$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d03334a7-eed3-3553-b8a5-789c01d4a346.roa File: d03334a7-eed3-3553-b8a5-789c01d4a346.roa (raw, json) Hash identifier: rVEblAeZ4wE7hIen74U6s6ScYfIs69qyrKTC1984uCg= Subject key identifier: 8A:37:54:35:CC:4C:B2:B7:F7:3A:8C:24:4E:09:95:A2:E7:56:2A:B8 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849A089E01EA706BD1A5047E900 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d03334a7-eed3-3553-b8a5-789c01d4a346.roa Signing time: Thu 24 Apr 2025 01:00:47 +0000 ROA not before: Thu 24 Apr 2025 01:00:47 +0000 ROA not after: Wed 23 Jul 2025 01:00:47 +0000 asID: 6167 IP address blocks: 174.215.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a0:89:e0:1e:a7:06:bd:1a:50:47:e9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 24 01:00:47 2025 GMT Not After : Jul 23 01:00:47 2025 GMT Subject: CN=e00621c8-a4a7-49ac-a80d-6069596fce36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:4e:65:c4:7c:f5:d3:b8:65:c8:e6:0d:b3:4b: 84:28:3a:f2:8c:2f:f7:04:ed:50:19:41:a5:20:80: b6:74:72:ed:7c:67:dd:b6:bc:61:90:33:7f:f0:28: c2:02:3f:c3:c9:6a:ec:14:e6:a9:08:14:5f:da:71: 0d:1f:97:ce:e4:21:78:5c:4b:8e:3a:a8:52:53:96: 60:51:d2:ab:59:8b:0c:6e:ff:0c:b8:9c:d4:d6:f4: ed:fc:36:2b:f0:33:57:0a:2b:b8:49:8f:10:e7:35: 08:06:d1:75:46:e0:37:a0:b4:5a:36:94:b5:d7:32: f2:35:b0:fa:18:63:e1:b2:99:46:cd:1a:77:31:d3: e3:11:bc:de:3a:96:8c:88:92:f7:a9:d0:c1:cc:42: 7e:c1:52:94:e8:05:b4:e3:77:74:1b:1f:03:15:ac: 6e:d1:06:99:63:12:8a:f9:b7:68:80:32:a0:aa:1b: c5:0e:42:93:0b:be:43:39:86:99:7d:47:a0:16:f7: 06:2b:14:ab:78:87:27:a4:54:25:f4:f9:31:99:3e: 8e:d2:30:26:c6:75:4e:3d:9d:17:ac:7d:35:cb:f7: 2d:89:ca:fc:f6:2b:fc:cb:7e:61:04:70:71:e1:15: 3a:b2:2e:2a:a3:41:42:70:64:d2:47:a6:b0:ea:18: ce:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:37:54:35:CC:4C:B2:B7:F7:3A:8C:24:4E:09:95:A2:E7:56:2A:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d03334a7-eed3-3553-b8a5-789c01d4a346.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.215.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:e8:4a:b8:70:cc:cf:93:14:1e:42:12:2c:0e:ca:4d:9e:11: 83:6c:bd:e3:9e:01:88:2a:ba:89:b2:72:91:32:2a:0f:ac:0e: 1f:45:39:ad:11:34:67:1d:58:20:49:42:70:ad:1f:b2:b5:1a: ef:a3:42:3b:c7:6c:f9:de:0f:cc:42:89:f6:9a:06:7c:f1:ab: 5f:78:5a:1b:d5:85:83:df:ac:47:0e:94:e2:6d:cc:39:a5:08: dc:f9:56:8f:29:aa:e4:c1:50:35:04:15:c8:d1:6a:a4:4f:3b: 2a:e7:6d:e3:8a:5e:4e:d4:25:78:58:ef:94:43:cf:a6:3e:23: 94:06:1c:ac:80:2f:ac:f2:ac:83:c4:b0:a8:8e:61:f6:da:cb: 07:cd:32:e0:a0:02:27:94:46:46:6b:0e:e2:93:52:05:8c:89: 81:cb:77:ad:15:56:1c:73:4e:92:b3:18:ff:44:d8:c9:c0:72: 62:c8:e4:b8:f8:a3:a9:aa:65:59:5c:ac:3e:f2:a9:e6:4c:69: 07:be:9e:92:06:fb:fd:ab:be:1b:1e:3d:72:85:01:47:ef:ab: 5f:5a:15:5b:60:9e:3a:b5:2a:d0:33:e0:4c:4d:b0:a1:c8:e7: 71:fb:7e:dd:95:c5:53:54:19:e3:3b:d8:08:c5:0f:1e:c5:55: 9e:4e:21:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmgieAepwa9GlBH6QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDQyNDAxMDA0N1oXDTI1MDcyMzAxMDA0N1owLzEtMCsGA1UEAxMk ZTAwNjIxYzgtYTRhNy00OWFjLWE4MGQtNjA2OTU5NmZjZTM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlk5lxHz107hlyOYNs0uEKDryjC/3BO1QGUGl IIC2dHLtfGfdtrxhkDN/8CjCAj/DyWrsFOapCBRf2nENH5fO5CF4XEuOOqhSU5Zg UdKrWYsMbv8MuJzU1vTt/DYr8DNXCiu4SY8Q5zUIBtF1RuA3oLRaNpS11zLyNbD6 GGPhsplGzRp3MdPjEbzeOpaMiJL3qdDBzEJ+wVKU6AW043d0Gx8DFaxu0QaZYxKK +bdogDKgqhvFDkKTC75DOYaZfUegFvcGKxSreIcnpFQl9PkxmT6O0jAmxnVOPZ0X rH01y/cticr89iv8y35hBHBx4RU6si4qo0FCcGTSR6aw6hjO7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIo3VDXMTLK39zqMJE4JlaLnViq4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZDAzMzM0YTctZWVkMy0z NTUzLWI4YTUtNzg5YzAxZDRhMzQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErtdgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG7oSrhwzM+TFB5CEiwOyk2eEYNsveOeAYgquomycpEyKg+sDh9FOa0R NGcdWCBJQnCtH7K1Gu+jQjvHbPneD8xCifaaBnzxq194WhvVhYPfrEcOlOJtzDml CNz5Vo8pquTBUDUEFcjRaqRPOyrnbeOKXk7UJXhY75RDz6Y+I5QGHKyAL6zyrIPE sKiOYfbaywfNMuCgAieURkZrDuKTUgWMiYHLd60VVhxzTpKzGP9E2MnAcmLI5Lj4 o6mqZVlcrD7yqeZMaQe+npIG+/2rvhsePXKFAUfvq19aFVtgnjq1KtAz4ExNsKHI 53H7ft2VxVNUGeM72AjFDx7FVZ5OIY4= -----END CERTIFICATE-----Generated at Sun Apr 27 04:01:51 2025 by rpki-client