$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/72a1b058-3801-3f48-ab66-b9767d64457d.roa File: 72a1b058-3801-3f48-ab66-b9767d64457d.roa (raw, json) Hash identifier: IEh+D7EpBRhjLWm2la9s4mKdoHI9ixQoROh7Nn8NE0Q= Subject key identifier: 5D:70:C4:44:9E:71:C6:B2:98:D1:62:1D:C3:44:0C:F4:C2:01:E9:44 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849A089D81BE291900A03B61D80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/72a1b058-3801-3f48-ab66-b9767d64457d.roa Signing time: Thu 24 Apr 2025 01:00:47 +0000 ROA not before: Thu 24 Apr 2025 01:00:47 +0000 ROA not after: Wed 23 Jul 2025 01:00:47 +0000 asID: 6167 IP address blocks: 174.200.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a0:89:d8:1b:e2:91:90:0a:03:b6:1d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 24 01:00:47 2025 GMT Not After : Jul 23 01:00:47 2025 GMT Subject: CN=b66092e9-cbed-4d92-a0d7-d0064d64c184 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:72:51:fc:2f:96:be:25:06:69:10:de:14:a5: f1:07:ff:f5:58:5d:6c:12:46:91:04:03:92:d0:00: 6c:bb:d8:c7:c4:b7:66:48:38:c9:39:a6:c9:7f:f1: 28:0f:40:95:37:3c:61:28:6b:88:b8:f2:73:a3:28: d0:c4:74:26:33:96:0f:68:1d:c0:31:c9:0d:2b:2c: d5:c6:c0:5f:86:b9:e0:31:2d:5c:19:de:96:67:cf: a4:f0:db:bb:9f:0c:5a:91:62:b3:c7:e3:ee:f0:d3: 97:21:22:d0:8b:ed:c2:98:0d:aa:5d:fd:e5:b8:dc: 55:5d:6a:a2:82:53:fd:9f:4d:49:ea:dc:65:be:3b: 9d:56:2b:85:f8:db:aa:2d:d6:d5:31:da:35:cc:85: 1b:18:36:75:bb:77:bb:94:4e:e4:e5:c4:a2:ee:bd: b2:a5:1b:ce:64:05:3b:81:fd:3d:86:1e:76:8b:f9: 7d:6f:a8:3a:36:e8:2b:a6:8f:cf:13:6e:3b:3e:5e: bf:38:46:37:5b:a8:69:c2:2e:06:e5:c9:74:fb:28: 35:c2:44:a1:64:ca:2d:80:6a:4d:44:81:06:9b:e0: f8:48:9c:ad:77:90:4b:38:f1:b8:3a:04:1f:5c:79: bd:b2:e9:c5:90:66:ce:a8:89:0b:07:fb:07:69:88: 7b:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:70:C4:44:9E:71:C6:B2:98:D1:62:1D:C3:44:0C:F4:C2:01:E9:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/72a1b058-3801-3f48-ab66-b9767d64457d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.200.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:f4:52:90:26:d1:11:4c:7c:1d:cf:b0:45:bd:f6:00:9b:36: 83:08:6b:4a:18:74:1c:66:36:2e:46:6b:09:7d:99:6f:98:e9: 8a:aa:38:38:20:79:2c:b0:43:9c:72:0b:63:23:10:b5:7c:f1: 6c:38:12:5b:70:2a:ac:59:70:94:36:c9:47:cd:bb:20:17:ad: 74:f1:f3:2c:75:95:9a:ee:95:3e:c7:ef:7e:2c:81:f5:a7:ca: 00:2d:59:0b:65:72:51:d1:de:76:5f:2b:f5:7c:44:e4:ea:32: da:5e:64:31:eb:7d:29:04:df:3a:b3:75:da:2e:b8:9d:b3:ea: ec:b9:7e:1a:5f:3b:ea:e3:88:c5:a8:b5:92:7f:8d:93:3f:d1: a2:81:00:30:94:38:f2:39:b2:ed:29:65:31:86:1a:f1:93:19: 10:bb:87:a4:a2:95:95:4a:7f:ad:d8:6f:81:92:ea:70:79:99: 71:c8:98:c9:4d:7b:5b:14:c6:51:b5:58:c8:26:14:cc:20:5b: a1:d7:d9:e9:3d:c0:17:94:e0:32:2c:0b:46:d4:6a:5c:6f:cf: c1:79:a5:f3:82:c8:7b:65:b6:50:ed:bd:f9:99:cb:55:24:60: 06:3b:64:5f:45:94:69:07:73:81:1e:cd:72:59:fe:b4:7b:22: 4e:64:63:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmgidgb4pGQCgO2HYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDQyNDAxMDA0N1oXDTI1MDcyMzAxMDA0N1owLzEtMCsGA1UEAxMk YjY2MDkyZTktY2JlZC00ZDkyLWEwZDctZDAwNjRkNjRjMTg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk3JR/C+WviUGaRDeFKXxB//1WF1sEkaRBAOS 0ABsu9jHxLdmSDjJOabJf/EoD0CVNzxhKGuIuPJzoyjQxHQmM5YPaB3AMckNKyzV xsBfhrngMS1cGd6WZ8+k8Nu7nwxakWKzx+Pu8NOXISLQi+3CmA2qXf3luNxVXWqi glP9n01J6txlvjudViuF+NuqLdbVMdo1zIUbGDZ1u3e7lE7k5cSi7r2ypRvOZAU7 gf09hh52i/l9b6g6Nugrpo/PE247Pl6/OEY3W6hpwi4G5cl0+yg1wkShZMotgGpN RIEGm+D4SJytd5BLOPG4OgQfXHm9sunFkGbOqIkLB/sHaYh7XQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF1wxESeccaymNFiHcNEDPTCAelEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNzJhMWIwNTgtMzgwMS0z ZjQ4LWFiNjYtYjk3NjdkNjQ0NTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErshAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE30UpAm0RFMfB3PsEW99gCbNoMIa0oYdBxmNi5Gawl9mW+Y6YqqODgg eSywQ5xyC2MjELV88Ww4EltwKqxZcJQ2yUfNuyAXrXTx8yx1lZrulT7H734sgfWn ygAtWQtlclHR3nZfK/V8ROTqMtpeZDHrfSkE3zqzddouuJ2z6uy5fhpfO+rjiMWo tZJ/jZM/0aKBADCUOPI5su0pZTGGGvGTGRC7h6SilZVKf63Yb4GS6nB5mXHImMlN e1sUxlG1WMgmFMwgW6HX2ek9wBeU4DIsC0bUalxvz8F5pfOCyHtltlDtvfmZy1Uk YAY7ZF9FlGkHc4EezXJZ/rR7Ik5kY1A= -----END CERTIFICATE-----Generated at Sun Apr 27 17:01:24 2025 by rpki-client