$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/06678aea-69e2-33a7-a0d2-04432ccce437.roa File: 06678aea-69e2-33a7-a0d2-04432ccce437.roa (raw, json) Hash identifier: AK0my129CPSn9TBVJFHh+IL011p2iS2jdR7Rc0pBinM= Subject key identifier: CA:A2:23:1E:9E:28:09:9D:4A:20:04:E8:65:DD:A6:F4:E7:74:4E:5A Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285848EF61772261CAB4B73A45AF00 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/06678aea-69e2-33a7-a0d2-04432ccce437.roa Signing time: Wed 19 Feb 2025 14:00:52 +0000 ROA not before: Wed 19 Feb 2025 14:00:52 +0000 ROA not after: Tue 20 May 2025 13:00:52 +0000 asID: 22394 IP address blocks: 174.41.232.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ef:61:77:22:61:ca:b4:b7:3a:45:af:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Feb 19 14:00:52 2025 GMT Not After : May 20 13:00:52 2025 GMT Subject: CN=41ceb398-8f78-485d-9736-debc16b0fc69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:79:9d:72:f5:40:4a:bb:de:4e:b8:04:c0:23: 4f:03:a6:2c:eb:94:55:a0:2a:81:1e:0f:a6:01:35: ed:bc:67:63:ad:8a:d5:3a:b1:3e:a1:bb:f1:38:ed: 99:f6:2c:e5:07:84:f1:3a:24:09:64:0a:55:29:11: e2:7c:23:45:b4:77:d1:66:04:b4:da:ce:ed:22:95: 7d:63:1f:44:e7:f2:8d:98:de:5a:19:36:c1:ad:ac: c7:be:0f:98:27:53:f5:93:b8:62:ec:d1:53:ec:56: 1c:6d:7b:17:a7:ba:30:42:e9:a0:5b:77:b6:7c:e0: 94:05:ed:36:f9:f9:d6:b4:ec:32:a9:ed:d5:6c:f6: 71:5d:69:c6:55:72:f3:fd:8c:0c:69:39:52:f8:5a: b3:1e:fb:df:33:05:62:b3:9f:7b:91:8e:b0:0c:1b: f0:c6:ff:3c:87:7f:df:83:97:49:d7:d1:c6:f8:db: 7f:b3:01:37:88:28:26:5a:6d:14:f5:62:df:46:7d: 6c:49:6d:72:03:80:a6:4d:11:09:37:57:57:1d:40: 87:a3:31:4e:28:dc:92:86:a2:1e:30:e9:8d:64:79: 59:ec:75:6d:1b:78:ac:a4:59:e8:38:0a:9b:46:77: 1f:61:3f:10:0e:2d:62:56:d9:1c:a3:4f:60:a2:da: 45:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:A2:23:1E:9E:28:09:9D:4A:20:04:E8:65:DD:A6:F4:E7:74:4E:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/06678aea-69e2-33a7-a0d2-04432ccce437.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.41.232.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:84:30:c8:2d:3a:fa:f4:a4:33:30:b6:f8:a7:6b:76:3d:87: 73:63:1f:fe:35:94:72:39:08:5d:fe:ca:3b:17:0d:b4:cd:61: d4:09:35:20:02:77:e0:50:28:38:33:f9:d6:06:09:4a:30:b3: 49:0a:40:6c:50:9e:6d:a5:8b:79:22:67:a0:a1:ad:03:ae:ae: d6:87:44:44:5a:4f:fd:da:ee:08:6a:76:96:9a:29:54:0e:52: ec:b1:ee:3e:d4:ab:38:fd:9c:9a:c2:64:cb:ef:2b:5e:13:6c: 56:87:fa:e3:36:22:2c:c5:06:3f:9f:37:3a:8d:ac:fe:c4:8f: 24:51:35:5a:27:ac:e8:2a:3e:35:38:03:45:24:98:63:d6:ea: 0f:62:6d:7c:6b:86:32:e8:f5:ee:f9:67:a9:ec:1c:a8:7e:eb: 28:4e:45:01:f0:70:f9:65:1d:ac:5c:30:85:00:48:ec:ab:79: 76:dc:b4:21:05:96:2f:8a:05:89:51:3e:25:98:af:37:7f:e2: 28:fe:d6:19:d0:51:ba:b5:3b:8a:51:8f:64:ec:1c:2c:d9:5a: 87:01:2f:8a:f8:fb:e3:b0:fd:51:8e:85:6c:0b:d7:b7:12:3b: ae:3b:ed:f8:8f:28:2e:f5:3f:c0:40:43:ea:c8:91:64:5d:6a: fb:d7:ac:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjvYXciYcq0tzpFrwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk NDFjZWIzOTgtOGY3OC00ODVkLTk3MzYtZGViYzE2YjBmYzY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhXmdcvVASrveTrgEwCNPA6Ys65RVoCqBHg+m ATXtvGdjrYrVOrE+obvxOO2Z9izlB4TxOiQJZApVKRHifCNFtHfRZgS02s7tIpV9 Yx9E5/KNmN5aGTbBrazHvg+YJ1P1k7hi7NFT7FYcbXsXp7owQumgW3e2fOCUBe02 +fnWtOwyqe3VbPZxXWnGVXLz/YwMaTlS+FqzHvvfMwVis597kY6wDBvwxv88h3/f g5dJ19HG+Nt/swE3iCgmWm0U9WLfRn1sSW1yA4CmTREJN1dXHUCHozFOKNyShqIe MOmNZHlZ7HVtG3ispFnoOAqbRncfYT8QDi1iVtkco09gotpFnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMqiIx6eKAmdSiAE6GXdpvTndE5aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMDY2NzhhZWEtNjllMi0z M2E3LWEwZDItMDQ0MzJjY2NlNDM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrinoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGKEMMgtOvr0pDMwtvina3Y9h3NjH/41lHI5CF3+yjsXDbTNYdQJNSAC d+BQKDgz+dYGCUows0kKQGxQnm2li3kiZ6ChrQOurtaHRERaT/3a7ghqdpaaKVQO Uuyx7j7Uqzj9nJrCZMvvK14TbFaH+uM2IizFBj+fNzqNrP7EjyRRNVonrOgqPjU4 A0UkmGPW6g9ibXxrhjLo9e75Z6nsHKh+6yhORQHwcPllHaxcMIUASOyreXbctCEF li+KBYlRPiWYrzd/4ij+1hnQUbq1O4pRj2TsHCzZWocBL4r4++Ow/VGOhWwL17cS O6477fiPKC71P8BAQ+rIkWRdavvXrFk= -----END CERTIFICATE-----Generated at Sun Apr 27 04:01:17 2025 by rpki-client