$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/870af6b8-e30c-3942-a5f0-fc2ec44abcf9.roa File: 870af6b8-e30c-3942-a5f0-fc2ec44abcf9.roa (raw, json) Hash identifier: Op0A26OKykRiYFhdrEZfOha5nreWHKIjm03QEb5Fjaw= Subject key identifier: 1B:4A:24:F9:38:C6:0A:4F:E2:DD:19:52:20:D1:5A:6E:44:E7:CB:7E Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849A089EDDC50505BBA2FF3A6C0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/870af6b8-e30c-3942-a5f0-fc2ec44abcf9.roa Signing time: Thu 24 Apr 2025 01:00:47 +0000 ROA not before: Thu 24 Apr 2025 01:00:47 +0000 ROA not after: Wed 23 Jul 2025 01:00:47 +0000 asID: 6167 IP address blocks: 174.213.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a0:89:ed:dc:50:50:5b:ba:2f:f3:a6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 24 01:00:47 2025 GMT Not After : Jul 23 01:00:47 2025 GMT Subject: CN=790e0fe0-85da-400c-b7dd-7fb1872923a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ee:20:7b:35:48:17:ed:56:2d:fb:fb:fc:25: 60:31:ca:0a:2a:ec:f5:d2:c9:d0:ab:46:76:4f:99: e4:56:43:01:5b:05:f9:3a:20:94:1b:be:1d:c8:8c: cb:d7:9c:df:e6:b4:7c:a3:d5:c9:6f:4f:18:81:1a: c0:d5:3f:97:11:0b:1a:48:f8:72:10:be:b7:44:50: 16:44:76:9a:b9:14:87:29:4d:5c:63:21:17:8f:88: 4c:de:9e:d0:bb:3e:d4:c0:7f:47:28:cc:6e:16:b2: 5b:aa:f7:0d:26:cd:3c:ad:50:be:fc:49:e9:bb:dd: fc:ff:d1:cd:a5:37:3f:1a:cb:32:7c:e0:52:b7:d1: 2c:32:9e:cc:16:5d:13:36:b7:4a:74:70:e0:a5:17: 04:3e:4e:19:dc:60:4a:ef:cf:1e:93:1b:b3:93:dd: f0:9f:12:36:04:ad:88:8d:98:28:c6:da:36:bf:7c: 29:83:74:7d:1b:d1:bc:1f:49:d6:38:59:4f:42:2a: c2:51:ee:09:1f:be:f5:ad:24:6d:85:b8:57:fb:f2: ae:68:59:23:31:b7:18:64:1d:a2:7a:e3:c8:95:6b: 29:0e:24:3e:78:13:7b:0e:30:33:99:b5:fa:99:27: e6:b4:10:f6:4e:78:8a:76:39:64:a1:35:10:46:72: 70:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:4A:24:F9:38:C6:0A:4F:E2:DD:19:52:20:D1:5A:6E:44:E7:CB:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/870af6b8-e30c-3942-a5f0-fc2ec44abcf9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.213.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:69:22:52:34:6c:35:af:24:ae:54:98:f1:6c:5d:bb:cf:f9: 44:4d:65:1a:6a:b8:28:e6:65:6b:8d:cd:4b:ea:22:d9:4e:c7: 71:82:1f:2d:52:b3:56:bc:69:d6:92:bd:2f:36:20:59:ce:58: 45:2b:82:da:b4:95:0c:25:a4:bc:02:89:75:45:5f:83:48:3a: 7e:81:e9:d2:a8:35:9d:33:4f:ee:f7:45:51:e6:6e:2a:e7:01: 1d:ff:17:48:bc:b9:6d:01:70:6b:8c:db:36:46:9d:b1:4e:15: 0b:93:d4:9c:82:fc:c4:bc:ed:be:0e:01:99:45:79:94:22:2e: 32:38:55:ef:78:63:b1:e4:40:75:13:a6:a9:a2:ac:6d:88:31: 2c:68:b7:36:4b:a2:d0:cc:63:e1:6a:aa:78:40:de:18:56:03: c3:03:a8:18:51:ad:9a:06:da:a1:f7:1a:76:c3:d2:8c:a1:a9: f0:a2:14:28:3c:ed:74:b3:3e:93:35:8c:0f:5e:85:89:1c:a0: 58:45:78:a8:71:14:94:f0:55:6f:44:01:7d:48:f6:0b:4c:47: ee:71:15:eb:44:1c:22:c9:86:79:18:78:d2:e3:92:f5:eb:35: 21:7b:b5:90:f3:29:f2:4a:63:46:4c:6a:96:9b:78:38:e8:bb: 27:61:31:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmgie3cUFBbui/zpsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDQyNDAxMDA0N1oXDTI1MDcyMzAxMDA0N1owLzEtMCsGA1UEAxMk NzkwZTBmZTAtODVkYS00MDBjLWI3ZGQtN2ZiMTg3MjkyM2ExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnu4gezVIF+1WLfv7/CVgMcoKKuz10snQq0Z2 T5nkVkMBWwX5OiCUG74dyIzL15zf5rR8o9XJb08YgRrA1T+XEQsaSPhyEL63RFAW RHaauRSHKU1cYyEXj4hM3p7Quz7UwH9HKMxuFrJbqvcNJs08rVC+/Enpu938/9HN pTc/GssyfOBSt9EsMp7MFl0TNrdKdHDgpRcEPk4Z3GBK788ekxuzk93wnxI2BK2I jZgoxto2v3wpg3R9G9G8H0nWOFlPQirCUe4JH771rSRthbhX+/KuaFkjMbcYZB2i euPIlWspDiQ+eBN7DjAzmbX6mSfmtBD2TniKdjlkoTUQRnJwnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBtKJPk4xgpP4t0ZUiDRWm5E58t+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvODcwYWY2YjgtZTMwYy0z OTQyLWE1ZjAtZmMyZWM0NGFiY2Y5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrtUcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI5pIlI0bDWvJK5UmPFsXbvP+URNZRpquCjmZWuNzUvqItlOx3GCHy1S s1a8adaSvS82IFnOWEUrgtq0lQwlpLwCiXVFX4NIOn6B6dKoNZ0zT+73RVHmbirn AR3/F0i8uW0BcGuM2zZGnbFOFQuT1JyC/MS87b4OAZlFeZQiLjI4Ve94Y7HkQHUT pqmirG2IMSxotzZLotDMY+FqqnhA3hhWA8MDqBhRrZoG2qH3GnbD0oyhqfCiFCg8 7XSzPpM1jA9ehYkcoFhFeKhxFJTwVW9EAX1I9gtMR+5xFetEHCLJhnkYeNLjkvXr NSF7tZDzKfJKY0ZMapabeDjouydhMV0= -----END CERTIFICATE-----Generated at Sun Apr 27 16:33:52 2025 by rpki-client