$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bfdbcad4-ac9e-33fe-a00a-00a8dae49b96.roa File: bfdbcad4-ac9e-33fe-a00a-00a8dae49b96.roa (raw, json) Hash identifier: 0PgKW8WVx94cSMkNICuVRD9h+hHLDbmAG9XgRP7/GM0= Subject key identifier: F2:63:AF:D8:7A:B0:4C:53:DB:40:3F:80:6A:A5:F0:4A:AD:F0:DB:76 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849A089EC81643AE2F8B896BC80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bfdbcad4-ac9e-33fe-a00a-00a8dae49b96.roa Signing time: Thu 24 Apr 2025 01:00:47 +0000 ROA not before: Thu 24 Apr 2025 01:00:47 +0000 ROA not after: Wed 23 Jul 2025 01:00:47 +0000 asID: 6167 IP address blocks: 174.211.160.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a0:89:ec:81:64:3a:e2:f8:b8:96:bc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 24 01:00:47 2025 GMT Not After : Jul 23 01:00:47 2025 GMT Subject: CN=5717a276-1123-45da-bfd2-3afde4aaa96b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f8:11:a8:e9:1c:02:79:4e:06:71:f9:f5:b8: 76:2d:b3:78:67:1c:69:cf:f6:75:e6:d0:6a:85:23: 7b:75:ca:be:28:5f:47:cb:3a:2e:58:de:83:cd:f1: 2a:fc:c5:ce:b3:64:69:9a:4b:1f:01:3e:79:8e:83: a4:30:fb:a7:55:e9:93:f7:44:7f:20:9c:0d:47:a5: 50:49:e7:ea:9e:69:37:86:1a:c6:07:fe:c7:81:5a: ee:16:28:54:37:5f:bb:da:45:8c:5f:e5:9e:c1:32: 1e:35:5c:b6:36:cf:28:24:9e:f6:f0:d0:8b:4d:2a: 47:76:6f:bb:d3:c6:c5:61:77:94:0c:3e:19:e3:15: 10:bc:39:6a:7c:45:52:a8:17:19:a1:02:dd:0c:0a: cb:22:da:58:c3:a3:ec:df:a1:31:2d:39:06:d8:3d: 21:dd:39:8c:5c:e9:c9:3c:64:b6:c1:7b:f0:a7:94: e8:93:4f:19:0d:8a:85:8d:e0:5a:9f:40:09:6a:d5: 64:ab:53:96:4e:d8:ec:4d:62:1f:3e:63:5a:b0:51: 50:45:6d:74:49:a0:06:14:7d:0a:a4:25:92:33:73: 36:fd:aa:f8:2e:07:05:9a:a5:81:d5:2b:15:dd:a7: d6:21:7c:f6:b6:f2:03:17:88:ee:bf:a0:e1:34:ce: b7:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:63:AF:D8:7A:B0:4C:53:DB:40:3F:80:6A:A5:F0:4A:AD:F0:DB:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bfdbcad4-ac9e-33fe-a00a-00a8dae49b96.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.211.160.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:c0:74:c0:4a:75:80:06:bb:6f:42:65:21:c4:c8:4e:e9:b4: 67:87:17:ae:70:70:69:fc:9b:ac:34:f9:a5:fb:01:eb:83:ca: 08:4d:36:d4:23:d4:0f:10:4c:bc:89:ba:15:ee:15:51:e9:24: ef:94:a1:25:d0:94:b7:8b:0c:b1:be:44:f9:db:7a:ea:94:84: 5d:4d:67:cb:4e:3c:79:3d:11:46:a1:2e:1d:ce:15:a1:6c:87: c4:29:8d:be:8f:bc:85:81:5b:8b:e3:b6:bb:d1:9a:a9:e5:c3: a1:d4:6d:e8:47:59:ba:96:57:7a:08:e1:7f:39:c8:61:ac:96: 8f:1b:ca:72:72:7c:01:40:e1:4a:76:83:dc:35:f5:0c:e7:e0: 12:7d:79:52:4c:b6:14:75:f8:43:a2:ee:1b:3f:12:7a:24:90: 43:af:e4:c5:8c:48:c3:a3:ed:8e:53:5e:bb:23:b5:b7:0a:9b: 5e:3e:83:c5:21:2f:62:eb:8b:aa:4b:c6:73:6a:cc:ad:1d:1d: 7e:37:24:06:d3:9f:d2:98:f3:57:b6:d0:21:14:b5:47:78:3e: 09:06:9c:89:f0:8b:90:41:08:fd:fd:d1:14:1a:b0:78:30:57: 98:f9:9e:4c:1e:f3:73:e3:32:ac:88:9d:5a:03:f2:32:bc:6e: a8:6d:fd:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmgieyBZDri+LiWvIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDQyNDAxMDA0N1oXDTI1MDcyMzAxMDA0N1owLzEtMCsGA1UEAxMk NTcxN2EyNzYtMTEyMy00NWRhLWJmZDItM2FmZGU0YWFhOTZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPgRqOkcAnlOBnH59bh2LbN4Zxxpz/Z15tBq hSN7dcq+KF9HyzouWN6DzfEq/MXOs2RpmksfAT55joOkMPunVemT90R/IJwNR6VQ Sefqnmk3hhrGB/7HgVruFihUN1+72kWMX+WewTIeNVy2Ns8oJJ728NCLTSpHdm+7 08bFYXeUDD4Z4xUQvDlqfEVSqBcZoQLdDArLItpYw6Ps36ExLTkG2D0h3TmMXOnJ PGS2wXvwp5Tok08ZDYqFjeBan0AJatVkq1OWTtjsTWIfPmNasFFQRW10SaAGFH0K pCWSM3M2/ar4LgcFmqWB1SsV3afWIXz2tvIDF4juv6DhNM638QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPJjr9h6sExT20A/gGql8Eqt8Nt2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYmZkYmNhZDQtYWM5ZS0z M2ZlLWEwMGEtMDBhOGRhZTQ5Yjk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFrtOgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG7AdMBKdYAGu29CZSHEyE7ptGeHF65wcGn8m6w0+aX7AeuDyghNNtQj 1A8QTLyJuhXuFVHpJO+UoSXQlLeLDLG+RPnbeuqUhF1NZ8tOPHk9EUahLh3OFaFs h8Qpjb6PvIWBW4vjtrvRmqnlw6HUbehHWbqWV3oI4X85yGGslo8bynJyfAFA4Up2 g9w19Qzn4BJ9eVJMthR1+EOi7hs/EnokkEOv5MWMSMOj7Y5TXrsjtbcKm14+g8Uh L2Lri6pLxnNqzK0dHX43JAbTn9KY81e20CEUtUd4PgkGnInwi5BBCP390RQasHgw V5j5nkwe83PjMqyInVoD8jK8bqht/bs= -----END CERTIFICATE-----Generated at Sun Apr 27 01:45:00 2025 by rpki-client