$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/083cae8d-e8d8-33c0-a28a-bf4e6f63a3f7.roa File: 083cae8d-e8d8-33c0-a28a-bf4e6f63a3f7.roa (raw, json) Hash identifier: SWCQzFkM3DGfmtKddGw6Xord8kIK1VUGfJw57wySQ5s= Subject key identifier: 92:23:09:01:0E:4D:37:68:D5:9F:8B:C7:B7:9A:5B:5E:B2:3E:62:B5 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285848E8667164BF9E93628D9680C0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/083cae8d-e8d8-33c0-a28a-bf4e6f63a3f7.roa Signing time: Mon 17 Feb 2025 02:00:38 +0000 ROA not before: Mon 17 Feb 2025 02:00:38 +0000 ROA not after: Sun 18 May 2025 01:00:38 +0000 asID: 6167 IP address blocks: 174.235.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e8:66:71:64:bf:9e:93:62:8d:96:80:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Feb 17 02:00:38 2025 GMT Not After : May 18 01:00:38 2025 GMT Subject: CN=1e8a84a0-71d0-4666-926f-bdb684e4c1e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:48:41:7a:13:c0:c8:10:fe:d7:31:a5:67:aa: 30:6e:b6:5d:d3:7c:e3:28:82:71:f1:35:4d:12:87: aa:0a:9b:5a:16:20:f0:0b:9a:34:ba:7c:98:90:ae: da:c2:29:71:5a:93:76:c9:9e:b2:84:de:53:10:f3: f3:af:81:99:6e:57:69:6b:39:66:d4:64:67:26:56: 95:ba:4b:d3:b9:a1:f9:f3:d7:35:9e:23:44:e9:dd: 1f:61:cf:ef:43:93:0b:88:68:44:63:68:9d:b7:f2: 27:d3:f0:af:98:0f:dd:94:de:c3:e7:03:09:53:90: ed:0f:aa:13:7b:50:67:0b:03:db:91:1b:3a:9c:a0: cc:8e:c6:79:a0:d5:ee:79:f4:3e:66:3e:09:df:56: c7:67:70:db:2d:5b:8b:b2:2a:88:0d:6d:54:b9:fd: fb:1e:58:49:67:05:1e:ee:5a:27:d5:f7:cb:bb:a1: d6:0c:08:2a:ac:00:97:9d:06:ff:a8:9b:64:ca:3f: ff:c7:a0:b8:37:ce:fc:df:79:12:b9:73:77:98:d0: 1c:26:f1:6b:d2:46:b1:8e:6a:27:60:52:47:6d:a1: 01:52:25:ac:13:ad:c5:9e:87:64:d2:22:7d:80:cc: b4:8a:06:62:43:f3:90:60:43:ca:aa:86:f9:68:c3: 76:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:23:09:01:0E:4D:37:68:D5:9F:8B:C7:B7:9A:5B:5E:B2:3E:62:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/083cae8d-e8d8-33c0-a28a-bf4e6f63a3f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.235.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:aa:29:26:b9:7c:15:87:d6:7b:f1:4e:15:f9:ec:76:54:44: 77:9b:e9:80:48:f9:0f:1b:3e:36:ed:6f:d9:d7:04:ef:a5:3f: 4f:80:6a:9c:05:bf:94:11:fb:4d:23:c6:59:95:bc:7e:a9:ea: 2b:c2:0e:8b:a7:f4:c3:9f:22:b3:03:17:04:eb:76:16:89:d1: 73:7e:97:82:9b:01:9b:02:e0:a7:0d:db:71:fe:d8:94:2b:6f: ae:2a:08:10:30:65:49:e6:d9:90:02:7d:1f:63:29:0c:44:3c: 5a:35:40:65:4b:f1:73:f4:c3:bb:4e:0c:4e:19:5c:b8:23:71: 05:6e:c7:62:7d:87:59:4c:af:7e:a6:6f:95:d2:7e:12:27:25: 14:b1:a6:b9:2a:61:4c:dc:1e:a1:32:78:e1:95:2d:d9:63:78: 1b:44:05:9d:e8:ef:bd:ff:95:10:a9:0c:8f:8d:a4:63:f3:ab: 1e:13:18:44:5e:df:fb:7e:47:06:0d:a6:25:11:4d:20:bb:20: 91:e2:0e:ec:2c:13:36:79:e0:33:4d:ac:8b:e9:97:02:87:8d: ad:a7:14:95:66:d7:a6:e7:c6:77:ae:00:10:c1:5b:49:b4:e0: a7:cb:08:bf:5a:84:96:60:6b:3a:a5:3d:0f:74:96:57:13:9c: b2:32:b5:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjoZnFkv56TYo2WgMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDIxNzAyMDAzOFoXDTI1MDUxODAxMDAzOFowLzEtMCsGA1UEAxMk MWU4YTg0YTAtNzFkMC00NjY2LTkyNmYtYmRiNjg0ZTRjMWUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUhBehPAyBD+1zGlZ6owbrZd03zjKIJx8TVN EoeqCptaFiDwC5o0unyYkK7awilxWpN2yZ6yhN5TEPPzr4GZbldpazlm1GRnJlaV ukvTuaH589c1niNE6d0fYc/vQ5MLiGhEY2idt/In0/CvmA/dlN7D5wMJU5DtD6oT e1BnCwPbkRs6nKDMjsZ5oNXuefQ+Zj4J31bHZ3DbLVuLsiqIDW1Uuf37HlhJZwUe 7lon1ffLu6HWDAgqrACXnQb/qJtkyj//x6C4N87833kSuXN3mNAcJvFr0kaxjmon YFJHbaEBUiWsE63Fnodk0iJ9gMy0igZiQ/OQYEPKqob5aMN2PQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJIjCQEOTTdo1Z+Lx7eaW16yPmK1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMDgzY2FlOGQtZThkOC0z M2MwLWEyOGEtYmY0ZTZmNjNhM2Y3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEruvAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADGqKSa5fBWH1nvxThX57HZURHeb6YBI+Q8bPjbtb9nXBO+lP0+AapwF v5QR+00jxlmVvH6p6ivCDoun9MOfIrMDFwTrdhaJ0XN+l4KbAZsC4KcN23H+2JQr b64qCBAwZUnm2ZACfR9jKQxEPFo1QGVL8XP0w7tODE4ZXLgjcQVux2J9h1lMr36m b5XSfhInJRSxprkqYUzcHqEyeOGVLdljeBtEBZ3o773/lRCpDI+NpGPzqx4TGERe 3/t+RwYNpiURTSC7IJHiDuwsEzZ54DNNrIvplwKHja2nFJVm16bnxneuABDBW0m0 4KfLCL9ahJZgazqlPQ90llcTnLIytZE= -----END CERTIFICATE-----Generated at Sun Apr 27 05:39:03 2025 by rpki-client