$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/35a6baf9-6504-389c-8368-f75a35c0fbe6.roa File: 35a6baf9-6504-389c-8368-f75a35c0fbe6.roa (raw, json) Hash identifier: +wat0QFQW7TG3e2YiUnQ1nWE+5fsjv4gg2jbWxJIibY= Subject key identifier: 3E:36:0C:B1:FD:72:AA:0B:B7:7B:1B:57:88:7D:3E:1C:23:32:68:E1 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849A089DFCE6CE5F1DB6C72A000 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/35a6baf9-6504-389c-8368-f75a35c0fbe6.roa Signing time: Thu 24 Apr 2025 01:00:47 +0000 ROA not before: Thu 24 Apr 2025 01:00:47 +0000 ROA not after: Wed 23 Jul 2025 01:00:47 +0000 asID: 6167 IP address blocks: 174.214.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a0:89:df:ce:6c:e5:f1:db:6c:72:a0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 24 01:00:47 2025 GMT Not After : Jul 23 01:00:47 2025 GMT Subject: CN=03458520-1b38-47db-b8d5-f677e31d832e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f4:d0:8a:70:7a:f7:01:d4:0f:39:1c:ba:1a: 12:a3:b3:ab:7b:43:36:e0:d5:f4:c2:42:f1:ed:fb: fc:e8:fd:81:65:a5:ee:1a:58:dd:3e:32:61:5a:dd: cb:48:4b:b4:55:c8:1d:98:3d:d7:d1:72:ee:97:9a: 34:10:e4:bd:f5:ba:c0:a0:5a:06:b2:b5:52:20:c3: 3b:47:c0:7b:2b:03:26:c1:21:3e:ab:5c:42:a7:2e: 1c:48:dc:56:db:f1:4a:c2:40:3b:54:7c:a0:c9:0a: a0:24:72:4a:24:70:12:35:b9:d8:6c:c2:f3:8f:0f: d8:a2:12:e0:0f:ec:5a:28:95:80:1c:cb:25:01:ab: e3:22:bb:e4:cf:85:33:3a:9a:71:20:f6:69:4a:b9: 4c:58:4c:13:61:20:01:3f:08:17:24:67:a0:e6:ae: 69:4f:c2:07:f7:0e:d6:3d:30:68:91:f6:6e:be:30: 9e:12:de:a1:a7:5a:67:6e:ff:ed:a6:33:a0:08:62: 25:1a:65:cd:8e:19:c8:9d:28:f5:eb:04:aa:7b:05: b7:fb:ff:0c:ca:be:3b:0a:f0:16:9d:f6:a2:2d:f3: c9:c7:eb:d1:6a:18:78:5f:fd:d9:50:9f:6b:f0:07: dc:5e:b6:dd:ae:ee:dc:95:b6:5f:e2:0f:41:a3:86: 34:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:36:0C:B1:FD:72:AA:0B:B7:7B:1B:57:88:7D:3E:1C:23:32:68:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/35a6baf9-6504-389c-8368-f75a35c0fbe6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.214.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:a5:d7:41:f0:85:50:df:f0:13:48:34:7c:f2:8b:68:73:60: ec:a1:cb:b9:02:e6:19:76:8c:fb:38:10:7b:b1:c5:4b:1b:70: 1d:5a:31:c3:1e:31:4d:57:f7:2f:32:c9:b5:8e:19:2a:9b:76: f1:43:01:46:5f:33:e5:af:92:b5:ea:34:99:49:31:a4:7a:08: 38:26:ac:bd:8b:ba:79:45:7a:04:18:be:f7:ef:eb:91:d7:dd: da:a4:41:fc:d5:87:67:6b:9a:35:00:a2:4e:2e:0e:ae:f3:6e: 87:2f:92:36:cb:e9:8a:30:81:6a:1d:06:98:c1:5e:41:c7:fc: a8:b1:bd:01:c3:83:b0:d9:3e:8f:2a:4b:63:5c:1e:fa:58:8b: 17:ea:57:f7:ea:ca:82:2a:8c:f8:0b:ad:9d:26:d2:bc:31:0e: 91:66:4d:af:bd:6a:a2:c0:f4:98:33:7c:8d:fd:05:f7:01:2e: 47:3f:4f:1a:bc:00:9f:4e:4e:b2:7f:12:ef:74:d2:b2:19:43: 03:ce:27:0c:09:13:8b:22:43:b9:f4:b1:93:e2:e1:e2:af:f3: 81:19:7b:69:2f:bf:f6:94:ac:61:44:e4:f3:78:f0:8c:b6:1e: 28:b6:c8:b5:c8:9f:6d:38:cf:98:f7:76:46:30:0f:ab:f1:1a: e7:18:ab:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmgid/ObOXx22xyoAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDQyNDAxMDA0N1oXDTI1MDcyMzAxMDA0N1owLzEtMCsGA1UEAxMk MDM0NTg1MjAtMWIzOC00N2RiLWI4ZDUtZjY3N2UzMWQ4MzJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/TQinB69wHUDzkcuhoSo7Ore0M24NX0wkLx 7fv86P2BZaXuGljdPjJhWt3LSEu0VcgdmD3X0XLul5o0EOS99brAoFoGsrVSIMM7 R8B7KwMmwSE+q1xCpy4cSNxW2/FKwkA7VHygyQqgJHJKJHASNbnYbMLzjw/YohLg D+xaKJWAHMslAavjIrvkz4UzOppxIPZpSrlMWEwTYSABPwgXJGeg5q5pT8IH9w7W PTBokfZuvjCeEt6hp1pnbv/tpjOgCGIlGmXNjhnInSj16wSqewW3+/8Myr47CvAW nfaiLfPJx+vRahh4X/3ZUJ9r8AfcXrbdru7clbZf4g9Bo4Y0VQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD42DLH9cqoLt3sbV4h9PhwjMmjhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMzVhNmJhZjktNjUwNC0z ODljLTgzNjgtZjc1YTM1YzBmYmU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrtbwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFql10HwhVDf8BNINHzyi2hzYOyhy7kC5hl2jPs4EHuxxUsbcB1aMcMe MU1X9y8yybWOGSqbdvFDAUZfM+WvkrXqNJlJMaR6CDgmrL2LunlFegQYvvfv65HX 3dqkQfzVh2drmjUAok4uDq7zbocvkjbL6YowgWodBpjBXkHH/KixvQHDg7DZPo8q S2NcHvpYixfqV/fqyoIqjPgLrZ0m0rwxDpFmTa+9aqLA9JgzfI39BfcBLkc/Txq8 AJ9OTrJ/Eu900rIZQwPOJwwJE4siQ7n0sZPi4eKv84EZe2kvv/aUrGFE5PN48Iy2 Hii2yLXIn204z5j3dkYwD6vxGucYq7c= -----END CERTIFICATE-----Generated at Tue Apr 29 10:18:57 2025 by rpki-client