$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e2927695-f948-3f88-a0ba-7cd151a55823.roa File: e2927695-f948-3f88-a0ba-7cd151a55823.roa (raw, json) Hash identifier: 9VcwnuQNcEZEwt3+TgkyQcbW3T0+w9pGdWz0n67Uy3c= Subject key identifier: 02:3F:FA:53:78:F4:B5:CB:36:23:11:5E:DF:69:08:A4:88:15:47:BC Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849A089E35AFA84ABFCB0725300 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e2927695-f948-3f88-a0ba-7cd151a55823.roa Signing time: Thu 24 Apr 2025 01:00:47 +0000 ROA not before: Thu 24 Apr 2025 01:00:47 +0000 ROA not after: Wed 23 Jul 2025 01:00:47 +0000 asID: 6167 IP address blocks: 174.218.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a0:89:e3:5a:fa:84:ab:fc:b0:72:53:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 24 01:00:47 2025 GMT Not After : Jul 23 01:00:47 2025 GMT Subject: CN=eea9a418-5609-4f14-9a83-bf9a20d0f716 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a9:dd:76:e8:9b:27:0d:ef:49:a1:44:d9:5e: 60:65:fc:c8:04:9a:bb:9d:d8:89:57:7a:5b:ce:ca: ab:50:70:e7:38:36:bb:ba:af:6a:47:99:b9:7d:84: c7:b3:c0:95:2e:d0:c2:03:fe:83:7d:27:d7:d2:01: d9:bd:ee:55:c3:f7:41:9c:36:3b:b2:a6:44:5c:6b: ca:84:87:02:1b:72:78:c0:ea:a5:16:4f:3b:5f:e7: 97:3e:54:49:cf:c7:3c:bc:b1:2b:c1:d2:7f:6c:9b: ba:c2:f4:03:a0:16:84:83:cd:28:71:9b:dc:bd:eb: 6f:d7:85:ca:f3:8f:61:ca:87:46:1b:bd:c9:bc:ca: 17:c4:ac:3a:76:7e:95:3d:81:03:93:35:9c:d0:d0: b6:f7:43:40:d1:c6:b3:88:9b:e9:ae:81:be:ae:4c: 8b:5b:ba:e0:6d:0f:43:9d:75:4d:28:ca:7a:68:3d: 32:b6:5b:35:be:68:cb:ba:7d:a9:ee:43:11:e2:3c: f3:49:49:9c:94:ab:2e:45:2c:59:84:4f:85:41:88: 49:57:df:d6:40:92:09:ae:b6:a0:00:a5:65:ab:38: b4:56:96:40:e8:fa:96:f1:1e:5c:f5:5e:d4:6b:0c: 0f:c6:3a:51:cc:d0:a8:50:7a:55:81:1f:82:70:a3: 89:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:3F:FA:53:78:F4:B5:CB:36:23:11:5E:DF:69:08:A4:88:15:47:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e2927695-f948-3f88-a0ba-7cd151a55823.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.218.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:d9:fb:6b:c2:93:2c:3b:cb:cd:65:0b:25:e6:79:38:bf:6b: 47:a7:fa:e0:b9:c8:2f:93:c7:6f:94:5e:f6:1e:2c:6e:5d:5d: 5b:a1:76:73:a3:ab:0c:16:92:9f:98:b7:b9:1a:a4:af:ce:32: 21:64:2f:fb:4d:c8:db:1f:d9:94:77:c8:e9:5d:81:c2:66:b4: 02:03:44:a9:0b:b6:5b:9f:51:ec:37:a7:11:86:2b:f4:d0:1e: b1:f4:f9:18:38:a0:2f:93:9f:d1:f6:46:62:3e:cf:86:6b:21: 6f:50:c9:44:74:2f:1b:5c:c8:57:b5:bf:5c:15:f5:40:04:50: df:e2:24:87:59:5c:e4:d8:f6:59:78:34:af:fb:85:59:c3:0e: 45:54:16:93:ae:f2:e7:e1:88:62:72:2c:57:12:0a:12:a1:8f: 40:2c:c5:84:f9:c4:8c:a1:91:ba:e9:b4:bb:eb:93:d5:f7:7a: 0d:4b:64:35:3c:5f:a2:9a:b1:6b:59:55:a6:a9:d4:cb:23:36: 55:7c:89:5c:57:4a:17:26:41:a6:50:cf:18:f7:01:33:09:79: 4b:59:7c:3d:a2:9e:d7:95:60:34:c2:ea:6e:b9:2c:e7:d9:cb: 23:fd:8a:0f:3c:62:d5:b6:02:40:36:d6:7f:31:ee:25:19:cf: 11:47:03:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmgieNa+oSr/LByUwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDQyNDAxMDA0N1oXDTI1MDcyMzAxMDA0N1owLzEtMCsGA1UEAxMk ZWVhOWE0MTgtNTYwOS00ZjE0LTlhODMtYmY5YTIwZDBmNzE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6ndduibJw3vSaFE2V5gZfzIBJq7ndiJV3pb zsqrUHDnODa7uq9qR5m5fYTHs8CVLtDCA/6DfSfX0gHZve5Vw/dBnDY7sqZEXGvK hIcCG3J4wOqlFk87X+eXPlRJz8c8vLErwdJ/bJu6wvQDoBaEg80ocZvcvetv14XK 849hyodGG73JvMoXxKw6dn6VPYEDkzWc0NC290NA0caziJvproG+rkyLW7rgbQ9D nXVNKMp6aD0ytls1vmjLun2p7kMR4jzzSUmclKsuRSxZhE+FQYhJV9/WQJIJrrag AKVlqzi0VpZA6PqW8R5c9V7UawwPxjpRzNCoUHpVgR+CcKOJ7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAI/+lN49LXLNiMRXt9pCKSIFUe8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZTI5Mjc2OTUtZjk0OC0z Zjg4LWEwYmEtN2NkMTUxYTU1ODIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrtrQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJHZ+2vCkyw7y81lCyXmeTi/a0en+uC5yC+Tx2+UXvYeLG5dXVuhdnOj qwwWkp+Yt7kapK/OMiFkL/tNyNsf2ZR3yOldgcJmtAIDRKkLtlufUew3pxGGK/TQ HrH0+Rg4oC+Tn9H2RmI+z4ZrIW9QyUR0LxtcyFe1v1wV9UAEUN/iJIdZXOTY9ll4 NK/7hVnDDkVUFpOu8ufhiGJyLFcSChKhj0AsxYT5xIyhkbrptLvrk9X3eg1LZDU8 X6KasWtZVaap1MsjNlV8iVxXShcmQaZQzxj3ATMJeUtZfD2inteVYDTC6m65LOfZ yyP9ig88YtW2AkA21n8x7iUZzxFHA9E= -----END CERTIFICATE-----Generated at Sat Apr 26 22:51:44 2025 by rpki-client