$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5751d62a-4941-3fc1-9f85-3753fe40c23f.roa File: 5751d62a-4941-3fc1-9f85-3753fe40c23f.roa (raw, json) Hash identifier: bH96fs/dF9PMeAHHlD6ppblW71zEehdHSibV7WsBfy0= Subject key identifier: 83:BC:09:56:5E:80:0A:6B:E9:49:23:29:73:D4:13:A9:23:3A:D0:92 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849A089D78FFF60174DFB4E7040 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5751d62a-4941-3fc1-9f85-3753fe40c23f.roa Signing time: Thu 24 Apr 2025 01:00:47 +0000 ROA not before: Thu 24 Apr 2025 01:00:47 +0000 ROA not after: Wed 23 Jul 2025 01:00:47 +0000 asID: 6167 IP address blocks: 174.199.96.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a0:89:d7:8f:ff:60:17:4d:fb:4e:70:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 24 01:00:47 2025 GMT Not After : Jul 23 01:00:47 2025 GMT Subject: CN=2c70e944-45a7-4116-8424-32fd314c387d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:06:ab:11:9e:09:93:ea:fc:35:04:9d:be:93: 50:86:7c:d8:84:e9:9b:31:47:85:d6:69:05:73:ff: 91:12:69:e7:70:7c:08:ff:fd:87:a7:ca:d0:b1:23: ef:a3:49:10:c3:e7:fd:76:06:13:bb:de:2c:c2:3f: 69:a2:41:55:28:09:9b:49:45:9e:8a:24:39:ca:b5: cb:4d:f8:eb:fe:fc:54:81:40:1f:ed:cb:91:f2:64: 79:56:42:22:fe:2b:1a:5c:93:f3:fe:1d:03:c1:ed: bb:ce:b2:2d:94:79:85:35:ad:e8:74:fd:ae:e5:b0: 96:b8:94:7c:be:cb:15:08:cd:41:a0:d0:5f:be:10: 94:3a:9a:6f:2a:8a:db:da:b7:33:0f:d0:2a:35:22: d1:cd:f1:98:a0:d6:cf:4e:96:da:bb:8f:9d:69:5e: 89:60:ea:0b:14:fe:29:98:72:04:35:f6:ae:8f:57: d6:1b:de:9d:1d:51:72:f4:98:a7:59:13:de:1f:63: b2:13:51:14:d9:84:01:a4:94:c8:52:be:01:f4:81: 50:77:e2:06:75:2d:2e:f5:6d:63:7c:b1:9c:da:84: 52:e1:2e:65:29:35:6c:06:f4:58:fe:bd:e6:de:12: cd:94:71:06:32:60:db:cf:42:67:a6:08:06:4a:83: 02:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:BC:09:56:5E:80:0A:6B:E9:49:23:29:73:D4:13:A9:23:3A:D0:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5751d62a-4941-3fc1-9f85-3753fe40c23f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.199.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:5d:e0:bc:f4:90:2a:76:2d:04:76:80:c4:6b:e6:32:56:7e: ec:b4:31:c3:0e:7b:ee:75:df:6c:40:ed:f9:8e:5d:3c:a0:fb: 03:62:f7:94:ed:6d:0f:9f:3e:d8:8c:9b:ca:01:d8:66:e0:f7: e5:e6:5d:7e:a1:d8:08:0a:b0:9f:fa:57:62:6e:ba:52:01:69: 13:46:f2:53:e0:e6:bb:cb:15:4a:ac:9c:77:2a:ec:0b:2f:5a: ab:60:b7:da:f3:be:f2:8c:5f:60:84:34:6c:10:3a:ce:5e:0b: 79:f1:2f:aa:75:61:6d:29:da:7e:0b:27:b3:41:05:c8:d1:63: 64:63:b4:04:2d:7f:1b:d7:08:09:11:72:9e:d2:8d:0e:58:80: 92:66:ca:f7:8b:b2:a2:ea:be:55:cb:fb:16:0c:a0:44:78:54: 56:f0:05:d7:1d:06:c0:6b:30:b7:5d:9f:d9:80:a2:74:82:0a: f9:7e:a2:38:a6:79:8c:c6:52:c9:b0:12:fc:3d:97:89:8d:f0: b8:42:ac:31:3d:2e:55:17:d5:a6:a7:9b:8e:ac:6d:2e:a2:32: d4:9a:e6:e3:51:c3:80:80:19:ca:7c:fa:4e:d7:0c:8b:2e:f5: 3e:3d:f7:69:72:0f:60:82:a3:32:37:e3:d4:c4:2b:ff:da:22: 94:35:97:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmgideP/2AXTftOcEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDQyNDAxMDA0N1oXDTI1MDcyMzAxMDA0N1owLzEtMCsGA1UEAxMk MmM3MGU5NDQtNDVhNy00MTE2LTg0MjQtMzJmZDMxNGMzODdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwarEZ4Jk+r8NQSdvpNQhnzYhOmbMUeF1mkF c/+REmnncHwI//2Hp8rQsSPvo0kQw+f9dgYTu94swj9pokFVKAmbSUWeiiQ5yrXL Tfjr/vxUgUAf7cuR8mR5VkIi/isaXJPz/h0Dwe27zrItlHmFNa3odP2u5bCWuJR8 vssVCM1BoNBfvhCUOppvKorb2rczD9AqNSLRzfGYoNbPTpbau4+daV6JYOoLFP4p mHIENfauj1fWG96dHVFy9JinWRPeH2OyE1EU2YQBpJTIUr4B9IFQd+IGdS0u9W1j fLGc2oRS4S5lKTVsBvRY/r3m3hLNlHEGMmDbz0JnpggGSoMCewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIO8CVZegApr6UkjKXPUE6kjOtCSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNTc1MWQ2MmEtNDk0MS0z ZmMxLTlmODUtMzc1M2ZlNDBjMjNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFrsdgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH1d4Lz0kCp2LQR2gMRr5jJWfuy0McMOe+5132xA7fmOXTyg+wNi95Tt bQ+fPtiMm8oB2Gbg9+XmXX6h2AgKsJ/6V2JuulIBaRNG8lPg5rvLFUqsnHcq7Asv Wqtgt9rzvvKMX2CENGwQOs5eC3nxL6p1YW0p2n4LJ7NBBcjRY2RjtAQtfxvXCAkR cp7SjQ5YgJJmyveLsqLqvlXL+xYMoER4VFbwBdcdBsBrMLddn9mAonSCCvl+ojim eYzGUsmwEvw9l4mN8LhCrDE9LlUX1aanm46sbS6iMtSa5uNRw4CAGcp8+k7XDIsu 9T4992lyD2CCozI349TEK//aIpQ1l7Q= -----END CERTIFICATE-----Generated at Sat Apr 26 22:54:44 2025 by rpki-client