$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/72fda8b1-2945-3fc3-b556-73a07e402e90.roa File: 72fda8b1-2945-3fc3-b556-73a07e402e90.roa (raw, json) Hash identifier: DbwVs0pZu+3LrazX6SKJg0rEivSJv7spxY7Q0QRkud4= Subject key identifier: 24:01:5C:1A:7F:B1:15:47:21:05:EA:3B:A5:0D:5F:EE:3C:A8:36:53 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849A089DAC6ED6CF50A4D030080 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/72fda8b1-2945-3fc3-b556-73a07e402e90.roa Signing time: Thu 24 Apr 2025 01:00:47 +0000 ROA not before: Thu 24 Apr 2025 01:00:47 +0000 ROA not after: Wed 23 Jul 2025 01:00:47 +0000 asID: 6167 IP address blocks: 174.203.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a0:89:da:c6:ed:6c:f5:0a:4d:03:00:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 24 01:00:47 2025 GMT Not After : Jul 23 01:00:47 2025 GMT Subject: CN=c0d6435d-d2d0-43c8-ba53-d1c0b23268dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:b4:93:98:83:f2:3a:82:f7:97:c0:96:00:f1: d8:5e:b3:d1:3f:11:93:ad:3f:1a:3f:10:09:a7:82: 1c:56:4e:56:82:f6:6d:a3:81:b5:00:11:c0:13:e8: ef:5d:53:9f:6b:14:0b:95:06:d5:7d:dd:f5:32:9e: ed:46:67:83:df:61:6a:a9:24:75:21:76:a4:7e:e0: 99:16:6c:63:c9:4e:6a:85:3d:4f:a9:d2:f5:3b:f6: 07:ca:4a:49:fd:ff:ca:76:75:a6:d7:57:a6:c3:40: 2d:6c:c9:8e:0e:b0:f0:67:05:7b:af:9f:e3:c0:fc: c4:74:1b:ba:d1:99:98:67:f9:82:e7:22:75:ba:2b: b8:60:42:0f:ea:b6:49:47:a8:ef:cd:20:68:f2:07: 7a:02:75:2d:c8:0b:2c:f3:24:95:ae:9e:44:97:b4: 58:64:07:c4:36:10:56:ee:21:ef:0a:95:fa:8e:87: 40:45:62:e4:8c:5c:53:10:e1:a9:62:e7:e3:ea:4f: dc:f4:52:f4:d7:ce:88:c1:17:69:17:f5:7b:a7:80: d5:59:75:4c:e5:c5:65:6a:da:a1:eb:59:70:d3:4c: a8:09:b1:d3:49:2e:7f:60:0d:42:58:b5:9b:64:7a: 45:91:0a:8c:5d:6c:04:e9:99:73:22:b7:c1:64:73: 64:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:01:5C:1A:7F:B1:15:47:21:05:EA:3B:A5:0D:5F:EE:3C:A8:36:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/72fda8b1-2945-3fc3-b556-73a07e402e90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.203.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:87:db:12:ad:6d:fe:35:11:a2:25:31:e3:30:d8:cf:dc:80: 2b:b2:87:55:ba:f5:ad:6f:55:ff:8d:86:f1:47:c7:86:5a:69: 16:18:1e:f1:d0:4b:00:06:63:80:0a:c6:87:f2:0e:03:c0:34: f9:96:fb:12:dd:81:0a:a7:5a:d4:17:2b:0d:03:3d:48:9f:45: ac:80:64:02:79:ac:f7:41:7b:52:f7:32:7d:ce:3b:1c:f3:ca: 0e:0d:e9:44:1d:fd:79:2a:03:40:98:fc:bd:0f:82:9d:5d:cd: b7:4a:a4:e2:86:ed:86:f2:0e:fd:e6:9b:ba:31:2c:95:5d:96: d0:74:16:06:45:2a:98:ed:f7:68:ad:a6:8c:fc:f7:ca:05:13: 21:2c:c3:60:4d:a9:7e:03:f4:5d:6a:a2:02:bf:e5:49:5e:6c: b6:af:5f:82:67:69:bb:80:c0:a5:ca:c6:58:8b:9d:be:0c:cf: c6:7a:e6:cb:36:b5:ad:a0:0b:ad:d7:2d:e0:6b:25:9d:34:d8: 47:4e:6c:2a:3f:ca:21:0b:f7:ba:35:b5:03:44:2b:55:2e:1d: 0d:84:4c:0a:f6:b2:98:9c:34:bf:43:61:e3:6a:64:8b:11:55: d1:30:2b:4e:cd:5c:ed:fd:83:a6:91:a7:c0:08:ed:1a:13:af: 01:e4:16:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmgidrG7Wz1Ck0DAIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDQyNDAxMDA0N1oXDTI1MDcyMzAxMDA0N1owLzEtMCsGA1UEAxMk YzBkNjQzNWQtZDJkMC00M2M4LWJhNTMtZDFjMGIyMzI2OGRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLSTmIPyOoL3l8CWAPHYXrPRPxGTrT8aPxAJ p4IcVk5WgvZto4G1ABHAE+jvXVOfaxQLlQbVfd31Mp7tRmeD32FqqSR1IXakfuCZ FmxjyU5qhT1PqdL1O/YHykpJ/f/KdnWm11emw0AtbMmODrDwZwV7r5/jwPzEdBu6 0ZmYZ/mC5yJ1uiu4YEIP6rZJR6jvzSBo8gd6AnUtyAss8ySVrp5El7RYZAfENhBW 7iHvCpX6jodARWLkjFxTEOGpYufj6k/c9FL0186IwRdpF/V7p4DVWXVM5cVlatqh 61lw00yoCbHTSS5/YA1CWLWbZHpFkQqMXWwE6ZlzIrfBZHNksQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCQBXBp/sRVHIQXqO6UNX+48qDZTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNzJmZGE4YjEtMjk0NS0z ZmMzLWI1NTYtNzNhMDdlNDAyZTkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErsvwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFeH2xKtbf41EaIlMeMw2M/cgCuyh1W69a1vVf+NhvFHx4ZaaRYYHvHQ SwAGY4AKxofyDgPANPmW+xLdgQqnWtQXKw0DPUifRayAZAJ5rPdBe1L3Mn3OOxzz yg4N6UQd/XkqA0CY/L0Pgp1dzbdKpOKG7YbyDv3mm7oxLJVdltB0FgZFKpjt92it poz898oFEyEsw2BNqX4D9F1qogK/5UlebLavX4JnabuAwKXKxliLnb4Mz8Z65ss2 ta2gC63XLeBrJZ002EdObCo/yiEL97o1tQNEK1UuHQ2ETAr2spicNL9DYeNqZIsR VdEwK07NXO39g6aRp8AI7RoTrwHkFpU= -----END CERTIFICATE-----Generated at Sun Apr 27 16:39:25 2025 by rpki-client