$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dae12a4d-dcee-3271-ae29-a3e9b6dd2c77.roa File: dae12a4d-dcee-3271-ae29-a3e9b6dd2c77.roa (raw, json) Hash identifier: B0A1YTJ4rvzqVhMyuRtyGtXRDZPx1ZLxnWbnfXEbafc= Subject key identifier: C5:19:0B:87:FD:E2:44:0C:3D:D8:C8:5B:25:01:E5:26:A0:10:97:34 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285848EF616FBD65918463D9EFD180 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dae12a4d-dcee-3271-ae29-a3e9b6dd2c77.roa Signing time: Wed 19 Feb 2025 14:00:52 +0000 ROA not before: Wed 19 Feb 2025 14:00:52 +0000 ROA not after: Tue 20 May 2025 13:00:52 +0000 asID: 22394 IP address blocks: 174.41.164.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ef:61:6f:bd:65:91:84:63:d9:ef:d1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Feb 19 14:00:52 2025 GMT Not After : May 20 13:00:52 2025 GMT Subject: CN=4a36817b-23ce-4e92-afea-6edb71cb4a24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:10:7e:05:82:7b:58:97:b6:5b:c6:87:57:99: 5f:81:a7:94:9e:95:0d:e0:10:db:2e:29:a0:ff:d4: 35:12:7a:de:53:83:bd:3f:23:73:d0:bf:82:28:08: 9d:1b:3e:59:ff:19:02:6a:d6:ac:f5:9f:45:5e:0d: 85:f0:e2:5c:b4:30:46:73:ec:aa:4b:d4:fd:b4:9b: 43:55:d0:8a:bf:ab:36:bd:0f:9d:18:a6:f0:ed:b8: ee:6f:56:c9:24:23:e3:d6:77:98:d7:d9:02:a1:88: b8:03:d5:1a:62:f2:3d:c0:e1:ef:a1:24:8a:fc:41: 7f:63:ca:d3:06:d8:80:e9:70:2f:be:1a:68:18:3d: f3:e9:64:c1:f0:45:a2:c9:eb:8b:9e:47:17:70:63: d3:33:9f:fe:d8:54:db:89:d0:a5:69:3b:e8:e4:a1: 77:0b:de:9b:ef:68:a7:b8:c2:ad:d2:b3:e2:09:5e: c2:dc:26:eb:5d:a6:81:41:27:71:9f:df:a1:e2:a1: 8a:46:f5:e1:50:8f:54:a4:15:a0:0e:18:33:cc:09: 40:c0:24:d4:ca:c7:38:33:58:89:c1:a3:0a:ba:37: 76:bb:bd:f9:07:6a:56:fb:e4:93:d0:64:e6:61:57: ef:75:31:b1:79:cd:62:dd:38:65:8c:c9:a5:a0:c8: 63:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:19:0B:87:FD:E2:44:0C:3D:D8:C8:5B:25:01:E5:26:A0:10:97:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dae12a4d-dcee-3271-ae29-a3e9b6dd2c77.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.41.164.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:71:74:89:ab:e8:11:f9:27:fa:65:2f:e8:03:dc:18:2e:f5: 5e:f6:89:47:74:8e:f9:6b:4a:9f:89:ac:ae:d6:de:a2:3c:b4: 86:94:26:66:e7:4f:79:5f:96:3e:2c:12:d7:7c:d3:52:40:c9: da:9a:fc:ea:f7:31:f9:a6:b2:06:51:e4:e7:d4:61:be:23:e8: 77:fa:39:68:e0:1c:a7:0d:6d:53:97:d0:2a:27:20:4a:bf:63: a3:f0:3e:27:f1:72:b8:34:26:ce:0b:42:59:7a:9c:8e:a8:48: 09:8b:ec:5d:fe:41:2a:7a:ca:d1:fc:17:85:d7:70:8f:13:14: 7d:ac:4d:f8:77:96:66:b1:08:05:51:d5:97:7e:69:45:88:78: af:5f:79:a1:20:0a:7c:33:32:13:f9:d1:50:c7:39:2c:58:ef: 65:51:73:ec:d5:18:35:23:14:f8:98:32:6f:dd:d7:9d:c3:9a: 6d:a0:cd:11:f2:87:6d:85:e3:51:75:e3:ec:6c:16:24:10:76: 6e:fd:80:58:dc:59:7d:98:73:0c:81:80:56:4a:18:9e:0f:82: 9c:2a:ce:21:fb:75:e3:75:c3:23:bc:33:74:27:60:e8:4c:74: 1b:5b:86:7e:d6:5b:cf:4f:a2:a7:d1:fa:60:f4:a7:c6:78:8a: 1e:4e:32:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjvYW+9ZZGEY9nv0YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk NGEzNjgxN2ItMjNjZS00ZTkyLWFmZWEtNmVkYjcxY2I0YTI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRB+BYJ7WJe2W8aHV5lfgaeUnpUN4BDbLimg /9Q1EnreU4O9PyNz0L+CKAidGz5Z/xkCatas9Z9FXg2F8OJctDBGc+yqS9T9tJtD VdCKv6s2vQ+dGKbw7bjub1bJJCPj1neY19kCoYi4A9UaYvI9wOHvoSSK/EF/Y8rT BtiA6XAvvhpoGD3z6WTB8EWiyeuLnkcXcGPTM5/+2FTbidClaTvo5KF3C96b72in uMKt0rPiCV7C3CbrXaaBQSdxn9+h4qGKRvXhUI9UpBWgDhgzzAlAwCTUysc4M1iJ waMKujd2u735B2pW++ST0GTmYVfvdTGxec1i3ThljMmloMhjFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMUZC4f94kQMPdjIWyUB5SagEJc0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZGFlMTJhNGQtZGNlZS0z MjcxLWFlMjktYTNlOWI2ZGQyYzc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrimkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAChxdImr6BH5J/plL+gD3Bgu9V72iUd0jvlrSp+JrK7W3qI8tIaUJmbn T3lflj4sEtd801JAydqa/Or3MfmmsgZR5OfUYb4j6Hf6OWjgHKcNbVOX0ConIEq/ Y6PwPifxcrg0Js4LQll6nI6oSAmL7F3+QSp6ytH8F4XXcI8TFH2sTfh3lmaxCAVR 1Zd+aUWIeK9feaEgCnwzMhP50VDHOSxY72VRc+zVGDUjFPiYMm/d153Dmm2gzRHy h22F41F14+xsFiQQdm79gFjcWX2YcwyBgFZKGJ4PgpwqziH7deN1wyO8M3QnYOhM dBtbhn7WW89PoqfR+mD0p8Z4ih5OMsc= -----END CERTIFICATE-----Generated at Sun Apr 27 00:12:23 2025 by rpki-client