$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/11d8a3d0-98c1-37fd-b666-6e0af3b228e6.roa File: 11d8a3d0-98c1-37fd-b666-6e0af3b228e6.roa (raw, json) Hash identifier: 4+wiurF9TQ5i8E8BM2S9g3DE5tK+D5pR/b0IHOBy0yg= Subject key identifier: 2C:A3:B9:B3:C7:62:A0:3E:01:A6:D6:A1:31:AB:4A:53:A9:76:7E:BF Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849A61F3518CDA88CB1B4B63040 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/11d8a3d0-98c1-37fd-b666-6e0af3b228e6.roa Signing time: Sat 26 Apr 2025 01:00:47 +0000 ROA not before: Sat 26 Apr 2025 01:00:47 +0000 ROA not after: Fri 25 Jul 2025 01:00:47 +0000 asID: 6167 IP address blocks: 174.220.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a6:1f:35:18:cd:a8:8c:b1:b4:b6:30:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 26 01:00:47 2025 GMT Not After : Jul 25 01:00:47 2025 GMT Subject: CN=2cce2198-40b8-4872-8423-aa73ad2a3e6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:9a:3f:ed:e7:7d:4f:e3:17:da:08:ad:a9:24: 14:fb:ed:67:c9:9c:cb:88:f5:ec:af:68:ef:ae:e4: 06:36:fa:dc:62:0e:73:38:0d:04:b0:df:06:d1:13: ba:66:0b:97:23:13:0e:cc:3b:39:dd:77:d3:f5:13: 26:3a:3c:3a:a2:13:df:55:d3:cf:3f:24:c0:53:04: 97:bf:f0:44:02:71:54:c2:68:2d:ca:e3:4c:d2:53: 64:80:1e:32:16:04:aa:7e:ea:61:10:bb:b0:e3:e2: e0:e8:08:41:70:8b:49:23:5c:f0:a1:0e:be:74:e7: 41:40:55:72:8f:4c:ea:7d:26:48:be:b1:09:a6:7f: 70:63:b5:5f:66:dd:e6:a0:be:45:57:12:6d:87:92: fe:ab:94:cf:ea:f4:76:72:0d:70:5a:72:b2:bb:da: 30:10:b7:65:33:b1:1e:12:3f:9a:5e:93:38:6f:9b: 6a:d0:09:2a:36:d4:19:9b:bf:e7:4a:05:1c:fc:b4: 7d:2e:86:fe:c9:35:15:c3:62:91:ec:7d:4b:dc:08: f9:40:16:14:da:8d:0b:22:5d:56:b6:10:6b:df:d7: 90:d6:d1:46:c4:b1:a5:6c:6c:28:9e:01:4b:b6:03: 7f:f8:92:70:a8:2e:65:e3:f6:00:dd:fb:32:64:f2: 38:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:A3:B9:B3:C7:62:A0:3E:01:A6:D6:A1:31:AB:4A:53:A9:76:7E:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/11d8a3d0-98c1-37fd-b666-6e0af3b228e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.220.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:cc:d9:a4:ac:bd:b5:79:5f:85:b3:e3:c1:69:f1:3a:e8:d1: e5:d4:56:a2:b3:2a:a0:53:fd:d6:bb:29:63:22:71:f7:3f:67: 9f:be:3b:58:92:3f:52:a7:74:57:9e:00:75:d2:75:ee:8b:95: 27:f1:f0:a3:6f:68:f2:f6:2b:83:3a:f0:b0:c2:0e:38:8e:c3: c7:82:70:2e:b7:f8:5e:49:1c:de:64:13:ff:79:7f:e8:be:11: 40:8a:9a:7c:34:b1:58:bb:e7:3f:fd:4f:2f:ad:eb:bc:d2:8b: 8c:51:70:5c:8e:00:e9:66:92:b8:24:ca:87:50:04:e8:ca:d0: 65:ef:61:8e:5a:03:61:82:2b:fb:1b:4d:2b:85:b6:aa:53:5d: 39:e5:78:60:69:8e:1c:5b:da:17:ce:12:8b:ed:33:7d:e9:e3: ba:5c:ab:5f:0f:31:4c:bd:64:67:f5:8a:79:92:3e:96:b0:fb: 45:65:2b:5b:27:0a:7d:4f:27:a8:51:92:28:6c:9c:8b:dc:bc: fa:85:45:cf:4d:a8:b3:1d:fe:ba:9d:ba:1d:11:a7:5d:ec:55: 54:c5:0b:e9:31:81:d4:74:75:f8:bc:a2:0a:5b:83:e4:8f:bb: a9:88:3e:fd:d8:06:38:b3:ff:c3:c5:f4:88:ec:4d:e3:51:d3: 66:ae:1d:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmmHzUYzaiMsbS2MEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDQyNjAxMDA0N1oXDTI1MDcyNTAxMDA0N1owLzEtMCsGA1UEAxMk MmNjZTIxOTgtNDBiOC00ODcyLTg0MjMtYWE3M2FkMmEzZTZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJo/7ed9T+MX2gitqSQU++1nyZzLiPXsr2jv ruQGNvrcYg5zOA0EsN8G0RO6ZguXIxMOzDs53XfT9RMmOjw6ohPfVdPPPyTAUwSX v/BEAnFUwmgtyuNM0lNkgB4yFgSqfuphELuw4+Lg6AhBcItJI1zwoQ6+dOdBQFVy j0zqfSZIvrEJpn9wY7VfZt3moL5FVxJth5L+q5TP6vR2cg1wWnKyu9owELdlM7Ee Ej+aXpM4b5tq0AkqNtQZm7/nSgUc/LR9Lob+yTUVw2KR7H1L3Aj5QBYU2o0LIl1W thBr39eQ1tFGxLGlbGwongFLtgN/+JJwqC5l4/YA3fsyZPI4FwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCyjubPHYqA+AabWoTGrSlOpdn6/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMTFkOGEzZDAtOThjMS0z N2ZkLWI2NjYtNmUwYWYzYjIyOGU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErtyAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIvM2aSsvbV5X4Wz48Fp8Tro0eXUVqKzKqBT/da7KWMicfc/Z5++O1iS P1KndFeeAHXSde6LlSfx8KNvaPL2K4M68LDCDjiOw8eCcC63+F5JHN5kE/95f+i+ EUCKmnw0sVi75z/9Ty+t67zSi4xRcFyOAOlmkrgkyodQBOjK0GXvYY5aA2GCK/sb TSuFtqpTXTnleGBpjhxb2hfOEovtM33p47pcq18PMUy9ZGf1inmSPpaw+0VlK1sn Cn1PJ6hRkihsnIvcvPqFRc9NqLMd/rqduh0Rp13sVVTFC+kxgdR0dfi8ogpbg+SP u6mIPv3YBjiz/8PF9IjsTeNR02auHas= -----END CERTIFICATE-----Generated at Sat Apr 26 22:51:23 2025 by rpki-client