$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/79f36492-fbc5-3d9e-959b-257bc44dd883.roa File: 79f36492-fbc5-3d9e-959b-257bc44dd883.roa (raw, json) Hash identifier: kte763Q8NcT1voKxiRUG+UNd7bYvq3dGnMUINzaqpAE= Subject key identifier: 8A:AA:75:58:C8:0E:87:45:C9:7F:05:1E:33:5A:76:E5:79:8A:41:BB Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285848E866709EDFF6A1728E918940 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/79f36492-fbc5-3d9e-959b-257bc44dd883.roa Signing time: Mon 17 Feb 2025 02:00:38 +0000 ROA not before: Mon 17 Feb 2025 02:00:38 +0000 ROA not after: Sun 18 May 2025 01:00:38 +0000 asID: 6167 IP address blocks: 174.234.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e8:66:70:9e:df:f6:a1:72:8e:91:89:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Feb 17 02:00:38 2025 GMT Not After : May 18 01:00:38 2025 GMT Subject: CN=0a32a107-d35e-4e42-aff5-7b154335b960 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:4a:f8:d1:6f:28:ec:6b:5b:db:33:f7:7b:6c: 58:77:03:f1:1a:bd:02:14:02:d4:08:56:d7:a1:ba: 51:87:a9:8f:3e:90:fc:5a:3f:fe:ba:06:f3:18:c5: 71:9d:b2:de:be:5a:04:dd:26:4a:0e:21:24:5f:86: 2e:f4:6f:01:94:35:6f:61:2d:cf:17:b0:93:87:92: b2:92:e2:46:27:f6:3e:c9:a6:74:e8:5f:34:71:2c: 81:9a:7c:38:ba:d3:e9:87:a6:e0:28:46:e7:d1:36: df:2a:1f:25:22:67:ea:92:3a:a9:38:40:fa:50:6f: 60:db:16:d8:08:a7:81:e4:ca:41:39:07:6d:6e:09: 56:50:57:5b:2b:3d:29:dd:cb:e3:07:a4:8c:73:a2: 0e:e3:7f:59:73:68:af:2c:c9:2f:6d:65:97:33:12: cb:b6:dd:35:16:fc:cf:f5:3a:c8:da:f2:ef:3c:9f: b7:b4:69:39:a5:db:9e:fd:05:ae:b2:a0:9b:f3:b6: 2d:77:0c:c0:b5:84:93:6d:fa:82:ed:ea:0e:d1:87: 59:a6:f7:15:3b:0b:f7:17:7e:bf:62:79:83:e0:aa: 19:50:dc:60:85:3e:92:e9:d6:81:17:c6:06:11:84: 6c:b7:7f:0f:06:0c:54:0b:c0:d4:ff:41:45:e1:61: a6:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:AA:75:58:C8:0E:87:45:C9:7F:05:1E:33:5A:76:E5:79:8A:41:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/79f36492-fbc5-3d9e-959b-257bc44dd883.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.234.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:39:91:56:3f:69:14:65:f4:f6:9b:79:f7:94:cc:10:79:b3: 6e:3c:b2:c8:4c:9a:11:53:c3:14:58:10:da:78:6f:33:4f:4e: b5:95:18:eb:a9:ce:ad:40:04:39:4e:93:25:83:97:61:ad:c9: 68:c4:91:4f:ec:51:08:57:18:be:55:1d:85:9b:27:64:68:f5: 67:33:9b:5e:25:66:15:80:5e:46:bb:4c:c7:4f:42:95:d3:57: fb:05:83:0b:62:1a:ea:be:c9:53:d0:f7:e2:ef:78:ec:ee:43: d3:bc:73:99:a7:f3:31:d1:75:61:b1:07:01:51:b2:d2:4e:99: 06:fa:fb:47:51:a0:39:fa:34:bb:23:c5:52:54:19:ad:8f:fb: 70:6e:47:0a:ca:39:22:a6:fb:45:c8:9f:b8:e1:30:dd:c0:3e: 6d:32:a0:39:4a:f6:12:04:d4:f0:28:39:91:53:31:e2:03:c0: 90:31:9e:fc:4d:d3:52:11:3b:ca:4b:2b:45:11:ed:d5:f9:d7: f9:e9:09:8b:77:e5:db:d2:f0:cb:23:e3:a3:fa:2b:96:2e:35: 0e:8b:62:17:f1:00:90:80:c2:92:2b:4f:d3:0e:78:8a:29:21: 07:cc:32:5e:ff:6f:fc:8a:c2:f0:b4:81:a1:8e:c5:1a:a8:92: ce:cc:3c:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjoZnCe3/ahco6RiUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDIxNzAyMDAzOFoXDTI1MDUxODAxMDAzOFowLzEtMCsGA1UEAxMk MGEzMmExMDctZDM1ZS00ZTQyLWFmZjUtN2IxNTQzMzViOTYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUr40W8o7Gtb2zP3e2xYdwPxGr0CFALUCFbX obpRh6mPPpD8Wj/+ugbzGMVxnbLevloE3SZKDiEkX4Yu9G8BlDVvYS3PF7CTh5Ky kuJGJ/Y+yaZ06F80cSyBmnw4utPph6bgKEbn0TbfKh8lImfqkjqpOED6UG9g2xbY CKeB5MpBOQdtbglWUFdbKz0p3cvjB6SMc6IO439Zc2ivLMkvbWWXMxLLtt01FvzP 9TrI2vLvPJ+3tGk5pdue/QWusqCb87YtdwzAtYSTbfqC7eoO0YdZpvcVOwv3F36/ YnmD4KoZUNxghT6S6daBF8YGEYRst38PBgxUC8DU/0FF4WGmxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIqqdVjIDodFyX8FHjNaduV5ikG7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNzlmMzY0OTItZmJjNS0z ZDllLTk1OWItMjU3YmM0NGRkODgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErurgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADI5kVY/aRRl9PabefeUzBB5s248sshMmhFTwxRYENp4bzNPTrWVGOup zq1ABDlOkyWDl2GtyWjEkU/sUQhXGL5VHYWbJ2Ro9Wczm14lZhWAXka7TMdPQpXT V/sFgwtiGuq+yVPQ9+LveOzuQ9O8c5mn8zHRdWGxBwFRstJOmQb6+0dRoDn6NLsj xVJUGa2P+3BuRwrKOSKm+0XIn7jhMN3APm0yoDlK9hIE1PAoOZFTMeIDwJAxnvxN 01IRO8pLK0UR7dX51/npCYt35dvS8Msj46P6K5YuNQ6LYhfxAJCAwpIrT9MOeIop IQfMMl7/b/yKwvC0gaGOxRqoks7MPMA= -----END CERTIFICATE-----Generated at Sun Apr 27 00:22:17 2025 by rpki-client