$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fd224140-4d0a-3a04-9b68-dad4b44ae470.roa File: fd224140-4d0a-3a04-9b68-dad4b44ae470.roa (raw, json) Hash identifier: EEDIwbXemVx5WRl4VfAySNyTgKONRLZQIkLbhTjrDTs= Subject key identifier: 5B:CD:36:F1:BA:04:36:39:DD:04:AF:AD:56:61:03:66:E7:9A:FC:92 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849A089D84ECB8962B441D429B0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fd224140-4d0a-3a04-9b68-dad4b44ae470.roa Signing time: Thu 24 Apr 2025 01:00:47 +0000 ROA not before: Thu 24 Apr 2025 01:00:47 +0000 ROA not after: Wed 23 Jul 2025 01:00:47 +0000 asID: 6167 IP address blocks: 174.200.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a0:89:d8:4e:cb:89:62:b4:41:d4:29:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 24 01:00:47 2025 GMT Not After : Jul 23 01:00:47 2025 GMT Subject: CN=1c7c533d-088b-454b-93f1-66d1410686c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:7a:f2:ce:6f:66:1c:d5:bf:2c:70:75:4c:92: 51:b6:3a:4b:6d:5f:53:08:0f:15:ab:f4:c7:b6:ce: 00:5c:0c:65:71:2a:ab:60:c5:df:62:8c:1c:16:6c: b7:e9:a8:6b:22:75:dc:ac:1a:82:56:44:70:80:f5: 40:2a:11:ab:29:76:bc:37:6d:17:d2:91:e2:53:4d: 18:79:48:2e:0a:d0:38:35:b9:41:7d:73:db:55:ac: dc:4a:50:1c:50:d2:87:77:d9:0b:71:13:dd:a0:35: ae:40:fb:4d:7c:81:84:11:da:11:7b:81:de:e4:cf: 2c:5d:cb:7a:9b:ae:a2:dc:76:5b:e2:f0:bc:eb:6f: 5b:66:f3:47:78:c8:83:50:50:2b:8a:2c:3e:0f:d4: 99:e6:ec:91:0c:cf:40:35:c4:df:ce:23:8c:2f:73: c2:d3:78:89:97:b1:9f:f7:c5:ba:8e:2a:a2:49:2e: a6:0b:9f:14:6b:fa:a8:15:89:b7:60:dc:02:94:c4: e7:6e:46:f4:65:bf:3b:d1:b7:bf:cb:ea:83:91:c3: 62:b0:1a:d1:49:0c:a4:bb:1d:f8:17:cb:22:7f:82: ba:47:00:5b:fa:61:39:2b:6b:f9:58:40:72:09:a0: e1:aa:c5:53:3c:b8:e8:1e:ed:84:c5:38:8d:ff:7d: 90:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:CD:36:F1:BA:04:36:39:DD:04:AF:AD:56:61:03:66:E7:9A:FC:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fd224140-4d0a-3a04-9b68-dad4b44ae470.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.200.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:18:84:d7:60:0a:a3:9c:e5:0c:dd:30:1a:19:d6:5b:da:48: c6:06:96:a0:fb:d6:40:e1:86:f8:24:a6:3c:1b:ee:2c:4a:5d: 9a:5c:c6:42:34:49:eb:f6:82:d4:49:de:51:44:d3:ed:26:e9: 13:db:d2:ae:88:58:61:42:a7:56:ef:bf:4d:36:10:69:e0:d7: 12:9f:b0:4e:2e:ea:a7:e2:3f:38:94:a7:7e:9e:87:1e:68:c5: f7:5e:7f:c3:16:ac:80:02:68:95:aa:0a:43:92:ab:5a:f6:0d: 8a:24:27:9f:a0:9c:ec:f4:33:27:a0:cc:c4:46:78:db:e3:32: db:26:d2:8c:c8:37:d3:81:0e:36:0f:74:2b:08:04:08:de:b2: 6c:2a:9d:97:c8:68:70:d5:57:d4:3c:6a:6e:59:c0:06:40:53: 8d:33:c5:70:fa:53:02:f8:42:23:ac:86:00:1c:b2:f2:7a:f7: 7c:f1:87:65:d4:2e:67:42:b2:3b:5f:7e:f4:bd:d4:d9:61:d7: 03:87:a4:12:17:aa:ef:67:a0:85:a1:5f:43:f7:bd:f3:31:48: fe:09:7e:cb:3f:8a:82:e5:e1:da:7f:a1:98:c7:03:19:fc:41: 26:bf:e4:06:29:d2:e7:bc:29:db:b2:1e:5f:21:e6:d4:7c:d7: 05:f5:4b:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmgidhOy4litEHUKbAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDQyNDAxMDA0N1oXDTI1MDcyMzAxMDA0N1owLzEtMCsGA1UEAxMk MWM3YzUzM2QtMDg4Yi00NTRiLTkzZjEtNjZkMTQxMDY4NmM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjHryzm9mHNW/LHB1TJJRtjpLbV9TCA8Vq/TH ts4AXAxlcSqrYMXfYowcFmy36ahrInXcrBqCVkRwgPVAKhGrKXa8N20X0pHiU00Y eUguCtA4NblBfXPbVazcSlAcUNKHd9kLcRPdoDWuQPtNfIGEEdoRe4He5M8sXct6 m66i3HZb4vC8629bZvNHeMiDUFAriiw+D9SZ5uyRDM9ANcTfziOML3PC03iJl7Gf 98W6jiqiSS6mC58Ua/qoFYm3YNwClMTnbkb0Zb870be/y+qDkcNisBrRSQykux34 F8sif4K6RwBb+mE5K2v5WEByCaDhqsVTPLjoHu2ExTiN/32QawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFvNNvG6BDY53QSvrVZhA2bnmvySMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZmQyMjQxNDAtNGQwYS0z YTA0LTliNjgtZGFkNGI0NGFlNDcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErshwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACwYhNdgCqOc5QzdMBoZ1lvaSMYGlqD71kDhhvgkpjwb7ixKXZpcxkI0 Sev2gtRJ3lFE0+0m6RPb0q6IWGFCp1bvv002EGng1xKfsE4u6qfiPziUp36ehx5o xfdef8MWrIACaJWqCkOSq1r2DYokJ5+gnOz0MyegzMRGeNvjMtsm0ozIN9OBDjYP dCsIBAjesmwqnZfIaHDVV9Q8am5ZwAZAU40zxXD6UwL4QiOshgAcsvJ693zxh2XU LmdCsjtffvS91Nlh1wOHpBIXqu9noIWhX0P3vfMxSP4Jfss/ioLl4dp/oZjHAxn8 QSa/5AYp0ue8KduyHl8h5tR81wX1S4s= -----END CERTIFICATE-----Generated at Sat Apr 26 23:01:12 2025 by rpki-client