$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b47db3b2-9230-39e2-be23-e199e335642d.roa File: b47db3b2-9230-39e2-be23-e199e335642d.roa (raw, json) Hash identifier: B10764BRcYXv4NN3TZtEhzMThkaMGga/QBXVPmuslGw= Subject key identifier: 95:17:57:D9:12:A0:CB:0C:D3:94:F4:65:8A:77:0B:13:89:94:18:B8 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285848C150D900BCAEB41088C8A680 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b47db3b2-9230-39e2-be23-e199e335642d.roa Signing time: Mon 03 Feb 2025 02:00:39 +0000 ROA not before: Mon 03 Feb 2025 02:00:39 +0000 ROA not after: Sun 04 May 2025 01:00:39 +0000 asID: 6167 IP address blocks: 174.203.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c1:50:d9:00:bc:ae:b4:10:88:c8:a6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Feb 3 02:00:39 2025 GMT Not After : May 4 01:00:39 2025 GMT Subject: CN=469a1d38-6aa8-444b-9544-cb989b6a2a8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:84:d7:4b:ca:4f:c9:d9:25:65:20:35:55:cf: c5:fc:5d:c7:d0:5b:4b:54:13:9f:d6:1a:03:56:7d: c7:9c:70:d9:c2:30:1e:68:38:80:1f:10:1d:21:0c: 1b:2d:25:f7:ac:38:e9:76:3c:59:ee:4d:52:3c:a5: 35:b8:ae:8b:7c:45:b9:4a:1a:41:b4:33:d2:ca:0a: 26:24:6a:6f:79:36:c5:e6:3c:a3:8d:8f:fa:ba:cc: b9:3d:1f:2d:a6:68:f2:5b:1e:8c:91:4d:d9:8b:9b: ed:71:90:a9:fa:8b:49:74:fb:bd:1b:b0:12:f8:38: 65:39:ee:51:91:c6:77:3d:65:7a:f5:98:c2:80:1e: 63:a2:59:6a:54:bc:4b:26:e6:93:c7:db:3c:43:8a: 37:cb:8f:85:c6:92:5c:2e:60:0a:37:7c:16:03:34: d4:6e:96:a1:58:67:28:a3:79:a2:ae:54:68:e6:53: 10:cf:76:d6:40:b9:35:a2:de:e7:a5:0a:11:a3:8a: 92:28:0a:61:d6:2b:8c:9e:36:54:b2:c4:cd:65:ec: fd:e7:14:5b:72:30:a6:19:1f:ff:32:1b:14:38:07: 30:5f:51:e0:e6:a7:80:0e:66:02:25:f1:e1:ea:07: cb:51:ec:e9:c5:a2:19:32:92:79:b3:c8:d1:35:62: 98:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:17:57:D9:12:A0:CB:0C:D3:94:F4:65:8A:77:0B:13:89:94:18:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b47db3b2-9230-39e2-be23-e199e335642d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.203.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:c7:2a:8e:ae:4d:8d:39:0e:d2:72:70:24:95:ab:05:14:52: 94:2d:3f:ea:2a:48:1b:84:a9:5c:9c:d3:56:51:72:66:99:11: f3:5f:61:8f:6a:41:3b:48:a5:f3:51:40:aa:5c:74:de:27:f2: 3f:40:e7:3d:d5:3f:6f:fb:6d:a9:c2:0e:35:aa:c1:d9:70:c5: 62:b7:46:be:1b:c1:55:fd:32:70:be:1d:bc:c2:a6:1e:f4:db: a1:f8:8f:7e:03:0b:d0:b7:c4:6d:ae:de:cf:51:91:3a:b9:8b: 5c:fd:1c:27:cd:0c:ee:51:5b:a7:ae:c6:4f:30:48:30:c6:b7: d5:fe:18:c2:ee:58:c0:5e:f9:da:5b:c1:16:9e:23:83:28:9a: de:03:6c:49:cc:64:41:be:28:59:f5:ae:4c:24:32:e7:cd:9a: f2:e7:a1:99:71:82:b3:df:f0:fd:66:4c:d6:cc:0e:10:81:15: b1:27:b3:e6:44:b3:58:11:40:9f:09:c9:e5:f6:f6:44:ec:92: c6:8b:ad:64:73:48:c1:14:9c:4b:64:dd:32:65:62:3a:b2:bb: 37:b8:ed:40:57:9b:35:6c:0f:cc:41:87:88:7c:5b:0b:30:3e: ba:5e:bf:a7:5f:9f:2d:53:81:55:a9:f3:4c:04:37:9d:8b:90: 7c:cd:b9:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjBUNkAvK60EIjIpoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDIwMzAyMDAzOVoXDTI1MDUwNDAxMDAzOVowLzEtMCsGA1UEAxMk NDY5YTFkMzgtNmFhOC00NDRiLTk1NDQtY2I5ODliNmEyYThmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmITXS8pPydklZSA1Vc/F/F3H0FtLVBOf1hoD Vn3HnHDZwjAeaDiAHxAdIQwbLSX3rDjpdjxZ7k1SPKU1uK6LfEW5ShpBtDPSygom JGpveTbF5jyjjY/6usy5PR8tpmjyWx6MkU3Zi5vtcZCp+otJdPu9G7AS+DhlOe5R kcZ3PWV69ZjCgB5jollqVLxLJuaTx9s8Q4o3y4+FxpJcLmAKN3wWAzTUbpahWGco o3mirlRo5lMQz3bWQLk1ot7npQoRo4qSKAph1iuMnjZUssTNZez95xRbcjCmGR// MhsUOAcwX1Hg5qeADmYCJfHh6gfLUezpxaIZMpJ5s8jRNWKYbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJUXV9kSoMsM05T0ZYp3CxOJlBi4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYjQ3ZGIzYjItOTIzMC0z OWUyLWJlMjMtZTE5OWUzMzU2NDJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErsvQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAInHKo6uTY05DtJycCSVqwUUUpQtP+oqSBuEqVyc01ZRcmaZEfNfYY9q QTtIpfNRQKpcdN4n8j9A5z3VP2/7banCDjWqwdlwxWK3Rr4bwVX9MnC+HbzCph70 26H4j34DC9C3xG2u3s9RkTq5i1z9HCfNDO5RW6euxk8wSDDGt9X+GMLuWMBe+dpb wRaeI4Momt4DbEnMZEG+KFn1rkwkMufNmvLnoZlxgrPf8P1mTNbMDhCBFbEns+ZE s1gRQJ8JyeX29kTsksaLrWRzSMEUnEtk3TJlYjqyuze47UBXmzVsD8xBh4h8Wwsw Prpev6dfny1TgVWp80wEN52LkHzNueg= -----END CERTIFICATE-----Generated at Sun Apr 6 11:03:12 2025 by rpki-client