$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1db18e44-b8da-3ee1-8e5c-41be390ccef1.roa File: 1db18e44-b8da-3ee1-8e5c-41be390ccef1.roa (raw, json) Hash identifier: m3mOkVP6KfLGrnJgiiZlhAovE95eTHndeD9rqr9Ii3o= Subject key identifier: 96:2B:A8:18:8C:3F:83:19:C8:82:E2:A6:A8:8E:01:18:0C:BB:C7:5F Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849A089F14CADE1F009229B9520 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1db18e44-b8da-3ee1-8e5c-41be390ccef1.roa Signing time: Thu 24 Apr 2025 01:00:47 +0000 ROA not before: Thu 24 Apr 2025 01:00:47 +0000 ROA not after: Wed 23 Jul 2025 01:00:47 +0000 asID: 6167 IP address blocks: 174.225.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a0:89:f1:4c:ad:e1:f0:09:22:9b:95:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 24 01:00:47 2025 GMT Not After : Jul 23 01:00:47 2025 GMT Subject: CN=072c3b25-81f2-4af1-9676-c55defc1e810 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:a5:f4:e2:b1:9d:37:bd:bf:14:ac:c0:0b:43: 58:cc:d4:f1:40:c4:d8:75:f9:2e:91:29:0d:59:96: 01:c0:6b:a0:d5:77:73:f9:ef:35:e3:49:55:9e:a8: 77:21:6b:cc:64:db:b2:7b:b7:f4:72:78:7c:f7:e6: 1d:d4:65:aa:bb:26:0e:e1:a5:0e:de:3f:fb:2a:73: d5:ee:f6:aa:33:84:22:d7:69:cf:bb:94:1e:d9:ea: 15:ef:4a:ea:dd:47:ea:f7:17:17:43:ec:d2:af:eb: 80:55:93:55:ef:91:29:82:e3:46:a8:87:53:d3:08: 73:a0:ed:1e:aa:12:0b:e1:02:48:8c:4e:d4:35:61: 91:0d:20:20:d4:35:23:c0:91:b2:04:43:76:98:11: 9b:2d:52:61:cf:e0:0b:ac:9e:5d:64:1e:e7:66:81: a3:d1:51:45:e9:61:5e:c4:2a:4e:4f:f3:ae:56:bc: b7:f1:ea:57:07:11:7b:e1:ca:31:4a:32:df:91:26: 1e:04:1b:f3:9f:a6:f7:84:2f:19:f8:dc:c8:b5:a3: d4:05:24:ff:0d:48:89:00:85:bf:3c:17:a6:38:56: 12:72:d0:bd:38:00:00:34:a8:e7:22:54:ea:05:37: 07:9c:75:31:96:01:f9:4b:6e:e3:45:f4:c3:1f:d8: c7:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:2B:A8:18:8C:3F:83:19:C8:82:E2:A6:A8:8E:01:18:0C:BB:C7:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1db18e44-b8da-3ee1-8e5c-41be390ccef1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.225.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:f1:4f:77:b5:8b:50:9d:f6:a7:97:14:e0:c5:ee:10:0f:2b: 0c:71:36:27:fc:e4:7b:19:d3:55:9f:9b:0c:08:9f:dd:af:c0: e1:f4:09:d6:31:38:c7:17:bf:53:7e:dc:2e:42:c2:8a:9c:8c: 71:41:34:b0:79:a3:a6:4a:6f:4c:6e:fa:a1:d2:f5:73:08:59: ee:e7:41:7a:5c:ed:8a:82:90:52:b9:fb:03:5f:53:22:e0:be: 1e:9f:e1:f4:27:70:a3:43:23:04:c2:ec:9a:df:9e:36:a9:f6: 7e:61:72:ab:55:2d:15:04:23:36:68:ff:6e:16:f9:e8:07:d0: 61:6e:d3:84:fb:9c:86:c2:a9:5c:95:66:78:05:c9:16:fe:7a: dd:9a:da:3e:f5:0b:4f:bf:71:af:63:f4:14:2f:f1:1b:ab:a9: 93:bf:05:71:0f:f6:55:bc:97:4e:d9:46:d3:79:ce:82:35:a3: 3b:2d:59:97:b2:86:28:d5:d6:69:91:d3:7c:a0:ed:2b:bf:0c: 24:3c:a4:14:41:c4:a6:bb:e9:39:34:67:67:b8:c1:51:ba:d1: 09:b3:44:c0:07:69:9b:c8:9c:37:64:36:6c:a9:95:d1:ed:61: 81:91:3a:ff:ac:02:81:88:1b:8f:2c:77:f6:c4:68:c1:31:86: fb:61:1d:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmgifFMreHwCSKblSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDQyNDAxMDA0N1oXDTI1MDcyMzAxMDA0N1owLzEtMCsGA1UEAxMk MDcyYzNiMjUtODFmMi00YWYxLTk2NzYtYzU1ZGVmYzFlODEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKX04rGdN72/FKzAC0NYzNTxQMTYdfkukSkN WZYBwGug1Xdz+e8140lVnqh3IWvMZNuye7f0cnh89+Yd1GWquyYO4aUO3j/7KnPV 7vaqM4Qi12nPu5Qe2eoV70rq3Ufq9xcXQ+zSr+uAVZNV75EpguNGqIdT0whzoO0e qhIL4QJIjE7UNWGRDSAg1DUjwJGyBEN2mBGbLVJhz+ALrJ5dZB7nZoGj0VFF6WFe xCpOT/OuVry38epXBxF74coxSjLfkSYeBBvzn6b3hC8Z+NzItaPUBST/DUiJAIW/ PBemOFYSctC9OAAANKjnIlTqBTcHnHUxlgH5S27jRfTDH9jHYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJYrqBiMP4MZyILipqiOARgMu8dfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMWRiMThlNDQtYjhkYS0z ZWUxLThlNWMtNDFiZTM5MGNjZWYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEruHAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGXxT3e1i1Cd9qeXFODF7hAPKwxxNif85HsZ01WfmwwIn92vwOH0CdYx OMcXv1N+3C5CwoqcjHFBNLB5o6ZKb0xu+qHS9XMIWe7nQXpc7YqCkFK5+wNfUyLg vh6f4fQncKNDIwTC7Jrfnjap9n5hcqtVLRUEIzZo/24W+egH0GFu04T7nIbCqVyV ZngFyRb+et2a2j71C0+/ca9j9BQv8RurqZO/BXEP9lW8l07ZRtN5zoI1ozstWZey hijV1mmR03yg7Su/DCQ8pBRBxKa76Tk0Z2e4wVG60QmzRMAHaZvInDdkNmypldHt YYGROv+sAoGIG48sd/bEaMExhvthHcQ= -----END CERTIFICATE-----Generated at Sun Apr 27 01:10:53 2025 by rpki-client