$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3af0abb4-e531-3527-b3b5-9c9dba80f7df.roa File: 3af0abb4-e531-3527-b3b5-9c9dba80f7df.roa (raw, json) Hash identifier: 2OJ5YdS/SwuKj9r6QZ8uOQdsXVDwbMLePHF6qWV0H/Y= Subject key identifier: 19:9C:4E:95:A2:1B:31:36:45:22:05:86:3D:53:18:A0:A5:E9:5E:A3 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849A089DBFD8BC4388C3CC71580 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3af0abb4-e531-3527-b3b5-9c9dba80f7df.roa Signing time: Thu 24 Apr 2025 01:00:47 +0000 ROA not before: Thu 24 Apr 2025 01:00:47 +0000 ROA not after: Wed 23 Jul 2025 01:00:47 +0000 asID: 6167 IP address blocks: 174.206.160.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a0:89:db:fd:8b:c4:38:8c:3c:c7:15:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 24 01:00:47 2025 GMT Not After : Jul 23 01:00:47 2025 GMT Subject: CN=6cba7012-a199-4f9b-8761-6acf9da65127 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:5c:1f:e8:27:69:92:cc:93:a1:58:84:f9:30: e0:71:ff:c1:1b:52:4e:07:19:80:f8:f2:12:b2:a6: ca:9e:00:52:5c:c9:ef:91:f9:1e:6c:43:81:67:2e: a2:18:87:5d:c5:d5:e0:13:64:98:a2:a6:74:15:0d: 73:d2:76:0e:4e:8f:53:02:9f:bc:3b:ee:e4:40:88: f5:97:74:dd:dc:b0:04:6c:1f:f4:a9:c2:9c:c0:87: 04:19:4c:d1:eb:77:76:41:10:47:42:9b:50:19:42: c9:53:4b:30:51:d1:ba:6a:67:b5:29:ed:41:21:81: c8:1c:3c:e2:d7:89:e2:ee:c1:cf:ee:e5:46:89:e9: 81:11:e5:60:86:94:47:73:16:8f:b7:50:a3:7d:67: 4c:b5:8f:79:7b:fc:12:be:04:c9:d9:c3:2b:71:ef: a2:40:88:4b:cd:79:e9:05:41:f6:75:5b:5f:cb:25: 6c:47:9f:84:34:61:83:af:92:8c:d5:fa:c7:c1:2f: a4:d4:ca:bb:5c:42:ef:49:1b:c1:3f:5a:3b:75:13: a9:1d:d6:ab:b7:18:eb:44:3a:cb:0e:99:77:8a:bf: 09:79:c3:d1:93:76:08:66:59:89:00:ed:4d:c4:c5: c9:96:94:b5:f7:5a:1c:39:2f:b6:63:63:a7:fe:61: ed:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:9C:4E:95:A2:1B:31:36:45:22:05:86:3D:53:18:A0:A5:E9:5E:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3af0abb4-e531-3527-b3b5-9c9dba80f7df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.206.160.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:d1:19:ac:17:ee:3c:4c:96:06:ef:33:80:76:d3:46:3e:9c: 53:90:fc:20:92:ce:72:b8:a9:99:29:d9:b4:27:32:cd:8b:22: 5d:31:91:27:11:bb:a8:34:1e:0c:b8:75:a1:37:73:ac:62:34: ae:58:3d:49:0e:71:3f:2a:4e:4e:dc:19:80:80:ef:88:ea:be: 37:e8:93:da:78:31:42:b1:ee:f5:52:be:44:9d:69:b0:de:55: c5:de:ac:35:ba:1f:06:b2:ea:01:b7:26:51:46:7f:80:b1:31: 20:6b:5c:97:23:83:ad:00:73:fe:08:a1:b4:7a:2a:ab:7a:2d: 44:2f:d0:b8:d6:21:c9:3e:68:8c:29:db:be:64:a4:f4:16:9b: 12:2e:17:7e:13:23:8e:21:5b:f8:3f:92:38:13:d8:a9:e3:e7: 1f:71:7b:44:35:dd:2c:91:85:f3:25:80:1c:bf:08:0d:ef:f0: 3d:20:4d:1d:b3:aa:b2:3f:02:a8:ce:9d:d3:5b:95:13:30:32: 29:55:e5:c5:68:95:b3:87:3d:a0:bc:df:63:1c:85:90:76:de: ce:bd:bc:12:e4:7a:40:1d:6d:78:ff:44:52:03:05:98:49:94: 6c:2c:47:be:ef:ed:13:46:54:a1:9f:c1:b3:71:65:ec:0d:79: 62:28:6d:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmgidv9i8Q4jDzHFYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDQyNDAxMDA0N1oXDTI1MDcyMzAxMDA0N1owLzEtMCsGA1UEAxMk NmNiYTcwMTItYTE5OS00ZjliLTg3NjEtNmFjZjlkYTY1MTI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj1wf6CdpksyToViE+TDgcf/BG1JOBxmA+PIS sqbKngBSXMnvkfkebEOBZy6iGIddxdXgE2SYoqZ0FQ1z0nYOTo9TAp+8O+7kQIj1 l3Td3LAEbB/0qcKcwIcEGUzR63d2QRBHQptQGULJU0swUdG6ame1Ke1BIYHIHDzi 14ni7sHP7uVGiemBEeVghpRHcxaPt1CjfWdMtY95e/wSvgTJ2cMrce+iQIhLzXnp BUH2dVtfyyVsR5+ENGGDr5KM1frHwS+k1Mq7XELvSRvBP1o7dROpHdartxjrRDrL Dpl3ir8JecPRk3YIZlmJAO1NxMXJlpS191ocOS+2Y2On/mHtUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBmcTpWiGzE2RSIFhj1TGKCl6V6jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvM2FmMGFiYjQtZTUzMS0z NTI3LWIzYjUtOWM5ZGJhODBmN2RmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFrs6gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALbRGawX7jxMlgbvM4B200Y+nFOQ/CCSznK4qZkp2bQnMs2LIl0xkScR u6g0Hgy4daE3c6xiNK5YPUkOcT8qTk7cGYCA74jqvjfok9p4MUKx7vVSvkSdabDe VcXerDW6Hway6gG3JlFGf4CxMSBrXJcjg60Ac/4IobR6Kqt6LUQv0LjWIck+aIwp 275kpPQWmxIuF34TI44hW/g/kjgT2Knj5x9xe0Q13SyRhfMlgBy/CA3v8D0gTR2z qrI/AqjOndNblRMwMilV5cVolbOHPaC832MchZB23s69vBLkekAdbXj/RFIDBZhJ lGwsR77v7RNGVKGfwbNxZewNeWIobcI= -----END CERTIFICATE-----Generated at Sun Apr 27 05:42:33 2025 by rpki-client