$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/28e3673e-8e4e-3e90-801e-9d613896501e.roa File: 28e3673e-8e4e-3e90-801e-9d613896501e.roa (raw, json) Hash identifier: QMZxKX7lHgPX6FFFC6ID5awRUwuroRkFeE9AINRSrjw= Subject key identifier: 10:3B:5D:A2:A1:82:2D:14:5B:6B:94:3D:46:5D:21:84:27:ED:17:E7 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849A61F354B3F4372364A960200 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/28e3673e-8e4e-3e90-801e-9d613896501e.roa Signing time: Sat 26 Apr 2025 01:00:47 +0000 ROA not before: Sat 26 Apr 2025 01:00:47 +0000 ROA not after: Fri 25 Jul 2025 01:00:47 +0000 asID: 6167 IP address blocks: 174.220.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a6:1f:35:4b:3f:43:72:36:4a:96:02:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 26 01:00:47 2025 GMT Not After : Jul 25 01:00:47 2025 GMT Subject: CN=c2eef0c1-7adb-4531-afc6-7e198db58874 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:d0:e1:10:5c:84:16:db:34:0a:9f:b2:a8:ba: a8:ca:0a:da:6a:86:d5:8f:1c:48:6d:ba:01:a3:40: 7b:f0:cd:cd:04:fd:41:44:e4:fc:f5:0e:2f:56:aa: 24:29:1e:7d:a4:1b:24:3e:61:58:b3:5a:4d:14:f7: 24:63:a8:87:45:fd:9a:06:05:2c:8c:cc:d7:a9:fc: 4d:3e:80:61:fe:49:41:6a:c0:4b:bf:2e:b5:50:9e: e7:fd:39:2a:44:f3:95:c2:0f:39:e6:de:54:4a:42: 5b:94:38:40:ab:70:36:b1:14:9a:34:09:2b:d4:a8: d3:fc:e1:2c:e3:8a:53:cd:33:03:84:f8:fd:ba:d4: 7a:a4:63:94:64:c1:a5:92:c2:f2:74:96:1a:a3:6d: 6b:97:eb:8d:b6:df:9a:d0:19:b3:a2:f5:db:5c:fe: 5f:6b:f0:9d:56:d0:91:0b:06:fd:21:91:e4:bc:be: b7:b4:f7:75:80:56:7f:af:06:44:0b:bd:8a:dc:83: cb:02:52:62:3c:7b:d0:8e:9f:66:8d:37:09:fb:e5: ce:d6:ec:a1:10:70:7f:14:55:0b:69:eb:04:7e:0a: 6f:69:06:05:cf:22:98:dc:5c:17:20:c3:7a:28:1c: 86:ca:f3:25:17:d8:fb:53:04:db:89:ce:21:45:9b: 5f:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:3B:5D:A2:A1:82:2D:14:5B:6B:94:3D:46:5D:21:84:27:ED:17:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/28e3673e-8e4e-3e90-801e-9d613896501e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.220.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:c4:44:3a:ee:5d:6c:95:57:39:1b:11:da:2d:53:32:b4:27: d4:52:7c:00:21:a8:d3:d2:8e:cf:28:31:d2:b5:06:2d:57:13: 6e:0c:e0:70:b7:43:8f:9d:69:77:f6:0d:33:d8:e3:6f:3f:43: ac:91:31:e8:a0:48:58:04:44:59:8e:ee:30:f8:db:3f:5d:97: c5:a6:7a:03:72:2e:35:40:4c:c8:ff:bb:c1:ba:cc:8b:1e:5b: 16:c1:b9:8a:53:72:00:0b:ec:58:c1:4d:0c:7a:bd:04:ce:bb: 6e:75:0e:27:f7:62:74:b9:11:c3:e9:b9:59:c7:80:2f:cb:c6: 75:0e:75:e1:1a:bb:23:d5:45:08:91:80:82:35:68:9b:62:db: 3e:4b:e9:4e:14:82:ed:e2:0e:9c:59:4e:f9:e7:54:68:84:0d: 42:60:0b:1e:de:30:60:23:7c:f1:3a:bb:a3:fc:f2:4f:56:a3: 1e:1d:30:51:11:67:1d:4e:2c:5a:de:54:90:ea:3c:9e:43:4e: 83:6b:6e:40:fc:96:39:41:45:fa:b9:a4:b3:63:63:a1:34:6f: 54:6a:26:fb:48:fd:16:6f:c2:62:e8:18:31:b7:78:e0:d0:82: 82:44:b8:80:b3:b9:56:71:b6:81:fb:d7:6d:08:44:83:3b:4f: c3:37:cf:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmmHzVLP0NyNkqWAgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDQyNjAxMDA0N1oXDTI1MDcyNTAxMDA0N1owLzEtMCsGA1UEAxMk YzJlZWYwYzEtN2FkYi00NTMxLWFmYzYtN2UxOThkYjU4ODc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzdDhEFyEFts0Cp+yqLqoygraaobVjxxIbboB o0B78M3NBP1BROT89Q4vVqokKR59pBskPmFYs1pNFPckY6iHRf2aBgUsjMzXqfxN PoBh/klBasBLvy61UJ7n/TkqRPOVwg855t5USkJblDhAq3A2sRSaNAkr1KjT/OEs 44pTzTMDhPj9utR6pGOUZMGlksLydJYao21rl+uNtt+a0BmzovXbXP5fa/CdVtCR Cwb9IZHkvL63tPd1gFZ/rwZEC72K3IPLAlJiPHvQjp9mjTcJ++XO1uyhEHB/FFUL aesEfgpvaQYFzyKY3FwXIMN6KByGyvMlF9j7UwTbic4hRZtfVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBA7XaKhgi0UW2uUPUZdIYQn7RfnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMjhlMzY3M2UtOGU0ZS0z ZTkwLTgwMWUtOWQ2MTM4OTY1MDFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErtywMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABHERDruXWyVVzkbEdotUzK0J9RSfAAhqNPSjs8oMdK1Bi1XE24M4HC3 Q4+daXf2DTPY428/Q6yRMeigSFgERFmO7jD42z9dl8WmegNyLjVATMj/u8G6zIse WxbBuYpTcgAL7FjBTQx6vQTOu251Dif3YnS5EcPpuVnHgC/LxnUOdeEauyPVRQiR gII1aJti2z5L6U4Ugu3iDpxZTvnnVGiEDUJgCx7eMGAjfPE6u6P88k9Wox4dMFER Zx1OLFreVJDqPJ5DToNrbkD8ljlBRfq5pLNjY6E0b1RqJvtI/RZvwmLoGDG3eODQ goJEuICzuVZxtoH7120IRIM7T8M3z/4= -----END CERTIFICATE-----Generated at Sun Apr 27 05:48:54 2025 by rpki-client