$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a4e60823-f0de-3369-bb3d-ab9edd16fdc3.roa File: a4e60823-f0de-3369-bb3d-ab9edd16fdc3.roa (raw, json) Hash identifier: XSOggLnfOBTpeQci80Jv091u4fmSk82G9mg5wM4Z9XQ= Subject key identifier: 17:43:EE:24:B5:DF:18:34:1E:5C:1C:B4:8A:AE:3F:14:68:00:FE:63 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849A089F019DC1A77AB64DCBF00 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a4e60823-f0de-3369-bb3d-ab9edd16fdc3.roa Signing time: Thu 24 Apr 2025 01:00:47 +0000 ROA not before: Thu 24 Apr 2025 01:00:47 +0000 ROA not after: Wed 23 Jul 2025 01:00:47 +0000 asID: 6167 IP address blocks: 174.224.200.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a0:89:f0:19:dc:1a:77:ab:64:dc:bf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 24 01:00:47 2025 GMT Not After : Jul 23 01:00:47 2025 GMT Subject: CN=f8b29f4e-4c55-4931-b743-841a5b76a8e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:72:ab:ed:52:e9:ee:de:7d:b5:27:78:28:19: d6:3f:ec:d9:55:80:36:18:ec:ec:91:01:2c:fc:15: 64:c6:2e:08:36:c7:b6:96:df:ab:69:93:a4:68:cf: 20:2b:bc:bc:6e:30:4f:6b:cd:08:9a:7b:8c:f0:6b: 4e:41:ba:26:ea:d8:2a:85:97:39:15:c3:4e:ef:a0: e5:4e:db:74:7e:5b:f6:24:d5:75:60:91:55:16:94: 91:7d:32:86:9e:0d:92:e3:a9:12:b2:c6:c6:13:eb: ee:43:7e:02:3f:45:7b:26:86:f2:46:68:da:24:9b: 43:c9:fb:6e:44:5e:a0:7c:c1:7d:00:c8:7e:ab:e0: 81:11:af:20:75:5f:be:35:82:5d:d3:ae:05:42:cb: 74:0d:97:8f:eb:ea:17:5c:20:b5:d4:4d:b9:f8:ad: f7:d0:72:07:f8:31:27:0f:90:02:59:62:bc:3f:07: bc:2f:c9:f3:dc:42:45:ba:9e:be:73:cf:28:7e:24: 63:7b:59:71:a3:0b:fc:09:a7:b0:9e:c4:4e:15:4e: 62:c0:cd:f0:e3:d0:77:de:c8:88:fd:ac:73:bb:82: cd:13:a5:cc:30:9f:79:6a:e0:21:43:3e:68:7c:77: 2b:90:6f:b8:45:7d:49:81:ff:85:95:7a:66:bc:cf: a4:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:43:EE:24:B5:DF:18:34:1E:5C:1C:B4:8A:AE:3F:14:68:00:FE:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a4e60823-f0de-3369-bb3d-ab9edd16fdc3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.224.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:57:7d:05:29:1e:b9:08:3b:8e:6b:f2:ed:12:80:15:bb:52: 1f:a3:11:b2:d8:fb:2c:e5:fb:8f:93:d6:05:f4:4e:e2:1f:cf: a8:e4:05:d9:c1:1f:74:1b:90:1b:7b:ab:22:12:ca:ba:a3:05: bd:af:da:e1:4d:d0:10:76:4a:df:87:26:df:09:b1:9f:10:7b: 27:fb:92:d2:f4:b1:ca:ad:45:59:c8:c9:39:0f:b6:f8:8f:18: 88:61:db:41:5a:70:d9:32:1d:18:d0:c2:a4:af:ea:09:07:7b: 70:96:96:97:76:78:80:e7:c6:12:48:15:dc:78:22:de:c9:96: 8c:d6:cf:b6:aa:06:0a:d5:06:30:e1:d3:81:cd:c4:d8:64:fa: 35:fe:29:2a:35:69:f6:4c:49:47:d6:f8:c7:3b:39:6f:2a:a9: 68:46:bb:98:31:09:cd:c3:79:7a:0e:1f:6a:d8:1f:b6:6a:28: 3d:ef:ee:ea:3f:0c:0d:82:b6:d9:af:0a:c0:66:9b:79:6a:74: 60:db:94:8f:b4:71:44:f2:23:69:4b:9e:2c:93:70:fa:e9:5e: 9d:f4:ae:3d:72:bd:25:90:4c:c7:9f:35:3f:e4:bd:d7:cf:09: 31:47:dc:44:92:de:69:f2:6a:ba:6b:46:a3:c4:16:0b:82:f9: aa:76:2b:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmgifAZ3Bp3q2TcvwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDQyNDAxMDA0N1oXDTI1MDcyMzAxMDA0N1owLzEtMCsGA1UEAxMk ZjhiMjlmNGUtNGM1NS00OTMxLWI3NDMtODQxYTViNzZhOGUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHKr7VLp7t59tSd4KBnWP+zZVYA2GOzskQEs /BVkxi4INse2lt+raZOkaM8gK7y8bjBPa80ImnuM8GtOQbom6tgqhZc5FcNO76Dl Ttt0flv2JNV1YJFVFpSRfTKGng2S46kSssbGE+vuQ34CP0V7JobyRmjaJJtDyftu RF6gfMF9AMh+q+CBEa8gdV++NYJd064FQst0DZeP6+oXXCC11E25+K330HIH+DEn D5ACWWK8Pwe8L8nz3EJFup6+c88ofiRje1lxowv8CaewnsROFU5iwM3w49B33siI /axzu4LNE6XMMJ95auAhQz5ofHcrkG+4RX1Jgf+FlXpmvM+kKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBdD7iS13xg0HlwctIquPxRoAP5jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYTRlNjA4MjMtZjBkZS0z MzY5LWJiM2QtYWI5ZWRkMTZmZGMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDruDIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIpXfQUpHrkIO45r8u0SgBW7Uh+jEbLY+yzl+4+T1gX0TuIfz6jkBdnB H3QbkBt7qyISyrqjBb2v2uFN0BB2St+HJt8JsZ8Qeyf7ktL0scqtRVnIyTkPtviP GIhh20FacNkyHRjQwqSv6gkHe3CWlpd2eIDnxhJIFdx4It7JlozWz7aqBgrVBjDh 04HNxNhk+jX+KSo1afZMSUfW+Mc7OW8qqWhGu5gxCc3DeXoOH2rYH7ZqKD3v7uo/ DA2CttmvCsBmm3lqdGDblI+0cUTyI2lLniyTcPrpXp30rj1yvSWQTMefNT/kvdfP CTFH3ESS3mnyarprRqPEFguC+ap2K0Y= -----END CERTIFICATE-----Generated at Sat Apr 26 23:08:11 2025 by rpki-client