$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cd125a36-0bb5-30b3-beaa-a459dda29f5e.roa File: cd125a36-0bb5-30b3-beaa-a459dda29f5e.roa (raw, json) Hash identifier: e1baU6cgs0xlXrlAAYcRNciQFM4o/yJSStBtH092FGg= Subject key identifier: 52:70:C6:B8:76:C0:90:E5:10:02:C9:2D:FF:68:B1:C2:E9:AD:A7:FF Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849A089F04BC07EC564778F8780 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cd125a36-0bb5-30b3-beaa-a459dda29f5e.roa Signing time: Thu 24 Apr 2025 01:00:47 +0000 ROA not before: Thu 24 Apr 2025 01:00:47 +0000 ROA not after: Wed 23 Jul 2025 01:00:47 +0000 asID: 6167 IP address blocks: 174.224.224.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a0:89:f0:4b:c0:7e:c5:64:77:8f:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 24 01:00:47 2025 GMT Not After : Jul 23 01:00:47 2025 GMT Subject: CN=633ad55f-6fa4-4837-84cf-876834585052 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:55:3d:73:64:f2:52:b4:fe:6d:13:9f:e0:10: a3:5c:ac:2d:e9:af:44:76:21:77:ee:3e:b7:0d:fa: ee:45:a3:81:95:31:11:c4:65:1b:57:07:97:5f:10: e5:8c:ef:fd:89:27:c3:71:81:57:2b:14:af:1b:d0: 0e:e0:35:b7:99:bc:8c:b0:6b:b8:5e:74:b4:31:0f: 20:53:f2:fe:2a:71:7f:6c:39:3e:16:3b:ee:d3:87: 72:d9:00:f3:37:85:ef:e0:26:c5:50:f1:85:4b:4d: 38:97:0f:90:8b:8b:f6:d1:4a:0a:73:79:08:e2:16: bb:e7:e0:8a:57:05:c4:c8:8d:9a:df:cb:7e:f0:7d: cf:1a:95:f1:ac:66:a4:de:db:c3:32:cd:b7:2d:30: 8c:62:de:c4:86:86:42:43:39:25:fe:8f:87:2e:66: c5:09:f1:5d:9a:5e:32:c0:b9:45:bd:35:be:c6:7e: 20:39:66:f1:de:de:d1:16:77:09:de:23:e8:d5:a7: cd:04:52:1f:e7:13:c3:1d:41:49:8e:24:0c:e1:93: 7b:cd:61:fe:1b:47:d0:79:0e:ac:2d:b4:ac:1d:7b: a9:3a:1f:3a:99:4f:44:fc:bb:c1:04:f0:71:37:9d: 59:2d:58:6d:97:08:55:0b:6f:1a:5d:42:40:0d:ac: bc:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:70:C6:B8:76:C0:90:E5:10:02:C9:2D:FF:68:B1:C2:E9:AD:A7:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cd125a36-0bb5-30b3-beaa-a459dda29f5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.224.224.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:50:21:e9:6e:d4:86:ca:a2:e9:75:cf:42:b0:4f:ec:ee:67: 07:9c:0e:7a:9f:a5:3a:b7:cf:d0:fe:32:d3:62:5f:ce:23:a6: 3c:f8:15:7d:c2:a1:8c:0a:f6:d6:8b:07:b9:f0:00:9b:d0:20: 95:a6:98:0c:95:6a:3f:ad:26:2a:72:e9:24:a2:a1:78:66:d9: 6d:d2:d4:58:ef:3a:74:e9:22:a9:5b:f5:1c:5f:89:fc:ce:d8: 2b:fa:2e:0d:4a:ac:ac:13:cc:8c:f7:2c:5c:2d:f4:cd:21:ff: 4c:f2:4f:47:1e:de:48:4a:e6:81:3e:d4:29:4d:68:cb:d7:f1: 5e:0d:37:5d:98:7c:10:74:b7:bb:80:29:7a:e3:a1:f6:4e:34: 41:c7:55:a9:d9:86:23:69:1b:aa:1e:8a:3d:cb:b9:d8:24:97: c3:4d:c1:72:ec:f4:ff:40:cf:e7:04:e3:ce:c5:19:a0:77:07: c0:e1:73:78:bb:32:0e:29:59:69:e4:87:0a:f2:6f:ab:b4:9a: d4:cf:dc:96:13:3c:07:0a:54:10:87:2a:24:50:98:71:e0:42: 46:b1:f8:5b:68:32:91:f9:82:46:3f:44:80:52:de:8e:30:86: 7e:67:71:d1:6e:11:d3:fb:a9:3f:23:11:af:37:d0:23:79:67: c7:77:d6:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmgifBLwH7FZHePh4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDQyNDAxMDA0N1oXDTI1MDcyMzAxMDA0N1owLzEtMCsGA1UEAxMk NjMzYWQ1NWYtNmZhNC00ODM3LTg0Y2YtODc2ODM0NTg1MDUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj1U9c2TyUrT+bROf4BCjXKwt6a9EdiF37j63 DfruRaOBlTERxGUbVweXXxDljO/9iSfDcYFXKxSvG9AO4DW3mbyMsGu4XnS0MQ8g U/L+KnF/bDk+Fjvu04dy2QDzN4Xv4CbFUPGFS004lw+Qi4v20UoKc3kI4ha75+CK VwXEyI2a38t+8H3PGpXxrGak3tvDMs23LTCMYt7EhoZCQzkl/o+HLmbFCfFdml4y wLlFvTW+xn4gOWbx3t7RFncJ3iPo1afNBFIf5xPDHUFJjiQM4ZN7zWH+G0fQeQ6s LbSsHXupOh86mU9E/LvBBPBxN51ZLVhtlwhVC28aXUJADay8fQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFJwxrh2wJDlEALJLf9oscLpraf/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvY2QxMjVhMzYtMGJiNS0z MGIzLWJlYWEtYTQ1OWRkYTI5ZjVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBruDgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABNQIelu1IbKoul1z0KwT+zuZwecDnqfpTq3z9D+MtNiX84jpjz4FX3C oYwK9taLB7nwAJvQIJWmmAyVaj+tJipy6SSioXhm2W3S1FjvOnTpIqlb9RxfifzO 2Cv6Lg1KrKwTzIz3LFwt9M0h/0zyT0ce3khK5oE+1ClNaMvX8V4NN12YfBB0t7uA KXrjofZONEHHVanZhiNpG6oeij3Ludgkl8NNwXLs9P9Az+cE487FGaB3B8Dhc3i7 Mg4pWWnkhwryb6u0mtTP3JYTPAcKVBCHKiRQmHHgQkax+FtoMpH5gkY/RIBS3o4w hn5ncdFuEdP7qT8jEa830CN5Z8d31gU= -----END CERTIFICATE-----Generated at Sun Apr 27 13:30:05 2025 by rpki-client