$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/db338047-2a3e-3ccd-96ed-8051db06b921.roa File: db338047-2a3e-3ccd-96ed-8051db06b921.roa (raw, json) Hash identifier: xc5LRBpThkvFXlbBt1chz0IMojc1wY4TqKymqKOh5KI= Subject key identifier: 2A:3F:E4:7E:7A:42:12:37:8B:F4:D0:24:42:D3:E6:DD:AA:AB:B1:FA Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858499D1081FDE36239F9E66033C0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/db338047-2a3e-3ccd-96ed-8051db06b921.roa Signing time: Tue 22 Apr 2025 19:09:00 +0000 ROA not before: Tue 22 Apr 2025 19:09:00 +0000 ROA not after: Mon 21 Jul 2025 19:09:00 +0000 asID: 6167 IP address blocks: 174.247.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9d:10:81:fd:e3:62:39:f9:e6:60:33:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 22 19:09:00 2025 GMT Not After : Jul 21 19:09:00 2025 GMT Subject: CN=303f572a-d253-4f13-94c8-973f70febbba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b5:80:cb:f1:9a:39:0c:00:a0:9a:98:80:b0: 99:38:37:c3:9f:be:4a:16:9c:7a:e1:29:08:27:3e: 51:63:6c:c4:f6:dc:4d:5c:80:8c:5c:82:cc:4c:73: e4:0f:98:95:48:06:17:d7:24:9a:ed:1a:a3:90:83: e3:8f:a6:a9:33:d4:47:a5:90:18:00:18:f6:2e:27: 10:ac:a3:3c:d1:86:9d:ef:3a:f9:4e:3c:85:86:4a: 14:00:a2:79:34:fd:4f:a7:71:04:d0:2b:09:29:12: d8:a0:fd:55:1a:96:88:ca:43:d8:b3:86:0d:39:a1: 0c:38:0f:5f:a6:74:bd:a6:8c:08:1f:59:3e:a2:8f: 4e:83:6c:15:84:a3:e4:26:3b:71:69:ae:57:f6:81: d1:c2:ee:28:bd:c0:af:ff:4c:2c:43:18:bd:e2:1a: 82:a9:81:c9:11:14:82:9a:37:0f:d6:34:74:87:0c: c7:60:ad:08:66:5b:5f:59:ae:90:88:7f:71:eb:83: 98:4c:7b:10:61:d1:c5:aa:a6:c9:3a:71:18:01:59: b0:b6:e2:c5:8c:a4:d7:61:e7:2c:62:e8:d9:32:cd: ed:16:27:14:fd:76:93:e9:b3:5a:a2:e6:2a:a8:f0: 5b:a1:82:65:8d:cf:a8:2f:35:c8:77:de:f2:e3:74: 86:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:3F:E4:7E:7A:42:12:37:8B:F4:D0:24:42:D3:E6:DD:AA:AB:B1:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/db338047-2a3e-3ccd-96ed-8051db06b921.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.247.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:f6:f9:ed:33:1f:b8:fc:a5:4e:96:85:2d:5a:2d:99:08:5f: 46:3e:0f:24:89:96:f4:cf:4b:3c:19:5b:24:31:9a:86:ba:a5: 79:75:e0:7b:59:9c:b2:f3:97:c5:a5:25:9c:31:63:26:65:a2: 45:14:10:de:2e:19:6d:7f:b7:89:4e:49:6f:9c:c8:47:92:ec: 66:c4:13:33:28:ed:c0:c8:a7:31:0a:cf:b1:da:6f:51:0b:07: 2a:9a:24:7a:89:de:36:7b:81:4e:be:50:03:85:de:8b:a2:0d: 60:0b:ed:c5:52:dd:d4:96:18:87:a1:16:a9:93:d5:19:d7:14: 20:03:22:37:a6:5a:fa:64:12:fb:0d:6f:77:11:5f:29:e5:80: 71:70:0f:70:b7:98:cb:7e:76:d4:57:9a:46:31:4f:e3:db:19: 86:07:d6:88:57:49:de:29:5e:ca:26:5a:da:d3:d1:68:f0:ec: a2:5d:03:3f:ad:7d:29:44:74:74:0d:6c:7a:f3:14:e3:8d:01: e0:6a:ab:4e:4d:7e:1b:78:9c:b3:35:29:cd:92:45:81:f0:82: e1:99:6e:d9:d2:7c:f0:6b:de:da:89:87:0a:55:69:eb:c0:94: 86:e2:65:ec:92:f2:aa:fd:65:89:cb:e9:81:a5:56:99:16:41: 24:3e:86:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmdEIH942I5+eZgM8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDQyMjE5MDkwMFoXDTI1MDcyMTE5MDkwMFowLzEtMCsGA1UEAxMk MzAzZjU3MmEtZDI1My00ZjEzLTk0YzgtOTczZjcwZmViYmJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLWAy/GaOQwAoJqYgLCZODfDn75KFpx64SkI Jz5RY2zE9txNXICMXILMTHPkD5iVSAYX1ySa7RqjkIPjj6apM9RHpZAYABj2LicQ rKM80Yad7zr5TjyFhkoUAKJ5NP1Pp3EE0CsJKRLYoP1VGpaIykPYs4YNOaEMOA9f pnS9powIH1k+oo9Og2wVhKPkJjtxaa5X9oHRwu4ovcCv/0wsQxi94hqCqYHJERSC mjcP1jR0hwzHYK0IZltfWa6QiH9x64OYTHsQYdHFqqbJOnEYAVmwtuLFjKTXYecs YujZMs3tFicU/XaT6bNaouYqqPBboYJljc+oLzXId97y43SG/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCo/5H56QhI3i/TQJELT5t2qq7H6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZGIzMzgwNDctMmEzZS0z Y2NkLTk2ZWQtODA1MWRiMDZiOTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErvcgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABL2+e0zH7j8pU6WhS1aLZkIX0Y+DySJlvTPSzwZWyQxmoa6pXl14HtZ nLLzl8WlJZwxYyZlokUUEN4uGW1/t4lOSW+cyEeS7GbEEzMo7cDIpzEKz7Hab1EL ByqaJHqJ3jZ7gU6+UAOF3ouiDWAL7cVS3dSWGIehFqmT1RnXFCADIjemWvpkEvsN b3cRXynlgHFwD3C3mMt+dtRXmkYxT+PbGYYH1ohXSd4pXsomWtrT0Wjw7KJdAz+t fSlEdHQNbHrzFOONAeBqq05Nfht4nLM1Kc2SRYHwguGZbtnSfPBr3tqJhwpVaevA lIbiZeyS8qr9ZYnL6YGlVpkWQSQ+hoQ= -----END CERTIFICATE-----Generated at Sun Apr 27 00:06:16 2025 by rpki-client