$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2a186ece-960b-3ead-8c29-f3d5e62ef236.roa File: 2a186ece-960b-3ead-8c29-f3d5e62ef236.roa (raw, json) Hash identifier: mXRPP+LH4xC/SQz/Hg/V6C5t79knxpjZt2yBdu0yIFI= Subject key identifier: 33:B8:4D:F7:3B:6A:3D:E2:D5:AE:6D:ED:48:46:9B:93:31:CD:C3:57 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849898669A557E9F9F77EEE9980 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2a186ece-960b-3ead-8c29-f3d5e62ef236.roa Signing time: Tue 15 Apr 2025 19:10:24 +0000 ROA not before: Tue 15 Apr 2025 19:10:24 +0000 ROA not after: Mon 14 Jul 2025 19:10:24 +0000 asID: 17119 IP address blocks: 207.239.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:89:86:69:a5:57:e9:f9:f7:7e:ee:99:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 15 19:10:24 2025 GMT Not After : Jul 14 19:10:24 2025 GMT Subject: CN=7e441b4b-929f-45cd-9c06-01e6026eb347 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:9f:39:63:5d:5b:9a:5b:62:31:66:55:3b:1a: 63:d7:44:74:d6:f6:2f:85:fb:03:3e:4b:56:c8:45: 43:b5:9e:9d:90:c1:4e:65:d4:c0:41:1a:59:97:dd: 2e:23:8b:ef:e9:22:92:23:3a:03:b4:ed:a0:4d:5c: 95:a4:45:8c:a4:69:97:8b:68:56:26:e6:e8:35:36: d2:d7:94:17:fd:5a:f8:61:a6:c0:02:32:21:45:60: a0:9a:bb:f4:37:9c:33:0e:1a:66:77:cf:0c:fa:33: 44:dd:f1:21:79:32:f4:16:02:c2:d1:20:8c:90:21: 58:34:1c:83:72:ba:64:ec:b9:1e:6e:2e:3c:5d:d6: d0:7d:b3:f6:eb:12:f4:bc:e6:fe:c3:69:8f:71:44: 2f:ae:81:94:70:a4:b6:c0:d3:c1:95:03:bc:41:fe: b4:6b:c5:05:de:15:9d:9e:9d:90:fa:09:f3:9f:a3: f7:f9:82:a7:b8:06:6f:5a:db:cb:f5:83:a5:74:d0: dd:ad:04:ad:6e:38:d6:2a:7f:68:f3:60:fc:91:5b: 67:58:2f:f0:a4:1b:dd:96:18:25:9f:5f:9d:db:48: 73:10:95:b3:21:e9:f8:3c:0c:82:3d:81:b3:a5:26: 5e:c7:c9:18:d7:c4:8b:fe:f6:36:07:11:ee:f9:84: 0a:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:B8:4D:F7:3B:6A:3D:E2:D5:AE:6D:ED:48:46:9B:93:31:CD:C3:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2a186ece-960b-3ead-8c29-f3d5e62ef236.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 207.239.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:a1:20:fb:54:24:76:84:8f:2e:5f:1c:a9:1b:b2:dd:57:8d: 11:1e:af:b2:71:0d:49:16:b4:5c:a1:8d:e9:28:4a:b0:32:bb: c7:66:d7:1b:ef:cb:c0:d8:05:51:88:46:a2:63:13:fd:77:4c: 03:d6:fe:96:81:88:b8:6a:0b:42:cf:38:a4:db:de:26:ad:f5: e8:1e:5b:1d:49:cc:53:88:a9:94:cd:1d:f9:44:a3:72:2e:bd: 1c:9e:91:71:68:ab:e5:6f:94:c8:01:6d:6a:23:e3:0b:67:84: 29:4d:bd:ae:85:e9:0a:fb:06:90:3a:f0:ba:58:68:e3:02:ee: 8e:5a:6a:2b:39:1c:96:31:d1:f2:dc:54:8a:c9:96:9e:69:d6: 5e:32:e5:2e:7c:eb:19:7f:b2:33:9d:ce:3a:16:05:de:16:da: b4:7f:2f:8c:c6:b0:a5:cf:14:4c:0c:9d:f9:fd:5f:df:30:f4: ef:dc:95:2d:82:a8:70:cd:12:a3:3d:73:f1:ef:0f:85:7a:9a: 1f:d9:d6:bd:0c:c9:f0:ab:c4:77:f5:70:03:3b:cb:56:85:10: 5e:ad:82:67:46:1c:8e:a2:0f:bd:0c:15:3d:4e:05:e2:94:81: 6a:bd:eb:29:63:86:0f:94:91:29:d2:26:21:03:34:4e:e6:35: 5f:a2:9e:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmJhmmlV+n5937umYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDQxNTE5MTAyNFoXDTI1MDcxNDE5MTAyNFowLzEtMCsGA1UEAxMk N2U0NDFiNGItOTI5Zi00NWNkLTljMDYtMDFlNjAyNmViMzQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJ85Y11bmltiMWZVOxpj10R01vYvhfsDPktW yEVDtZ6dkMFOZdTAQRpZl90uI4vv6SKSIzoDtO2gTVyVpEWMpGmXi2hWJuboNTbS 15QX/Vr4YabAAjIhRWCgmrv0N5wzDhpmd88M+jNE3fEheTL0FgLC0SCMkCFYNByD crpk7Lkebi48XdbQfbP26xL0vOb+w2mPcUQvroGUcKS2wNPBlQO8Qf60a8UF3hWd np2Q+gnzn6P3+YKnuAZvWtvL9YOldNDdrQStbjjWKn9o82D8kVtnWC/wpBvdlhgl n1+d20hzEJWzIen4PAyCPYGzpSZex8kY18SL/vY2BxHu+YQKqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDO4Tfc7aj3i1a5t7UhGm5MxzcNXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMmExODZlY2UtOTYwYi0z ZWFkLThjMjktZjNkNWU2MmVmMjM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCz+/cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIahIPtUJHaEjy5fHKkbst1XjREer7JxDUkWtFyhjekoSrAyu8dm1xvv y8DYBVGIRqJjE/13TAPW/paBiLhqC0LPOKTb3iat9egeWx1JzFOIqZTNHflEo3Iu vRyekXFoq+VvlMgBbWoj4wtnhClNva6F6Qr7BpA68LpYaOMC7o5aais5HJYx0fLc VIrJlp5p1l4y5S586xl/sjOdzjoWBd4W2rR/L4zGsKXPFEwMnfn9X98w9O/clS2C qHDNEqM9c/HvD4V6mh/Z1r0MyfCrxHf1cAM7y1aFEF6tgmdGHI6iD70MFT1OBeKU gWq96yljhg+UkSnSJiEDNE7mNV+iniQ= -----END CERTIFICATE-----Generated at Sun Apr 27 00:24:03 2025 by rpki-client