$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0907cb8e-034a-3644-a753-6961f2f1501d.roa File: 0907cb8e-034a-3644-a753-6961f2f1501d.roa (raw, json) Hash identifier: LtmhFKeskg0EYWsUP9AEKJq1UVhTsLTwhLsh9p582ls= Subject key identifier: 88:30:AF:06:0A:84:59:AD:BA:90:A6:F8:1E:B5:87:CD:40:4B:79:8A Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849A089E2E18826D8AF5E7A2C80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0907cb8e-034a-3644-a753-6961f2f1501d.roa Signing time: Thu 24 Apr 2025 01:00:47 +0000 ROA not before: Thu 24 Apr 2025 01:00:47 +0000 ROA not after: Wed 23 Jul 2025 01:00:47 +0000 asID: 6167 IP address blocks: 174.218.158.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a0:89:e2:e1:88:26:d8:af:5e:7a:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 24 01:00:47 2025 GMT Not After : Jul 23 01:00:47 2025 GMT Subject: CN=515751dd-d3f0-424b-9880-7e8afbc448a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:ce:6f:37:fe:2b:d6:0c:b2:80:29:b5:24:91: 72:4e:e8:61:87:28:48:e8:a9:6f:f0:aa:74:d6:f5: 76:78:bc:65:e5:15:1d:6a:a4:40:d8:bc:d4:76:d4: 6a:0a:18:e2:54:80:ff:05:54:27:5f:cf:62:7b:6a: 37:fb:84:81:4b:27:35:cb:bd:58:3a:1e:7f:92:02: eb:3f:57:67:6e:5a:58:00:ac:a5:02:a5:0a:c9:10: be:b4:00:95:82:d2:b1:d8:3f:7f:d4:66:6b:8b:a5: 35:ef:dd:8d:63:85:5a:3f:6d:95:45:c5:67:42:e8: 43:3a:76:b2:1b:fc:82:f0:4f:65:82:7d:d2:a5:5e: e1:4f:ee:92:c1:66:1e:26:64:ae:b2:f5:ed:ea:62: cb:cd:c7:66:f2:eb:56:46:32:89:71:af:b8:21:ba: d8:54:81:a2:a0:c5:9f:3c:57:4d:6f:21:11:5d:b5: 69:39:3a:cf:61:b3:06:b8:b7:fd:cf:96:6a:37:cb: aa:c5:4e:fe:29:37:84:0d:be:de:63:0d:1d:26:2e: ba:31:fe:e2:70:71:06:0c:7d:49:d8:36:97:6d:5f: d3:61:8e:14:ce:bc:a4:36:16:e1:c3:a4:0f:a4:6d: 8d:53:09:47:f5:7c:b8:c9:47:00:1b:5f:d0:60:61: ad:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:30:AF:06:0A:84:59:AD:BA:90:A6:F8:1E:B5:87:CD:40:4B:79:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0907cb8e-034a-3644-a753-6961f2f1501d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.218.158.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:29:6c:ed:a9:d8:6c:bb:9e:a4:5d:9b:06:e0:2f:59:b8:8e: 99:50:75:a6:1f:b4:05:78:28:4c:ed:56:b2:bf:bc:87:8a:5f: db:d3:de:b7:3b:50:e6:d2:42:cd:09:5d:6d:9d:e1:f6:2f:3c: 34:68:7b:b0:dd:8a:9f:4c:87:ae:a0:3d:63:60:7e:b2:72:47: 6b:90:a3:a0:db:7a:8f:0e:11:e6:e1:01:14:39:b1:17:23:e2: a2:63:95:c9:42:4c:e1:91:f9:47:45:9f:c7:be:e6:5f:3d:48: e8:1a:7f:cc:46:b6:ed:05:e0:09:c2:20:ed:7a:21:17:8d:ce: d3:d1:ef:e3:26:fa:05:02:c6:a3:d2:64:85:a3:5f:9d:39:99: 42:d8:1e:d7:22:e0:84:59:a0:cc:16:52:5b:58:b6:f2:1e:f3: 01:ca:ad:59:95:ed:7a:e7:2e:60:b1:2d:6f:88:1f:ef:0e:4e: 6c:fe:87:37:25:6c:81:d9:ee:a9:0b:8b:84:72:bb:e8:e3:13: d0:4e:d6:4c:a5:16:d6:57:40:c8:dc:1e:fe:26:fc:64:8b:63: 99:a3:50:0b:f4:84:f0:f0:ea:86:5f:e2:c2:d1:bf:9a:8b:ef: df:30:b5:57:90:71:b4:0e:b0:ba:a8:94:c0:b7:b6:4c:c0:25: 47:0c:e3:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmgieLhiCbYr156LIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDQyNDAxMDA0N1oXDTI1MDcyMzAxMDA0N1owLzEtMCsGA1UEAxMk NTE1NzUxZGQtZDNmMC00MjRiLTk4ODAtN2U4YWZiYzQ0OGE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiM5vN/4r1gyygCm1JJFyTuhhhyhI6Klv8Kp0 1vV2eLxl5RUdaqRA2LzUdtRqChjiVID/BVQnX89ie2o3+4SBSyc1y71YOh5/kgLr P1dnblpYAKylAqUKyRC+tACVgtKx2D9/1GZri6U1792NY4VaP22VRcVnQuhDOnay G/yC8E9lgn3SpV7hT+6SwWYeJmSusvXt6mLLzcdm8utWRjKJca+4IbrYVIGioMWf PFdNbyERXbVpOTrPYbMGuLf9z5ZqN8uqxU7+KTeEDb7eYw0dJi66Mf7icHEGDH1J 2DaXbV/TYY4UzrykNhbhw6QPpG2NUwlH9Xy4yUcAG1/QYGGtbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIgwrwYKhFmtupCm+B61h81AS3mKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMDkwN2NiOGUtMDM0YS0z NjQ0LWE3NTMtNjk2MWYyZjE1MDFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrtqeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALYpbO2p2Gy7nqRdmwbgL1m4jplQdaYftAV4KEztVrK/vIeKX9vT3rc7 UObSQs0JXW2d4fYvPDRoe7Ddip9Mh66gPWNgfrJyR2uQo6Dbeo8OEebhARQ5sRcj 4qJjlclCTOGR+UdFn8e+5l89SOgaf8xGtu0F4AnCIO16IReNztPR7+Mm+gUCxqPS ZIWjX505mULYHtci4IRZoMwWUltYtvIe8wHKrVmV7XrnLmCxLW+IH+8OTmz+hzcl bIHZ7qkLi4Ryu+jjE9BO1kylFtZXQMjcHv4m/GSLY5mjUAv0hPDw6oZf4sLRv5qL 798wtVeQcbQOsLqolMC3tkzAJUcM42M= -----END CERTIFICATE-----Generated at Sat Apr 26 23:01:12 2025 by rpki-client