$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9fdabb50-ff35-31e7-a8c9-c6bc10827c3c.roa File: 9fdabb50-ff35-31e7-a8c9-c6bc10827c3c.roa (raw, json) Hash identifier: 5DiBfJPFWN2Y9aSSeY+TzKpAqD8DOpvbaAPDBkWcB6M= Subject key identifier: E0:05:92:D8:E2:E7:13:37:E1:A2:F5:F3:8E:B2:22:15:63:92:CD:69 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849A089E042F08E386F9CDAC300 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9fdabb50-ff35-31e7-a8c9-c6bc10827c3c.roa Signing time: Thu 24 Apr 2025 01:00:47 +0000 ROA not before: Thu 24 Apr 2025 01:00:47 +0000 ROA not after: Wed 23 Jul 2025 01:00:47 +0000 asID: 6167 IP address blocks: 174.215.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a0:89:e0:42:f0:8e:38:6f:9c:da:c3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 24 01:00:47 2025 GMT Not After : Jul 23 01:00:47 2025 GMT Subject: CN=66943f7b-2c09-4913-b806-aeb5f75149f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:75:4e:cc:fc:25:8f:a4:33:80:88:0b:54:15: d0:ba:69:d2:38:d1:ce:99:0d:86:20:92:e3:80:08: 5a:95:05:41:18:c7:a9:dc:be:26:75:4e:9b:fa:b1: 12:01:77:cb:6d:58:5f:0d:7a:c2:c9:e1:7b:e9:f5: 2d:98:ac:b7:2b:47:43:1d:16:c9:a0:3a:51:00:37: 92:ba:cd:e5:e2:f4:b4:18:a1:51:0c:da:cc:f8:64: 88:dc:5a:50:3a:91:db:bd:2e:4b:82:ad:05:2a:9f: b7:e5:cf:c4:c0:0b:48:0e:0e:58:41:99:ad:da:3d: f7:68:cc:af:03:5b:1c:2b:e1:49:15:b9:fc:42:67: e9:8e:9a:d0:54:2a:de:70:99:16:05:f3:16:16:f6: 8b:fc:8a:db:a9:32:21:a6:26:ab:a5:49:14:06:30: 65:08:0a:1d:3c:b8:89:65:ce:27:32:86:c1:33:fb: 02:a7:12:c8:b9:77:42:ce:65:55:bc:28:b1:29:04: a7:d4:b2:68:83:d9:08:e5:9e:f8:b4:84:8e:63:09: 11:40:e9:14:32:9c:f3:c2:e6:ba:23:9a:b8:a4:3f: f2:1b:c2:e1:f2:13:47:fe:4f:12:84:53:a7:f7:da: b9:a9:f9:97:2e:e2:48:98:51:f6:09:e0:70:25:95: cd:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:05:92:D8:E2:E7:13:37:E1:A2:F5:F3:8E:B2:22:15:63:92:CD:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9fdabb50-ff35-31e7-a8c9-c6bc10827c3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.215.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:65:e7:9f:f9:db:d2:1f:bf:0b:79:5d:16:a4:76:ef:19:16: cd:ac:9f:22:34:24:04:24:74:e1:41:18:27:af:30:10:86:58: 85:f6:4d:8e:6d:d4:56:30:ea:83:53:70:32:a0:6b:df:2f:9d: 27:b6:30:6f:c6:89:aa:03:93:e6:2a:88:f2:88:af:82:29:4e: 23:13:bd:c1:3f:ec:be:2a:4e:95:07:24:a5:bd:3f:fa:91:c8: 6d:3a:c1:47:3a:51:30:71:c8:7a:ef:56:21:5e:25:f7:45:ce: 21:f1:d6:45:cd:20:f3:1d:c4:49:7a:62:af:46:ef:3a:d6:1e: 4e:f8:86:9a:50:a5:db:98:29:bc:85:d6:98:46:82:b4:ec:c9: be:5b:ef:05:2e:76:bc:87:17:3c:8b:c8:97:97:9a:97:76:75: 5d:0c:6f:82:d2:6b:4c:56:5c:55:58:e4:7d:81:37:12:d6:21: 2c:e1:b7:85:61:3a:bb:ff:d4:79:4b:a1:5b:ca:1d:1c:2a:55: 8b:cf:89:d7:36:24:cf:d0:6b:9e:f5:f1:b1:50:78:68:06:42: f6:d6:02:0e:90:71:52:1d:e6:1d:2c:0f:95:d9:27:f5:92:ed: ac:14:65:f6:f4:12:3d:80:1d:11:1a:ac:75:d7:af:fb:39:88: 35:3a:0c:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmgieBC8I44b5zawwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDQyNDAxMDA0N1oXDTI1MDcyMzAxMDA0N1owLzEtMCsGA1UEAxMk NjY5NDNmN2ItMmMwOS00OTEzLWI4MDYtYWViNWY3NTE0OWY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnVOzPwlj6QzgIgLVBXQumnSONHOmQ2GIJLj gAhalQVBGMep3L4mdU6b+rESAXfLbVhfDXrCyeF76fUtmKy3K0dDHRbJoDpRADeS us3l4vS0GKFRDNrM+GSI3FpQOpHbvS5Lgq0FKp+35c/EwAtIDg5YQZmt2j33aMyv A1scK+FJFbn8QmfpjprQVCrecJkWBfMWFvaL/IrbqTIhpiarpUkUBjBlCAodPLiJ Zc4nMobBM/sCpxLIuXdCzmVVvCixKQSn1LJog9kI5Z74tISOYwkRQOkUMpzzwua6 I5q4pD/yG8Lh8hNH/k8ShFOn99q5qfmXLuJImFH2CeBwJZXN5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOAFktji5xM34aL1846yIhVjks1pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOWZkYWJiNTAtZmYzNS0z MWU3LWE4YzktYzZiYzEwODI3YzNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErteAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFll55/529Ifvwt5XRakdu8ZFs2snyI0JAQkdOFBGCevMBCGWIX2TY5t 1FYw6oNTcDKga98vnSe2MG/GiaoDk+YqiPKIr4IpTiMTvcE/7L4qTpUHJKW9P/qR yG06wUc6UTBxyHrvViFeJfdFziHx1kXNIPMdxEl6Yq9G7zrWHk74hppQpduYKbyF 1phGgrTsyb5b7wUudryHFzyLyJeXmpd2dV0Mb4LSa0xWXFVY5H2BNxLWISzht4Vh Orv/1HlLoVvKHRwqVYvPidc2JM/Qa5718bFQeGgGQvbWAg6QcVId5h0sD5XZJ/WS 7awUZfb0Ej2AHREarHXXr/s5iDU6DKM= -----END CERTIFICATE-----Generated at Sun Apr 27 00:15:24 2025 by rpki-client