$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2bd41e88-8566-3178-8f4f-9211927aab1b.roa File: 2bd41e88-8566-3178-8f4f-9211927aab1b.roa (raw, json) Hash identifier: ltj4PE1PArI7qHgDlmc8rXq6CEeAkEw8sINaiXNsne8= Subject key identifier: 5D:0E:1C:B6:03:E9:E8:AF:E8:C2:89:18:57:4E:75:63:19:2F:9A:5D Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849A089DF65BFA18FBA86E2AAE8 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2bd41e88-8566-3178-8f4f-9211927aab1b.roa Signing time: Thu 24 Apr 2025 01:00:47 +0000 ROA not before: Thu 24 Apr 2025 01:00:47 +0000 ROA not after: Wed 23 Jul 2025 01:00:47 +0000 asID: 6167 IP address blocks: 174.214.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a0:89:df:65:bf:a1:8f:ba:86:e2:aa:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 24 01:00:47 2025 GMT Not After : Jul 23 01:00:47 2025 GMT Subject: CN=2bb781eb-6b2c-4fad-9d3c-44e659bfef73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:fc:24:82:97:7d:00:d3:d8:31:00:2f:95:2e: 5b:fc:84:1a:19:31:f2:1a:ed:8e:18:08:69:e7:69: 4a:01:00:2d:d1:39:0f:2f:e8:cf:3f:13:81:c9:9c: 44:f3:7d:82:b6:21:64:e0:0e:46:11:09:11:5f:68: 93:a1:cb:bf:f2:2c:6d:9d:a0:2d:26:46:62:50:e0: 34:e8:2f:68:a4:4d:1c:76:2f:c0:8b:ed:96:04:02: 30:31:7c:b2:44:c6:1c:bb:ea:48:8b:1d:bc:30:18: 0c:aa:e8:90:27:31:5d:69:bf:09:3d:bc:9f:63:26: 52:c3:e5:ca:a1:39:fe:da:43:46:65:8e:80:21:a4: 26:3d:b4:bc:d8:c6:77:c8:7b:67:7f:0e:fd:9c:0d: 92:b2:71:f3:93:8f:4d:0d:b6:ca:4f:84:f1:1d:3e: 62:63:2b:eb:95:5f:ce:9a:81:c3:d3:2d:19:8c:60: d2:7f:c8:64:05:9e:94:73:63:51:4e:64:63:a3:d2: fb:46:60:15:b9:38:dc:46:88:dc:d2:dc:82:ef:25: 54:b1:f9:3b:52:c8:49:01:50:db:01:0c:d7:e7:a8: f8:4e:f5:47:dd:ca:da:64:df:23:e5:d4:da:b2:e1: f2:d9:01:bf:7f:e5:f6:8d:ca:a9:77:53:66:a5:3b: ec:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:0E:1C:B6:03:E9:E8:AF:E8:C2:89:18:57:4E:75:63:19:2F:9A:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2bd41e88-8566-3178-8f4f-9211927aab1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.214.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:83:06:ad:b9:91:78:35:e5:b6:dc:14:40:c5:b1:55:3a:9d: de:93:2a:d0:2a:31:06:dc:d7:4c:9c:83:71:f5:d1:83:02:fd: 37:cb:9d:72:48:fc:8b:10:8a:9e:25:ca:ec:ad:e0:94:12:92: 6b:73:28:79:e5:85:38:f5:67:e0:82:71:77:ab:5c:2f:03:83: a2:05:ae:3c:1e:3a:8c:45:e0:d0:d3:82:32:a9:d7:88:db:a1: cb:82:0f:a9:e5:9b:52:c3:3d:a9:9a:25:7e:52:5a:cf:92:a6: 05:41:80:e9:36:c4:6c:f6:0c:d2:2b:e2:35:55:4a:40:0c:a4: 36:cd:e1:56:dd:73:00:5d:e6:88:f5:f5:3a:cc:ee:e8:12:41: f1:0d:32:18:22:23:a2:97:fc:20:46:df:51:56:71:b9:23:34: b3:0c:57:1a:1e:44:f4:c9:8d:45:8d:c1:c7:b2:a5:3f:b1:f1: d0:24:3b:fb:22:0b:e2:7b:83:a1:1d:54:4c:ab:e0:0a:0b:b6: 01:e2:68:55:a7:ff:73:eb:f9:b9:87:b2:1d:dd:a7:66:8f:0a: 43:a4:d2:96:4d:5a:50:97:ed:d5:91:31:11:1b:c1:08:72:49: e2:83:ca:b9:41:a9:52:f5:3e:0e:42:80:fe:63:0c:58:d6:d1: 5a:38:12:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmgid9lv6GPuobiqugwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDQyNDAxMDA0N1oXDTI1MDcyMzAxMDA0N1owLzEtMCsGA1UEAxMk MmJiNzgxZWItNmIyYy00ZmFkLTlkM2MtNDRlNjU5YmZlZjczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPwkgpd9ANPYMQAvlS5b/IQaGTHyGu2OGAhp 52lKAQAt0TkPL+jPPxOByZxE832CtiFk4A5GEQkRX2iTocu/8ixtnaAtJkZiUOA0 6C9opE0cdi/Ai+2WBAIwMXyyRMYcu+pIix28MBgMquiQJzFdab8JPbyfYyZSw+XK oTn+2kNGZY6AIaQmPbS82MZ3yHtnfw79nA2SsnHzk49NDbbKT4TxHT5iYyvrlV/O moHD0y0ZjGDSf8hkBZ6Uc2NRTmRjo9L7RmAVuTjcRojc0tyC7yVUsfk7UshJAVDb AQzX56j4TvVH3craZN8j5dTasuHy2QG/f+X2jcqpd1NmpTvs4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF0OHLYD6eiv6MKJGFdOdWMZL5pdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMmJkNDFlODgtODU2Ni0z MTc4LThmNGYtOTIxMTkyN2FhYjFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErtZAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJeDBq25kXg15bbcFEDFsVU6nd6TKtAqMQbc10ycg3H10YMC/TfLnXJI /IsQip4lyuyt4JQSkmtzKHnlhTj1Z+CCcXerXC8Dg6IFrjweOoxF4NDTgjKp14jb ocuCD6nlm1LDPamaJX5SWs+SpgVBgOk2xGz2DNIr4jVVSkAMpDbN4VbdcwBd5oj1 9TrM7ugSQfENMhgiI6KX/CBG31FWcbkjNLMMVxoeRPTJjUWNwceypT+x8dAkO/si C+J7g6EdVEyr4AoLtgHiaFWn/3Pr+bmHsh3dp2aPCkOk0pZNWlCX7dWRMREbwQhy SeKDyrlBqVL1Pg5CgP5jDFjW0Vo4EoA= -----END CERTIFICATE-----Generated at Sat Apr 26 23:02:19 2025 by rpki-client