$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8b95ee2f-7ef0-380e-848e-47d344eab792.roa File: 8b95ee2f-7ef0-380e-848e-47d344eab792.roa (raw, json) Hash identifier: tU74jW/OzQ2rhRGsZxOpE2WgzGyWn2fZhLuQNdqEnD4= Subject key identifier: 31:41:9F:67:20:4D:25:BC:66:96:E5:8B:98:EF:70:23:DD:10:D2:67 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849A089DF4B398B9DBD913C7480 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8b95ee2f-7ef0-380e-848e-47d344eab792.roa Signing time: Thu 24 Apr 2025 01:00:47 +0000 ROA not before: Thu 24 Apr 2025 01:00:47 +0000 ROA not after: Wed 23 Jul 2025 01:00:47 +0000 asID: 6167 IP address blocks: 174.214.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a0:89:df:4b:39:8b:9d:bd:91:3c:74:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 24 01:00:47 2025 GMT Not After : Jul 23 01:00:47 2025 GMT Subject: CN=e7de0cc6-ddb0-4635-945f-67857b8c0712 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:98:88:d7:0f:65:f8:3d:67:4e:78:11:b7:24: ef:f4:b8:06:5e:10:93:cb:d5:b2:51:94:35:95:75: 4b:3a:0d:b5:e9:d5:86:40:dd:0d:b4:4f:2c:40:6c: e0:45:8c:be:96:70:cb:ee:fe:21:2c:ee:03:18:d3: be:45:0e:7d:32:08:96:57:8e:38:7c:7c:01:73:2e: 93:6a:24:38:28:db:4f:ad:c2:c8:9e:6a:14:cc:7a: 6d:03:b2:87:fd:2e:07:b2:83:2c:f2:8b:5b:a0:e5: e5:38:82:8f:9b:66:86:f4:a6:93:15:68:4e:5a:9a: f8:56:e2:46:fe:7e:13:96:a9:87:fb:a0:7c:11:18: b6:61:e5:29:4b:ec:b7:08:a6:55:7a:42:e3:d8:e0: 01:79:5b:a2:7f:95:ac:f0:3e:d8:07:57:e8:cb:49: d9:97:1d:78:48:5e:c9:f5:c3:35:9e:7d:fe:96:9a: 82:e6:32:90:af:39:66:c7:79:a1:0a:d8:62:4b:8d: 18:10:fd:34:36:78:01:7e:de:68:ad:cb:a1:b5:ce: 04:33:93:57:9a:8b:3f:ea:3c:fa:39:67:3c:f9:9d: 01:5e:4a:3c:51:b2:74:ef:d2:4f:71:7c:01:44:f1: c0:27:a6:bb:79:c4:9e:eb:fb:ef:e9:e8:2b:ec:60: e3:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:41:9F:67:20:4D:25:BC:66:96:E5:8B:98:EF:70:23:DD:10:D2:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8b95ee2f-7ef0-380e-848e-47d344eab792.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.214.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:8e:9e:a0:51:eb:92:e6:83:a0:89:b0:ff:db:21:b2:f7:43: dd:da:b6:ea:41:de:64:c2:11:15:91:37:2a:ce:c5:a7:13:d8: f9:ba:eb:c2:24:fe:b9:83:76:9d:4e:9d:ad:0b:ab:d4:c3:a7: 71:34:17:bb:7f:ff:78:a6:b4:2b:13:b3:95:af:a8:c9:7f:35: 83:30:5a:1f:8e:e0:2c:5e:53:87:e5:01:f7:28:7b:36:8e:05: 25:45:f0:d2:06:8a:fa:11:69:8b:de:5d:71:3c:7b:ee:08:f4: ff:c2:11:5e:d2:84:aa:83:b5:ed:70:f1:55:f1:8f:a3:39:30: 5a:3c:c0:95:40:c4:4c:27:b6:5e:af:0e:39:68:f2:87:15:6e: 6b:ba:14:a9:95:d6:43:72:71:e3:73:e6:d4:5d:8e:1a:41:ca: 40:72:13:0f:cc:c5:59:44:2f:70:82:91:6c:cd:f7:74:cd:5a: cd:94:96:af:d3:3a:c9:4f:91:7b:f1:77:7d:d9:51:b7:de:5f: 0b:03:1a:26:e4:9b:8f:ec:c5:26:c3:c0:2a:e8:2c:56:80:ff: 49:fc:14:0e:78:d9:7a:39:31:3b:81:ac:e8:6a:e8:b7:8d:09: e6:51:65:3d:6d:bf:39:9b:e9:22:7c:a1:07:37:b5:47:d9:db: 3c:13:da:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmgid9LOYudvZE8dIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDQyNDAxMDA0N1oXDTI1MDcyMzAxMDA0N1owLzEtMCsGA1UEAxMk ZTdkZTBjYzYtZGRiMC00NjM1LTk0NWYtNjc4NTdiOGMwNzEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5iI1w9l+D1nTngRtyTv9LgGXhCTy9WyUZQ1 lXVLOg216dWGQN0NtE8sQGzgRYy+lnDL7v4hLO4DGNO+RQ59MgiWV444fHwBcy6T aiQ4KNtPrcLInmoUzHptA7KH/S4HsoMs8otboOXlOIKPm2aG9KaTFWhOWpr4VuJG /n4TlqmH+6B8ERi2YeUpS+y3CKZVekLj2OABeVuif5Ws8D7YB1foy0nZlx14SF7J 9cM1nn3+lpqC5jKQrzlmx3mhCthiS40YEP00NngBft5orcuhtc4EM5NXmos/6jz6 OWc8+Z0BXko8UbJ079JPcXwBRPHAJ6a7ecSe6/vv6egr7GDjtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDFBn2cgTSW8Zpbli5jvcCPdENJnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOGI5NWVlMmYtN2VmMC0z ODBlLTg0OGUtNDdkMzQ0ZWFiNzkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErtYgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC+OnqBR65Lmg6CJsP/bIbL3Q93atupB3mTCERWRNyrOxacT2Pm668Ik /rmDdp1Ona0Lq9TDp3E0F7t//3imtCsTs5WvqMl/NYMwWh+O4CxeU4flAfcoezaO BSVF8NIGivoRaYveXXE8e+4I9P/CEV7ShKqDte1w8VXxj6M5MFo8wJVAxEwntl6v Djlo8ocVbmu6FKmV1kNyceNz5tRdjhpBykByEw/MxVlEL3CCkWzN93TNWs2Ulq/T OslPkXvxd33ZUbfeXwsDGibkm4/sxSbDwCroLFaA/0n8FA542Xo5MTuBrOhq6LeN CeZRZT1tvzmb6SJ8oQc3tUfZ2zwT2o0= -----END CERTIFICATE-----Generated at Tue Apr 29 19:59:10 2025 by rpki-client