$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7d7acfe5-d246-37e0-89f7-6ad2c1b8dc33.roa File: 7d7acfe5-d246-37e0-89f7-6ad2c1b8dc33.roa (raw, json) Hash identifier: vbbS8+rYla8RLgZ7K+02ynWWZf+wy8JFbihWEqItPlA= Subject key identifier: 57:DD:8C:F9:13:98:A3:F2:D6:81:A1:F6:34:D5:35:4A:24:96:03:31 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849A089E4A2677D9DDC99F13F80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7d7acfe5-d246-37e0-89f7-6ad2c1b8dc33.roa Signing time: Thu 24 Apr 2025 01:00:47 +0000 ROA not before: Thu 24 Apr 2025 01:00:47 +0000 ROA not after: Wed 23 Jul 2025 01:00:47 +0000 asID: 6167 IP address blocks: 174.219.48.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a0:89:e4:a2:67:7d:9d:dc:99:f1:3f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 24 01:00:47 2025 GMT Not After : Jul 23 01:00:47 2025 GMT Subject: CN=ae4e422d-3805-42c1-b5e9-88a4fd6ccbcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:c6:61:8d:d6:37:c6:c5:fd:77:af:7c:e9:cc: 8c:64:54:e1:69:03:21:89:0a:17:a2:eb:6c:67:e1: 49:34:53:22:35:5d:c3:ea:a0:07:2e:85:d5:69:5b: 71:ca:ee:45:22:64:e1:1c:cb:7c:cc:f9:c6:0f:89: 6a:a0:f0:c5:3b:f8:90:f2:ef:d0:55:14:f5:51:57: db:42:ff:f6:62:88:cf:48:02:5c:31:09:b7:00:42: 69:66:78:e1:2e:00:d0:2f:81:33:84:70:02:7f:9d: 2b:02:22:8c:58:a9:dd:f7:b6:2f:fa:09:2c:ea:45: 64:9c:cf:00:13:3d:07:33:a4:a6:59:77:56:1b:10: 66:20:7b:5e:b5:ac:93:35:c1:a9:70:85:0f:77:2e: b3:07:d0:36:55:c9:a5:fc:48:62:f7:1e:49:e3:d1: 0e:d6:e5:d1:27:0b:29:fa:8c:79:41:9f:8a:54:1a: 6f:0c:ae:27:09:b0:38:98:7e:98:46:40:99:2a:7f: 16:9a:24:e7:81:c1:98:71:01:8b:53:86:82:73:22: d0:7b:10:19:2c:e5:fe:b4:70:6b:f8:7a:bd:7f:72: fc:59:f0:1b:54:6c:89:2f:c3:b8:b7:c5:4e:bf:6d: d6:61:8d:5c:6d:cc:51:18:ca:50:f4:51:27:63:f4: c0:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:DD:8C:F9:13:98:A3:F2:D6:81:A1:F6:34:D5:35:4A:24:96:03:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7d7acfe5-d246-37e0-89f7-6ad2c1b8dc33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.219.48.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:c8:c6:4a:02:80:65:5f:9b:dc:96:d7:99:9e:2d:c9:0a:d2: b0:45:29:28:4e:cf:37:cc:14:f0:3d:26:24:1e:61:48:bf:37: ae:d9:50:d8:da:5a:c3:eb:d9:f8:27:4a:1f:67:bc:21:c0:d5: 81:46:e7:5b:2a:f5:7e:7b:d9:fe:3a:99:a4:1c:af:d3:55:24: 36:d3:7c:a7:7d:f9:2e:42:e4:47:70:c8:ef:10:65:aa:ef:61: e2:0a:08:60:1d:41:9c:d2:e3:4b:ca:a0:65:79:fb:66:e5:a3: cd:f0:7f:b9:e1:b0:2f:2c:8e:03:52:b1:ad:1f:23:93:06:02: 41:18:60:25:bb:36:f0:a1:b5:9c:96:82:e0:07:d7:a6:ec:65: 79:38:27:8a:55:a3:46:4c:8c:77:26:a0:21:98:39:2e:1f:93: ef:1e:b8:69:3b:ad:9f:c0:6c:7c:a4:d6:a6:11:c5:4f:5e:90: 84:f4:ae:6f:b8:9c:76:41:8d:ae:e4:53:7b:68:55:21:2d:06: 55:f9:64:40:7c:16:9c:07:2f:02:5f:b5:72:53:ed:aa:29:5a: d5:f2:d7:18:54:1e:b3:01:e3:65:94:eb:9e:4c:3e:0c:36:36: f6:ce:75:a6:7e:87:83:03:37:01:4c:e1:d1:bb:bf:56:07:71: 15:83:91:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmgieSiZ32d3JnxP4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDQyNDAxMDA0N1oXDTI1MDcyMzAxMDA0N1owLzEtMCsGA1UEAxMk YWU0ZTQyMmQtMzgwNS00MmMxLWI1ZTktODhhNGZkNmNjYmNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAicZhjdY3xsX9d6986cyMZFThaQMhiQoXouts Z+FJNFMiNV3D6qAHLoXVaVtxyu5FImThHMt8zPnGD4lqoPDFO/iQ8u/QVRT1UVfb Qv/2YojPSAJcMQm3AEJpZnjhLgDQL4EzhHACf50rAiKMWKnd97Yv+gks6kVknM8A Ez0HM6SmWXdWGxBmIHtetayTNcGpcIUPdy6zB9A2Vcml/Ehi9x5J49EO1uXRJwsp +ox5QZ+KVBpvDK4nCbA4mH6YRkCZKn8WmiTngcGYcQGLU4aCcyLQexAZLOX+tHBr +Hq9f3L8WfAbVGyJL8O4t8VOv23WYY1cbcxRGMpQ9FEnY/TABQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFfdjPkTmKPy1oGh9jTVNUoklgMxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvN2Q3YWNmZTUtZDI0Ni0z N2UwLTg5ZjctNmFkMmMxYjhkYzMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrtswMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHHIxkoCgGVfm9yW15meLckK0rBFKShOzzfMFPA9JiQeYUi/N67ZUNja WsPr2fgnSh9nvCHA1YFG51sq9X572f46maQcr9NVJDbTfKd9+S5C5EdwyO8QZarv YeIKCGAdQZzS40vKoGV5+2blo83wf7nhsC8sjgNSsa0fI5MGAkEYYCW7NvChtZyW guAH16bsZXk4J4pVo0ZMjHcmoCGYOS4fk+8euGk7rZ/AbHyk1qYRxU9ekIT0rm+4 nHZBja7kU3toVSEtBlX5ZEB8FpwHLwJftXJT7aopWtXy1xhUHrMB42WU655MPgw2 NvbOdaZ+h4MDNwFM4dG7v1YHcRWDkVo= -----END CERTIFICATE-----Generated at Sun Apr 27 04:13:37 2025 by rpki-client