$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d853747c-fb99-3324-ba14-887cfb2725c9.roa File: d853747c-fb99-3324-ba14-887cfb2725c9.roa (raw, json) Hash identifier: ufYFemH9eJO9uWviKPusUN5ssYuPgdQV1l8PZySxhp8= Subject key identifier: 0E:24:59:FA:10:A8:F7:06:D7:49:01:1C:62:40:7B:D8:63:A0:25:DA Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849A089EB57C3EA55C8CE462B00 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d853747c-fb99-3324-ba14-887cfb2725c9.roa Signing time: Thu 24 Apr 2025 01:00:47 +0000 ROA not before: Thu 24 Apr 2025 01:00:47 +0000 ROA not after: Wed 23 Jul 2025 01:00:47 +0000 asID: 6167 IP address blocks: 174.196.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a0:89:eb:57:c3:ea:55:c8:ce:46:2b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 24 01:00:47 2025 GMT Not After : Jul 23 01:00:47 2025 GMT Subject: CN=5336ef8e-4991-49fe-aec0-2fe8e541ab14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:33:d6:02:ac:a7:42:4f:20:b9:b9:69:0c:86: 7b:6d:66:76:18:50:ff:80:4d:15:00:d1:b5:d6:bd: 93:7b:c5:44:1a:db:3a:e8:22:b3:28:d8:73:ac:c6: 1c:21:86:32:91:23:1a:0d:2e:fe:7c:65:0a:c7:db: 5d:6d:92:18:9e:50:df:b1:22:5c:66:60:e1:01:f1: c1:92:6a:3c:16:f3:a9:83:25:48:b0:70:5e:71:5f: 5d:11:9e:c4:cb:d1:7a:80:bb:ee:df:e6:51:fb:e8: 7c:f1:3d:c5:12:79:26:c6:21:f3:99:ad:11:05:a4: 1e:a7:4d:de:da:c1:e9:7d:f3:4b:cc:36:fe:40:81: 52:b6:4f:79:5c:1e:92:df:dd:26:36:ca:28:d4:87: f2:79:d4:11:19:85:9b:7f:56:90:96:75:91:62:c0: b9:3c:52:a0:ee:c1:e6:1b:e9:c3:ca:cb:7d:d8:7a: 8c:84:28:c0:f6:0e:b6:48:43:1f:f1:f6:3e:fd:6a: 72:40:48:f8:39:c7:1a:0e:81:1d:bb:55:1f:be:9e: 35:15:7f:18:a6:03:7b:a5:12:e0:74:9e:c5:87:5a: 15:c2:69:69:b3:e5:0b:21:e0:d6:17:31:17:be:bd: f4:71:67:25:0d:e5:1c:ca:b7:89:b7:10:84:fb:8e: b4:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:24:59:FA:10:A8:F7:06:D7:49:01:1C:62:40:7B:D8:63:A0:25:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d853747c-fb99-3324-ba14-887cfb2725c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.196.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:06:76:6c:38:93:b6:cb:64:13:3d:e7:b2:13:68:99:b3:77: f5:b4:f3:e2:00:75:0e:24:7b:5c:9d:49:dd:e2:7f:22:5e:c8: a8:4e:03:7a:01:84:93:d8:1e:15:2a:92:7d:42:49:31:94:b9: 6f:01:e5:51:67:e6:d4:e0:c6:78:f8:f6:bc:46:db:1e:99:e4: f1:52:ff:0f:97:8b:81:57:2f:d4:9d:0a:46:4d:7c:c6:d0:99: 0d:dd:9c:8e:36:34:77:b5:57:86:2d:51:4b:7a:9c:a8:e3:6a: 12:ef:fa:60:65:31:64:3a:91:49:d3:ab:05:f1:fb:0c:1d:72: df:bf:85:9d:36:72:75:56:4d:ca:66:23:96:36:0e:af:da:c3: 37:fe:01:c5:0a:15:44:84:75:73:f0:a9:1c:c6:4b:0c:2d:89: e9:54:35:87:a9:a0:73:f9:41:e2:25:72:48:7c:d1:bb:75:6d: f4:cc:86:b2:ee:cb:8c:97:79:55:bc:de:28:82:66:f9:a2:35: 06:6a:88:a4:de:53:3b:c6:50:55:97:8a:e0:92:cc:be:53:6f: ca:d1:6f:61:d4:4e:df:64:1f:d6:2f:ac:89:cc:87:e7:fb:6a: ab:32:a0:06:d8:e0:0c:e0:7a:e9:68:96:a5:e4:06:bc:45:d5: 1b:77:e0:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmgietXw+pVyM5GKwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDQyNDAxMDA0N1oXDTI1MDcyMzAxMDA0N1owLzEtMCsGA1UEAxMk NTMzNmVmOGUtNDk5MS00OWZlLWFlYzAtMmZlOGU1NDFhYjE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjPWAqynQk8gublpDIZ7bWZ2GFD/gE0VANG1 1r2Te8VEGts66CKzKNhzrMYcIYYykSMaDS7+fGUKx9tdbZIYnlDfsSJcZmDhAfHB kmo8FvOpgyVIsHBecV9dEZ7Ey9F6gLvu3+ZR++h88T3FEnkmxiHzma0RBaQep03e 2sHpffNLzDb+QIFStk95XB6S390mNsoo1IfyedQRGYWbf1aQlnWRYsC5PFKg7sHm G+nDyst92HqMhCjA9g62SEMf8fY+/WpyQEj4OccaDoEdu1Ufvp41FX8YpgN7pRLg dJ7Fh1oVwmlps+ULIeDWFzEXvr30cWclDeUcyreJtxCE+460ywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA4kWfoQqPcG10kBHGJAe9hjoCXaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZDg1Mzc0N2MtZmI5OS0z MzI0LWJhMTQtODg3Y2ZiMjcyNWM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGrsSAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK0Gdmw4k7bLZBM957ITaJmzd/W08+IAdQ4ke1ydSd3ifyJeyKhOA3oB hJPYHhUqkn1CSTGUuW8B5VFn5tTgxnj49rxG2x6Z5PFS/w+Xi4FXL9SdCkZNfMbQ mQ3dnI42NHe1V4YtUUt6nKjjahLv+mBlMWQ6kUnTqwXx+wwdct+/hZ02cnVWTcpm I5Y2Dq/awzf+AcUKFUSEdXPwqRzGSwwtielUNYepoHP5QeIlckh80bt1bfTMhrLu y4yXeVW83iiCZvmiNQZqiKTeUzvGUFWXiuCSzL5Tb8rRb2HUTt9kH9YvrInMh+f7 aqsyoAbY4AzgeulolqXkBrxF1Rt34Kw= -----END CERTIFICATE-----Generated at Sun Apr 27 04:26:24 2025 by rpki-client