$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2fe6432e-e912-384e-9137-cd85e63cfabe.roa File: 2fe6432e-e912-384e-9137-cd85e63cfabe.roa (raw, json) Hash identifier: QfkAiWo4y3tNeLPoAAlgi+86BZP+nRhZluIAGqpJ/ko= Subject key identifier: 55:75:17:48:3D:96:C1:B4:D0:EE:F6:37:F1:05:AD:C5:8F:C3:AA:85 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849A089DF7FD160F1E5C7D24880 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2fe6432e-e912-384e-9137-cd85e63cfabe.roa Signing time: Thu 24 Apr 2025 01:00:47 +0000 ROA not before: Thu 24 Apr 2025 01:00:47 +0000 ROA not after: Wed 23 Jul 2025 01:00:47 +0000 asID: 6167 IP address blocks: 174.214.168.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a0:89:df:7f:d1:60:f1:e5:c7:d2:48:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 24 01:00:47 2025 GMT Not After : Jul 23 01:00:47 2025 GMT Subject: CN=d8698092-728b-400d-9093-35bd064524cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:39:d7:68:0d:ae:ee:cf:43:3c:13:da:81:7f: 56:b8:0a:5c:99:3c:18:71:53:dc:63:e3:1d:d9:56: c8:9f:f4:e4:8d:c8:b2:04:6b:6f:90:b9:23:ca:91: 45:03:a0:01:d6:09:3e:d0:46:42:77:c9:b1:6a:ca: 30:92:07:c5:e4:75:76:92:0c:ad:cf:4a:b6:44:62: a4:6c:d4:7d:83:5a:96:0c:a3:44:07:e2:39:18:7d: d8:68:ac:87:53:85:33:ea:2d:92:a0:27:32:cc:33: 39:9e:e5:ed:57:39:f3:51:4d:b6:eb:17:35:82:ba: 63:74:e7:d1:46:74:bc:b1:cc:87:1b:de:73:e0:ad: 3a:83:5f:5b:78:2b:74:1b:c4:73:14:fa:79:77:ea: 72:ab:58:d0:a9:00:f7:13:89:3e:92:36:6a:e6:19: bc:17:4f:06:2e:60:6a:f5:99:dd:df:f3:c4:37:6d: 67:7e:46:ca:26:06:2e:a2:03:b7:7b:a8:7a:ce:91: a0:07:70:67:7a:65:a4:6d:e4:27:7f:98:07:56:9e: 4a:6d:ea:4f:49:9e:a7:30:b7:bb:35:a3:54:59:0b: b0:1b:26:da:7d:cf:ae:77:9d:5b:50:13:67:91:81: 63:fa:be:fd:25:73:5b:82:04:26:97:ea:e8:e1:b4: 62:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:75:17:48:3D:96:C1:B4:D0:EE:F6:37:F1:05:AD:C5:8F:C3:AA:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2fe6432e-e912-384e-9137-cd85e63cfabe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.214.168.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:13:75:10:1d:e3:ba:da:05:b4:c8:2f:38:b7:10:09:ef:20: 4d:cd:54:c0:ef:3e:c1:d9:be:8c:79:3e:24:cf:ad:91:9b:fa: c8:f7:50:56:91:7d:e8:c4:f1:fe:aa:13:5b:74:a3:76:7d:7a: 88:be:ad:da:c6:ba:bf:2e:4d:d6:2d:a6:03:62:26:0f:d2:8b: a8:4b:b5:93:a3:3d:60:d2:dd:a8:0a:15:d0:8c:2e:d1:77:04: 5a:31:bb:ac:6d:7f:20:e2:9b:06:cd:42:11:d1:e8:53:33:ff: 5c:70:ef:de:39:93:ef:01:13:07:c1:be:a8:5d:70:59:8c:5b: 79:c4:1b:7f:78:40:ef:ad:89:68:0b:19:33:78:56:51:92:26: 5f:db:99:92:72:ab:f8:8c:3e:ae:65:32:1a:54:d4:2e:7c:53: 2d:1e:f3:2a:71:bb:26:e2:66:af:7c:fe:a9:ed:38:76:79:47: 8f:dc:9e:04:23:61:d0:bb:5d:5e:55:77:9d:db:24:ff:bd:22: 69:90:cb:6b:fe:5c:aa:9c:d3:f7:ea:05:3b:38:a9:58:84:c1: 89:72:7f:7b:9a:19:47:1b:e2:b8:b4:02:aa:c2:50:b5:69:52: 4f:29:27:6c:b0:ce:03:eb:62:5b:df:0d:a1:f2:cb:d9:60:56: 5b:66:e7:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmgid9/0WDx5cfSSIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDQyNDAxMDA0N1oXDTI1MDcyMzAxMDA0N1owLzEtMCsGA1UEAxMk ZDg2OTgwOTItNzI4Yi00MDBkLTkwOTMtMzViZDA2NDUyNGNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgTnXaA2u7s9DPBPagX9WuApcmTwYcVPcY+Md 2VbIn/TkjciyBGtvkLkjypFFA6AB1gk+0EZCd8mxasowkgfF5HV2kgytz0q2RGKk bNR9g1qWDKNEB+I5GH3YaKyHU4Uz6i2SoCcyzDM5nuXtVznzUU226xc1grpjdOfR RnS8scyHG95z4K06g19beCt0G8RzFPp5d+pyq1jQqQD3E4k+kjZq5hm8F08GLmBq 9Znd3/PEN21nfkbKJgYuogO3e6h6zpGgB3BnemWkbeQnf5gHVp5KbepPSZ6nMLe7 NaNUWQuwGybafc+ud51bUBNnkYFj+r79JXNbggQml+ro4bRiewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFV1F0g9lsG00O72N/EFrcWPw6qFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMmZlNjQzMmUtZTkxMi0z ODRlLTkxMzctY2Q4NWU2M2NmYWJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrtaoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIoTdRAd47raBbTILzi3EAnvIE3NVMDvPsHZvox5PiTPrZGb+sj3UFaR fejE8f6qE1t0o3Z9eoi+rdrGur8uTdYtpgNiJg/Si6hLtZOjPWDS3agKFdCMLtF3 BFoxu6xtfyDimwbNQhHR6FMz/1xw7945k+8BEwfBvqhdcFmMW3nEG394QO+tiWgL GTN4VlGSJl/bmZJyq/iMPq5lMhpU1C58Uy0e8ypxuybiZq98/qntOHZ5R4/cngQj YdC7XV5Vd53bJP+9ImmQy2v+XKqc0/fqBTs4qViEwYlyf3uaGUcb4ri0AqrCULVp Uk8pJ2ywzgPrYlvfDaHyy9lgVltm578= -----END CERTIFICATE-----Generated at Sun Apr 27 20:04:06 2025 by rpki-client