$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6f8f7873-4308-31d7-9bfb-efe5f189a95f.roa File: 6f8f7873-4308-31d7-9bfb-efe5f189a95f.roa (raw, json) Hash identifier: gz/POMVRiyTH9YHDC8ue43nm1A/TM/Fdlwi4y9RlA+g= Subject key identifier: FA:72:2A:6A:25:1B:6C:48:94:80:0E:7F:7F:B4:04:7B:E4:B2:EC:FB Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849A089E582401913105AD6F69C Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6f8f7873-4308-31d7-9bfb-efe5f189a95f.roa Signing time: Thu 24 Apr 2025 01:00:47 +0000 ROA not before: Thu 24 Apr 2025 01:00:47 +0000 ROA not after: Wed 23 Jul 2025 01:00:47 +0000 asID: 6167 IP address blocks: 174.219.136.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a0:89:e5:82:40:19:13:10:5a:d6:f6:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 24 01:00:47 2025 GMT Not After : Jul 23 01:00:47 2025 GMT Subject: CN=39ed360d-59f8-42bb-9bcf-e8f6b12d227a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:c4:33:b9:79:95:58:d2:83:a0:d6:32:16:22: 50:ba:6e:e5:77:8d:f6:dc:9c:f1:29:57:5a:9a:16: 0a:83:42:a3:ea:27:e0:0b:35:55:bc:15:82:cf:7d: 68:04:fa:85:ba:c6:4e:dc:3a:89:bb:36:b3:3f:6f: 8a:48:27:ad:99:e5:6d:24:7b:49:50:a6:58:46:94: 5b:37:f3:02:cc:2d:57:5f:04:9d:93:b2:8c:65:94: 35:78:b1:6c:cb:34:07:0a:ec:42:e9:99:4c:50:b7: 46:41:63:30:89:8f:9d:38:51:1c:ad:ca:c3:94:9d: ef:d5:60:a2:09:53:99:1b:96:f3:ea:64:1f:35:36: 81:ef:01:a4:1c:a2:aa:df:a6:ef:4c:f9:9d:21:ab: 9a:4c:e6:01:82:e5:8c:c8:aa:b7:0c:cf:30:6f:c0: 5a:f8:96:56:be:39:fe:88:ab:76:e4:ff:b5:a5:fe: bb:04:9d:b6:99:77:e0:60:df:bb:73:a4:a7:98:51: 28:54:89:98:0b:a1:b1:c3:2b:70:92:a0:d5:c3:6c: 5e:bd:78:70:d8:4f:58:30:e1:03:c7:fa:0d:dc:44: a3:b7:17:2e:da:51:32:f3:3b:12:56:61:f9:93:d1: 4c:48:a0:03:80:da:65:fc:5e:d5:ad:9b:78:3d:d2: 43:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:72:2A:6A:25:1B:6C:48:94:80:0E:7F:7F:B4:04:7B:E4:B2:EC:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6f8f7873-4308-31d7-9bfb-efe5f189a95f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.219.136.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:a0:91:5e:4e:66:5f:30:d2:90:9d:f5:2d:98:79:82:41:8c: 4c:33:fd:5f:f3:73:59:b5:6f:38:b7:cb:59:74:d5:4d:99:59: ae:47:9d:48:66:eb:ee:5d:82:9f:2b:03:83:da:fe:eb:e5:a2: 4a:38:19:11:8b:c4:c1:c2:47:ac:17:6a:ad:02:f1:bc:08:81: 05:61:97:65:ee:bf:6e:46:13:83:d6:e1:e2:60:30:22:40:00: 05:43:04:f7:b7:94:6f:83:cc:d6:b2:8e:e8:89:c5:11:8e:47: ba:3a:56:3c:4c:4a:ea:b0:24:cf:55:1a:93:46:97:34:9c:fb: e4:81:75:6e:3b:3c:22:05:3f:70:b8:d7:90:a4:8e:37:be:78: 3c:66:83:cc:83:cc:71:9f:98:65:b4:f9:e1:c9:25:84:a1:7d: ca:0d:11:22:7a:42:4a:0a:bf:7b:6c:d7:2b:69:5e:15:50:e9: 5a:a8:1e:1d:84:5c:8f:2a:e8:c8:b2:2d:06:f7:23:aa:c5:e6: 09:fb:fd:50:84:d8:a7:2a:74:40:f6:df:bb:60:96:96:b0:f5: 06:a5:73:67:17:8b:64:2e:76:2d:31:ff:ec:0d:52:23:c6:6f: f5:d2:25:c2:45:68:1d:c4:69:75:54:ba:50:e6:9b:b4:0a:a0: 14:d1:26:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmgieWCQBkTEFrW9pwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDQyNDAxMDA0N1oXDTI1MDcyMzAxMDA0N1owLzEtMCsGA1UEAxMk MzllZDM2MGQtNTlmOC00MmJiLTliY2YtZThmNmIxMmQyMjdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8cQzuXmVWNKDoNYyFiJQum7ld4323JzxKVda mhYKg0Kj6ifgCzVVvBWCz31oBPqFusZO3DqJuzazP2+KSCetmeVtJHtJUKZYRpRb N/MCzC1XXwSdk7KMZZQ1eLFsyzQHCuxC6ZlMULdGQWMwiY+dOFEcrcrDlJ3v1WCi CVOZG5bz6mQfNTaB7wGkHKKq36bvTPmdIauaTOYBguWMyKq3DM8wb8Ba+JZWvjn+ iKt25P+1pf67BJ22mXfgYN+7c6SnmFEoVImYC6GxwytwkqDVw2xevXhw2E9YMOED x/oN3ESjtxcu2lEy8zsSVmH5k9FMSKADgNpl/F7VrZt4PdJDqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPpyKmolG2xIlIAOf3+0BHvksuz7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNmY4Zjc4NzMtNDMwOC0z MWQ3LTliZmItZWZlNWYxODlhOTVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrtuIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFygkV5OZl8w0pCd9S2YeYJBjEwz/V/zc1m1bzi3y1l01U2ZWa5HnUhm 6+5dgp8rA4Pa/uvloko4GRGLxMHCR6wXaq0C8bwIgQVhl2Xuv25GE4PW4eJgMCJA AAVDBPe3lG+DzNayjuiJxRGOR7o6VjxMSuqwJM9VGpNGlzSc++SBdW47PCIFP3C4 15Ckjje+eDxmg8yDzHGfmGW0+eHJJYShfcoNESJ6QkoKv3ts1ytpXhVQ6VqoHh2E XI8q6MiyLQb3I6rF5gn7/VCE2KcqdED237tglpaw9Qalc2cXi2Qudi0x/+wNUiPG b/XSJcJFaB3EaXVUulDmm7QKoBTRJlg= -----END CERTIFICATE-----Generated at Sat Apr 26 22:58:35 2025 by rpki-client