$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b246265c-0cc7-3bef-a3f1-1164e9d0aeae.roa File: b246265c-0cc7-3bef-a3f1-1164e9d0aeae.roa (raw, json) Hash identifier: 3qJEQPKMGl/8wmDG8hK346+4A3oi9+jRcky+rS0mAJA= Subject key identifier: 78:ED:CD:ED:8A:F4:40:8E:96:11:27:EB:C2:A6:E2:95:D4:1D:A5:90 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849C79F764C2693FB0DB088CC40 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b246265c-0cc7-3bef-a3f1-1164e9d0aeae.roa Signing time: Thu 08 May 2025 01:00:47 +0000 ROA not before: Thu 08 May 2025 01:00:47 +0000 ROA not after: Wed 06 Aug 2025 01:00:47 +0000 asID: 6167 IP address blocks: 174.238.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c7:9f:76:4c:26:93:fb:0d:b0:88:cc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: May 8 01:00:47 2025 GMT Not After : Aug 6 01:00:47 2025 GMT Subject: CN=513a860c-7e57-4873-b436-f91153004a51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:bc:47:31:09:65:e8:6c:be:7c:3f:6b:3d:21: e2:1a:e4:bc:6e:60:26:48:3f:69:1c:ca:04:ec:e7: 8d:7f:74:2d:ba:13:69:17:33:31:a7:3e:cf:9d:c3: b3:e2:e3:29:78:07:4d:a1:77:bb:3b:e8:15:a6:61: 9f:27:f0:a0:6b:f0:6d:3c:24:00:d4:8b:e5:be:f8: b1:10:7b:84:bc:74:41:5c:5b:bb:d7:b2:47:77:8a: 07:2c:64:14:43:fd:42:e8:e3:5c:23:09:3f:ea:55: a8:56:05:22:d9:00:05:7b:b7:89:c3:a7:ea:53:be: 11:f6:2d:56:62:8f:0d:f2:ad:3e:a1:b2:a6:2b:8c: b5:6d:37:ea:b0:8d:c8:8d:a0:5c:48:da:fc:a0:85: 75:c7:94:22:37:3f:ee:46:e7:88:f9:a3:50:dc:8f: 34:0c:6c:58:5e:85:25:9c:a7:bb:ff:9a:c6:9e:45: 89:46:18:35:94:f7:46:db:36:d0:3e:59:8d:c9:57: 5c:80:83:0d:4f:e7:f4:16:44:bc:1f:00:5b:28:80: 6f:57:38:8f:5c:58:5a:5b:a7:f1:e1:ed:e3:0d:25: 7b:61:21:f9:9d:cb:34:4b:cd:25:da:bc:bf:43:9a: a9:60:d5:42:ba:30:70:a7:00:4d:6f:cb:d8:d4:c3: e4:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:ED:CD:ED:8A:F4:40:8E:96:11:27:EB:C2:A6:E2:95:D4:1D:A5:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b246265c-0cc7-3bef-a3f1-1164e9d0aeae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.238.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:59:54:ec:85:48:8a:83:a6:cd:97:00:44:41:39:ed:be:64: 8b:3a:f1:17:a9:0e:c5:c6:cd:b3:ff:77:51:9e:20:d0:84:d9: 75:59:7b:9e:4b:1d:e7:27:59:da:d9:31:c5:31:05:ad:fd:a5: 12:08:24:a6:43:f8:9d:eb:06:59:20:5c:7f:ed:b8:5d:a4:c8: f7:7e:4c:a4:68:a0:d8:ec:a5:cd:85:bd:aa:2b:5d:2a:8c:e9: d8:63:eb:5b:23:23:32:f6:08:c5:32:1b:bc:7c:77:bc:41:18: 1d:47:0b:18:b4:db:30:af:5d:19:68:ae:8f:ae:15:94:ab:b1: 58:06:d3:15:38:2f:18:50:00:e3:5e:55:9c:09:f7:b6:59:0c: 55:16:84:73:ed:12:d2:d4:57:17:09:26:d9:9c:4b:fb:26:13: 0c:30:4d:f1:b9:9b:5e:f3:6c:f9:5f:95:ac:82:48:77:ce:9d: be:7b:bf:77:21:db:d4:1e:f2:56:6f:de:15:77:34:e2:ff:4e: be:0c:13:49:08:1d:a1:d5:39:65:ef:af:9a:38:84:0b:c9:93: 64:d3:63:77:fd:75:3e:1a:00:d4:89:e3:fa:ea:e8:e1:43:93: 37:81:5e:c2:0b:b6:a5:cc:e4:6d:5b:db:e4:74:e7:4a:a2:71: 6e:70:a4:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnHn3ZMJpP7DbCIzEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDUwODAxMDA0N1oXDTI1MDgwNjAxMDA0N1owLzEtMCsGA1UEAxMk NTEzYTg2MGMtN2U1Ny00ODczLWI0MzYtZjkxMTUzMDA0YTUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3rxHMQll6Gy+fD9rPSHiGuS8bmAmSD9pHMoE 7OeNf3QtuhNpFzMxpz7PncOz4uMpeAdNoXe7O+gVpmGfJ/Cga/BtPCQA1Ivlvvix EHuEvHRBXFu717JHd4oHLGQUQ/1C6ONcIwk/6lWoVgUi2QAFe7eJw6fqU74R9i1W Yo8N8q0+obKmK4y1bTfqsI3IjaBcSNr8oIV1x5QiNz/uRueI+aNQ3I80DGxYXoUl nKe7/5rGnkWJRhg1lPdG2zbQPlmNyVdcgIMNT+f0FkS8HwBbKIBvVziPXFhaW6fx 4e3jDSV7YSH5ncs0S80l2ry/Q5qpYNVCujBwpwBNb8vY1MPkqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHjtze2K9ECOlhEn68Km4pXUHaWQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYjI0NjI2NWMtMGNjNy0z YmVmLWEzZjEtMTE2NGU5ZDBhZWFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCru4UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHNZVOyFSIqDps2XAERBOe2+ZIs68RepDsXGzbP/d1GeINCE2XVZe55L HecnWdrZMcUxBa39pRIIJKZD+J3rBlkgXH/tuF2kyPd+TKRooNjspc2FvaorXSqM 6dhj61sjIzL2CMUyG7x8d7xBGB1HCxi02zCvXRloro+uFZSrsVgG0xU4LxhQAONe VZwJ97ZZDFUWhHPtEtLUVxcJJtmcS/smEwwwTfG5m17zbPlflayCSHfOnb57v3ch 29Qe8lZv3hV3NOL/Tr4ME0kIHaHVOWXvr5o4hAvJk2TTY3f9dT4aANSJ4/rq6OFD kzeBXsILtqXM5G1b2+R050qicW5wpAE= -----END CERTIFICATE-----Generated at Mon Jun 16 05:23:08 2025 by rpki-client