$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c4e02445-06ca-3e4b-8ff5-1222a8849f1f.roa File: c4e02445-06ca-3e4b-8ff5-1222a8849f1f.roa (raw, json) Hash identifier: 0hUIISIXMdTuvpg6vZ011MUcNbiyrBHOL+j9GWR+ISg= Subject key identifier: 74:81:8B:5C:01:1A:E9:DC:B9:23:75:62:CB:32:BF:6E:C1:67:B6:17 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849A089EFBF511E7D69EB15E0A0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c4e02445-06ca-3e4b-8ff5-1222a8849f1f.roa Signing time: Thu 24 Apr 2025 01:00:47 +0000 ROA not before: Thu 24 Apr 2025 01:00:47 +0000 ROA not after: Wed 23 Jul 2025 01:00:47 +0000 asID: 6167 IP address blocks: 174.224.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a0:89:ef:bf:51:1e:7d:69:eb:15:e0:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 24 01:00:47 2025 GMT Not After : Jul 23 01:00:47 2025 GMT Subject: CN=56bfbe75-856a-48e4-9e54-4b2e86795d78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ec:23:11:38:82:e2:f4:66:e7:4e:e7:4b:08: 27:06:cc:13:ae:bb:60:6b:47:44:27:f9:c1:17:5c: e7:fc:a7:3d:aa:43:1a:dd:e3:6e:c1:02:65:b3:6f: 47:8b:77:cd:0a:90:d2:62:74:6a:a1:96:31:98:2e: b3:94:3e:84:38:75:bf:53:1d:ac:a3:cd:dd:aa:af: 2c:5a:46:7c:75:79:db:17:2e:4d:e7:3a:d0:e9:ee: b2:2f:a8:70:d2:31:50:58:d1:54:0a:92:6b:94:ba: 9b:12:b4:54:3d:72:e1:d0:1a:39:ff:29:aa:4e:b3: a9:9b:a4:55:27:4b:53:13:b3:7d:08:76:1b:e2:07: cc:6b:67:76:1c:c6:31:55:1c:ed:c2:90:8e:22:e7: 04:9b:0f:27:4a:7f:3a:8a:89:cf:65:7d:99:f7:40: 20:67:65:e7:1a:eb:a6:0a:1e:c2:46:66:82:1a:30: a7:50:65:b0:5c:b1:67:19:bf:b9:0d:b5:14:fc:5e: 63:32:77:4b:37:79:45:85:12:07:e2:05:e2:37:9d: 7c:bd:6e:0e:ba:8b:36:5e:c4:bd:61:98:a0:df:47: 1c:94:3d:63:79:2f:f2:bb:06:ac:a8:6a:ec:48:a6: 5f:49:5d:45:c2:48:97:0d:07:8a:83:79:0c:a3:38: de:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:81:8B:5C:01:1A:E9:DC:B9:23:75:62:CB:32:BF:6E:C1:67:B6:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c4e02445-06ca-3e4b-8ff5-1222a8849f1f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.224.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:5b:97:93:05:73:c2:42:1b:9a:27:1e:7c:5d:f5:b6:eb:af: e0:06:54:2a:50:e6:fd:23:35:30:09:08:f8:98:74:ad:44:32: f3:9d:41:c2:f4:74:99:0b:31:76:be:2b:33:79:50:72:e0:04: dc:01:35:50:24:34:cd:04:db:9d:f5:21:9c:67:41:ba:16:c4: 58:e6:d2:0d:f5:4c:32:25:0e:29:d2:01:4a:78:2e:73:6e:cc: 82:a7:ba:e8:6b:14:54:6b:26:60:80:bf:79:9d:cd:f8:77:27: c0:89:41:12:f2:ed:e1:43:be:79:22:45:cc:39:13:d6:fd:6f: 0a:ac:ce:56:c8:5a:f2:eb:0c:e6:27:11:1e:60:35:dd:29:92: 48:6d:1a:89:dc:42:4e:75:aa:e2:72:cc:ea:90:a0:68:48:41: 88:5a:ed:3a:00:02:59:8f:df:4f:af:b3:e3:77:e0:23:48:be: 2e:1e:b8:b3:e1:54:b6:91:85:13:fd:09:a9:e2:72:26:7d:24: b9:ca:a4:a2:73:78:e6:ce:5f:ea:51:de:a2:17:a4:3c:a6:cc: 32:66:dd:9e:da:20:ba:e2:7d:4a:55:00:5c:a8:4d:12:e9:1b: 2d:2b:61:0e:c4:b2:c2:ae:0c:ac:31:9f:7c:18:b0:06:82:42: 13:12:38:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmgie+/UR59aesV4KAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDQyNDAxMDA0N1oXDTI1MDcyMzAxMDA0N1owLzEtMCsGA1UEAxMk NTZiZmJlNzUtODU2YS00OGU0LTllNTQtNGIyZTg2Nzk1ZDc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuewjETiC4vRm507nSwgnBswTrrtga0dEJ/nB F1zn/Kc9qkMa3eNuwQJls29Hi3fNCpDSYnRqoZYxmC6zlD6EOHW/Ux2so83dqq8s WkZ8dXnbFy5N5zrQ6e6yL6hw0jFQWNFUCpJrlLqbErRUPXLh0Bo5/ymqTrOpm6RV J0tTE7N9CHYb4gfMa2d2HMYxVRztwpCOIucEmw8nSn86ionPZX2Z90AgZ2XnGuum Ch7CRmaCGjCnUGWwXLFnGb+5DbUU/F5jMndLN3lFhRIH4gXiN518vW4Ouos2XsS9 YZig30cclD1jeS/yuwasqGrsSKZfSV1FwkiXDQeKg3kMozje+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHSBi1wBGuncuSN1Yssyv27BZ7YXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYzRlMDI0NDUtMDZjYS0z ZTRiLThmZjUtMTIyMmE4ODQ5ZjFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDruCYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABdbl5MFc8JCG5onHnxd9bbrr+AGVCpQ5v0jNTAJCPiYdK1EMvOdQcL0 dJkLMXa+KzN5UHLgBNwBNVAkNM0E2531IZxnQboWxFjm0g31TDIlDinSAUp4LnNu zIKnuuhrFFRrJmCAv3mdzfh3J8CJQRLy7eFDvnkiRcw5E9b9bwqszlbIWvLrDOYn ER5gNd0pkkhtGoncQk51quJyzOqQoGhIQYha7ToAAlmP30+vs+N34CNIvi4euLPh VLaRhRP9CaniciZ9JLnKpKJzeObOX+pR3qIXpDymzDJm3Z7aILrifUpVAFyoTRLp Gy0rYQ7EssKuDKwxn3wYsAaCQhMSOKE= -----END CERTIFICATE-----Generated at Sun Apr 27 16:34:45 2025 by rpki-client