$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/db5ec7d7-1069-37bf-859c-6bbd9193c356.roa File: db5ec7d7-1069-37bf-859c-6bbd9193c356.roa (raw, json) Hash identifier: /keFM3voqZO5m2xBWSL19fUglyRTXJIwqMGVhpXjKpk= Subject key identifier: C0:9C:C8:09:F1:05:90:0F:EA:91:D9:5B:D4:A9:5A:FF:84:95:2F:90 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849A089ED29F53312001FA58F00 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/db5ec7d7-1069-37bf-859c-6bbd9193c356.roa Signing time: Thu 24 Apr 2025 01:00:47 +0000 ROA not before: Thu 24 Apr 2025 01:00:47 +0000 ROA not after: Wed 23 Jul 2025 01:00:47 +0000 asID: 6167 IP address blocks: 174.212.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a0:89:ed:29:f5:33:12:00:1f:a5:8f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 24 01:00:47 2025 GMT Not After : Jul 23 01:00:47 2025 GMT Subject: CN=a0d6d7a1-311b-4625-a26f-ffd49e81498c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:f9:d9:24:ce:3f:39:68:f8:5d:13:ee:f3:c4: 0d:db:ad:8f:5c:24:bf:c2:45:89:ba:f9:91:60:5b: 1b:65:12:5c:8b:55:ff:9a:af:13:85:f3:8f:d5:1e: e9:79:37:50:ad:a2:f4:35:cb:d0:aa:62:4f:f1:95: b0:f8:f5:e1:bc:80:2f:f2:a1:71:49:9c:c3:bc:b3: 0b:d0:d9:1c:88:80:e1:b8:85:5f:f6:17:84:20:95: 60:b2:0b:13:b4:c2:be:eb:6d:ff:e5:cf:10:6f:86: 44:20:07:dd:92:24:fc:82:2a:0f:d3:bc:10:65:4e: 5d:75:27:c1:c6:2f:96:a1:09:e6:00:59:b8:1e:58: 78:5a:7c:4e:b8:5d:05:70:7e:a3:f2:5c:a0:94:d4: 9a:cb:c3:dd:54:91:27:6c:fc:c0:70:5f:56:06:f2: f0:31:77:7a:f4:8c:65:91:bb:3c:3e:23:b6:57:67: 3a:04:ba:06:4e:4c:d5:b7:6a:46:1c:2a:10:55:56: 90:38:cd:fe:74:ad:f2:92:c1:dc:02:8c:4d:b2:77: 35:6e:b8:8b:82:be:53:c3:ef:b7:04:11:06:f6:d1: 2a:4c:9c:c8:4c:f6:71:58:59:d6:cc:84:b6:5a:b2: e3:69:23:fc:ef:fc:c6:01:ae:45:55:47:a8:58:29: bb:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:9C:C8:09:F1:05:90:0F:EA:91:D9:5B:D4:A9:5A:FF:84:95:2F:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/db5ec7d7-1069-37bf-859c-6bbd9193c356.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.212.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:80:5c:8d:2d:31:95:6a:66:33:ca:10:fc:97:05:85:fc:5e: 25:e1:a1:1b:3e:c7:fb:05:8b:99:73:82:f8:f9:73:f8:c7:63: 3b:f5:95:4b:df:bc:95:37:af:64:86:85:c8:93:22:c0:1e:93: d0:c6:1f:86:ee:1d:3e:e5:3e:46:7a:4a:25:3f:e2:2a:4d:c4: f9:a1:0e:27:fc:45:74:e2:6b:c5:94:3a:14:9b:e5:e8:32:39: 90:ea:7d:b6:36:d5:a7:84:25:02:21:b4:73:2e:ef:79:fa:46: 40:ed:ba:69:b2:d4:f5:03:28:c4:a1:e3:68:03:64:7b:34:1f: 8c:8a:5a:a1:10:50:ac:1b:90:4c:0a:78:69:70:c5:ea:9d:d3: bd:ff:03:db:6f:61:f5:87:03:b0:c5:b9:f3:b3:63:29:c1:18: a2:40:2f:f6:1b:40:b8:2f:54:16:0c:a8:96:c7:13:17:8b:81: 61:59:e0:60:8d:03:58:0c:40:0b:56:64:f3:f8:83:08:e1:ae: 11:e4:a8:57:5a:1f:cd:1c:d7:da:43:e1:63:9a:ca:0d:10:ec: 6d:a8:ec:80:3b:41:e3:f0:e2:9c:ab:22:21:b6:c0:d8:cb:bd: a8:70:b5:0f:cd:bd:ff:c7:59:7d:f5:9d:2b:2f:f8:cc:c4:ac: 58:e2:86:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmgie0p9TMSAB+ljwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDQyNDAxMDA0N1oXDTI1MDcyMzAxMDA0N1owLzEtMCsGA1UEAxMk YTBkNmQ3YTEtMzExYi00NjI1LWEyNmYtZmZkNDllODE0OThjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkfnZJM4/OWj4XRPu88QN262PXCS/wkWJuvmR YFsbZRJci1X/mq8ThfOP1R7peTdQraL0NcvQqmJP8ZWw+PXhvIAv8qFxSZzDvLML 0NkciIDhuIVf9heEIJVgsgsTtMK+623/5c8Qb4ZEIAfdkiT8gioP07wQZU5ddSfB xi+WoQnmAFm4Hlh4WnxOuF0FcH6j8lyglNSay8PdVJEnbPzAcF9WBvLwMXd69Ixl kbs8PiO2V2c6BLoGTkzVt2pGHCoQVVaQOM3+dK3yksHcAoxNsnc1briLgr5Tw++3 BBEG9tEqTJzITPZxWFnWzIS2WrLjaSP87/zGAa5FVUeoWCm7zQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMCcyAnxBZAP6pHZW9SpWv+ElS+QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZGI1ZWM3ZDctMTA2OS0z N2JmLTg1OWMtNmJiZDkxOTNjMzU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrtTwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHKAXI0tMZVqZjPKEPyXBYX8XiXhoRs+x/sFi5lzgvj5c/jHYzv1lUvf vJU3r2SGhciTIsAek9DGH4buHT7lPkZ6SiU/4ipNxPmhDif8RXTia8WUOhSb5egy OZDqfbY21aeEJQIhtHMu73n6RkDtummy1PUDKMSh42gDZHs0H4yKWqEQUKwbkEwK eGlwxeqd073/A9tvYfWHA7DFufOzYynBGKJAL/YbQLgvVBYMqJbHExeLgWFZ4GCN A1gMQAtWZPP4gwjhrhHkqFdaH80c19pD4WOayg0Q7G2o7IA7QePw4pyrIiG2wNjL vahwtQ/Nvf/HWX31nSsv+MzErFjihuw= -----END CERTIFICATE-----Generated at Sun Apr 27 00:16:34 2025 by rpki-client