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/65e6b9f1-4dc2-3875-8b70-e0e5a812d981.roa File: 65e6b9f1-4dc2-3875-8b70-e0e5a812d981.roa (raw, json) Hash identifier: pDjOm0iNcLM1jNUyI1yqF3sp0H154CDLNN7pTTXlBdM= Subject key identifier: 51:AE:55:67:F9:44:61:38:F8:61:4C:EB:8C:AA:C7:EF:ED:84:F2:07 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285848E866766BAC6EA9F64B8DE190 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/65e6b9f1-4dc2-3875-8b70-e0e5a812d981.roa Signing time: Mon 17 Feb 2025 02:00:38 +0000 ROA not before: Mon 17 Feb 2025 02:00:38 +0000 ROA not after: Sun 18 May 2025 01:00:38 +0000 asID: 6167 IP address blocks: 174.243.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e8:66:76:6b:ac:6e:a9:f6:4b:8d:e1:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Feb 17 02:00:38 2025 GMT Not After : May 18 01:00:38 2025 GMT Subject: CN=04823260-8ac7-47c8-a95d-85a984b97e60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:21:a8:43:0b:99:e8:a9:f3:40:bf:0d:dc:ff: ab:47:14:b7:5c:19:86:03:a4:06:58:b6:fd:3d:d6: 03:f8:ef:b9:28:03:76:e8:a8:09:5d:ce:ec:2f:f3: f7:5f:4d:62:12:23:95:ee:f8:13:2c:fd:e6:ce:1f: 14:c0:82:9b:01:a8:47:44:bd:66:d2:ba:0d:2d:76: 54:12:2c:e8:87:67:92:2c:36:3d:ed:83:61:a8:3e: ff:71:ad:d8:99:6a:26:06:b4:12:ee:a1:48:99:ed: 26:30:84:dd:f7:05:6c:3b:f8:d5:77:2c:12:20:eb: 64:c4:af:c9:99:82:9d:a0:a8:9c:c7:ec:d9:f5:9c: e9:e5:2e:94:c5:1a:48:8b:3c:27:3a:e7:90:e7:7f: 03:93:a6:78:49:8a:c0:8c:ea:90:54:3e:3a:41:2f: 88:54:31:f4:46:06:d8:38:c6:0d:61:9c:09:97:6a: 93:ed:cb:26:25:1c:ae:11:88:bf:6e:3c:7c:c0:9f: a5:1c:7a:12:e5:2b:f6:59:6c:d7:1c:0a:ff:2c:4b: cb:13:29:a9:27:20:7f:f5:84:f9:40:9a:12:c4:c6: 49:d8:b3:96:8e:84:c3:ea:64:3c:39:82:59:42:03: 53:c5:30:d5:12:5a:58:f5:0c:2e:b4:64:15:7d:1e: a5:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:AE:55:67:F9:44:61:38:F8:61:4C:EB:8C:AA:C7:EF:ED:84:F2:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/65e6b9f1-4dc2-3875-8b70-e0e5a812d981.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.243.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:d2:68:7f:a7:55:ef:5b:3c:35:1f:ee:3d:0e:f3:21:6d:52: 89:f2:73:d1:90:80:a2:63:31:99:11:10:ab:74:ed:bd:03:9f: cb:26:2d:b6:2c:5f:0c:cd:4d:77:02:eb:b8:85:c4:30:55:03: 4a:b3:cd:11:2e:a0:40:09:0d:2b:2c:e2:36:25:6d:42:1b:e5: a8:70:f5:e4:f1:39:e1:53:a2:d5:f3:75:ea:b8:a1:c0:2a:cd: 51:e7:97:25:00:43:5a:fc:1b:17:09:00:23:e3:b9:60:63:70: f4:b4:c9:72:ab:ad:15:ef:f1:50:ca:0a:1e:a6:89:1e:4d:65: be:63:bd:87:d2:89:0f:31:5d:d5:0b:2d:c4:a0:5c:b5:70:eb: 65:5f:d7:59:c7:2c:78:a2:6e:d6:2f:36:1d:21:fb:ee:fb:44: 1e:60:da:e9:9f:bb:3d:c0:e5:70:59:e7:71:25:22:69:98:58: cd:af:3c:84:ca:78:d7:1c:ea:1f:6f:3f:26:a1:9b:9e:50:4e: 84:12:e5:e5:ae:ac:21:1d:ed:c9:35:7a:5b:57:90:b2:e6:62: 26:72:33:89:c2:a0:a5:9c:e4:61:d2:17:bc:1b:a0:21:3b:c9: 47:0d:04:8d:c0:13:ef:9f:2a:26:9d:82:30:10:9c:0f:0d:82: d5:f7:be:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjoZnZrrG6p9kuN4ZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDIxNzAyMDAzOFoXDTI1MDUxODAxMDAzOFowLzEtMCsGA1UEAxMk MDQ4MjMyNjAtOGFjNy00N2M4LWE5NWQtODVhOTg0Yjk3ZTYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyGoQwuZ6KnzQL8N3P+rRxS3XBmGA6QGWLb9 PdYD+O+5KAN26KgJXc7sL/P3X01iEiOV7vgTLP3mzh8UwIKbAahHRL1m0roNLXZU Eizoh2eSLDY97YNhqD7/ca3YmWomBrQS7qFIme0mMITd9wVsO/jVdywSIOtkxK/J mYKdoKicx+zZ9Zzp5S6UxRpIizwnOueQ538Dk6Z4SYrAjOqQVD46QS+IVDH0RgbY OMYNYZwJl2qT7csmJRyuEYi/bjx8wJ+lHHoS5Sv2WWzXHAr/LEvLEympJyB/9YT5 QJoSxMZJ2LOWjoTD6mQ8OYJZQgNTxTDVElpY9QwutGQVfR6lAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFGuVWf5RGE4+GFM64yqx+/thPIHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNjVlNmI5ZjEtNGRjMi0z ODc1LThiNzAtZTBlNWE4MTJkOTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErvOAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI7SaH+nVe9bPDUf7j0O8yFtUonyc9GQgKJjMZkREKt07b0Dn8smLbYs XwzNTXcC67iFxDBVA0qzzREuoEAJDSss4jYlbUIb5ahw9eTxOeFTotXzdeq4ocAq zVHnlyUAQ1r8GxcJACPjuWBjcPS0yXKrrRXv8VDKCh6miR5NZb5jvYfSiQ8xXdUL LcSgXLVw62Vf11nHLHiibtYvNh0h++77RB5g2umfuz3A5XBZ53ElImmYWM2vPITK eNcc6h9vPyahm55QToQS5eWurCEd7ck1eltXkLLmYiZyM4nCoKWc5GHSF7wboCE7 yUcNBI3AE++fKiadgjAQnA8NgtX3vsw= -----END CERTIFICATE-----Generated at Sun Apr 27 00:17:55 2025 by rpki-client