$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/963b59a4-74ab-32cb-b100-39652a6d9ebd.roa File: 963b59a4-74ab-32cb-b100-39652a6d9ebd.roa (raw, json) Hash identifier: ajNg+eiy8lwRTFmk37nCsfkapjEeORZDbHk72SgFtA4= Subject key identifier: 5F:7E:9F:44:C7:03:65:3A:6B:9B:60:B3:3F:7A:39:A4:4D:35:25:CD Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285848EF6177F7FB5909DCE7E0F880 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/963b59a4-74ab-32cb-b100-39652a6d9ebd.roa Signing time: Wed 19 Feb 2025 14:00:52 +0000 ROA not before: Wed 19 Feb 2025 14:00:52 +0000 ROA not after: Tue 20 May 2025 13:00:52 +0000 asID: 6167 IP address blocks: 174.42.148.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ef:61:77:f7:fb:59:09:dc:e7:e0:f8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Feb 19 14:00:52 2025 GMT Not After : May 20 13:00:52 2025 GMT Subject: CN=80062a3c-76ba-42bb-a175-b724123a8832 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:71:10:6d:c9:9f:3e:b4:59:56:71:f4:40:67: 73:a0:f2:90:7d:32:79:b0:b3:e6:02:79:a8:9b:4f: af:24:72:7d:76:75:54:56:18:70:67:22:0f:b8:91: 74:13:c5:26:01:c3:6b:3c:1e:6b:5c:be:92:98:25: fd:43:16:92:21:02:85:bc:aa:c4:26:ee:c4:dd:d5: 8e:72:1a:ce:7f:62:56:13:ff:eb:5d:93:32:df:76: c0:83:75:44:8d:3e:88:d2:e1:4e:1b:e6:0d:d3:fd: cd:f3:98:d0:97:ea:68:cd:47:4a:fb:bf:d1:fe:5a: 1d:c7:05:d2:6e:8b:07:30:f1:35:b4:cb:8b:d6:35: 28:99:35:28:4d:79:38:65:70:ad:bc:f3:0e:79:19: 1b:68:b0:52:fe:8a:97:90:03:49:1c:35:56:91:ce: 65:cf:fe:71:27:91:0b:56:f1:7a:c3:78:9b:ad:74: dd:ae:63:d0:85:f8:27:3a:33:c0:79:d8:b6:7d:f4: a1:c7:c7:b6:c8:b5:75:a5:db:e3:7b:7e:03:40:a2: 40:58:87:70:2d:0a:de:65:99:53:5b:22:43:c3:cc: 2f:3b:0c:21:34:72:ab:8c:77:69:f8:04:99:85:c0: bf:53:69:00:0d:74:b8:82:2e:8c:12:4b:8f:4e:13: 0f:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:7E:9F:44:C7:03:65:3A:6B:9B:60:B3:3F:7A:39:A4:4D:35:25:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/963b59a4-74ab-32cb-b100-39652a6d9ebd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.42.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:dd:a6:04:4b:3a:e1:3f:bd:9d:b7:99:65:9c:7b:fd:3c:ea: ee:80:e1:61:fa:f1:10:77:d1:e7:2b:c7:20:ce:59:e6:1d:92: d2:be:09:84:dd:f2:c0:36:94:cd:9d:40:c0:51:6f:48:a0:cc: 1d:eb:ad:87:65:45:27:2b:c1:77:02:59:9b:7d:c8:3f:e1:c6: 26:00:55:4f:5b:90:25:42:5c:e4:f0:9c:4a:84:c3:2a:7b:ef: 85:ca:d0:4c:41:38:22:83:29:0e:a7:99:d0:f2:14:e4:fd:c4: 48:36:ba:5a:32:89:73:fd:53:2d:8f:bb:e3:08:12:a7:0e:22: 8e:d1:76:8e:80:d5:79:af:8e:24:48:51:78:84:8d:e4:cc:d7: 40:05:e4:08:86:68:5d:88:00:06:9c:55:58:88:b2:cb:5d:cd: db:51:e3:a2:68:a3:73:55:49:4b:62:9d:53:bb:ce:47:fd:52: 91:d9:02:04:02:6d:ff:3c:f9:5f:ff:1e:e7:64:2d:97:41:2d: 1f:99:d0:ee:5a:d5:4e:a4:c7:15:a4:7d:6f:49:ab:1c:9c:d5: 03:97:39:57:33:12:fa:d0:b4:af:7e:e7:23:ac:5d:26:7f:d2: 3c:96:8d:01:b2:c9:54:43:51:62:33:55:e0:6a:7a:c9:95:63: fc:67:5a:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjvYXf3+1kJ3Ofg+IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk ODAwNjJhM2MtNzZiYS00MmJiLWExNzUtYjcyNDEyM2E4ODMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3EQbcmfPrRZVnH0QGdzoPKQfTJ5sLPmAnmo m0+vJHJ9dnVUVhhwZyIPuJF0E8UmAcNrPB5rXL6SmCX9QxaSIQKFvKrEJu7E3dWO chrOf2JWE//rXZMy33bAg3VEjT6I0uFOG+YN0/3N85jQl+pozUdK+7/R/lodxwXS bosHMPE1tMuL1jUomTUoTXk4ZXCtvPMOeRkbaLBS/oqXkANJHDVWkc5lz/5xJ5EL VvF6w3ibrXTdrmPQhfgnOjPAedi2ffShx8e2yLV1pdvje34DQKJAWIdwLQreZZlT WyJDw8wvOwwhNHKrjHdp+ASZhcC/U2kADXS4gi6MEkuPThMP8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF9+n0THA2U6a5tgsz96OaRNNSXNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOTYzYjU5YTQtNzRhYi0z MmNiLWIxMDAtMzk2NTJhNmQ5ZWJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCriqUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJLdpgRLOuE/vZ23mWWce/086u6A4WH68RB30ecrxyDOWeYdktK+CYTd 8sA2lM2dQMBRb0igzB3rrYdlRScrwXcCWZt9yD/hxiYAVU9bkCVCXOTwnEqEwyp7 74XK0ExBOCKDKQ6nmdDyFOT9xEg2uloyiXP9Uy2Pu+MIEqcOIo7Rdo6A1XmvjiRI UXiEjeTM10AF5AiGaF2IAAacVViIsstdzdtR46Joo3NVSUtinVO7zkf9UpHZAgQC bf88+V//HudkLZdBLR+Z0O5a1U6kxxWkfW9Jqxyc1QOXOVczEvrQtK9+5yOsXSZ/ 0jyWjQGyyVRDUWIzVeBqesmVY/xnWuY= -----END CERTIFICATE-----Generated at Sat Apr 26 22:58:12 2025 by rpki-client