$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/70bab93c-4aee-343c-ab40-14d9dae73731.roa File: 70bab93c-4aee-343c-ab40-14d9dae73731.roa (raw, json) Hash identifier: HlnSk4R+ao6gp+Vj35bYbJH8v1OQSq4HVLyWYKOPQ6g= Subject key identifier: 5B:67:62:CE:B6:BC:38:C5:C1:1B:2E:C1:0D:9A:09:39:D9:BD:BA:75 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849A089E5EFC1C7F45F74CD7138 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/70bab93c-4aee-343c-ab40-14d9dae73731.roa Signing time: Thu 24 Apr 2025 01:00:47 +0000 ROA not before: Thu 24 Apr 2025 01:00:47 +0000 ROA not after: Wed 23 Jul 2025 01:00:47 +0000 asID: 6167 IP address blocks: 174.219.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a0:89:e5:ef:c1:c7:f4:5f:74:cd:71:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 24 01:00:47 2025 GMT Not After : Jul 23 01:00:47 2025 GMT Subject: CN=9eda059c-3dd5-4bf6-b1f4-0e33d90d41ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:ab:41:d5:9e:65:aa:9d:8e:44:b4:54:a8:80: 68:20:3d:75:53:46:8d:f4:56:fc:7a:a9:44:a8:30: 84:70:b3:e8:70:eb:e4:87:84:74:1b:35:b6:13:d7: 86:23:05:e0:8e:9c:26:3c:fa:c6:6d:fa:b4:a5:1c: e1:57:72:04:a3:9e:70:e8:3c:27:72:71:84:59:4b: f5:2d:7e:a5:63:9b:d2:be:da:e4:2d:ad:ae:05:0d: 24:e1:86:ec:f6:de:b7:60:a7:e0:70:19:e0:06:6b: 97:2a:6b:8f:25:c5:ca:bb:09:de:8e:53:ad:45:7d: e5:33:d7:f0:a2:11:7f:a0:2b:54:6f:26:4a:ab:60: 71:0d:b8:a5:a5:a6:78:25:a7:89:99:10:2e:19:51: a5:79:09:d0:d5:69:f9:b4:88:5b:5d:68:96:94:f8: b8:63:5e:81:50:00:ea:ac:95:a2:8e:71:4f:b3:80: 55:92:21:8a:13:1f:cb:8a:ad:87:31:0b:97:55:da: 41:1e:9d:2a:54:8c:ea:be:53:6f:03:3d:fe:48:19: 3b:67:39:8c:9e:f7:90:99:4d:15:a9:f8:12:ad:91: 3c:e5:6d:e0:9b:9b:c5:35:5b:9d:1e:9e:91:b6:40: 7f:09:0a:ea:0d:a9:63:da:ef:fe:14:82:2f:95:67: f3:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:67:62:CE:B6:BC:38:C5:C1:1B:2E:C1:0D:9A:09:39:D9:BD:BA:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/70bab93c-4aee-343c-ab40-14d9dae73731.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.219.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:c0:33:07:e0:3f:f3:af:a2:96:21:dd:fb:ab:22:e0:42:18: a4:c8:3f:58:f6:81:b4:7f:95:a1:8a:5d:77:3f:9d:2b:89:45: 7b:29:4e:a8:2f:40:c8:62:b8:90:2d:83:ec:0d:8a:91:84:af: f3:ea:fc:de:bb:4f:ce:ba:63:08:97:48:71:d9:a3:e8:8c:9c: 42:df:43:65:09:e3:3f:7e:f7:9d:7d:d1:de:3a:35:c7:94:1c: a5:20:84:f1:cd:5f:67:a4:94:32:1f:f7:39:41:78:0f:27:bb: f2:e8:68:91:65:06:19:3e:39:7a:35:88:67:2d:42:e5:d8:1b: 33:3d:e1:ad:e4:28:b5:c5:20:13:6f:82:52:8a:0a:26:ff:a1: 38:06:79:ed:ba:4f:71:56:49:6c:c6:31:96:a8:da:61:90:65: df:02:c2:20:7b:23:1d:80:e3:62:7e:25:7a:7d:d0:8c:36:78: 53:4c:ec:18:01:12:24:ad:77:d9:9a:a0:52:ba:90:25:aa:9d: 65:11:c3:0d:d7:41:ab:a0:94:2e:d6:3b:cb:62:f0:06:85:06: 78:e0:20:ab:7d:56:dc:5e:73:0d:18:12:23:a3:71:87:38:0c: df:fe:2d:fc:9b:8d:37:24:13:f3:72:5f:58:8a:e0:cf:72:f5: 6f:ef:42:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmgieXvwcf0X3TNcTgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDQyNDAxMDA0N1oXDTI1MDcyMzAxMDA0N1owLzEtMCsGA1UEAxMk OWVkYTA1OWMtM2RkNS00YmY2LWIxZjQtMGUzM2Q5MGQ0MWFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiKtB1Z5lqp2ORLRUqIBoID11U0aN9Fb8eqlE qDCEcLPocOvkh4R0GzW2E9eGIwXgjpwmPPrGbfq0pRzhV3IEo55w6DwncnGEWUv1 LX6lY5vSvtrkLa2uBQ0k4Ybs9t63YKfgcBngBmuXKmuPJcXKuwnejlOtRX3lM9fw ohF/oCtUbyZKq2BxDbilpaZ4JaeJmRAuGVGleQnQ1Wn5tIhbXWiWlPi4Y16BUADq rJWijnFPs4BVkiGKEx/Liq2HMQuXVdpBHp0qVIzqvlNvAz3+SBk7ZzmMnveQmU0V qfgSrZE85W3gm5vFNVudHp6RtkB/CQrqDalj2u/+FIIvlWfzdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFtnYs62vDjFwRsuwQ2aCTnZvbp1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNzBiYWI5M2MtNGFlZS0z NDNjLWFiNDAtMTRkOWRhZTczNzMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErtuwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEHAMwfgP/OvopYh3furIuBCGKTIP1j2gbR/laGKXXc/nSuJRXspTqgv QMhiuJAtg+wNipGEr/Pq/N67T866YwiXSHHZo+iMnELfQ2UJ4z9+95190d46NceU HKUghPHNX2eklDIf9zlBeA8nu/LoaJFlBhk+OXo1iGctQuXYGzM94a3kKLXFIBNv glKKCib/oTgGee26T3FWSWzGMZao2mGQZd8CwiB7Ix2A42J+JXp90Iw2eFNM7BgB EiStd9maoFK6kCWqnWURww3XQauglC7WO8ti8AaFBnjgIKt9Vtxecw0YEiOjcYc4 DN/+LfybjTckE/NyX1iK4M9y9W/vQns= -----END CERTIFICATE-----Generated at Sun Apr 27 00:17:59 2025 by rpki-client