$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f87d194b-3fdb-3588-99aa-d1736f01fe36.roa File: f87d194b-3fdb-3588-99aa-d1736f01fe36.roa (raw, json) Hash identifier: g/tI+8l7TIDY6+NJHqhAXMJMr6SzTZQfSZcFbk1kHcc= Subject key identifier: 35:C9:D7:70:58:49:69:9A:18:A7:83:E8:65:CD:5E:70:60:D6:85:4D Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849A089DA93F6473F70FDAB8C00 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f87d194b-3fdb-3588-99aa-d1736f01fe36.roa Signing time: Thu 24 Apr 2025 01:00:47 +0000 ROA not before: Thu 24 Apr 2025 01:00:47 +0000 ROA not after: Wed 23 Jul 2025 01:00:47 +0000 asID: 6167 IP address blocks: 174.203.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a0:89:da:93:f6:47:3f:70:fd:ab:8c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 24 01:00:47 2025 GMT Not After : Jul 23 01:00:47 2025 GMT Subject: CN=98cc5ae6-db4c-4a4f-bd1f-fc73f0cff530 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:39:ac:22:bd:a0:cc:07:c2:3e:74:3a:e1:2f: 62:f0:41:6e:d8:97:6f:87:92:8e:fc:e7:18:5e:ec: e7:75:8d:d5:b8:48:df:ff:34:e3:a6:76:7c:4e:68: da:50:ea:31:43:36:c4:82:09:e6:ca:0b:9b:0c:b1: 2e:83:2b:65:75:90:ea:2f:ff:3e:01:0a:e1:34:a8: 73:98:4d:c1:37:c6:b7:32:7d:d9:cf:9e:2d:13:8b: d9:95:1b:f4:5b:56:a7:3e:e4:5c:93:bb:2d:a4:c0: ec:cd:1c:af:1f:e4:6b:a1:c8:e9:e4:e5:96:90:05: 6d:cd:6c:47:99:11:60:61:40:f6:0e:0e:2e:df:d5: 69:29:72:dc:0f:b0:d2:e5:ae:83:18:3c:2f:70:5a: e3:fc:a0:e7:16:c9:e9:d1:13:ff:72:e1:16:6d:ec: 86:e1:ef:12:6a:ef:7d:52:5e:73:77:c0:4b:ab:f7: 02:48:04:97:b1:d6:97:78:c7:be:d9:65:e9:75:5d: da:2c:c5:2a:f2:49:c1:cd:27:cf:c8:3e:2e:36:69: ed:00:06:1e:e5:b7:b1:a4:41:ea:6d:45:d6:7c:13: 70:d3:e4:84:24:61:75:37:98:54:80:52:1a:65:d8: 13:99:fb:de:3b:08:f8:47:74:e4:7e:99:42:56:77: 68:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:C9:D7:70:58:49:69:9A:18:A7:83:E8:65:CD:5E:70:60:D6:85:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f87d194b-3fdb-3588-99aa-d1736f01fe36.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.203.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:04:58:fc:25:32:eb:4a:aa:11:f7:3d:9c:45:1d:94:66:d2: 70:9a:ba:b5:48:80:ff:99:7c:ec:a3:e9:0e:e5:75:88:8e:50: 7c:d9:75:cd:c2:66:35:96:d7:43:84:f9:6a:d4:91:73:15:e2: 93:15:07:88:25:16:18:db:df:d4:1c:b1:f9:fb:ca:cb:cd:4e: 2c:c7:1b:bd:2c:c2:b3:12:08:64:cd:b4:e1:78:80:44:f3:d9: 4f:cc:97:7d:93:32:e2:b0:71:c5:62:fd:1e:b5:a3:ad:2e:b5: 15:ca:b8:e0:23:e8:1f:15:22:6a:9b:fa:da:ae:16:20:5a:da: 7f:93:1d:7b:c5:1c:d8:a3:48:dd:c3:02:bd:49:3c:a8:ba:fb: 69:69:ce:15:ef:03:f5:23:14:6f:3f:c4:e9:ef:57:50:9d:99: b5:85:0e:74:36:22:93:03:01:5a:36:65:3b:eb:86:d8:0a:04: 4e:90:bc:92:52:5e:1f:e3:6d:86:01:2b:18:1d:2c:2c:f1:22: 49:9c:85:a0:80:8f:c7:6d:b1:ae:75:7a:a0:1e:47:fc:7c:9a: 68:b6:c5:ad:4e:77:f5:91:4f:8c:24:76:0a:ae:38:58:0e:10: 72:01:f1:53:64:97:f6:b1:56:f1:30:a6:85:f2:4f:e0:1f:52: ea:bc:60:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmgidqT9kc/cP2rjAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDQyNDAxMDA0N1oXDTI1MDcyMzAxMDA0N1owLzEtMCsGA1UEAxMk OThjYzVhZTYtZGI0Yy00YTRmLWJkMWYtZmM3M2YwY2ZmNTMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijmsIr2gzAfCPnQ64S9i8EFu2Jdvh5KO/OcY XuzndY3VuEjf/zTjpnZ8TmjaUOoxQzbEggnmygubDLEugytldZDqL/8+AQrhNKhz mE3BN8a3Mn3Zz54tE4vZlRv0W1anPuRck7stpMDszRyvH+Rrocjp5OWWkAVtzWxH mRFgYUD2Dg4u39VpKXLcD7DS5a6DGDwvcFrj/KDnFsnp0RP/cuEWbeyG4e8Sau99 Ul5zd8BLq/cCSASXsdaXeMe+2WXpdV3aLMUq8knBzSfPyD4uNmntAAYe5bexpEHq bUXWfBNw0+SEJGF1N5hUgFIaZdgTmfveOwj4R3TkfplCVndolQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDXJ13BYSWmaGKeD6GXNXnBg1oVNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZjg3ZDE5NGItM2ZkYi0z NTg4LTk5YWEtZDE3MzZmMDFmZTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErsvAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH4EWPwlMutKqhH3PZxFHZRm0nCaurVIgP+ZfOyj6Q7ldYiOUHzZdc3C ZjWW10OE+WrUkXMV4pMVB4glFhjb39Qcsfn7ysvNTizHG70swrMSCGTNtOF4gETz 2U/Ml32TMuKwccVi/R61o60utRXKuOAj6B8VImqb+tquFiBa2n+THXvFHNijSN3D Ar1JPKi6+2lpzhXvA/UjFG8/xOnvV1CdmbWFDnQ2IpMDAVo2ZTvrhtgKBE6QvJJS Xh/jbYYBKxgdLCzxIkmchaCAj8dtsa51eqAeR/x8mmi2xa1Od/WRT4wkdgquOFgO EHIB8VNkl/axVvEwpoXyT+AfUuq8YDI= -----END CERTIFICATE-----Generated at Sun Apr 27 02:00:46 2025 by rpki-client