$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/87de5256-41a4-3403-8bf2-0e40f5e060ac.roa File: 87de5256-41a4-3403-8bf2-0e40f5e060ac.roa (raw, json) Hash identifier: KHBSerkMIcPjkALMEN+BgC+nffRGSW07lzbpmAxD65M= Subject key identifier: D1:C1:FD:08:F9:87:1B:9B:77:62:35:E0:B3:BD:9F:68:6D:CC:EB:7A Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849A089EFAE86D7D9CBF25523C0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/87de5256-41a4-3403-8bf2-0e40f5e060ac.roa Signing time: Thu 24 Apr 2025 01:00:47 +0000 ROA not before: Thu 24 Apr 2025 01:00:47 +0000 ROA not after: Wed 23 Jul 2025 01:00:47 +0000 asID: 6167 IP address blocks: 174.224.144.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a0:89:ef:ae:86:d7:d9:cb:f2:55:23:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 24 01:00:47 2025 GMT Not After : Jul 23 01:00:47 2025 GMT Subject: CN=b712c235-eccc-4ef7-b625-022d45d003f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:9c:88:05:2d:b5:29:ec:ec:25:ce:40:1c:13: b1:56:d2:e4:c1:1e:2e:4a:f0:f1:88:52:7e:fa:ad: 93:56:42:c7:ad:45:37:5a:21:7b:df:c5:e2:06:16: 93:9f:6f:d4:cb:14:ce:85:e4:c6:1d:ff:fb:cc:e9: 72:52:ee:59:78:8e:ae:b9:d5:e0:c9:64:a6:9e:62: 04:80:99:dc:ee:9e:8f:7d:4b:bd:9f:2b:03:d2:28: 8b:c1:71:cf:ca:af:48:8e:76:58:fe:41:28:92:d5: 6d:4f:ef:07:f5:9a:28:58:e1:2a:80:c9:20:14:e2: f8:e5:c1:d3:29:a7:cc:69:55:c2:96:b8:6c:fa:48: e4:be:4c:4d:ea:e3:65:ce:4b:37:37:3f:94:fc:37: 51:c7:b3:5e:45:08:2e:56:33:68:19:ba:70:f3:25: 6e:06:71:49:13:68:7b:dc:91:ce:12:8c:b9:c9:cf: 5b:25:4e:ee:19:03:c8:11:3a:8a:6a:f9:cf:ce:43: a6:59:15:3a:cd:1e:8d:fa:74:42:9a:79:9c:5d:79: 98:c7:53:d1:4b:58:7e:62:21:04:cb:8d:d4:92:d6: 1c:92:ae:fb:83:62:fb:58:f8:c1:f0:9a:f6:bd:c2: 87:ae:0a:1f:d6:97:4a:97:84:98:84:08:9c:bf:38: ba:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:C1:FD:08:F9:87:1B:9B:77:62:35:E0:B3:BD:9F:68:6D:CC:EB:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/87de5256-41a4-3403-8bf2-0e40f5e060ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.224.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:77:b2:c1:51:5a:83:20:cc:17:50:af:f0:93:62:7b:c9:66: d2:08:78:9f:3a:74:70:17:1c:ec:21:95:26:3b:6c:67:05:a7: 7c:8a:b1:da:c0:39:9b:51:84:b6:c9:02:88:aa:bd:d7:eb:50: c3:ea:9e:ff:92:32:b1:d6:46:33:c4:37:cc:ee:79:ff:94:32: e3:ff:32:20:ce:03:31:cb:19:2f:e7:e7:a8:ff:4c:95:e2:cc: bc:30:91:65:03:a4:0e:8e:dc:de:22:d3:91:92:00:60:35:46: da:a8:00:aa:20:23:79:e5:b5:9a:a6:84:7c:60:91:04:7b:b1: 01:41:66:b1:cd:21:7a:68:2f:7f:8f:5a:5e:d3:c3:29:e5:bb: e6:b1:86:ea:32:ca:10:8a:49:cf:c0:0e:13:9a:b1:1c:d1:db: f4:a4:a0:90:39:48:c9:2a:08:00:20:a7:e9:72:3c:d1:cf:7a: 63:a6:bf:e7:e1:10:9d:43:13:89:e9:7a:32:91:75:67:ee:a9: 07:86:39:ad:4f:b0:39:f4:ad:0c:e9:2e:cd:21:44:bb:97:9a: 12:dc:22:9a:be:ed:9b:eb:fb:c9:1d:07:ba:51:46:b2:b3:63: e9:6c:3b:db:4c:80:25:d5:f0:3d:c1:33:bd:5a:37:3e:40:60: a2:4b:b7:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmgie+uhtfZy/JVI8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDQyNDAxMDA0N1oXDTI1MDcyMzAxMDA0N1owLzEtMCsGA1UEAxMk YjcxMmMyMzUtZWNjYy00ZWY3LWI2MjUtMDIyZDQ1ZDAwM2YwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7ZyIBS21KezsJc5AHBOxVtLkwR4uSvDxiFJ+ +q2TVkLHrUU3WiF738XiBhaTn2/UyxTOheTGHf/7zOlyUu5ZeI6uudXgyWSmnmIE gJnc7p6PfUu9nysD0iiLwXHPyq9IjnZY/kEoktVtT+8H9ZooWOEqgMkgFOL45cHT KafMaVXClrhs+kjkvkxN6uNlzks3Nz+U/DdRx7NeRQguVjNoGbpw8yVuBnFJE2h7 3JHOEoy5yc9bJU7uGQPIETqKavnPzkOmWRU6zR6N+nRCmnmcXXmYx1PRS1h+YiEE y43UktYckq77g2L7WPjB8Jr2vcKHrgof1pdKl4SYhAicvzi62wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNHB/Qj5hxubd2I14LO9n2htzOt6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvODdkZTUyNTYtNDFhNC0z NDAzLThiZjItMGU0MGY1ZTA2MGFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDruCQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB53ssFRWoMgzBdQr/CTYnvJZtIIeJ86dHAXHOwhlSY7bGcFp3yKsdrA OZtRhLbJAoiqvdfrUMPqnv+SMrHWRjPEN8zuef+UMuP/MiDOAzHLGS/n56j/TJXi zLwwkWUDpA6O3N4i05GSAGA1RtqoAKogI3nltZqmhHxgkQR7sQFBZrHNIXpoL3+P Wl7Twynlu+axhuoyyhCKSc/ADhOasRzR2/SkoJA5SMkqCAAgp+lyPNHPemOmv+fh EJ1DE4npejKRdWfuqQeGOa1PsDn0rQzpLs0hRLuXmhLcIpq+7Zvr+8kdB7pRRrKz Y+lsO9tMgCXV8D3BM71aNz5AYKJLt6o= -----END CERTIFICATE-----Generated at Sat Apr 26 23:07:27 2025 by rpki-client