$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f9b20a50-2689-37c9-9341-c1a3b6aff5be.roa File: f9b20a50-2689-37c9-9341-c1a3b6aff5be.roa (raw, json) Hash identifier: QptgXrRWX+AjXgBS+hRa9Ym8R/3ecefaSx1hc2Rd2oI= Subject key identifier: 88:2E:D1:C5:AA:E3:C8:26:CF:D1:41:90:BA:63:50:DC:09:7E:60:4F Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849A089ED3C64B1F98ED2C52800 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f9b20a50-2689-37c9-9341-c1a3b6aff5be.roa Signing time: Thu 24 Apr 2025 01:00:47 +0000 ROA not before: Thu 24 Apr 2025 01:00:47 +0000 ROA not after: Wed 23 Jul 2025 01:00:47 +0000 asID: 6167 IP address blocks: 174.212.244.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a0:89:ed:3c:64:b1:f9:8e:d2:c5:28:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 24 01:00:47 2025 GMT Not After : Jul 23 01:00:47 2025 GMT Subject: CN=b0d95679-a0d9-410c-bbf9-b9f618fc6144 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:40:b6:a2:aa:ca:9f:c2:14:e6:b9:1f:b7:7e: 29:aa:8c:bc:6f:2d:91:0e:87:f9:78:d7:83:d7:78: 98:b1:9b:05:95:ea:1d:ee:2f:1b:a4:40:5b:9f:da: 94:40:01:06:f0:d3:2b:7c:76:41:70:6f:18:03:0c: 23:b7:23:bd:3a:f5:85:8e:1a:db:73:de:32:6b:f8: 28:f5:f2:b9:db:5e:39:8d:48:1b:9c:7f:8c:25:50: ba:1c:77:86:4f:f8:fc:45:73:77:10:51:78:8e:32: cb:8e:54:77:be:c5:a7:be:0b:56:40:09:3f:b4:80: 38:a9:0d:95:c6:77:01:6d:f4:b7:0b:24:51:fd:aa: c8:4d:08:23:d2:5c:98:ac:6f:0f:6c:3f:9a:2f:df: 0f:fa:7b:80:d5:8e:d6:78:87:dc:2b:fe:70:b6:0a: 21:dd:bc:19:21:0a:aa:7c:34:7b:ed:cb:66:ac:67: b9:b9:70:4f:cc:3c:8a:66:62:d4:19:a3:d6:0c:fa: 61:ec:b3:8b:11:bf:dc:95:5d:6d:05:a5:c5:21:77: 40:06:a7:dd:fa:3f:e6:7f:c7:6a:57:3e:1f:8f:92: ad:8b:31:b2:f5:d7:a4:fe:d3:ad:75:e9:29:66:3a: f2:1a:ec:d8:ae:12:b0:b4:e3:97:ed:c6:66:53:87: 67:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:2E:D1:C5:AA:E3:C8:26:CF:D1:41:90:BA:63:50:DC:09:7E:60:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f9b20a50-2689-37c9-9341-c1a3b6aff5be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.212.244.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:34:f6:6d:c2:2c:ba:57:df:ae:44:6c:63:d0:2d:5b:4a:f2: c8:e1:95:f7:27:3e:62:6e:76:d2:d8:c5:7f:51:e6:82:62:ff: 36:31:af:ee:e5:51:aa:c1:bc:d9:d8:b5:ca:4b:b8:49:0f:4f: 4a:82:66:fa:1f:46:4e:ba:8d:47:bf:b0:98:b2:46:68:9d:39: e6:88:9b:18:56:ed:e2:11:58:b1:e4:99:8a:c3:39:25:78:a2: d5:7b:ed:21:6b:ad:6a:f3:0d:4d:4e:d7:0e:7f:83:8d:9e:5d: 1b:8d:67:50:f3:26:0e:28:fa:ed:79:98:e6:12:b9:f7:27:55: 24:e6:95:6d:e8:1c:56:e0:4f:9b:3a:67:cf:b0:1e:14:d5:c6: a7:8c:2b:1e:0f:9c:3c:ed:5d:98:e5:10:6f:92:38:8e:3e:1f: 7f:22:14:ec:45:97:42:a0:12:21:71:2d:0f:5c:7a:23:4b:0a: ca:87:e1:c2:f0:41:18:5c:28:d5:17:4f:a1:47:c3:c2:88:64: 6b:9c:6d:dd:51:15:10:73:a7:f6:6b:d0:5e:50:b1:4a:3f:7e: 1c:06:0e:37:21:6c:88:dc:01:37:35:0e:0f:4f:47:7e:9c:3f: 12:ed:ba:36:16:33:65:7c:77:68:57:a0:38:e4:62:72:8a:13: ed:f6:2b:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmgie08ZLH5jtLFKAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDQyNDAxMDA0N1oXDTI1MDcyMzAxMDA0N1owLzEtMCsGA1UEAxMk YjBkOTU2NzktYTBkOS00MTBjLWJiZjktYjlmNjE4ZmM2MTQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUC2oqrKn8IU5rkft34pqoy8by2RDof5eNeD 13iYsZsFleod7i8bpEBbn9qUQAEG8NMrfHZBcG8YAwwjtyO9OvWFjhrbc94ya/go 9fK52145jUgbnH+MJVC6HHeGT/j8RXN3EFF4jjLLjlR3vsWnvgtWQAk/tIA4qQ2V xncBbfS3CyRR/arITQgj0lyYrG8PbD+aL98P+nuA1Y7WeIfcK/5wtgoh3bwZIQqq fDR77ctmrGe5uXBPzDyKZmLUGaPWDPph7LOLEb/clV1tBaXFIXdABqfd+j/mf8dq Vz4fj5KtizGy9dek/tOtdekpZjryGuzYrhKwtOOX7cZmU4dnqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIgu0cWq48gmz9FBkLpjUNwJfmBPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZjliMjBhNTAtMjY4OS0z N2M5LTkzNDEtYzFhM2I2YWZmNWJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrtT0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKI09m3CLLpX365EbGPQLVtK8sjhlfcnPmJudtLYxX9R5oJi/zYxr+7l UarBvNnYtcpLuEkPT0qCZvofRk66jUe/sJiyRmidOeaImxhW7eIRWLHkmYrDOSV4 otV77SFrrWrzDU1O1w5/g42eXRuNZ1DzJg4o+u15mOYSufcnVSTmlW3oHFbgT5s6 Z8+wHhTVxqeMKx4PnDztXZjlEG+SOI4+H38iFOxFl0KgEiFxLQ9ceiNLCsqH4cLw QRhcKNUXT6FHw8KIZGucbd1RFRBzp/Zr0F5QsUo/fhwGDjchbIjcATc1Dg9PR36c PxLtujYWM2V8d2hXoDjkYnKKE+32K/A= -----END CERTIFICATE-----Generated at Sun Apr 27 04:15:50 2025 by rpki-client