$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3796bfa5-c35c-3b04-966a-6d5c25fd5da9.roa File: 3796bfa5-c35c-3b04-966a-6d5c25fd5da9.roa (raw, json) Hash identifier: kKBcdtPExVCMdKT39CzJP/uvNfSlnT+FDnv0trlUEHg= Subject key identifier: 44:48:FD:45:40:C8:AE:46:65:BA:9F:FC:DB:EA:11:AD:2A:02:8C:A3 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849A089E629408F6E951FB44080 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3796bfa5-c35c-3b04-966a-6d5c25fd5da9.roa Signing time: Thu 24 Apr 2025 01:00:47 +0000 ROA not before: Thu 24 Apr 2025 01:00:47 +0000 ROA not after: Wed 23 Jul 2025 01:00:47 +0000 asID: 6167 IP address blocks: 174.219.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a0:89:e6:29:40:8f:6e:95:1f:b4:40:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 24 01:00:47 2025 GMT Not After : Jul 23 01:00:47 2025 GMT Subject: CN=9b8a3b62-7fb7-4e4f-a809-f5f34d5f0b7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:90:7d:28:63:a2:de:30:30:24:0e:da:32:27: 9b:28:eb:84:ba:cb:d1:fe:a0:e9:57:4a:93:99:66: 6c:4b:34:7f:d5:2b:6f:4b:1c:e9:44:7d:72:b4:4e: 2c:27:1e:eb:a5:ba:0e:44:50:a7:fe:f8:a9:c4:2e: 5b:8a:92:da:dc:4e:8c:d0:59:e5:5f:d1:da:81:20: d8:af:36:52:c4:91:cd:99:0f:43:8b:b5:37:ca:23: 6c:9a:1c:d3:d6:5f:8b:6d:76:02:51:9f:0e:ef:51: 66:b6:46:84:78:2d:b5:d4:dd:71:63:4d:15:2b:15: d4:09:d1:1d:82:85:b9:78:fd:a8:06:88:12:24:fe: 89:be:72:18:9e:9f:9b:5e:54:df:ee:fa:37:66:99: 7e:9d:34:26:7e:d8:d5:7b:f8:a1:9f:c8:b2:e2:12: 76:f5:4a:68:f2:c2:4e:6e:31:a1:d4:4c:11:76:db: 8f:c4:f2:80:c7:ab:86:f9:07:1d:29:2f:af:bb:f9: ee:54:3b:d7:75:11:5b:f9:eb:88:79:36:b6:ff:58: 9a:be:b1:20:33:f9:bd:35:f8:dc:a9:67:6b:7a:58: e3:80:7d:da:80:f9:04:81:d3:93:dd:4a:f2:13:63: 51:4d:b9:2b:f3:30:c6:d8:5b:f8:43:77:d3:af:60: 8c:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:48:FD:45:40:C8:AE:46:65:BA:9F:FC:DB:EA:11:AD:2A:02:8C:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3796bfa5-c35c-3b04-966a-6d5c25fd5da9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.219.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:59:60:ed:f0:6b:6c:6b:43:26:55:dd:02:9b:97:80:14:d3: 91:21:69:30:1f:49:73:9a:85:5f:90:45:5a:09:dc:5d:ae:51: 77:c7:c3:36:0c:3b:7b:ea:83:8d:fa:14:c5:44:78:c9:16:90: 42:96:e3:3a:3c:23:62:29:96:ae:5b:5b:52:f3:ee:b3:ce:5f: 97:6c:b6:eb:c7:50:fc:a5:c0:7d:1b:96:78:2c:20:c3:a8:4c: 13:27:da:bf:8e:55:3b:af:6a:32:38:1a:51:07:54:cf:2b:d6: 55:9d:ef:06:d4:c8:7f:16:7e:0f:24:fc:75:dc:0b:fe:a2:78: 0a:de:e7:20:11:77:c1:74:79:13:2d:e1:b0:8f:81:b2:68:b4: b7:df:6a:dc:60:c5:e6:bc:73:3e:5e:cc:c6:44:f9:88:49:46: 42:06:fb:58:c4:ce:8d:47:55:65:3a:1c:59:0e:ad:5b:f8:28: d1:52:24:25:ef:0e:3e:b8:b0:db:d9:b1:8a:9f:43:87:32:16: d7:eb:66:ef:2c:4b:ec:2b:1f:1a:42:0a:a7:1b:69:15:86:d3: 18:54:8a:2e:4e:28:5d:9c:ec:92:e3:ef:40:ae:9d:ab:28:83: c2:a2:50:c7:5b:86:1e:7b:01:58:77:b0:8a:e6:c3:c8:ab:d8: 78:88:0f:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmgieYpQI9ulR+0QIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDQyNDAxMDA0N1oXDTI1MDcyMzAxMDA0N1owLzEtMCsGA1UEAxMk OWI4YTNiNjItN2ZiNy00ZTRmLWE4MDktZjVmMzRkNWYwYjdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJB9KGOi3jAwJA7aMiebKOuEusvR/qDpV0qT mWZsSzR/1StvSxzpRH1ytE4sJx7rpboORFCn/vipxC5bipLa3E6M0FnlX9HagSDY rzZSxJHNmQ9Di7U3yiNsmhzT1l+LbXYCUZ8O71FmtkaEeC211N1xY00VKxXUCdEd goW5eP2oBogSJP6JvnIYnp+bXlTf7vo3Zpl+nTQmftjVe/ihn8iy4hJ29Upo8sJO bjGh1EwRdtuPxPKAx6uG+QcdKS+vu/nuVDvXdRFb+euIeTa2/1iavrEgM/m9Nfjc qWdreljjgH3agPkEgdOT3UryE2NRTbkr8zDG2Fv4Q3fTr2CMFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFERI/UVAyK5GZbqf/NvqEa0qAoyjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMzc5NmJmYTUtYzM1Yy0z YjA0LTk2NmEtNmQ1YzI1ZmQ1ZGE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrtvgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADBZYO3wa2xrQyZV3QKbl4AU05EhaTAfSXOahV+QRVoJ3F2uUXfHwzYM O3vqg436FMVEeMkWkEKW4zo8I2Iplq5bW1Lz7rPOX5dstuvHUPylwH0blngsIMOo TBMn2r+OVTuvajI4GlEHVM8r1lWd7wbUyH8Wfg8k/HXcC/6ieAre5yARd8F0eRMt 4bCPgbJotLffatxgxea8cz5ezMZE+YhJRkIG+1jEzo1HVWU6HFkOrVv4KNFSJCXv Dj64sNvZsYqfQ4cyFtfrZu8sS+wrHxpCCqcbaRWG0xhUii5OKF2c7JLj70Cunaso g8KiUMdbhh57AVh3sIrmw8ir2HiID8Y= -----END CERTIFICATE-----Generated at Sun Apr 27 12:44:34 2025 by rpki-client