$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e93aa65c-8326-33ee-9e1d-51ced6233850.roa File: e93aa65c-8326-33ee-9e1d-51ced6233850.roa (raw, json) Hash identifier: ySDllO+v/4NP00EFxBw11E+UZbKTTqzdpf4gqrZNWJg= Subject key identifier: 67:D8:F1:09:35:56:07:F5:AE:15:4B:1F:BE:B7:9C:52:C6:9F:9F:C3 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849A089E40419ACD61FDB147C80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e93aa65c-8326-33ee-9e1d-51ced6233850.roa Signing time: Thu 24 Apr 2025 01:00:47 +0000 ROA not before: Thu 24 Apr 2025 01:00:47 +0000 ROA not after: Wed 23 Jul 2025 01:00:47 +0000 asID: 6167 IP address blocks: 174.219.24.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a0:89:e4:04:19:ac:d6:1f:db:14:7c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 24 01:00:47 2025 GMT Not After : Jul 23 01:00:47 2025 GMT Subject: CN=5990b4ce-554f-4fe4-ac23-7ae68a0555c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:36:7b:52:08:ff:6f:98:5c:9a:39:ae:f1:a6: 04:61:b8:84:33:d7:61:9d:f4:75:76:44:84:be:b1: f6:4b:4c:0a:9d:c5:69:73:82:b1:9a:91:b8:37:66: 02:0f:a4:7e:ca:b4:c2:bb:30:38:da:f1:59:a1:0a: 5e:b9:16:f9:7a:98:b7:7c:ea:e0:f1:75:33:5d:09: 26:55:5f:87:c8:7d:60:f4:47:a5:3d:77:44:c8:1a: 97:f7:12:4c:e2:16:76:65:68:31:ed:30:60:23:3c: 43:65:f0:15:e0:eb:99:9d:12:2c:90:b8:93:39:3d: 5b:45:65:c9:41:d9:81:ed:34:19:62:f6:a8:90:44: 11:de:69:6b:1a:40:07:1b:66:46:22:5f:47:a0:5b: ba:61:81:83:8d:3b:ea:a0:18:bb:7d:15:b5:aa:37: be:f9:62:12:d5:6f:48:a1:dd:d5:08:65:b8:cd:e7: b9:69:d2:d5:f0:90:6f:25:e7:9e:9f:ca:93:3d:fb: 14:38:d5:b3:c0:75:cf:81:f4:db:02:1e:bb:bd:d9: ff:d8:26:ad:b2:02:06:e9:e2:ad:c4:84:e1:7d:ba: 5f:2a:a8:fa:69:6b:37:d1:83:99:82:e2:c5:84:12: 63:ab:75:8d:3b:b1:85:ea:bb:ee:15:48:cf:e5:78: c9:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:D8:F1:09:35:56:07:F5:AE:15:4B:1F:BE:B7:9C:52:C6:9F:9F:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e93aa65c-8326-33ee-9e1d-51ced6233850.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.219.24.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:75:39:f4:5b:39:ba:93:c7:94:94:10:14:14:b0:d9:80:5e: 5a:1c:ec:5e:18:1c:fb:8c:e3:3a:fb:15:1d:7c:9c:3d:6b:53: d8:e1:12:db:d7:ac:a1:93:7c:fd:6d:04:3b:c9:e0:ff:d4:5f: 34:ee:57:1b:1c:02:91:e8:85:ab:99:f3:83:1f:b5:27:77:f0: 08:1a:c1:0b:8e:47:52:cb:11:4f:c3:96:6d:e3:4f:be:44:64: 02:76:fe:c5:65:2f:29:d6:d0:79:d8:25:28:9c:74:9d:8b:ef: 4f:ce:bc:d7:ff:4a:c6:b3:08:b2:7d:79:66:3f:46:b4:d1:a7: 83:a2:b8:b3:5c:4f:83:97:21:1c:26:b9:bb:3f:2d:b3:2c:8d: 5e:23:a8:00:84:c1:d7:73:15:7a:2a:49:44:ab:16:ad:cb:89: 04:eb:b5:63:93:d0:13:e1:a2:7e:8b:f4:2a:f0:e6:40:fd:ab: 6e:c8:ec:0d:57:43:5c:04:9b:b3:4f:a2:f0:cf:92:52:41:c8: 3d:e8:8a:4f:82:ad:c8:5e:1d:cf:5c:d2:28:56:5c:97:99:bc: 41:52:5b:a0:6d:b1:58:80:23:fd:a3:b4:10:b2:91:19:72:0f: fe:20:34:f6:7a:90:7a:82:89:0f:ad:c7:d5:09:cd:3c:62:22: c9:48:3b:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmgieQEGazWH9sUfIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDQyNDAxMDA0N1oXDTI1MDcyMzAxMDA0N1owLzEtMCsGA1UEAxMk NTk5MGI0Y2UtNTU0Zi00ZmU0LWFjMjMtN2FlNjhhMDU1NWMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzZ7Ugj/b5hcmjmu8aYEYbiEM9dhnfR1dkSE vrH2S0wKncVpc4KxmpG4N2YCD6R+yrTCuzA42vFZoQpeuRb5epi3fOrg8XUzXQkm VV+HyH1g9EelPXdEyBqX9xJM4hZ2ZWgx7TBgIzxDZfAV4OuZnRIskLiTOT1bRWXJ QdmB7TQZYvaokEQR3mlrGkAHG2ZGIl9HoFu6YYGDjTvqoBi7fRW1qje++WIS1W9I od3VCGW4zee5adLV8JBvJeeen8qTPfsUONWzwHXPgfTbAh67vdn/2CatsgIG6eKt xIThfbpfKqj6aWs30YOZguLFhBJjq3WNO7GF6rvuFUjP5XjJtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGfY8Qk1Vgf1rhVLH763nFLGn5/DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZTkzYWE2NWMtODMyNi0z M2VlLTllMWQtNTFjZWQ2MjMzODUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrtsYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKJ1OfRbObqTx5SUEBQUsNmAXloc7F4YHPuM4zr7FR18nD1rU9jhEtvX rKGTfP1tBDvJ4P/UXzTuVxscApHohauZ84MftSd38AgawQuOR1LLEU/Dlm3jT75E ZAJ2/sVlLynW0HnYJSicdJ2L70/OvNf/SsazCLJ9eWY/RrTRp4OiuLNcT4OXIRwm ubs/LbMsjV4jqACEwddzFXoqSUSrFq3LiQTrtWOT0BPhon6L9Crw5kD9q27I7A1X Q1wEm7NPovDPklJByD3oik+CrcheHc9c0ihWXJeZvEFSW6BtsViAI/2jtBCykRly D/4gNPZ6kHqCiQ+tx9UJzTxiIslIO90= -----END CERTIFICATE-----Generated at Sat Apr 26 22:58:21 2025 by rpki-client