$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/873db6a2-7d50-32b1-a9fc-35c900e1c71b.roa File: 873db6a2-7d50-32b1-a9fc-35c900e1c71b.roa (raw, json) Hash identifier: qSIoITIQ6wdARXzb+T/KtvQmtaG2f0/AIuNmbclB07Y= Subject key identifier: 6C:60:D6:CA:E6:8A:23:BA:D0:93:83:C2:CC:83:E6:AB:69:1C:A3:58 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849A089E33FDD1E83EE0F513480 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/873db6a2-7d50-32b1-a9fc-35c900e1c71b.roa Signing time: Thu 24 Apr 2025 01:00:47 +0000 ROA not before: Thu 24 Apr 2025 01:00:47 +0000 ROA not after: Wed 23 Jul 2025 01:00:47 +0000 asID: 6167 IP address blocks: 174.218.192.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a0:89:e3:3f:dd:1e:83:ee:0f:51:34:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 24 01:00:47 2025 GMT Not After : Jul 23 01:00:47 2025 GMT Subject: CN=8e89d938-518a-4df0-933c-6175f9d6a3d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:9d:3c:e2:4a:78:1a:1f:18:9c:f5:de:7e:18: 05:ec:8b:4f:4c:8c:38:e2:d9:bc:95:dc:74:7f:68: 84:96:46:08:ac:74:09:70:68:29:e4:b7:20:e2:7e: 6a:f6:41:d9:14:bf:c4:bc:41:95:c3:8e:73:06:8e: 85:c4:ef:f1:18:98:98:f0:f1:6d:fa:c4:b1:43:af: ad:73:19:23:af:99:dc:78:5c:d5:49:c4:38:cb:7c: 53:1d:71:f2:ca:61:00:c7:b0:79:98:78:a5:82:d0: 9a:57:b8:b3:e9:ca:7f:a9:91:33:12:70:d6:34:20: b5:cc:77:9c:81:b2:fd:4b:a8:a4:d0:58:8f:48:37: 97:67:9d:20:21:b0:75:b5:30:58:78:62:19:16:a8: bb:35:a1:05:6d:97:14:7f:64:7a:a8:3f:3d:75:60: bd:e3:8a:6b:db:dc:f9:40:37:6d:10:75:53:52:29: eb:bd:79:20:76:da:fa:59:14:a5:95:91:e4:eb:f8: d7:85:f4:1d:24:36:5a:4c:e8:0e:d0:39:3e:00:eb: 63:54:d1:44:c2:89:f0:82:ec:3a:aa:1d:7b:02:c6: e2:a4:45:aa:75:f4:43:a8:bb:67:05:09:fe:72:dd: 5e:12:09:ff:34:9c:f6:50:10:00:ea:9a:5b:e0:37: 0c:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:60:D6:CA:E6:8A:23:BA:D0:93:83:C2:CC:83:E6:AB:69:1C:A3:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/873db6a2-7d50-32b1-a9fc-35c900e1c71b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.218.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:16:98:fb:50:0a:98:9e:49:ff:bb:95:3a:8c:15:be:f1:4c: 13:c1:cd:7c:02:e0:3e:fc:9b:17:23:71:20:9f:72:24:05:8e: b4:71:45:01:6b:6b:e7:18:f6:80:73:2c:17:38:a9:ed:f0:74: ed:2f:77:b7:e7:41:39:ae:d9:b2:9e:ac:05:fc:22:0f:41:ce: 4b:dc:72:92:e7:11:3c:c9:c0:48:d9:14:29:f8:d3:1f:5c:0e: 51:12:af:de:99:7e:d9:ec:da:8e:4e:f9:08:db:59:67:9a:84: 17:7f:72:21:c4:da:6f:fd:4f:b3:64:f9:b2:28:5a:7d:03:64: 20:a5:65:a6:13:30:47:99:5e:cb:1a:76:66:ba:1d:2d:0a:87: 1f:cd:93:40:4f:8b:33:7e:b5:87:96:a2:d1:90:ad:40:0f:79: aa:75:91:24:35:b3:1f:22:33:bd:cf:5f:d2:8d:d4:35:be:36: 79:5c:b1:00:1f:9f:98:fc:2d:26:7b:b5:1c:93:97:69:02:ce: 81:21:e9:9b:d8:bb:55:c3:ab:cd:d2:64:07:65:a4:14:3a:53: 65:fb:e4:ac:76:93:11:30:a1:4b:e6:ee:ab:80:86:d4:20:f6: 02:23:c7:87:8a:9c:07:82:f7:a9:04:c4:6a:48:b0:fa:cf:41: 2a:40:e1:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmgieM/3R6D7g9RNIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDQyNDAxMDA0N1oXDTI1MDcyMzAxMDA0N1owLzEtMCsGA1UEAxMk OGU4OWQ5MzgtNTE4YS00ZGYwLTkzM2MtNjE3NWY5ZDZhM2Q2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5084kp4Gh8YnPXefhgF7ItPTIw44tm8ldx0 f2iElkYIrHQJcGgp5Lcg4n5q9kHZFL/EvEGVw45zBo6FxO/xGJiY8PFt+sSxQ6+t cxkjr5nceFzVScQ4y3xTHXHyymEAx7B5mHilgtCaV7iz6cp/qZEzEnDWNCC1zHec gbL9S6ik0FiPSDeXZ50gIbB1tTBYeGIZFqi7NaEFbZcUf2R6qD89dWC944pr29z5 QDdtEHVTUinrvXkgdtr6WRSllZHk6/jXhfQdJDZaTOgO0Dk+AOtjVNFEwonwguw6 qh17AsbipEWqdfRDqLtnBQn+ct1eEgn/NJz2UBAA6ppb4DcM+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGxg1srmiiO60JODwsyD5qtpHKNYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvODczZGI2YTItN2Q1MC0z MmIxLWE5ZmMtMzVjOTAwZTFjNzFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrtrAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHoWmPtQCpieSf+7lTqMFb7xTBPBzXwC4D78mxcjcSCfciQFjrRxRQFr a+cY9oBzLBc4qe3wdO0vd7fnQTmu2bKerAX8Ig9BzkvccpLnETzJwEjZFCn40x9c DlESr96Zftns2o5O+QjbWWeahBd/ciHE2m/9T7Nk+bIoWn0DZCClZaYTMEeZXssa dma6HS0Khx/Nk0BPizN+tYeWotGQrUAPeap1kSQ1sx8iM73PX9KN1DW+NnlcsQAf n5j8LSZ7tRyTl2kCzoEh6ZvYu1XDq83SZAdlpBQ6U2X75Kx2kxEwoUvm7quAhtQg 9gIjx4eKnAeC96kExGpIsPrPQSpA4cQ= -----END CERTIFICATE-----Generated at Sun Apr 27 05:47:49 2025 by rpki-client