$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/453ea3da-dd2d-3791-825a-7e7997fa95b4.roa File: 453ea3da-dd2d-3791-825a-7e7997fa95b4.roa (raw, json) Hash identifier: Lsc1coJ6Y5Ju3cgipRn9kUUjY9OcFe3c1oOnOILaZlg= Subject key identifier: C5:F8:30:8A:00:DC:F6:5A:F9:41:FC:A2:22:70:DC:BC:99:A4:E2:09 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285848EF617017E4B0817FAC9C2878 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/453ea3da-dd2d-3791-825a-7e7997fa95b4.roa Signing time: Wed 19 Feb 2025 14:00:52 +0000 ROA not before: Wed 19 Feb 2025 14:00:52 +0000 ROA not after: Tue 20 May 2025 13:00:52 +0000 asID: 22394 IP address blocks: 174.41.174.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ef:61:70:17:e4:b0:81:7f:ac:9c:28:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Feb 19 14:00:52 2025 GMT Not After : May 20 13:00:52 2025 GMT Subject: CN=9dcd41ca-4165-4588-89cf-4c069e5c0578 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:9d:3f:94:9f:f7:62:60:13:81:4a:36:b3:b6: 31:03:cb:f7:e3:94:f0:05:61:b9:ce:8d:ec:b3:77: fc:eb:e5:65:8b:47:a5:bb:53:7d:f9:38:1b:d0:b9: 57:33:22:64:62:e6:b5:c1:97:5d:19:db:3a:c2:cd: 48:72:7a:bc:e2:4d:83:01:97:13:21:6d:13:af:c0: 42:50:4d:8a:11:26:c4:01:f6:ba:ec:42:6b:e0:9b: 11:34:fd:6d:f7:d6:3c:ec:76:9b:59:e0:f1:4d:13: 29:2d:d8:80:84:76:22:35:15:25:1a:a8:3c:e3:c7: bc:c6:2c:6b:5a:be:73:3f:cb:d4:d4:15:0b:db:a5: 12:82:bb:18:00:f1:2d:d0:ed:71:e1:2b:f5:cb:8a: 98:09:dd:be:41:87:d0:25:08:99:c0:79:a2:6d:1c: 03:51:89:10:d0:7d:40:3e:f8:e6:bc:3f:b4:3a:80: 3f:91:71:ae:60:08:5d:36:be:d4:a9:69:a3:67:88: 1c:c7:57:fc:c3:d3:4d:88:96:19:11:8f:c4:7a:43: 1c:7d:7e:86:2a:99:17:96:d3:e0:ee:30:01:d7:5c: fb:5c:22:b7:e8:24:73:06:b2:2f:bb:62:ba:86:2d: 5c:ca:ac:e6:d0:12:a1:a3:d2:b3:a6:e2:20:a3:40: 43:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:F8:30:8A:00:DC:F6:5A:F9:41:FC:A2:22:70:DC:BC:99:A4:E2:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/453ea3da-dd2d-3791-825a-7e7997fa95b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.41.174.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:4b:4f:8b:d0:0a:88:d0:40:88:c2:c3:71:6e:75:10:40:2f: 7a:8e:4c:a2:fb:90:d9:bd:21:d8:86:70:c5:ed:0c:ae:70:93: 74:83:14:f5:a6:bb:8c:21:43:4b:85:ad:dc:bc:61:8e:93:1e: df:f9:02:3e:78:f2:7d:f4:2f:ba:31:87:1f:3c:ed:53:c6:df: cd:ae:51:50:34:2e:d9:84:35:f9:cd:b7:ab:a3:0a:ab:af:7c: f5:5c:00:99:4d:4a:f5:0c:66:a3:93:a7:75:e1:8b:17:d7:75: a6:3d:31:96:34:0f:83:e6:fc:1b:7f:fd:ec:78:02:e1:b8:8f: d1:a3:32:bf:24:4e:1f:45:1e:5c:f3:4c:d4:c5:81:a4:0c:00: 91:18:65:d5:aa:d3:f4:06:41:fd:87:00:c2:39:c0:4f:3e:27: b5:47:97:34:a0:d1:4f:d3:2d:ec:fd:cf:b4:c5:ca:dd:11:af: ab:16:23:2c:9e:21:cd:57:56:89:57:88:fc:94:00:ff:20:d0: af:41:4d:66:86:e5:39:02:92:3d:da:02:43:fe:ff:97:39:3f: 31:61:04:8d:1e:6d:da:93:f5:52:80:c9:4a:7d:18:d7:26:ce: 4d:1a:f9:23:c1:a4:0f:e4:0f:66:20:c2:90:12:f7:1f:71:c1: b4:f4:a6:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjvYXAX5LCBf6ycKHgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk OWRjZDQxY2EtNDE2NS00NTg4LTg5Y2YtNGMwNjllNWMwNTc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJ0/lJ/3YmATgUo2s7YxA8v345TwBWG5zo3s s3f86+Vli0elu1N9+Tgb0LlXMyJkYua1wZddGds6ws1Icnq84k2DAZcTIW0Tr8BC UE2KESbEAfa67EJr4JsRNP1t99Y87HabWeDxTRMpLdiAhHYiNRUlGqg848e8xixr Wr5zP8vU1BUL26USgrsYAPEt0O1x4Sv1y4qYCd2+QYfQJQiZwHmibRwDUYkQ0H1A PvjmvD+0OoA/kXGuYAhdNr7UqWmjZ4gcx1f8w9NNiJYZEY/EekMcfX6GKpkXltPg 7jAB11z7XCK36CRzBrIvu2K6hi1cyqzm0BKho9KzpuIgo0BD0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMX4MIoA3PZa+UH8oiJw3LyZpOIJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNDUzZWEzZGEtZGQyZC0z NzkxLTgyNWEtN2U3OTk3ZmE5NWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrimuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFpLT4vQCojQQIjCw3FudRBAL3qOTKL7kNm9IdiGcMXtDK5wk3SDFPWm u4whQ0uFrdy8YY6THt/5Aj548n30L7oxhx887VPG382uUVA0LtmENfnNt6ujCquv fPVcAJlNSvUMZqOTp3XhixfXdaY9MZY0D4Pm/Bt//ex4AuG4j9GjMr8kTh9FHlzz TNTFgaQMAJEYZdWq0/QGQf2HAMI5wE8+J7VHlzSg0U/TLez9z7TFyt0Rr6sWIyye Ic1XVolXiPyUAP8g0K9BTWaG5TkCkj3aAkP+/5c5PzFhBI0ebdqT9VKAyUp9GNcm zk0a+SPBpA/kD2YgwpAS9x9xwbT0po4= -----END CERTIFICATE-----Generated at Sat Apr 26 22:54:52 2025 by rpki-client