$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/30a1a7b7-a84c-356a-a268-00fd65e48fa4.roa File: 30a1a7b7-a84c-356a-a268-00fd65e48fa4.roa (raw, json) Hash identifier: nEyPpwHcTaGfIKf6JBPYSSnnf+ROdv+GSJkIp9Dnxwk= Subject key identifier: 89:4C:30:4D:99:82:5A:30:9D:20:99:C9:ED:4F:04:66:77:6F:F1:B5 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849A089D9482B924BEF234AA620 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/30a1a7b7-a84c-356a-a268-00fd65e48fa4.roa Signing time: Thu 24 Apr 2025 01:00:47 +0000 ROA not before: Thu 24 Apr 2025 01:00:47 +0000 ROA not after: Wed 23 Jul 2025 01:00:47 +0000 asID: 6167 IP address blocks: 174.201.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a0:89:d9:48:2b:92:4b:ef:23:4a:a6:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 24 01:00:47 2025 GMT Not After : Jul 23 01:00:47 2025 GMT Subject: CN=b40727ee-1423-452c-8a38-1373aa18fba2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:fc:49:54:51:e2:84:28:17:b1:fa:01:c5:a8: a1:5f:26:fb:05:30:2a:48:10:69:41:46:38:23:b8: 14:24:b8:dd:77:86:73:e2:1e:1e:7f:6c:93:1b:42: 34:e9:30:ac:ea:4e:7e:12:e3:73:04:45:0d:93:2d: 9a:26:db:d8:27:6a:c2:45:40:55:dd:e9:2f:f0:a9: 56:e9:52:eb:e9:c1:39:4c:d4:8e:29:52:ef:ff:13: 73:44:24:29:eb:91:32:6f:ad:4a:53:a6:ee:21:26: 63:a5:04:2a:78:a5:54:4e:dc:36:97:db:9e:ba:47: 14:9d:cd:a2:98:7c:c8:f5:ea:76:22:dc:76:83:b3: cd:10:4c:9e:32:34:c4:34:94:d1:f2:51:8e:6d:c0: 69:f5:d8:ab:c7:ed:6f:b2:41:d8:43:b6:bd:3b:7e: 91:d3:e7:70:4e:22:7d:f0:6c:66:49:eb:6a:dc:38: 09:2a:84:5f:52:82:70:58:f0:fa:2f:c9:95:79:3e: 00:4b:27:aa:07:68:f7:ff:1d:78:bb:a9:89:84:70: 04:b8:67:78:57:1e:e1:c6:dd:45:d1:75:ee:0f:ab: 0c:ed:04:ea:82:92:81:da:b3:ce:11:10:6e:e2:ef: a1:8b:34:0c:19:a4:82:f5:21:94:2c:33:a0:2d:d5: 8d:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:4C:30:4D:99:82:5A:30:9D:20:99:C9:ED:4F:04:66:77:6F:F1:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/30a1a7b7-a84c-356a-a268-00fd65e48fa4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.201.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:cf:ab:3e:ce:cf:c4:e4:cd:19:7f:06:a3:1b:2b:88:1d:b0: 6f:17:dd:59:e3:bd:9a:70:11:5c:c3:f2:96:f5:65:9e:ff:91: 5f:d3:8c:19:ae:de:c3:39:d4:d7:f2:48:f9:b3:d2:b0:89:13: f3:c0:d5:89:dc:a9:5a:e1:95:c0:06:9a:51:7b:48:3b:83:67: fb:d6:13:f6:b4:da:35:ee:3e:27:41:5b:30:ef:c3:f0:cf:b4: 20:5d:83:f2:3f:e3:cc:47:da:90:af:3e:4e:eb:9b:e5:2a:c3: 82:ac:66:68:77:52:49:7c:85:0e:40:d8:c2:51:43:2c:67:67: 57:9e:99:29:fd:b3:ac:78:e3:74:45:02:4b:40:a2:b8:3d:63: 7d:88:71:08:cb:cb:6d:26:d3:ac:06:29:87:fb:a9:8f:87:f3: e9:c9:99:96:2c:c1:dc:eb:e4:f6:92:a0:45:35:67:80:51:80: d1:43:03:5b:0a:8c:37:a5:39:64:94:85:f0:78:2d:8a:f2:5f: f8:c7:a6:0f:15:14:cd:27:06:03:7e:c0:14:09:5a:b3:7a:5f: 2e:3c:ae:74:00:66:41:65:99:c1:84:b2:b2:51:aa:7d:fe:eb: 61:7e:18:3a:9f:d4:fa:d5:7f:e7:06:72:28:f0:cf:33:9a:ff: b3:a7:5d:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmgidlIK5JL7yNKpiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDQyNDAxMDA0N1oXDTI1MDcyMzAxMDA0N1owLzEtMCsGA1UEAxMk YjQwNzI3ZWUtMTQyMy00NTJjLThhMzgtMTM3M2FhMThmYmEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfxJVFHihCgXsfoBxaihXyb7BTAqSBBpQUY4 I7gUJLjdd4Zz4h4ef2yTG0I06TCs6k5+EuNzBEUNky2aJtvYJ2rCRUBV3ekv8KlW 6VLr6cE5TNSOKVLv/xNzRCQp65Eyb61KU6buISZjpQQqeKVUTtw2l9ueukcUnc2i mHzI9ep2Itx2g7PNEEyeMjTENJTR8lGObcBp9dirx+1vskHYQ7a9O36R0+dwTiJ9 8GxmSetq3DgJKoRfUoJwWPD6L8mVeT4ASyeqB2j3/x14u6mJhHAEuGd4Vx7hxt1F 0XXuD6sM7QTqgpKB2rPOERBu4u+hizQMGaSC9SGULDOgLdWNMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIlMME2ZglownSCZye1PBGZ3b/G1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMzBhMWE3YjctYTg0Yy0z NTZhLWEyNjgtMDBmZDY1ZTQ4ZmE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErsmAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHfPqz7Oz8TkzRl/BqMbK4gdsG8X3VnjvZpwEVzD8pb1ZZ7/kV/TjBmu 3sM51NfySPmz0rCJE/PA1YncqVrhlcAGmlF7SDuDZ/vWE/a02jXuPidBWzDvw/DP tCBdg/I/48xH2pCvPk7rm+Uqw4KsZmh3Ukl8hQ5A2MJRQyxnZ1eemSn9s6x443RF AktAorg9Y32IcQjLy20m06wGKYf7qY+H8+nJmZYswdzr5PaSoEU1Z4BRgNFDA1sK jDelOWSUhfB4LYryX/jHpg8VFM0nBgN+wBQJWrN6Xy48rnQAZkFlmcGEsrJRqn3+ 62F+GDqf1PrVf+cGcijwzzOa/7OnXaU= -----END CERTIFICATE-----Generated at Mon May 5 02:34:58 2025 by rpki-client