$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/529dcbe0-bc68-30be-9b8c-e3a141d823e9.roa File: 529dcbe0-bc68-30be-9b8c-e3a141d823e9.roa (raw, json) Hash identifier: 9Ly2orIgIw3APJpfp5Ll0te1DNGmLCzjWqZHiW3Eq/c= Subject key identifier: 4F:1A:00:8A:25:04:5C:03:C4:C5:0B:58:43:25:C7:1D:30:35:01:E0 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849A089D8EC948C720806B8A280 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/529dcbe0-bc68-30be-9b8c-e3a141d823e9.roa Signing time: Thu 24 Apr 2025 01:00:47 +0000 ROA not before: Thu 24 Apr 2025 01:00:47 +0000 ROA not after: Wed 23 Jul 2025 01:00:47 +0000 asID: 6167 IP address blocks: 174.201.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a0:89:d8:ec:94:8c:72:08:06:b8:a2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 24 01:00:47 2025 GMT Not After : Jul 23 01:00:47 2025 GMT Subject: CN=430bfbe0-4bc5-425b-885a-76e2245c7aa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:52:a8:0d:4f:57:92:be:4d:d7:8a:28:56:77: 0a:66:6a:53:f9:06:d9:da:ad:38:83:5f:8c:e6:86: d9:51:1e:8c:83:9b:9c:d3:63:0e:07:f2:46:29:af: 2b:dd:c1:c9:af:37:34:38:60:95:d4:e4:be:1f:75: 57:81:8f:a9:32:1b:8e:7c:5e:43:5a:2b:4f:7d:1f: e2:28:96:bb:6e:2c:2d:17:1d:79:09:c8:e9:e5:04: 78:e8:88:c4:ef:c8:b7:c3:5d:dd:09:ad:75:d8:e9: 74:58:84:1c:58:a6:28:45:1f:c0:40:54:69:71:58: 15:40:e1:4b:b8:10:ed:2b:7a:e2:d3:6c:75:23:16: b5:dd:8e:cd:c7:14:bf:b3:9b:e0:65:55:88:2a:66: b4:43:fe:31:7b:bd:bf:ee:87:05:91:83:bd:75:61: 28:df:b9:5b:32:51:7f:13:86:95:3e:36:6b:3c:41: c2:45:d2:fa:f2:f5:6c:79:01:04:fa:9b:d4:76:4f: 4e:59:9c:27:65:2d:b5:d8:17:fa:38:f6:a1:82:d8: 90:f2:2a:8d:76:e3:b4:08:99:e6:56:d3:50:d6:b0: 22:7d:3b:49:cc:40:ba:91:a4:e0:95:80:c1:3d:f1: 12:4e:b5:22:5a:e5:c0:78:c2:34:9b:49:40:f7:08: 09:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:1A:00:8A:25:04:5C:03:C4:C5:0B:58:43:25:C7:1D:30:35:01:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/529dcbe0-bc68-30be-9b8c-e3a141d823e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.201.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:9f:92:52:a5:b3:6a:22:69:18:9c:73:6f:96:cd:b4:f0:c5: 79:da:99:bb:59:3e:34:e0:ff:64:ea:90:77:cf:22:5d:54:0b: 29:61:e0:7b:5d:9f:ed:ad:b3:eb:06:d5:6d:04:a2:9d:4c:b3: 84:d1:26:87:a0:b9:7f:fd:82:92:c3:fd:22:27:7d:f6:92:60: 80:db:fd:98:29:b6:df:c3:29:19:71:9a:b6:90:4e:16:e9:bc: 44:68:c3:5b:e0:86:8a:57:cc:ec:45:25:02:df:fc:3b:2b:cb: 75:93:75:db:9a:fa:8b:6e:d3:34:91:ed:b8:0a:fc:d4:f7:b1: fc:38:f2:8b:d2:47:a0:5e:97:21:66:0d:06:9a:f1:1d:db:ca: 32:e8:9b:aa:0c:e0:1c:63:e9:fe:b4:92:fd:7d:5d:af:37:26: e1:3e:14:e7:6f:c3:57:a9:bc:85:9a:30:5c:22:e3:04:75:14: 4a:bd:08:0d:76:25:22:a4:a6:cb:6e:26:87:64:6d:7d:bb:77: 63:08:b4:f0:2a:0a:c4:1d:6b:e0:4f:47:ef:80:7b:dc:d9:5d: 12:6f:98:55:ec:b8:33:ef:f5:e4:66:98:b7:eb:cf:37:1b:2d: 53:3b:53:85:a2:88:a8:a7:5c:81:4f:7f:76:9a:18:76:e9:70: d1:f9:4c:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmgidjslIxyCAa4ooAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDQyNDAxMDA0N1oXDTI1MDcyMzAxMDA0N1owLzEtMCsGA1UEAxMk NDMwYmZiZTAtNGJjNS00MjViLTg4NWEtNzZlMjI0NWM3YWE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1KoDU9Xkr5N14ooVncKZmpT+QbZ2q04g1+M 5obZUR6Mg5uc02MOB/JGKa8r3cHJrzc0OGCV1OS+H3VXgY+pMhuOfF5DWitPfR/i KJa7biwtFx15Ccjp5QR46IjE78i3w13dCa112Ol0WIQcWKYoRR/AQFRpcVgVQOFL uBDtK3ri02x1Ixa13Y7NxxS/s5vgZVWIKma0Q/4xe72/7ocFkYO9dWEo37lbMlF/ E4aVPjZrPEHCRdL68vVseQEE+pvUdk9OWZwnZS212Bf6OPahgtiQ8iqNduO0CJnm VtNQ1rAifTtJzEC6kaTglYDBPfESTrUiWuXAeMI0m0lA9wgJWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE8aAIolBFwDxMULWEMlxx0wNQHgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNTI5ZGNiZTAtYmM2OC0z MGJlLTliOGMtZTNhMTQxZDgyM2U5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErskgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG+fklKls2oiaRicc2+WzbTwxXnambtZPjTg/2TqkHfPIl1UCylh4Htd n+2ts+sG1W0Eop1Ms4TRJoeguX/9gpLD/SInffaSYIDb/Zgptt/DKRlxmraQThbp vERow1vghopXzOxFJQLf/Dsry3WTddua+otu0zSR7bgK/NT3sfw48ovSR6BelyFm DQaa8R3byjLom6oM4Bxj6f60kv19Xa83JuE+FOdvw1epvIWaMFwi4wR1FEq9CA12 JSKkpstuJodkbX27d2MItPAqCsQda+BPR++Ae9zZXRJvmFXsuDPv9eRmmLfrzzcb LVM7U4WiiKinXIFPf3aaGHbpcNH5TOI= -----END CERTIFICATE-----Generated at Sun Apr 27 00:17:13 2025 by rpki-client