$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/af4890d3-5235-3db0-aa0d-9b702f8c86eb.roa File: af4890d3-5235-3db0-aa0d-9b702f8c86eb.roa (raw, json) Hash identifier: RCqm9WABTzaWD2IFBMUo0MIbzimUh7+Q/JO2Pvkq1l4= Subject key identifier: E3:D2:7E:7F:02:25:94:50:A2:67:43:EE:75:3E:20:A8:9E:6A:1F:9C Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849A089EA1878D1194A1B6E5500 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/af4890d3-5235-3db0-aa0d-9b702f8c86eb.roa Signing time: Thu 24 Apr 2025 01:00:47 +0000 ROA not before: Thu 24 Apr 2025 01:00:47 +0000 ROA not after: Wed 23 Jul 2025 01:00:47 +0000 asID: 6167 IP address blocks: 174.194.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a0:89:ea:18:78:d1:19:4a:1b:6e:55:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 24 01:00:47 2025 GMT Not After : Jul 23 01:00:47 2025 GMT Subject: CN=23cfde74-cb60-4cb2-9d5c-7953fa355840 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:f4:01:0d:03:60:f3:01:89:e7:3a:17:8a:27: f1:b2:96:81:10:61:a1:e5:85:9a:85:95:60:99:99: 6b:9a:a5:81:03:68:c4:f0:e9:ea:28:8d:80:11:3c: 68:fd:ab:b8:95:33:0e:18:77:c3:e1:c0:75:8f:23: b3:2b:9d:1b:7b:2a:db:e7:be:4e:81:7b:65:d7:98: 8e:e4:f1:26:d2:a6:9b:c7:54:f4:05:8d:4f:d6:8d: 94:e3:0a:17:f2:e4:8b:9f:4a:63:77:04:93:e6:3d: 73:8e:75:1b:8f:5c:2c:fb:46:5b:24:d7:03:1b:38: 34:bb:90:9c:7d:5f:59:13:19:5a:ea:f8:6b:a5:6c: 06:e1:a5:ef:ab:27:3d:1a:1e:d3:8f:e5:4c:e1:81: 99:31:23:3f:f5:09:d3:44:5f:f8:d3:8d:0b:73:51: bf:b4:55:ee:ef:6b:47:44:40:98:0f:09:19:39:df: 67:44:60:3b:18:0a:56:5c:5b:2a:7e:f9:6f:3a:2f: 91:e0:11:f3:dc:06:82:f0:f6:60:31:df:11:7a:20: 07:7c:09:2f:34:cb:dd:91:1a:70:07:d2:00:77:1c: 69:de:90:90:06:8b:fc:f8:97:27:a4:fe:82:0f:e4: 64:9f:07:2d:b4:fe:d0:a4:7e:5c:9c:27:7e:f5:76: 0b:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:D2:7E:7F:02:25:94:50:A2:67:43:EE:75:3E:20:A8:9E:6A:1F:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/af4890d3-5235-3db0-aa0d-9b702f8c86eb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.194.192.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:dc:cd:e5:f2:6f:e8:1d:05:2e:cc:5a:0e:bf:9f:01:22:cd: 3a:ce:9d:9e:6f:18:da:79:02:33:c7:da:86:b8:0f:d6:32:53: 93:54:c1:87:80:30:30:fd:ba:41:12:bd:63:49:ae:c5:97:f7: 23:79:01:7b:37:dd:4f:a2:1d:ed:4e:27:d8:70:a2:ee:09:11: cd:58:7d:f5:69:bf:30:6f:7d:b4:47:5d:71:b9:73:f6:a6:82: 51:fb:fc:08:28:a1:10:f8:ba:41:da:91:20:15:4b:ff:e8:1a: 5d:8a:ce:e9:e7:ab:ee:a9:cf:dc:b2:10:1e:7f:7d:7e:76:d8: 1f:7f:9e:74:4f:b4:58:4a:95:74:ff:e7:f6:e9:9c:3e:fd:8b: d6:a8:10:88:94:a4:c9:1f:10:8f:6b:0c:11:21:50:01:d8:09: f9:67:3c:8c:c2:3b:2a:01:51:9c:37:75:6e:d3:59:3a:b0:e0: a7:90:1b:ef:63:53:01:6f:79:9f:2b:2a:cf:bc:3f:41:95:fa: 41:df:80:5a:9c:9d:c3:ff:7e:96:42:58:1a:98:30:67:28:5a: 9c:32:66:fa:79:a8:c2:19:26:74:f6:e5:77:e3:d3:5d:7d:20: f3:6a:5d:fc:f0:e3:6b:db:0d:47:05:65:e6:a7:87:80:d8:97: d1:28:70:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmgieoYeNEZShtuVQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDQyNDAxMDA0N1oXDTI1MDcyMzAxMDA0N1owLzEtMCsGA1UEAxMk MjNjZmRlNzQtY2I2MC00Y2IyLTlkNWMtNzk1M2ZhMzU1ODQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0fQBDQNg8wGJ5zoXiifxspaBEGGh5YWahZVg mZlrmqWBA2jE8OnqKI2AETxo/au4lTMOGHfD4cB1jyOzK50beyrb575OgXtl15iO 5PEm0qabx1T0BY1P1o2U4woX8uSLn0pjdwST5j1zjnUbj1ws+0ZbJNcDGzg0u5Cc fV9ZExla6vhrpWwG4aXvqyc9Gh7Tj+VM4YGZMSM/9QnTRF/4040Lc1G/tFXu72tH RECYDwkZOd9nRGA7GApWXFsqfvlvOi+R4BHz3AaC8PZgMd8ReiAHfAkvNMvdkRpw B9IAdxxp3pCQBov8+JcnpP6CD+RknwcttP7QpH5cnCd+9XYLSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOPSfn8CJZRQomdD7nU+IKieah+cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYWY0ODkwZDMtNTIzNS0z ZGIwLWFhMGQtOWI3MDJmOGM4NmViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGrsLAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFHczeXyb+gdBS7MWg6/nwEizTrOnZ5vGNp5AjPH2oa4D9YyU5NUwYeA MDD9ukESvWNJrsWX9yN5AXs33U+iHe1OJ9hwou4JEc1YffVpvzBvfbRHXXG5c/am glH7/AgooRD4ukHakSAVS//oGl2Kzunnq+6pz9yyEB5/fX522B9/nnRPtFhKlXT/ 5/bpnD79i9aoEIiUpMkfEI9rDBEhUAHYCflnPIzCOyoBUZw3dW7TWTqw4KeQG+9j UwFveZ8rKs+8P0GV+kHfgFqcncP/fpZCWBqYMGcoWpwyZvp5qMIZJnT25Xfj0119 IPNqXfzw42vbDUcFZeanh4DYl9EocIY= -----END CERTIFICATE-----Generated at Sun Apr 27 19:36:11 2025 by rpki-client