$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/af80ab34-df48-35ad-907c-ab7e6260b68d.roa File: af80ab34-df48-35ad-907c-ab7e6260b68d.roa (raw, json) Hash identifier: Q2nCZSoB0Zkz5rTbIMzM6o+5mSj8V78saRUb4iiM3EY= Subject key identifier: 38:3D:FD:0D:5C:9B:20:02:28:42:82:E5:0D:E4:AA:EA:23:7F:8D:F9 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849A089EB9FD685E2AECDAC4D65 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/af80ab34-df48-35ad-907c-ab7e6260b68d.roa Signing time: Thu 24 Apr 2025 01:00:47 +0000 ROA not before: Thu 24 Apr 2025 01:00:47 +0000 ROA not after: Wed 23 Jul 2025 01:00:47 +0000 asID: 6167 IP address blocks: 174.197.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a0:89:eb:9f:d6:85:e2:ae:cd:ac:4d:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 24 01:00:47 2025 GMT Not After : Jul 23 01:00:47 2025 GMT Subject: CN=2dafc843-91d2-4df7-88c8-e1b74cf89263 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:7b:5b:f5:f8:38:40:35:57:68:bf:11:d9:00: 96:06:9e:d2:9c:31:01:1c:66:a8:12:37:ac:7f:82: 00:af:86:f4:63:94:15:05:fd:4d:12:10:2f:2c:ad: 77:9a:89:ab:35:a2:8a:72:1f:fe:be:53:41:cd:22: d4:07:e2:18:45:70:a8:d1:82:4f:69:b0:55:6f:9e: d2:6b:79:2a:46:ab:ac:f0:cf:db:1e:97:74:6e:e6: eb:6a:e3:45:15:88:b3:58:6b:9f:8f:f9:fc:dd:10: c0:33:bb:47:7f:4d:d6:46:00:fe:a4:38:6b:41:b3: c1:26:b0:9f:7d:bf:b8:f0:eb:01:69:f6:f1:b8:1c: d7:25:ce:73:31:d6:ae:a1:cf:f2:61:e9:06:0f:cb: 45:8d:17:30:8d:a0:be:8d:af:ee:88:dd:d4:43:7b: 73:c7:16:ac:77:c9:45:64:e9:67:25:d8:67:36:45: c3:fd:96:85:bd:0d:17:f6:e0:d9:d9:5b:3c:d7:fe: 3e:97:99:8c:0a:c3:00:4e:de:44:4f:1a:40:df:e9: 64:4b:62:78:99:45:e7:f1:81:e1:29:5a:22:58:05: 47:11:f9:03:1d:af:12:75:ea:5e:44:d6:ec:18:57: 4c:e2:a7:39:c7:14:f4:81:82:13:00:9e:eb:b4:d7: 71:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:3D:FD:0D:5C:9B:20:02:28:42:82:E5:0D:E4:AA:EA:23:7F:8D:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/af80ab34-df48-35ad-907c-ab7e6260b68d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.197.192.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:e5:6a:0c:7e:b2:f3:f5:a0:ed:c4:4c:68:c5:0c:05:ad:6e: e7:36:bf:af:fc:5c:94:34:16:c8:cb:eb:89:01:63:d0:b4:86: d3:94:c8:15:49:73:ec:13:e7:92:c8:d6:08:2e:0c:de:94:ea: 47:32:3c:b1:56:95:23:af:76:31:e4:60:e4:87:28:7e:43:88: 23:94:07:18:6a:bb:74:09:25:3e:c5:60:36:3f:73:74:58:70: 59:71:03:5d:f9:98:09:03:a7:7e:51:27:06:7c:cb:62:5d:85: b8:c2:d4:de:e9:f3:08:42:37:f6:e4:b5:71:0f:bf:e1:83:a5: 1b:6b:eb:89:7c:5f:c8:3a:4e:69:ba:3c:a9:ab:2f:3b:d4:0b: 3e:08:94:84:f6:5c:61:65:3a:ab:18:2d:4c:ad:8f:97:e0:75: a6:a4:78:aa:15:d3:fd:7b:95:22:00:18:1e:21:28:3f:24:be: 13:36:17:0e:35:30:70:c3:ea:08:0e:80:ef:da:9b:0d:68:c2: 21:b4:d1:4d:5e:b1:b7:2c:53:49:d2:d5:44:df:fa:e2:b1:12: 30:62:24:af:04:c5:d4:21:71:8f:81:fc:41:df:c6:07:81:7f: a7:0a:8c:f1:7e:05:5b:aa:07:21:8b:c2:53:9d:18:60:4e:b3: 9a:15:82:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmgieuf1oXirs2sTWUwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDQyNDAxMDA0N1oXDTI1MDcyMzAxMDA0N1owLzEtMCsGA1UEAxMk MmRhZmM4NDMtOTFkMi00ZGY3LTg4YzgtZTFiNzRjZjg5MjYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHtb9fg4QDVXaL8R2QCWBp7SnDEBHGaoEjes f4IAr4b0Y5QVBf1NEhAvLK13momrNaKKch/+vlNBzSLUB+IYRXCo0YJPabBVb57S a3kqRqus8M/bHpd0bubrauNFFYizWGufj/n83RDAM7tHf03WRgD+pDhrQbPBJrCf fb+48OsBafbxuBzXJc5zMdauoc/yYekGD8tFjRcwjaC+ja/uiN3UQ3tzxxasd8lF ZOlnJdhnNkXD/ZaFvQ0X9uDZ2Vs81/4+l5mMCsMATt5ETxpA3+lkS2J4mUXn8YHh KVoiWAVHEfkDHa8SdepeRNbsGFdM4qc5xxT0gYITAJ7rtNdxxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDg9/Q1cmyACKEKC5Q3kquojf435MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYWY4MGFiMzQtZGY0OC0z NWFkLTkwN2MtYWI3ZTYyNjBiNjhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGrsXAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK/lagx+svP1oO3ETGjFDAWtbuc2v6/8XJQ0FsjL64kBY9C0htOUyBVJ c+wT55LI1gguDN6U6kcyPLFWlSOvdjHkYOSHKH5DiCOUBxhqu3QJJT7FYDY/c3RY cFlxA135mAkDp35RJwZ8y2JdhbjC1N7p8whCN/bktXEPv+GDpRtr64l8X8g6Tmm6 PKmrLzvUCz4IlIT2XGFlOqsYLUytj5fgdaakeKoV0/17lSIAGB4hKD8kvhM2Fw41 MHDD6ggOgO/amw1owiG00U1esbcsU0nS1UTf+uKxEjBiJK8ExdQhcY+B/EHfxgeB f6cKjPF+BVuqByGLwlOdGGBOs5oVgnA= -----END CERTIFICATE-----Generated at Sun Apr 27 13:12:30 2025 by rpki-client