$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/95e252dd-022a-3fbc-a3c9-6a69068afe89.roa File: 95e252dd-022a-3fbc-a3c9-6a69068afe89.roa (raw, json) Hash identifier: 7dcQFFrfmx2aqM093i8Da8TV4Sqnp50b00WeODZPWP8= Subject key identifier: F3:52:C7:7D:B2:88:34:4D:91:FE:82:E8:19:98:DB:81:7D:35:9E:1C Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849A089E17B33D405CDA3240580 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/95e252dd-022a-3fbc-a3c9-6a69068afe89.roa Signing time: Thu 24 Apr 2025 01:00:47 +0000 ROA not before: Thu 24 Apr 2025 01:00:47 +0000 ROA not after: Wed 23 Jul 2025 01:00:47 +0000 asID: 6167 IP address blocks: 174.216.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a0:89:e1:7b:33:d4:05:cd:a3:24:05:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 24 01:00:47 2025 GMT Not After : Jul 23 01:00:47 2025 GMT Subject: CN=8828d987-0866-43ce-8ed4-208c7afd6736 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:f9:04:88:c8:d6:28:fd:8a:ba:d1:ad:8e:a4: 48:92:f6:67:0e:62:fd:79:71:b7:78:4b:9f:22:d2: b7:36:36:2a:50:32:f4:04:b6:8f:91:f4:d7:06:47: 01:26:1c:ec:b8:75:60:4c:89:5e:72:b2:91:5a:27: 1d:dc:ab:f2:79:07:7e:60:ef:98:8b:86:d7:a8:ce: 9e:58:e8:9e:1d:6b:7d:3e:ba:62:dd:aa:17:00:49: b2:71:9c:4c:45:87:09:dc:45:d4:67:84:8f:72:84: 3b:ec:b3:55:df:4b:07:8a:72:82:e2:0a:12:d9:3d: bf:a3:37:e2:1d:be:12:eb:2e:9e:12:ca:71:93:57: d8:db:e9:49:40:6b:fb:74:2a:1e:b0:4a:29:28:68: 80:17:2f:f4:76:b1:5d:19:03:df:d6:00:94:ab:95: c5:90:ab:b3:d4:2a:45:64:0c:2b:33:4a:7f:2c:50: 43:7a:f1:57:9e:7b:73:3e:08:da:9d:9c:1a:5d:99: 64:a1:39:b2:5c:06:08:03:90:35:17:8f:af:d6:7b: 8d:4c:dc:fb:a3:6c:0b:ce:46:e0:13:e0:de:b5:74: e9:ad:46:83:5e:35:1f:31:90:65:a2:c8:f8:2e:c0: eb:9b:cb:fd:0c:14:2a:64:54:69:7e:4b:c8:88:c7: bf:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:52:C7:7D:B2:88:34:4D:91:FE:82:E8:19:98:DB:81:7D:35:9E:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/95e252dd-022a-3fbc-a3c9-6a69068afe89.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.216.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:7c:06:6b:22:97:19:40:8e:6f:0b:b6:42:60:09:38:f0:55: 44:21:13:6c:55:5f:36:09:7e:f7:69:c6:a2:65:7e:02:1a:be: 00:fc:6f:aa:46:b8:e2:59:e9:8e:8a:68:12:eb:bd:e3:74:53: 1d:2e:45:9d:c7:ff:5a:15:42:d4:bb:56:86:86:ed:da:7f:2c: c9:09:8d:d1:c4:a4:01:76:c6:de:65:53:1c:33:2a:6a:78:63: 60:2a:3f:2d:30:ff:1d:d8:bd:c5:74:2d:34:df:f0:1d:0d:3e: 92:31:57:b5:4f:b2:f7:3c:b5:c7:a0:ba:43:1e:2e:b9:11:e1: b9:a4:dc:de:2f:2c:9d:c0:69:28:11:1c:0a:84:df:35:6a:39: c8:21:56:fb:ce:f3:10:de:96:a0:52:d7:9c:32:fc:18:19:e2: ca:d9:c0:58:a7:3c:4e:fa:bc:32:11:f1:f8:e9:39:82:db:f1: 55:57:31:5d:91:9c:ec:be:d6:01:3f:e1:80:1a:17:43:31:ec: 86:b2:1d:58:3a:97:18:d2:a5:e6:f6:0d:4f:f8:55:43:7c:ef: e7:70:2b:2f:ca:37:7c:22:33:74:fa:4a:60:d7:3e:a0:d5:8e: 23:94:26:7b:ee:d2:42:33:37:66:6e:e6:77:7c:0c:0e:72:5a: a9:ec:26:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmgieF7M9QFzaMkBYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDQyNDAxMDA0N1oXDTI1MDcyMzAxMDA0N1owLzEtMCsGA1UEAxMk ODgyOGQ5ODctMDg2Ni00M2NlLThlZDQtMjA4YzdhZmQ2NzM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvkEiMjWKP2KutGtjqRIkvZnDmL9eXG3eEuf ItK3NjYqUDL0BLaPkfTXBkcBJhzsuHVgTIlecrKRWicd3KvyeQd+YO+Yi4bXqM6e WOieHWt9Prpi3aoXAEmycZxMRYcJ3EXUZ4SPcoQ77LNV30sHinKC4goS2T2/ozfi Hb4S6y6eEspxk1fY2+lJQGv7dCoesEopKGiAFy/0drFdGQPf1gCUq5XFkKuz1CpF ZAwrM0p/LFBDevFXnntzPgjanZwaXZlkoTmyXAYIA5A1F4+v1nuNTNz7o2wLzkbg E+DetXTprUaDXjUfMZBlosj4LsDrm8v9DBQqZFRpfkvIiMe/7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPNSx32yiDRNkf6C6BmY24F9NZ4cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOTVlMjUyZGQtMDIyYS0z ZmJjLWEzYzktNmE2OTA2OGFmZTg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErtjAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALV8BmsilxlAjm8LtkJgCTjwVUQhE2xVXzYJfvdpxqJlfgIavgD8b6pG uOJZ6Y6KaBLrveN0Ux0uRZ3H/1oVQtS7VoaG7dp/LMkJjdHEpAF2xt5lUxwzKmp4 Y2AqPy0w/x3YvcV0LTTf8B0NPpIxV7VPsvc8tcegukMeLrkR4bmk3N4vLJ3AaSgR HAqE3zVqOcghVvvO8xDelqBS15wy/BgZ4srZwFinPE76vDIR8fjpOYLb8VVXMV2R nOy+1gE/4YAaF0Mx7IayHVg6lxjSpeb2DU/4VUN87+dwKy/KN3wiM3T6SmDXPqDV jiOUJnvu0kIzN2Zu5nd8DA5yWqnsJqQ= -----END CERTIFICATE-----Generated at Sat Apr 26 23:25:42 2025 by rpki-client