$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0cc8d741-6753-3819-a62b-15af04ee2afd.roa File: 0cc8d741-6753-3819-a62b-15af04ee2afd.roa (raw, json) Hash identifier: KzxoKWouyNNfjaH8/+E2GzyV7dOr2Yug9EHqbKbZ7og= Subject key identifier: 83:CA:02:7B:4F:13:64:F9:3C:B0:F1:11:47:90:B0:18:91:BB:04:85 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849A089EACC758C01496F137880 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0cc8d741-6753-3819-a62b-15af04ee2afd.roa Signing time: Thu 24 Apr 2025 01:00:47 +0000 ROA not before: Thu 24 Apr 2025 01:00:47 +0000 ROA not after: Wed 23 Jul 2025 01:00:47 +0000 asID: 6167 IP address blocks: 174.196.56.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a0:89:ea:cc:75:8c:01:49:6f:13:78:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 24 01:00:47 2025 GMT Not After : Jul 23 01:00:47 2025 GMT Subject: CN=87a4b6f0-3df9-4ded-a7a6-27d127f8dbcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:83:ea:26:eb:d0:5e:7c:02:19:c4:0b:27:45: b8:64:4b:c8:2a:ad:97:9b:29:14:24:4e:6b:9b:fd: 14:39:a8:cf:58:51:d3:f2:b6:f5:ab:58:e0:44:64: cd:06:b2:ea:78:4f:76:11:b0:8b:24:49:f0:81:f5: a7:bb:f6:e2:b0:be:1c:b7:4f:1b:93:96:ad:94:57: 23:7c:39:3c:e9:ac:0b:3f:f5:3b:f5:84:d3:bc:60: 41:60:7f:3d:d1:4c:2a:4f:83:0c:bb:91:11:92:89: 57:76:01:06:27:38:89:e0:20:e5:9c:34:59:be:d4: e7:6c:4f:50:cc:8e:6c:ec:40:96:85:d1:f2:95:75: d0:d3:18:45:26:b3:dc:e6:da:89:1d:7f:c3:ec:5d: 2f:ad:2f:81:7b:54:92:cf:22:59:de:3d:81:ea:ab: de:bf:e8:09:99:17:20:97:89:56:b8:2b:21:39:48: 47:f3:6d:7c:6b:55:21:27:9f:2b:01:e4:d4:6f:62: 2b:e7:83:68:e8:89:ef:12:14:65:d9:c8:25:ba:7f: 50:bf:82:d0:1f:96:ab:e8:15:b4:3d:9e:84:6f:da: 3d:d8:5e:e4:ee:1b:ba:ed:3f:84:67:ed:1a:da:f3: 5e:56:b2:c5:30:72:dc:43:cc:e0:fc:61:de:ab:40: b9:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:CA:02:7B:4F:13:64:F9:3C:B0:F1:11:47:90:B0:18:91:BB:04:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0cc8d741-6753-3819-a62b-15af04ee2afd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.196.56.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:8c:ee:20:f1:ad:f7:23:d1:1c:dd:01:46:77:b7:13:11:80: 7e:f8:f7:fd:4a:c6:96:a3:12:76:0c:fb:ff:90:29:66:25:82: cb:76:62:24:d4:94:11:5a:e3:2c:2b:b7:58:2e:9c:92:56:cb: 0b:48:fc:07:5d:43:34:ad:18:be:55:e1:a1:df:20:dc:79:ab: 50:3e:69:8e:de:be:d3:41:30:81:44:f4:ac:25:cb:1f:6e:31: 41:ba:50:aa:ec:dd:33:8a:2a:e4:70:43:0d:11:a9:c8:67:e5: 20:b1:f1:8b:2f:7f:5e:29:4f:7b:a2:0d:63:1b:51:7f:b8:d0: c1:0a:1e:49:12:86:d2:7f:ba:51:55:56:06:13:83:24:df:80: c4:6b:3b:46:ac:84:33:5a:7c:cc:a7:2c:0c:11:de:8f:ad:6c: 03:8b:35:b0:7f:f0:b4:cf:9f:90:68:a5:a1:4e:6c:fc:e9:7d: b1:e2:1e:ec:7c:fe:da:38:87:72:32:07:0c:5a:05:c2:68:6b: 5f:9c:4d:38:18:9d:ac:80:e1:4c:d1:a1:b7:74:7e:a4:d6:2b: ef:8b:9a:7e:7b:57:4c:f2:42:ec:43:2d:4c:84:70:be:8a:07: d1:57:3c:37:a1:16:c1:71:18:5b:ea:fc:c6:d2:10:b5:81:1f: fb:33:b0:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmgierMdYwBSW8TeIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDQyNDAxMDA0N1oXDTI1MDcyMzAxMDA0N1owLzEtMCsGA1UEAxMk ODdhNGI2ZjAtM2RmOS00ZGVkLWE3YTYtMjdkMTI3ZjhkYmNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvoPqJuvQXnwCGcQLJ0W4ZEvIKq2XmykUJE5r m/0UOajPWFHT8rb1q1jgRGTNBrLqeE92EbCLJEnwgfWnu/bisL4ct08bk5atlFcj fDk86awLP/U79YTTvGBBYH890UwqT4MMu5ERkolXdgEGJziJ4CDlnDRZvtTnbE9Q zI5s7ECWhdHylXXQ0xhFJrPc5tqJHX/D7F0vrS+Be1SSzyJZ3j2B6qvev+gJmRcg l4lWuCshOUhH8218a1UhJ58rAeTUb2Ir54No6InvEhRl2cglun9Qv4LQH5ar6BW0 PZ6Eb9o92F7k7hu67T+EZ+0a2vNeVrLFMHLcQ8zg/GHeq0C5+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIPKAntPE2T5PLDxEUeQsBiRuwSFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMGNjOGQ3NDEtNjc1My0z ODE5LWE2MmItMTVhZjA0ZWUyYWZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrsQ4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACWM7iDxrfcj0RzdAUZ3txMRgH749/1KxpajEnYM+/+QKWYlgst2YiTU lBFa4ywrt1gunJJWywtI/AddQzStGL5V4aHfINx5q1A+aY7evtNBMIFE9Kwlyx9u MUG6UKrs3TOKKuRwQw0Rqchn5SCx8Ysvf14pT3uiDWMbUX+40MEKHkkShtJ/ulFV VgYTgyTfgMRrO0ashDNafMynLAwR3o+tbAOLNbB/8LTPn5BopaFObPzpfbHiHux8 /to4h3IyBwxaBcJoa1+cTTgYnayA4UzRobd0fqTWK++Lmn57V0zyQuxDLUyEcL6K B9FXPDehFsFxGFvq/MbSELWBH/szsA0= -----END CERTIFICATE-----Generated at Sun Apr 27 04:18:06 2025 by rpki-client