$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a7edfa9b-4165-353a-8a66-987f22f410a2.roa File: a7edfa9b-4165-353a-8a66-987f22f410a2.roa (raw, json) Hash identifier: mkXBu9CyuGY9w78eXpuNFAur6qciSUllrMoQY0FzDcw= Subject key identifier: CD:24:D1:0C:23:03:5E:47:3B:77:FB:7E:94:42:69:07:21:CF:BC:F9 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849A089EF0709987E0372919280 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a7edfa9b-4165-353a-8a66-987f22f410a2.roa Signing time: Thu 24 Apr 2025 01:00:47 +0000 ROA not before: Thu 24 Apr 2025 01:00:47 +0000 ROA not after: Wed 23 Jul 2025 01:00:47 +0000 asID: 6167 IP address blocks: 174.224.72.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a0:89:ef:07:09:98:7e:03:72:91:92:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 24 01:00:47 2025 GMT Not After : Jul 23 01:00:47 2025 GMT Subject: CN=10b09a93-c564-4477-b775-6c300fac8e62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:90:ac:71:ec:b3:32:a6:71:d2:4c:35:cd:12: c9:17:e1:37:57:f4:d8:0a:e0:03:1b:f3:93:7a:2a: 4f:0f:22:7d:98:9b:c3:9a:14:1f:81:2c:6b:3d:34: 38:38:6d:40:d3:0b:c7:d9:ec:4f:7f:75:58:ca:cf: 08:88:12:f5:27:44:6a:cc:b0:e8:43:ca:8f:97:e5: 02:26:6b:d1:08:a0:6c:c4:ed:d1:e5:fd:a3:5a:e1: 0a:6d:0e:f3:45:34:89:78:aa:7e:c9:bb:05:11:89: 09:48:08:13:1f:96:5c:2c:7e:03:90:97:46:8d:3f: 7b:59:59:4b:1f:c1:48:82:2c:ff:1e:b9:ff:4b:50: 2d:f0:db:8f:70:20:ac:55:b3:8d:27:4d:0c:07:c0: 21:13:a3:6c:92:00:f7:48:79:c8:8f:17:ac:b9:f5: 53:d5:40:0c:a0:2b:ae:49:35:ef:0a:ab:60:bc:b9: 41:04:0c:5c:3b:1a:52:29:93:08:09:d3:e2:1d:df: 48:a9:b2:1c:d5:1c:7b:ee:29:80:17:d4:8f:b2:6f: d3:9f:79:12:c9:e8:b5:0d:0b:63:e6:5c:96:25:d4: eb:88:9b:db:03:87:ea:be:ae:f3:02:9d:17:3e:e3: 3e:18:14:ac:b1:2b:c1:44:e5:74:bf:56:a1:a8:5d: bc:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:24:D1:0C:23:03:5E:47:3B:77:FB:7E:94:42:69:07:21:CF:BC:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a7edfa9b-4165-353a-8a66-987f22f410a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.224.72.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:85:8e:36:be:a7:27:99:48:81:1a:0f:cb:4f:d4:b5:75:a0: 5d:dc:99:ab:a9:3e:fc:ee:df:73:2a:86:77:fe:af:04:62:04: f4:e8:fb:1a:df:92:a5:3b:d6:a3:9e:e3:82:9a:34:b5:b6:ba: e4:a2:60:5d:20:ca:23:8e:fa:b9:0a:e8:a3:65:60:f7:ea:bb: c2:fb:6b:ed:8f:20:58:71:90:c7:f0:0a:6f:e5:53:a4:56:b0: 92:10:90:8e:95:fa:68:b4:b4:af:12:27:bb:2e:b5:ee:04:b1: e7:79:69:1e:be:ea:28:c2:eb:db:64:65:1e:1f:f3:3e:32:8e: bf:75:2c:83:86:32:62:60:a7:1f:d8:07:17:8a:de:7d:0c:7a: 51:14:d4:a6:40:81:61:f8:07:8c:1a:31:20:6d:15:2d:8e:7f: f6:12:c2:87:33:46:d0:aa:61:1d:ba:64:30:59:c7:3e:86:d8: b8:b1:54:97:87:53:c4:21:1f:1d:cc:73:06:25:ea:1b:a8:58: a3:dd:38:ba:61:5d:80:4c:25:04:b0:73:8b:e4:29:e7:7a:48: 03:60:41:8b:1f:34:84:fc:18:22:89:ac:b9:08:41:70:67:6e: e4:18:0e:b5:92:df:d1:e8:f2:b3:d0:2b:3d:0c:4c:d6:20:46: b2:64:bd:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmgie8HCZh+A3KRkoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDQyNDAxMDA0N1oXDTI1MDcyMzAxMDA0N1owLzEtMCsGA1UEAxMk MTBiMDlhOTMtYzU2NC00NDc3LWI3NzUtNmMzMDBmYWM4ZTYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZCsceyzMqZx0kw1zRLJF+E3V/TYCuADG/OT eipPDyJ9mJvDmhQfgSxrPTQ4OG1A0wvH2exPf3VYys8IiBL1J0RqzLDoQ8qPl+UC JmvRCKBsxO3R5f2jWuEKbQ7zRTSJeKp+ybsFEYkJSAgTH5ZcLH4DkJdGjT97WVlL H8FIgiz/Hrn/S1At8NuPcCCsVbONJ00MB8AhE6NskgD3SHnIjxesufVT1UAMoCuu STXvCqtgvLlBBAxcOxpSKZMICdPiHd9IqbIc1Rx77imAF9SPsm/Tn3kSyei1DQtj 5lyWJdTriJvbA4fqvq7zAp0XPuM+GBSssSvBROV0v1ahqF28SQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM0k0QwjA15HO3f7fpRCaQchz7z5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYTdlZGZhOWItNDE2NS0z NTNhLThhNjYtOTg3ZjIyZjQxMGEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBruBIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAqFjja+pyeZSIEaD8tP1LV1oF3cmaupPvzu33Mqhnf+rwRiBPTo+xrf kqU71qOe44KaNLW2uuSiYF0gyiOO+rkK6KNlYPfqu8L7a+2PIFhxkMfwCm/lU6RW sJIQkI6V+mi0tK8SJ7sute4Esed5aR6+6ijC69tkZR4f8z4yjr91LIOGMmJgpx/Y BxeK3n0MelEU1KZAgWH4B4waMSBtFS2Of/YSwoczRtCqYR26ZDBZxz6G2LixVJeH U8QhHx3McwYl6huoWKPdOLphXYBMJQSwc4vkKed6SANgQYsfNIT8GCKJrLkIQXBn buQYDrWS39Ho8rPQKz0MTNYgRrJkvcA= -----END CERTIFICATE-----Generated at Sun Apr 27 04:01:18 2025 by rpki-client