$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/74bd8090-640b-3f07-ab99-47235ce2db23.roa File: 74bd8090-640b-3f07-ab99-47235ce2db23.roa (raw, json) Hash identifier: XxC2fSbWMfzLH9ljktV3UG0FiQPxz3L+afY/tD/E0zc= Subject key identifier: 91:B7:EC:6B:9E:7A:A6:5E:20:95:19:72:98:6B:D7:98:62:79:C7:1E Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849A089EAA5F2C30C52CBAFF340 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/74bd8090-640b-3f07-ab99-47235ce2db23.roa Signing time: Thu 24 Apr 2025 01:00:47 +0000 ROA not before: Thu 24 Apr 2025 01:00:47 +0000 ROA not after: Wed 23 Jul 2025 01:00:47 +0000 asID: 6167 IP address blocks: 174.196.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a0:89:ea:a5:f2:c3:0c:52:cb:af:f3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 24 01:00:47 2025 GMT Not After : Jul 23 01:00:47 2025 GMT Subject: CN=e92a75d8-0b66-4b49-873d-bb4f489156e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:8a:05:e7:0d:05:06:47:3b:b3:d4:b9:f2:cf: 2f:2e:59:cd:18:e6:0d:2f:d7:0b:da:fc:df:f0:a5: 63:a8:24:3e:aa:a1:dd:2a:44:80:32:a0:ae:32:d2: 57:af:0d:5f:be:cf:88:b8:81:35:ae:97:0d:5e:9b: c8:19:cd:8a:19:75:a5:18:1e:d0:fc:0a:78:f0:96: 5a:90:4f:c1:56:b3:09:07:5e:0b:9a:0f:fd:7e:6f: fc:b8:e3:ce:ca:bc:c6:4d:d7:2b:f0:45:69:c3:46: ad:1e:32:33:8b:46:99:b5:11:33:9f:97:77:71:ad: 8b:f4:7f:e7:c8:12:d7:ed:83:ce:7c:6d:4a:f8:a9: 6a:6d:c1:bb:42:8f:f9:91:fd:a7:a2:00:43:99:3c: c4:7c:30:ee:0d:4f:e1:90:be:1f:94:09:e8:32:db: a7:d4:a5:17:fb:8c:51:16:99:25:1a:60:83:69:4f: f3:3a:f8:41:a6:c5:fe:d8:a4:ef:a2:31:5f:f4:6a: 8d:30:9a:33:bf:e2:1a:98:a2:ab:be:2c:c5:3b:c6: c3:6a:6a:f6:76:c5:05:0c:d6:22:c3:aa:be:e8:5e: 02:e6:d2:58:c0:d3:70:06:83:95:2c:cf:2a:45:1a: b1:7b:4c:1e:f9:d2:ab:19:04:6c:d6:e9:2c:b3:ff: 6b:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:B7:EC:6B:9E:7A:A6:5E:20:95:19:72:98:6B:D7:98:62:79:C7:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/74bd8090-640b-3f07-ab99-47235ce2db23.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.196.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:01:87:6e:25:00:78:f6:2e:45:32:30:eb:89:bb:29:da:8f: 58:9f:a1:0c:1f:b8:e2:f4:f0:15:37:77:2b:97:5e:f1:97:27: 45:a3:ba:46:c8:f9:b8:9e:bf:57:63:e1:9e:e4:98:ef:de:2e: af:78:48:2f:39:72:e5:17:9a:1c:35:0b:cb:4d:c5:d6:a6:19: e9:bb:4c:0a:63:ea:71:69:fb:4f:81:58:63:93:c3:bb:38:15: 67:ea:a7:95:f4:ac:10:e2:4e:e5:e8:5b:3f:f1:f0:4d:36:3f: 31:69:2b:82:dc:3b:b5:48:1e:ec:f1:bc:78:74:39:4c:45:c5: 27:8a:bc:62:ee:c9:c5:f5:5c:06:f1:f8:dc:ea:35:c2:d5:e1: d6:12:7e:ec:e5:c6:53:f0:e4:9c:16:05:b4:91:2c:9f:c0:9f: 04:a5:39:ed:5d:15:2b:60:53:5f:fa:4f:5b:0e:ea:5d:12:c0: 1e:91:d2:92:00:5b:58:0b:bf:e2:e0:e9:b8:a4:ba:17:4d:26: b3:4c:85:b3:99:27:80:b3:6a:12:e2:1c:19:3a:7d:ab:23:55: 49:2b:fb:b4:46:6b:9f:fc:4d:da:47:87:1b:e8:ce:b6:c9:d9: c9:ce:0d:29:90:45:42:04:31:9e:10:70:06:e9:35:5f:21:51: f1:b3:84:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmgieql8sMMUsuv80AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDQyNDAxMDA0N1oXDTI1MDcyMzAxMDA0N1owLzEtMCsGA1UEAxMk ZTkyYTc1ZDgtMGI2Ni00YjQ5LTg3M2QtYmI0ZjQ4OTE1NmU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYoF5w0FBkc7s9S58s8vLlnNGOYNL9cL2vzf 8KVjqCQ+qqHdKkSAMqCuMtJXrw1fvs+IuIE1rpcNXpvIGc2KGXWlGB7Q/Ap48JZa kE/BVrMJB14Lmg/9fm/8uOPOyrzGTdcr8EVpw0atHjIzi0aZtREzn5d3ca2L9H/n yBLX7YPOfG1K+KlqbcG7Qo/5kf2nogBDmTzEfDDuDU/hkL4flAnoMtun1KUX+4xR FpklGmCDaU/zOvhBpsX+2KTvojFf9GqNMJozv+IamKKrvizFO8bDamr2dsUFDNYi w6q+6F4C5tJYwNNwBoOVLM8qRRqxe0we+dKrGQRs1ukss/9r0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJG37GueeqZeIJUZcphr15hiecceMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNzRiZDgwOTAtNjQwYi0z ZjA3LWFiOTktNDcyMzVjZTJkYjIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrsQgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACQBh24lAHj2LkUyMOuJuynaj1ifoQwfuOL08BU3dyuXXvGXJ0WjukbI +biev1dj4Z7kmO/eLq94SC85cuUXmhw1C8tNxdamGem7TApj6nFp+0+BWGOTw7s4 FWfqp5X0rBDiTuXoWz/x8E02PzFpK4LcO7VIHuzxvHh0OUxFxSeKvGLuycX1XAbx +NzqNcLV4dYSfuzlxlPw5JwWBbSRLJ/AnwSlOe1dFStgU1/6T1sO6l0SwB6R0pIA W1gLv+Lg6bikuhdNJrNMhbOZJ4CzahLiHBk6fasjVUkr+7RGa5/8TdpHhxvozrbJ 2cnODSmQRUIEMZ4QcAbpNV8hUfGzhLE= -----END CERTIFICATE-----Generated at Sun Apr 27 04:13:13 2025 by rpki-client