$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/250a66c8-6499-34b0-a1c3-8b91b067d95f.roa File: 250a66c8-6499-34b0-a1c3-8b91b067d95f.roa (raw, json) Hash identifier: nkXTkC7TAHcF1iu9f0UsPIiPWsLbVAapqy7rTDTVJpM= Subject key identifier: 6F:C7:2C:3E:21:F7:B3:BD:0F:7E:A5:62:02:AE:FB:8E:98:64:42:1D Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849A089D98C7AB4D6B740AFE0C0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/250a66c8-6499-34b0-a1c3-8b91b067d95f.roa Signing time: Thu 24 Apr 2025 01:00:47 +0000 ROA not before: Thu 24 Apr 2025 01:00:47 +0000 ROA not after: Wed 23 Jul 2025 01:00:47 +0000 asID: 6167 IP address blocks: 174.201.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a0:89:d9:8c:7a:b4:d6:b7:40:af:e0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 24 01:00:47 2025 GMT Not After : Jul 23 01:00:47 2025 GMT Subject: CN=4912b5f6-217c-44c1-aed7-2f6cee7e9619 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:66:fd:0b:5f:03:e4:f3:bf:ac:89:34:95:bd: c2:b5:2b:45:39:a9:34:29:cc:d0:7c:b0:a0:88:30: 7c:7d:c9:e6:aa:ce:20:93:34:ca:94:16:21:ff:3a: fa:b7:71:c4:fd:c7:b0:17:44:3f:f9:18:d7:f1:1e: 85:35:54:f0:02:e0:92:db:ca:24:c1:ff:34:26:9c: 1b:0e:f3:65:42:59:9c:35:8f:7d:b9:d9:66:11:1a: 90:bc:8b:80:20:39:a8:d6:43:9c:63:cd:17:d9:c4: ac:f5:f9:cd:ed:f4:eb:a5:6c:31:2d:07:48:b8:be: ae:b8:4c:1b:97:97:0c:73:55:33:92:b7:e5:5d:ce: 69:e7:03:e1:f4:34:39:a8:4d:01:ec:f1:9d:a5:e6: 1d:5c:ee:4a:87:77:75:53:c1:d3:77:03:f9:43:d3: 9c:86:5a:52:50:60:a7:49:a8:72:ed:32:9b:04:e5: 94:f4:ab:8d:d2:20:b1:94:d5:c5:0b:9e:d9:58:90: b0:e7:40:86:ae:7c:cf:3b:4b:d7:7a:c9:c0:13:0b: 65:bf:c5:62:90:31:22:71:3c:86:6e:0f:f5:6b:6f: 24:cb:b8:94:0e:e6:79:db:6c:7d:42:e0:00:a5:51: b3:fc:ea:e5:61:7d:03:c0:81:33:1b:98:e1:3b:29: 02:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:C7:2C:3E:21:F7:B3:BD:0F:7E:A5:62:02:AE:FB:8E:98:64:42:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/250a66c8-6499-34b0-a1c3-8b91b067d95f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.201.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:85:c3:00:51:b8:1a:a0:e1:c6:50:54:cf:37:fa:30:57:b4: 97:e5:90:6e:43:a3:f7:a7:9f:fd:b5:9c:e9:c3:79:11:7a:9a: 15:1e:e7:a5:ba:cd:e6:48:d8:7a:88:73:2d:32:ea:55:4a:23: 7c:dd:0a:4f:30:f6:d8:52:38:a3:b4:00:64:e2:8d:d6:ce:b2: 5b:42:82:75:88:6f:47:fd:07:f0:bd:0f:d8:cb:5b:63:70:74: fd:d2:da:a5:7d:02:ec:17:3f:d5:ac:7a:c3:b6:5e:af:09:1f: 5c:4e:51:3a:ea:5d:e9:ee:e2:de:95:98:8d:fa:d3:d2:a1:f8: 72:4a:1c:ba:a5:91:66:3b:a6:49:49:d9:0c:20:8e:25:e6:6e: 59:1f:de:f1:7a:bf:69:dd:9a:0e:db:1f:92:c6:25:d6:2a:36: 32:5b:75:22:32:4a:26:a2:5b:33:70:a5:5e:84:54:90:78:7a: 1b:f8:12:5b:3d:38:16:61:85:91:1c:49:f4:cf:45:17:7b:83: e4:ca:8f:a4:84:c4:da:0a:5a:71:18:9d:8a:da:be:3b:21:24: 59:26:da:37:cf:2f:12:51:a8:29:66:c1:bb:fd:68:30:36:81: 9b:d6:8c:e9:bb:7b:e1:56:ca:cf:31:c7:fa:f1:d6:03:ed:cb: 46:46:9b:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmgidmMerTWt0Cv4MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDQyNDAxMDA0N1oXDTI1MDcyMzAxMDA0N1owLzEtMCsGA1UEAxMk NDkxMmI1ZjYtMjE3Yy00NGMxLWFlZDctMmY2Y2VlN2U5NjE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgmb9C18D5PO/rIk0lb3CtStFOak0KczQfLCg iDB8fcnmqs4gkzTKlBYh/zr6t3HE/cewF0Q/+RjX8R6FNVTwAuCS28okwf80Jpwb DvNlQlmcNY99udlmERqQvIuAIDmo1kOcY80X2cSs9fnN7fTrpWwxLQdIuL6uuEwb l5cMc1UzkrflXc5p5wPh9DQ5qE0B7PGdpeYdXO5Kh3d1U8HTdwP5Q9OchlpSUGCn Sahy7TKbBOWU9KuN0iCxlNXFC57ZWJCw50CGrnzPO0vXesnAEwtlv8VikDEicTyG bg/1a28ky7iUDuZ522x9QuAApVGz/OrlYX0DwIEzG5jhOykC2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG/HLD4h97O9D36lYgKu+46YZEIdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMjUwYTY2YzgtNjQ5OS0z NGIwLWExYzMtOGI5MWIwNjdkOTVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErsnAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAuFwwBRuBqg4cZQVM83+jBXtJflkG5Do/enn/21nOnDeRF6mhUe56W6 zeZI2HqIcy0y6lVKI3zdCk8w9thSOKO0AGTijdbOsltCgnWIb0f9B/C9D9jLW2Nw dP3S2qV9AuwXP9WsesO2Xq8JH1xOUTrqXenu4t6VmI3609Kh+HJKHLqlkWY7pklJ 2QwgjiXmblkf3vF6v2ndmg7bH5LGJdYqNjJbdSIySiaiWzNwpV6EVJB4ehv4Els9 OBZhhZEcSfTPRRd7g+TKj6SExNoKWnEYnYravjshJFkm2jfPLxJRqClmwbv9aDA2 gZvWjOm7e+FWys8xx/rx1gPty0ZGm9c= -----END CERTIFICATE-----Generated at Sun Apr 27 10:09:47 2025 by rpki-client