$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/09a61202-fbba-3758-a40e-78d5458e91b0.roa File: 09a61202-fbba-3758-a40e-78d5458e91b0.roa (raw, json) Hash identifier: 52J84+eQ5e6wk5iLgBgFYAGcjFVrJ74adw7vPFWIZkw= Subject key identifier: 32:4D:E3:86:44:43:1F:F2:98:A4:F3:E0:C3:AB:6A:17:C7:3B:B1:AA Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849A089E34DF93C0E4F3DF59B80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/09a61202-fbba-3758-a40e-78d5458e91b0.roa Signing time: Thu 24 Apr 2025 01:00:47 +0000 ROA not before: Thu 24 Apr 2025 01:00:47 +0000 ROA not after: Wed 23 Jul 2025 01:00:47 +0000 asID: 6167 IP address blocks: 174.218.200.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a0:89:e3:4d:f9:3c:0e:4f:3d:f5:9b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 24 01:00:47 2025 GMT Not After : Jul 23 01:00:47 2025 GMT Subject: CN=dc6a4e76-049a-4db1-a680-b5a8e8348514 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:b5:b5:95:c0:53:b5:7a:bb:25:53:98:83:4b: d2:a9:3e:d2:56:5b:ea:1d:84:cf:27:7b:19:ac:46: 26:05:b9:5b:13:51:a9:b5:6c:95:4c:d5:39:42:c7: 26:c3:a0:2d:58:7e:dd:1c:e7:07:54:c8:f8:03:11: eb:04:f5:97:ae:6a:ce:22:34:ee:0c:e0:04:85:6f: 8d:c1:53:5d:0e:b8:c1:82:a1:d3:b1:3c:2a:22:f3: 37:e5:4a:7e:e2:52:5d:7a:38:ac:a7:91:56:c6:3d: cc:d3:2c:a9:e3:9d:48:60:7d:9e:34:58:9d:57:b0: 16:3a:90:6c:6e:22:e2:e0:db:c4:d5:61:68:93:f8: 10:b0:f6:cc:55:b8:4e:c2:dd:36:5e:e7:8f:0f:ea: 75:1f:0d:5e:b7:18:d2:6c:70:0d:97:84:f6:45:c6: 60:2a:17:19:da:96:a3:84:90:98:c8:19:ce:1d:28: bf:c4:35:cc:ed:06:5b:e5:b0:ce:b6:4d:7b:fb:1a: 5a:b5:46:47:1a:7c:f9:90:ae:80:3d:41:3d:6c:ff: 27:38:24:de:cc:2c:87:82:f8:0c:a9:50:c7:3b:fa: b4:87:77:56:38:e0:5f:4f:db:fe:28:d5:1b:b4:d2: 72:cd:2e:54:71:1d:ff:a1:75:f3:4e:59:d2:38:83: 4c:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:4D:E3:86:44:43:1F:F2:98:A4:F3:E0:C3:AB:6A:17:C7:3B:B1:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/09a61202-fbba-3758-a40e-78d5458e91b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.218.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:c9:83:5c:fb:fa:b9:de:1f:c6:6b:86:22:1b:13:7d:f9:8a: 9e:d3:6c:4c:fc:cc:1a:53:32:d5:77:5a:7a:d3:d2:57:de:fd: d2:f2:71:be:3c:75:48:d6:d6:6c:68:51:70:dd:1c:56:4b:97: 07:7e:0e:19:75:6d:82:37:e9:ca:58:6f:ea:6c:5d:6d:8a:55: 90:37:a9:5a:4d:90:04:c1:30:3b:7a:50:13:20:af:f1:41:6c: ef:5c:df:ca:aa:10:26:3a:42:c4:fd:0c:19:bb:c1:8b:bc:8e: cb:ff:e9:8e:07:0c:f8:91:d8:bf:8a:27:ac:cf:07:fd:71:ff: 3a:94:e9:56:d7:ea:61:8c:bc:19:93:f0:9a:4f:f1:9b:ea:7a: 49:07:ad:3a:83:90:16:c1:4f:56:e6:a6:73:52:03:c6:96:b9: d8:f8:7c:29:58:cf:01:c1:43:44:dc:8c:ac:8c:56:af:0e:c7: 4f:7c:e1:f0:c6:d5:95:d0:01:58:e9:f1:5b:ee:2f:06:7d:83: f8:81:29:cf:50:b8:8c:d4:db:41:c5:b4:23:22:2f:97:f8:4e: 2e:ac:73:f9:4b:12:a4:0c:b5:c5:db:15:ec:f8:2a:82:e1:fb: 9b:a6:9f:8f:be:82:a0:bd:18:6a:c5:1a:b6:9f:03:07:b4:76: d7:7b:0b:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmgieNN+TwOTz31m4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDQyNDAxMDA0N1oXDTI1MDcyMzAxMDA0N1owLzEtMCsGA1UEAxMk ZGM2YTRlNzYtMDQ5YS00ZGIxLWE2ODAtYjVhOGU4MzQ4NTE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLW1lcBTtXq7JVOYg0vSqT7SVlvqHYTPJ3sZ rEYmBblbE1GptWyVTNU5Qscmw6AtWH7dHOcHVMj4AxHrBPWXrmrOIjTuDOAEhW+N wVNdDrjBgqHTsTwqIvM35Up+4lJdejisp5FWxj3M0yyp451IYH2eNFidV7AWOpBs biLi4NvE1WFok/gQsPbMVbhOwt02XuePD+p1Hw1etxjSbHANl4T2RcZgKhcZ2paj hJCYyBnOHSi/xDXM7QZb5bDOtk17+xpatUZHGnz5kK6APUE9bP8nOCTezCyHgvgM qVDHO/q0h3dWOOBfT9v+KNUbtNJyzS5UcR3/oXXzTlnSOINMVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDJN44ZEQx/ymKTz4MOrahfHO7GqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMDlhNjEyMDItZmJiYS0z NzU4LWE0MGUtNzhkNTQ1OGU5MWIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrtrIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG3Jg1z7+rneH8ZrhiIbE335ip7TbEz8zBpTMtV3WnrT0lfe/dLycb48 dUjW1mxoUXDdHFZLlwd+Dhl1bYI36cpYb+psXW2KVZA3qVpNkATBMDt6UBMgr/FB bO9c38qqECY6QsT9DBm7wYu8jsv/6Y4HDPiR2L+KJ6zPB/1x/zqU6VbX6mGMvBmT 8JpP8ZvqekkHrTqDkBbBT1bmpnNSA8aWudj4fClYzwHBQ0TcjKyMVq8Ox0984fDG 1ZXQAVjp8VvuLwZ9g/iBKc9QuIzU20HFtCMiL5f4Ti6sc/lLEqQMtcXbFez4KoLh +5umn4++gqC9GGrFGrafAwe0dtd7C5Y= -----END CERTIFICATE-----Generated at Sun Apr 27 16:26:57 2025 by rpki-client