$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/46a03c45-042b-359b-b917-cb6607638f1b.roa File: 46a03c45-042b-359b-b917-cb6607638f1b.roa (raw, json) Hash identifier: Z9dPOchBop10pH/tKI+fgTDKHlUbVaQOc/C2x8Ox8+Y= Subject key identifier: 42:42:66:87:5F:41:8E:DA:72:30:7D:4F:5F:7C:E3:6A:E9:BC:70:B9 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849A089D8A3F4A044680AAEDB00 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/46a03c45-042b-359b-b917-cb6607638f1b.roa Signing time: Thu 24 Apr 2025 01:00:47 +0000 ROA not before: Thu 24 Apr 2025 01:00:47 +0000 ROA not after: Wed 23 Jul 2025 01:00:47 +0000 asID: 6167 IP address blocks: 174.200.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a0:89:d8:a3:f4:a0:44:68:0a:ae:db:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 24 01:00:47 2025 GMT Not After : Jul 23 01:00:47 2025 GMT Subject: CN=0f4fe1e4-b406-4435-bfa4-01d924918763 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:8d:05:ba:2b:ab:00:a2:00:7a:8c:81:09:d1: 5d:f5:12:b5:7b:38:5e:67:f4:76:b2:7e:70:3a:70: 3d:a5:5f:e5:b3:55:0a:c8:10:75:9f:2a:a0:20:d5: 59:89:93:7b:a0:68:ad:cb:6f:15:07:bf:66:7f:28: 82:53:59:6d:32:d6:44:6f:20:90:4a:8a:68:10:7b: d1:8a:f8:ca:b2:a1:e1:0c:ff:d0:23:1f:b0:37:97: 2f:fe:1c:bc:5c:65:a8:2d:ae:e6:62:70:2a:7e:dc: c7:6b:79:71:b1:db:88:d0:25:14:c7:4f:d4:1d:56: 6d:8f:aa:50:c2:d4:60:bb:44:6d:98:63:09:b6:22: 7b:89:3b:d1:82:b7:79:fb:40:5f:07:69:49:12:58: 6a:4f:93:2a:1c:2a:3e:7a:a5:35:d1:c4:4b:25:90: ca:f5:38:eb:8c:0e:c9:ca:c8:b7:38:10:85:c1:95: a3:64:ab:57:c9:b2:62:8a:e9:74:26:f9:16:62:fa: 9a:1d:91:3a:96:f9:d3:de:2a:83:dd:56:b4:5f:69: af:52:3d:11:85:5e:a6:c6:c7:9d:f4:d2:da:30:cd: ab:98:fd:91:02:cf:1e:c8:19:3a:75:32:41:0b:27: b7:6c:8a:ca:e3:f0:e8:14:21:76:75:9a:c8:a8:97: 79:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:42:66:87:5F:41:8E:DA:72:30:7D:4F:5F:7C:E3:6A:E9:BC:70:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/46a03c45-042b-359b-b917-cb6607638f1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.200.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:20:36:43:b0:47:59:50:42:22:bd:21:f4:82:f8:ee:f4:15: 41:9f:b2:0a:12:08:40:5f:2b:cf:94:f5:e4:12:89:15:1f:4c: 93:da:7b:7e:de:be:36:7a:eb:3c:a1:22:fd:74:0d:eb:f2:b9: 2d:28:e2:8d:04:30:e5:94:7e:74:21:8e:89:22:ff:b2:72:57: 0e:50:40:40:ac:9f:ac:7f:32:a5:b2:41:8d:c6:0d:95:57:f4: 6a:2f:62:ca:fb:86:9a:80:a2:cc:3a:b9:fc:4c:42:28:a5:b5: b5:f7:39:44:46:32:a4:28:ba:2b:58:ea:61:fe:59:a6:68:2d: 06:b6:4b:66:50:24:b2:45:8f:26:3c:96:2e:fc:b6:de:4c:03: 97:00:a8:65:0c:f3:32:c6:7f:d4:b7:bc:d0:21:8e:b1:f3:7f: 08:f1:f2:54:37:bb:ae:be:65:da:c6:dd:3e:b4:f0:e7:88:69: e8:e2:28:22:58:ab:84:1f:d6:1c:40:6f:48:e5:31:d1:34:bf: 6b:ab:0c:dc:31:61:d3:52:ca:e0:9a:e6:a0:ff:f5:84:84:2d: 65:d0:5e:47:9f:bd:56:1f:17:df:2c:20:e1:48:f4:da:3a:4e: 9a:74:82:cc:ec:c5:c3:95:15:0c:39:ed:ca:e9:74:07:ce:68: 0d:4f:97:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmgidij9KBEaAqu2wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDQyNDAxMDA0N1oXDTI1MDcyMzAxMDA0N1owLzEtMCsGA1UEAxMk MGY0ZmUxZTQtYjQwNi00NDM1LWJmYTQtMDFkOTI0OTE4NzYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjo0FuiurAKIAeoyBCdFd9RK1ezheZ/R2sn5w OnA9pV/ls1UKyBB1nyqgINVZiZN7oGity28VB79mfyiCU1ltMtZEbyCQSopoEHvR ivjKsqHhDP/QIx+wN5cv/hy8XGWoLa7mYnAqftzHa3lxsduI0CUUx0/UHVZtj6pQ wtRgu0RtmGMJtiJ7iTvRgrd5+0BfB2lJElhqT5MqHCo+eqU10cRLJZDK9TjrjA7J ysi3OBCFwZWjZKtXybJiiul0JvkWYvqaHZE6lvnT3iqD3Va0X2mvUj0RhV6mxsed 9NLaMM2rmP2RAs8eyBk6dTJBCye3bIrK4/DoFCF2dZrIqJd5+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEJCZodfQY7acjB9T19842rpvHC5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNDZhMDNjNDUtMDQyYi0z NTliLWI5MTctY2I2NjA3NjM4ZjFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErsjAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKAgNkOwR1lQQiK9IfSC+O70FUGfsgoSCEBfK8+U9eQSiRUfTJPae37e vjZ66zyhIv10DevyuS0o4o0EMOWUfnQhjoki/7JyVw5QQECsn6x/MqWyQY3GDZVX 9GovYsr7hpqAosw6ufxMQiiltbX3OURGMqQouitY6mH+WaZoLQa2S2ZQJLJFjyY8 li78tt5MA5cAqGUM8zLGf9S3vNAhjrHzfwjx8lQ3u66+ZdrG3T608OeIaejiKCJY q4Qf1hxAb0jlMdE0v2urDNwxYdNSyuCa5qD/9YSELWXQXkefvVYfF98sIOFI9No6 Tpp0gszsxcOVFQw57crpdAfOaA1Pl10= -----END CERTIFICATE-----Generated at Sat Apr 26 22:53:55 2025 by rpki-client