$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7d4ca99c-e6e5-325a-afab-770488b621a8.roa File: 7d4ca99c-e6e5-325a-afab-770488b621a8.roa (raw, json) Hash identifier: D8zSlqHPIoq65Tv2yl5KVYnhFJneUSU4cDpsquI2kuY= Subject key identifier: 77:BE:3F:82:15:29:DE:F5:8D:AB:30:E7:17:E1:7C:7B:24:6E:27:48 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849A089E3C1F16CAE5B721261E0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7d4ca99c-e6e5-325a-afab-770488b621a8.roa Signing time: Thu 24 Apr 2025 01:00:47 +0000 ROA not before: Thu 24 Apr 2025 01:00:47 +0000 ROA not after: Wed 23 Jul 2025 01:00:47 +0000 asID: 6167 IP address blocks: 174.219.16.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a0:89:e3:c1:f1:6c:ae:5b:72:12:61:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 24 01:00:47 2025 GMT Not After : Jul 23 01:00:47 2025 GMT Subject: CN=0d639df4-c57c-4f44-8e73-37e48c5bff3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:a8:88:0d:67:1d:5c:32:0c:91:e6:28:37:71: ee:9c:2e:bb:4d:d4:15:77:ba:9c:aa:26:f4:8d:0a: 2e:7f:a1:0b:37:d2:46:ca:a6:7a:90:6b:6a:5e:4d: 8d:e7:f7:a3:48:53:76:14:ee:79:b7:d3:bd:b7:ca: 5f:99:dd:cd:68:b0:68:56:76:2d:03:94:df:fb:47: 4c:47:0a:21:24:5f:f5:0c:63:ff:3a:45:ff:91:77: f4:20:b8:5c:50:a0:75:82:31:5e:7a:c8:c0:1c:8b: 1e:2e:f7:de:e3:e9:1d:a3:95:43:37:50:91:8a:e8: f5:e2:2b:94:51:c4:f5:6e:09:80:19:f0:4f:65:e9: bd:bd:f1:87:ee:47:a7:37:1e:27:81:a7:49:32:8c: 1a:71:64:4e:5e:27:22:ef:af:21:8d:12:a9:34:7e: bd:a5:98:9e:5b:44:65:d0:41:b5:56:89:14:96:ff: 32:ee:3e:83:54:c6:08:15:20:47:24:e1:67:9e:7d: 1a:e8:7b:07:45:a7:d9:0d:bc:b8:23:e7:85:4b:0c: 7a:a6:7a:00:38:6b:48:0a:6d:fa:d9:fb:23:27:51: 3c:47:71:35:72:2d:bd:83:75:cf:5e:bc:9e:cd:c2: 38:9c:c7:03:9d:a2:4e:24:e0:cc:0b:7a:98:32:d0: 2e:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:BE:3F:82:15:29:DE:F5:8D:AB:30:E7:17:E1:7C:7B:24:6E:27:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7d4ca99c-e6e5-325a-afab-770488b621a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.219.16.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:71:33:98:9c:1c:e4:b9:ff:c9:bd:cc:ea:5b:5f:59:dd:b3: d2:a4:ca:3e:75:95:9c:46:0f:d5:00:2d:e8:bd:93:95:a9:89: eb:64:bd:95:5f:1e:fa:d5:7d:52:89:83:6c:d0:84:a0:72:5c: 58:ed:6a:55:9e:f0:21:16:25:5c:cd:08:ed:32:ee:b3:43:fd: bd:7f:06:74:b4:35:f4:9e:15:cb:3a:80:6a:90:61:df:de:ce: 2f:1f:a3:9f:9f:79:45:78:28:01:e0:d1:77:d2:8f:dc:29:0c: 4f:6b:19:95:96:01:c8:74:9e:99:75:10:3a:fa:5d:86:af:86: c3:ef:a0:71:91:34:72:cc:44:83:11:a3:f4:e7:d4:75:b7:ac: be:17:c1:32:62:37:a9:89:f8:25:b7:fb:89:2f:39:92:bc:92: 68:26:76:de:c2:2b:4d:27:de:2f:b0:7d:09:77:52:c5:47:06: e6:e9:f2:f5:43:47:db:25:fd:6a:d0:aa:cd:37:19:37:d0:1f: 81:35:db:bd:f3:f5:ee:92:76:a0:a9:f3:00:80:bb:6e:7f:ab: d1:c0:ae:13:88:78:b7:0d:59:31:21:2a:c9:ab:c5:b4:ca:37: 8c:3e:53:c5:64:70:a1:07:11:76:87:12:5f:a7:16:f0:8e:3e: 70:ae:1b:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmgiePB8WyuW3ISYeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDQyNDAxMDA0N1oXDTI1MDcyMzAxMDA0N1owLzEtMCsGA1UEAxMk MGQ2MzlkZjQtYzU3Yy00ZjQ0LThlNzMtMzdlNDhjNWJmZjNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiaiIDWcdXDIMkeYoN3HunC67TdQVd7qcqib0 jQouf6ELN9JGyqZ6kGtqXk2N5/ejSFN2FO55t9O9t8pfmd3NaLBoVnYtA5Tf+0dM RwohJF/1DGP/OkX/kXf0ILhcUKB1gjFeesjAHIseLvfe4+kdo5VDN1CRiuj14iuU UcT1bgmAGfBPZem9vfGH7kenNx4ngadJMowacWROXici768hjRKpNH69pZieW0Rl 0EG1VokUlv8y7j6DVMYIFSBHJOFnnn0a6HsHRafZDby4I+eFSwx6pnoAOGtICm36 2fsjJ1E8R3E1ci29g3XPXryezcI4nMcDnaJOJODMC3qYMtAuSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHe+P4IVKd71jasw5xfhfHskbidIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvN2Q0Y2E5OWMtZTZlNS0z MjVhLWFmYWItNzcwNDg4YjYyMWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrtsQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKlxM5icHOS5/8m9zOpbX1nds9Kkyj51lZxGD9UALei9k5WpietkvZVf HvrVfVKJg2zQhKByXFjtalWe8CEWJVzNCO0y7rND/b1/BnS0NfSeFcs6gGqQYd/e zi8fo5+feUV4KAHg0XfSj9wpDE9rGZWWAch0npl1EDr6XYavhsPvoHGRNHLMRIMR o/Tn1HW3rL4XwTJiN6mJ+CW3+4kvOZK8kmgmdt7CK00n3i+wfQl3UsVHBubp8vVD R9sl/WrQqs03GTfQH4E1273z9e6SdqCp8wCAu25/q9HArhOIeLcNWTEhKsmrxbTK N4w+U8VkcKEHEXaHEl+nFvCOPnCuG4Y= -----END CERTIFICATE-----Generated at Mon Apr 28 19:59:29 2025 by rpki-client