$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/217c3780-79fc-3d72-b808-8b5261b4d13a.roa File: 217c3780-79fc-3d72-b808-8b5261b4d13a.roa (raw, json) Hash identifier: u6eSX2TN1+g01QfyL1jsUuIlw6TyBW3c9pBha7kzfl0= Subject key identifier: F5:5E:BD:47:82:39:CF:45:1C:14:21:E9:22:1D:DB:62:F4:0E:47:82 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849A089EE82BFDCCB7B35C04F00 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/217c3780-79fc-3d72-b808-8b5261b4d13a.roa Signing time: Thu 24 Apr 2025 01:00:47 +0000 ROA not before: Thu 24 Apr 2025 01:00:47 +0000 ROA not after: Wed 23 Jul 2025 01:00:47 +0000 asID: 6167 IP address blocks: 174.213.68.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a0:89:ee:82:bf:dc:cb:7b:35:c0:4f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 24 01:00:47 2025 GMT Not After : Jul 23 01:00:47 2025 GMT Subject: CN=f50e6373-45d7-4000-96bd-d8f9fbf6d745 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:00:18:52:d7:d7:97:ae:94:16:6a:cf:a4:53: d8:68:97:bd:5d:9e:60:8b:1a:76:ff:09:93:11:79: 70:f4:aa:2d:fe:54:47:36:2f:4d:fa:36:69:dd:85: 58:26:c6:91:37:50:fb:e9:40:23:b3:a6:af:3a:d0: e1:e3:92:a5:e0:93:b2:a8:91:32:e2:0c:ce:21:47: 90:d1:fc:18:0f:3c:df:55:7d:10:12:92:8d:14:31: 75:d7:2b:86:b0:55:ba:94:08:c9:ee:3d:26:7f:84: ed:7c:d9:02:80:ce:d7:bc:ac:b2:9c:d8:05:1e:fc: db:20:06:a0:2c:56:ce:e1:2e:6e:8d:55:02:ab:3e: fb:4a:cd:b5:be:b5:a0:43:3f:60:77:9a:c9:a3:fb: e4:cd:2c:a9:18:fa:a1:a7:56:8f:6c:d4:fa:14:81: 9f:58:68:f7:51:e7:17:bb:68:95:79:f0:d9:56:22: 84:da:a4:2f:7e:66:22:38:b7:ba:5b:ee:63:c4:db: 0d:a5:1d:eb:7d:e5:c7:fe:8c:b9:9d:c2:de:88:1a: 33:e7:15:e6:8c:be:05:43:9e:15:95:66:f9:56:55: e1:56:fb:14:57:19:76:ee:3b:d5:55:42:5c:0c:14: bd:32:91:f4:fe:b4:e8:f9:1f:66:09:0b:54:8f:15: 4e:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:5E:BD:47:82:39:CF:45:1C:14:21:E9:22:1D:DB:62:F4:0E:47:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/217c3780-79fc-3d72-b808-8b5261b4d13a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.213.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:53:0c:95:3a:c9:4e:38:7c:1c:29:ae:a5:1c:03:7f:16:00: 23:cb:5f:e4:a3:9a:ca:ca:b4:27:0e:18:91:de:93:60:fc:1d: d5:32:57:68:07:33:f9:53:30:32:04:07:56:38:ab:3d:06:52: 2c:bc:5f:ed:a5:b4:ca:7c:d7:84:2b:3c:9d:f2:27:ae:6b:e7: f0:63:f1:be:d0:51:41:72:1f:f9:a5:ff:03:0f:9c:92:2b:94: 64:22:db:f6:b8:ef:19:4f:1f:a6:5b:60:17:0c:25:25:49:95: 20:de:ee:21:28:6d:db:45:fb:a5:9c:fb:c2:d5:d2:f1:92:9d: f5:af:02:2d:98:27:a1:f5:a5:b2:ea:62:99:c6:60:68:94:28: 77:b6:e3:0e:c7:89:63:48:65:88:ad:2f:f3:d5:28:77:a4:fd: ab:67:04:50:ca:85:6e:84:e6:26:1f:dd:92:5d:dd:f9:9f:36: bd:19:98:fa:d7:85:86:cc:b4:0f:c1:f6:85:a9:04:5f:12:13: 15:f7:57:06:26:4b:bf:b1:86:95:6e:7c:63:a2:6f:56:e1:83: 81:a9:94:56:57:9d:e9:8f:04:d6:0b:07:65:3b:e3:05:e0:3b: d2:8b:91:61:1d:b4:8b:66:fa:9e:11:1f:c3:64:a6:25:62:d4: ec:e4:8c:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmgie6Cv9zLezXATwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDQyNDAxMDA0N1oXDTI1MDcyMzAxMDA0N1owLzEtMCsGA1UEAxMk ZjUwZTYzNzMtNDVkNy00MDAwLTk2YmQtZDhmOWZiZjZkNzQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwAYUtfXl66UFmrPpFPYaJe9XZ5gixp2/wmT EXlw9Kot/lRHNi9N+jZp3YVYJsaRN1D76UAjs6avOtDh45Kl4JOyqJEy4gzOIUeQ 0fwYDzzfVX0QEpKNFDF11yuGsFW6lAjJ7j0mf4TtfNkCgM7XvKyynNgFHvzbIAag LFbO4S5ujVUCqz77Ss21vrWgQz9gd5rJo/vkzSypGPqhp1aPbNT6FIGfWGj3UecX u2iVefDZViKE2qQvfmYiOLe6W+5jxNsNpR3rfeXH/oy5ncLeiBoz5xXmjL4FQ54V lWb5VlXhVvsUVxl27jvVVUJcDBS9MpH0/rTo+R9mCQtUjxVOnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPVevUeCOc9FHBQh6SId22L0DkeCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMjE3YzM3ODAtNzlmYy0z ZDcyLWI4MDgtOGI1MjYxYjRkMTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrtVEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABpTDJU6yU44fBwprqUcA38WACPLX+SjmsrKtCcOGJHek2D8HdUyV2gH M/lTMDIEB1Y4qz0GUiy8X+2ltMp814QrPJ3yJ65r5/Bj8b7QUUFyH/ml/wMPnJIr lGQi2/a47xlPH6ZbYBcMJSVJlSDe7iEobdtF+6Wc+8LV0vGSnfWvAi2YJ6H1pbLq YpnGYGiUKHe24w7HiWNIZYitL/PVKHek/atnBFDKhW6E5iYf3ZJd3fmfNr0ZmPrX hYbMtA/B9oWpBF8SExX3VwYmS7+xhpVufGOib1bhg4GplFZXnemPBNYLB2U74wXg O9KLkWEdtItm+p4RH8NkpiVi1OzkjEE= -----END CERTIFICATE-----Generated at Sun Apr 27 00:24:36 2025 by rpki-client