$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7e41443b-0bff-3771-b20b-6b9cc5625dd1.roa File: 7e41443b-0bff-3771-b20b-6b9cc5625dd1.roa (raw, json) Hash identifier: Xqs1I0lPJr5DKhzwtpLrSy/PIvLFxFcls3N5Z6ktDdg= Subject key identifier: 20:C9:52:A3:4C:54:71:97:77:22:56:3C:9C:6E:66:73:73:B3:3A:D5 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849A089E0F0F083ADC80509544C Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7e41443b-0bff-3771-b20b-6b9cc5625dd1.roa Signing time: Thu 24 Apr 2025 01:00:47 +0000 ROA not before: Thu 24 Apr 2025 01:00:47 +0000 ROA not after: Wed 23 Jul 2025 01:00:47 +0000 asID: 6167 IP address blocks: 174.216.68.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a0:89:e0:f0:f0:83:ad:c8:05:09:54:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 24 01:00:47 2025 GMT Not After : Jul 23 01:00:47 2025 GMT Subject: CN=8e5df650-376d-4bf5-8241-782aee9fada3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b6:47:08:78:41:7a:73:85:08:1d:35:7a:3f: aa:68:f7:24:49:84:0f:54:1c:cd:f9:ca:26:37:99: ed:95:29:80:d4:0b:7b:4a:bb:3b:08:8e:dd:8d:af: 87:39:6f:73:e9:e6:fa:33:11:a5:7c:ba:4c:3f:45: 56:53:0f:04:e6:cf:49:90:bd:28:ef:6a:bb:4f:97: 6d:16:23:06:ef:b6:8a:d6:0b:8a:2d:63:39:98:7c: a8:1f:22:0f:6b:d3:60:15:0c:ba:cd:46:6b:9e:a9: fe:ad:23:ca:06:61:de:f9:9b:d1:be:20:7d:95:8d: 76:de:f0:ee:0b:5f:b4:89:ae:71:98:81:f6:9b:e9: b6:3a:fb:f6:f4:57:80:8a:2d:e7:bc:66:0e:09:0b: 0b:74:86:bc:c6:94:da:13:ac:72:c5:81:8c:f1:a8: 95:ad:ec:1f:2d:df:c0:41:66:54:59:a3:d1:64:88: f7:dc:76:97:03:92:58:ad:30:bf:77:15:22:d6:92: 8f:40:20:7f:df:fe:6c:14:2f:f0:b9:75:a6:23:5e: 17:36:c3:d6:fe:be:0c:3a:ce:21:a4:52:49:8b:b7: fa:0d:30:b9:b1:c8:18:89:12:45:95:3f:e6:ea:d3: 18:97:96:d8:b7:08:09:ad:7a:94:f0:3b:20:5f:31: b1:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:C9:52:A3:4C:54:71:97:77:22:56:3C:9C:6E:66:73:73:B3:3A:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7e41443b-0bff-3771-b20b-6b9cc5625dd1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.216.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:3e:5e:00:d0:16:a2:27:78:30:51:58:c2:88:3e:36:45:fd: 28:ae:a4:cf:17:a1:42:5f:8a:fb:15:38:31:d9:a6:b8:ef:19: da:39:28:47:2b:32:be:34:42:73:5f:5d:5d:53:49:71:66:15: 5e:58:6f:6b:f7:d0:d3:59:ce:46:df:2d:04:d7:9d:99:d2:17: 07:c2:5d:d4:a1:ac:fa:4c:19:ff:e5:f7:13:35:2e:c6:e1:ac: 58:7e:41:4b:7d:00:a0:93:ee:e8:02:96:cc:dc:ab:b8:8a:a5: fb:41:38:e3:22:03:d2:9d:96:1f:79:7a:e8:54:16:a5:0e:f6: 1c:6b:fd:99:b8:7e:d5:17:37:65:89:00:5c:da:bd:c9:e6:01: 89:e0:61:cc:79:b5:4e:1e:d6:41:7b:42:8c:4f:c4:92:b4:c7: 47:ba:4f:58:68:51:9f:9e:82:13:1a:4a:d5:72:ab:56:22:8e: fa:f0:f2:c8:7f:33:0d:fa:85:21:8e:12:2b:bb:31:31:0b:a6: b9:2f:cf:fd:38:cb:53:0f:bb:16:05:74:ad:a3:d9:8e:a7:9c: 99:56:c7:d4:91:f6:ff:bd:03:a4:9e:83:90:a5:72:64:73:09: e2:db:a2:65:1b:3a:8d:50:c5:c0:04:5a:52:e2:b3:c6:b7:56: 1f:72:01:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmgieDw8IOtyAUJVEwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDQyNDAxMDA0N1oXDTI1MDcyMzAxMDA0N1owLzEtMCsGA1UEAxMk OGU1ZGY2NTAtMzc2ZC00YmY1LTgyNDEtNzgyYWVlOWZhZGEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbZHCHhBenOFCB01ej+qaPckSYQPVBzN+com N5ntlSmA1At7Srs7CI7dja+HOW9z6eb6MxGlfLpMP0VWUw8E5s9JkL0o72q7T5dt FiMG77aK1guKLWM5mHyoHyIPa9NgFQy6zUZrnqn+rSPKBmHe+ZvRviB9lY123vDu C1+0ia5xmIH2m+m2Ovv29FeAii3nvGYOCQsLdIa8xpTaE6xyxYGM8aiVrewfLd/A QWZUWaPRZIj33HaXA5JYrTC/dxUi1pKPQCB/3/5sFC/wuXWmI14XNsPW/r4MOs4h pFJJi7f6DTC5scgYiRJFlT/m6tMYl5bYtwgJrXqU8DsgXzGxbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCDJUqNMVHGXdyJWPJxuZnNzszrVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvN2U0MTQ0M2ItMGJmZi0z NzcxLWIyMGItNmI5Y2M1NjI1ZGQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrthEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKE+XgDQFqIneDBRWMKIPjZF/SiupM8XoUJfivsVODHZprjvGdo5KEcr Mr40QnNfXV1TSXFmFV5Yb2v30NNZzkbfLQTXnZnSFwfCXdShrPpMGf/l9xM1Lsbh rFh+QUt9AKCT7ugClszcq7iKpftBOOMiA9Kdlh95euhUFqUO9hxr/Zm4ftUXN2WJ AFzavcnmAYngYcx5tU4e1kF7QoxPxJK0x0e6T1hoUZ+eghMaStVyq1Yijvrw8sh/ Mw36hSGOEiu7MTELprkvz/04y1MPuxYFdK2j2Y6nnJlWx9SR9v+9A6Seg5ClcmRz CeLbomUbOo1QxcAEWlLis8a3Vh9yAbc= -----END CERTIFICATE-----Generated at Sat Apr 26 22:48:22 2025 by rpki-client