$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/220d0e56-fc3d-3262-b19e-0960e7257296.roa File: 220d0e56-fc3d-3262-b19e-0960e7257296.roa (raw, json) Hash identifier: ukwdeg8Z9zJy6B7KbYa1z3kKi3wWVUF9zxuS92HyGdM= Subject key identifier: 7B:C4:1B:40:CF:F3:2A:4A:74:78:CB:54:AB:6C:34:CC:95:7F:10:51 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849C79F75160E57AEA511A30D40 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/220d0e56-fc3d-3262-b19e-0960e7257296.roa Signing time: Thu 08 May 2025 01:00:47 +0000 ROA not before: Thu 08 May 2025 01:00:47 +0000 ROA not after: Wed 06 Aug 2025 01:00:47 +0000 asID: 6167 IP address blocks: 174.235.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c7:9f:75:16:0e:57:ae:a5:11:a3:0d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: May 8 01:00:47 2025 GMT Not After : Aug 6 01:00:47 2025 GMT Subject: CN=cd6e0a9f-b489-4957-a78a-ed51ae0c598e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:7e:4a:54:e2:e5:9b:eb:9a:ce:2a:56:7c:e4: c2:ce:0e:ab:75:2d:58:76:a4:72:a7:bb:5b:1c:fe: de:3c:04:cf:96:29:a8:f5:82:51:77:be:d2:79:d2: 15:c4:6c:83:8d:f8:07:4d:0e:a5:d5:0e:64:e1:63: 40:b5:51:e6:d0:ce:76:2d:75:70:24:c3:86:5a:09: f7:5c:14:90:ae:51:dd:bf:6c:a0:fe:8e:7e:43:82: ab:3b:2f:2a:11:d9:17:a9:bd:44:55:e1:6d:b0:e4: 2b:49:fc:c2:49:1f:a5:0d:d8:c2:5d:f2:48:68:02: dc:83:05:5f:1f:9d:16:b9:55:c2:5e:52:b6:67:f4: 5e:98:32:b6:05:53:b7:d9:6f:c8:ed:96:eb:58:1d: f2:10:4c:13:02:53:b4:da:c5:67:fc:cd:fb:5b:60: 19:94:54:f4:3e:f7:ca:de:eb:23:03:54:26:de:92: af:01:7c:12:8f:c5:27:f5:f0:fb:25:8a:2d:21:c6: ec:57:5d:7b:77:f1:3e:dc:ac:97:bd:53:94:c5:5d: c9:21:54:38:7f:11:b2:7d:a0:66:44:1c:06:7e:fa: 52:b7:20:04:10:55:08:43:cc:37:bf:8f:12:87:e9: 53:70:64:f1:22:2a:8d:ae:6c:62:92:30:78:0e:de: 08:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:C4:1B:40:CF:F3:2A:4A:74:78:CB:54:AB:6C:34:CC:95:7F:10:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/220d0e56-fc3d-3262-b19e-0960e7257296.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.235.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:d7:43:a2:0e:c2:8a:47:c5:56:0d:f6:5e:cc:69:f5:f5:15: 51:37:67:52:01:8f:67:28:2f:f3:cf:3c:43:c8:42:d0:71:27: 8f:9c:46:27:ee:88:cb:54:73:14:73:ab:b1:de:f7:c2:5c:78: 7a:b3:5b:b3:5b:75:de:10:21:07:ed:00:27:b2:34:97:4d:cb: c4:25:07:90:25:69:fe:08:86:e1:81:24:8d:a1:db:89:6e:07: 31:31:19:36:6b:6d:4c:a8:4e:07:48:10:84:19:ad:12:d3:57: b7:3b:d3:e3:e8:4e:56:76:9b:5d:8a:ee:7d:03:9d:ef:1f:13: 17:8d:d4:43:ed:ea:9c:cd:91:8e:3b:33:c8:c5:df:4e:2d:51: 8f:bb:f4:82:fd:dc:0b:f5:bd:a2:a4:8c:75:9b:67:a5:f8:cd: e4:49:80:2d:47:d3:1b:35:d3:1f:7e:64:e2:3c:f8:3e:cd:df: f2:dc:66:31:3e:73:b1:cc:5f:f8:f1:6c:a2:68:ea:af:db:9c: 26:e8:89:de:94:14:44:db:02:fc:45:87:33:ba:93:3d:4f:85: b7:ba:af:fa:a9:3f:6d:6e:1e:cc:fb:fe:84:52:69:4b:c6:65: a9:e4:2c:aa:e1:c6:01:68:a5:f2:6b:99:c0:5b:c2:83:4b:17: e7:53:2f:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnHn3UWDleupRGjDUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDUwODAxMDA0N1oXDTI1MDgwNjAxMDA0N1owLzEtMCsGA1UEAxMk Y2Q2ZTBhOWYtYjQ4OS00OTU3LWE3OGEtZWQ1MWFlMGM1OThlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlX5KVOLlm+uazipWfOTCzg6rdS1YdqRyp7tb HP7ePATPlimo9YJRd77SedIVxGyDjfgHTQ6l1Q5k4WNAtVHm0M52LXVwJMOGWgn3 XBSQrlHdv2yg/o5+Q4KrOy8qEdkXqb1EVeFtsOQrSfzCSR+lDdjCXfJIaALcgwVf H50WuVXCXlK2Z/RemDK2BVO32W/I7ZbrWB3yEEwTAlO02sVn/M37W2AZlFT0PvfK 3usjA1Qm3pKvAXwSj8Un9fD7JYotIcbsV117d/E+3KyXvVOUxV3JIVQ4fxGyfaBm RBwGfvpStyAEEFUIQ8w3v48Sh+lTcGTxIiqNrmxikjB4Dt4IYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHvEG0DP8ypKdHjLVKtsNMyVfxBRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMjIwZDBlNTYtZmMzZC0z MjYyLWIxOWUtMDk2MGU3MjU3Mjk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEruvQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKTXQ6IOwopHxVYN9l7MafX1FVE3Z1IBj2coL/PPPEPIQtBxJ4+cRifu iMtUcxRzq7He98JceHqzW7Nbdd4QIQftACeyNJdNy8QlB5Alaf4IhuGBJI2h24lu BzExGTZrbUyoTgdIEIQZrRLTV7c70+PoTlZ2m12K7n0Dne8fExeN1EPt6pzNkY47 M8jF304tUY+79IL93Av1vaKkjHWbZ6X4zeRJgC1H0xs10x9+ZOI8+D7N3/LcZjE+ c7HMX/jxbKJo6q/bnCboid6UFETbAvxFhzO6kz1Phbe6r/qpP21uHsz7/oRSaUvG ZankLKrhxgFopfJrmcBbwoNLF+dTL74= -----END CERTIFICATE-----Generated at Sun May 11 02:00:10 2025 by rpki-client