$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d3009c64-2fab-3ff2-b72b-d41eaf495385.roa File: d3009c64-2fab-3ff2-b72b-d41eaf495385.roa (raw, json) Hash identifier: gJprHfWdwaDv0TtJhTUG1tSx0zolLu3gGUilKhKN308= Subject key identifier: A5:2B:99:2E:5E:42:F3:99:04:6A:32:19:AC:0C:0D:08:61:59:8F:81 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285848E8667AE6C5EA55AB28225EC0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d3009c64-2fab-3ff2-b72b-d41eaf495385.roa Signing time: Mon 17 Feb 2025 02:00:38 +0000 ROA not before: Mon 17 Feb 2025 02:00:38 +0000 ROA not after: Sun 18 May 2025 01:00:38 +0000 asID: 6167 IP address blocks: 174.249.56.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e8:66:7a:e6:c5:ea:55:ab:28:22:5e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Feb 17 02:00:38 2025 GMT Not After : May 18 01:00:38 2025 GMT Subject: CN=9b0c147a-8f53-4aa5-ab70-65ef5c93f651 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:a6:e9:39:1d:09:80:b4:78:48:73:45:5d:5c: 0c:33:55:94:62:e8:1c:b5:04:01:9e:8f:25:ee:36: e8:8b:2d:0e:d8:10:0f:a7:d4:fb:2b:06:54:fd:6f: c1:4d:55:7d:b6:36:4c:16:4a:0d:7a:e1:55:ad:d6: af:01:9e:18:07:a5:b2:c8:b5:26:26:2a:fd:10:0a: 42:8b:d3:22:e1:95:f3:d5:74:41:28:68:cf:f2:6b: 2c:21:93:fd:72:10:04:c6:ef:16:d3:e3:74:d2:5a: 29:c0:99:e2:b5:da:1c:25:51:19:e2:b8:03:60:c1: c7:ac:8e:f4:04:6f:2d:5b:5e:48:76:c6:56:8d:4d: a7:69:c0:07:cc:7d:e4:e8:12:38:72:9f:06:9e:1e: f3:7b:26:1a:e3:5e:b5:ef:82:e4:78:01:f2:9f:7d: 7e:20:6d:89:4f:64:a0:fa:aa:47:54:f5:aa:36:17: 1a:43:15:18:c4:06:8f:87:0a:76:f1:e6:fd:38:a0: 66:3d:40:56:8c:8f:d6:4f:f7:a8:3f:d2:a3:65:62: 93:80:ab:62:04:7d:3f:52:4c:88:60:a5:82:8f:c0: 06:85:4e:e4:b4:dd:3c:86:43:df:00:85:05:b4:60: 32:3e:c0:a3:ef:83:a9:58:9f:bd:cb:fa:fa:d0:6b: 67:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:2B:99:2E:5E:42:F3:99:04:6A:32:19:AC:0C:0D:08:61:59:8F:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d3009c64-2fab-3ff2-b72b-d41eaf495385.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.249.56.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:43:d3:24:b5:1a:d6:0a:4a:80:73:a9:fb:1e:cb:69:af:06: 7c:1d:a2:63:8f:66:d1:77:d1:89:86:23:2e:33:70:3e:7a:31: 0d:d5:ce:0f:c9:44:9d:87:f4:33:4e:91:f3:c2:fa:15:12:68: fe:52:0d:52:0f:ae:d7:e1:8c:8f:c1:bc:12:42:85:f8:15:70: f9:e7:b4:bd:b9:b0:2d:05:3f:87:e3:cb:34:fd:9e:7c:0c:ce: c2:24:11:c0:53:5e:e2:68:f1:3c:bc:29:30:b1:28:13:91:f3: c8:29:03:7e:d9:73:32:e8:3f:38:bf:f8:ea:7a:1c:84:02:a1: 17:1d:59:a2:1e:9b:34:94:8e:17:7d:16:4b:ad:22:11:06:19: 22:2f:02:35:d7:fb:33:ea:41:07:2f:57:77:9f:f4:86:e1:d7: b4:05:a6:53:7b:7d:33:47:79:66:f6:d1:8a:15:05:63:49:ed: 4c:84:d5:1e:fd:d9:c5:9d:fc:7e:3d:0d:1d:87:00:45:34:a6: ac:2e:9d:62:66:75:7b:e2:23:4a:3a:58:0d:9e:a8:6c:6c:d7: 20:21:1d:68:f7:98:f0:6b:ad:50:9e:f0:a6:28:cb:41:df:c5: 5e:c9:e9:6b:8f:0c:34:74:3b:93:bd:93:7b:59:c4:bd:f1:7c: 10:c3:d7:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjoZnrmxepVqygiXsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDIxNzAyMDAzOFoXDTI1MDUxODAxMDAzOFowLzEtMCsGA1UEAxMk OWIwYzE0N2EtOGY1My00YWE1LWFiNzAtNjVlZjVjOTNmNjUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgqbpOR0JgLR4SHNFXVwMM1WUYugctQQBno8l 7jboiy0O2BAPp9T7KwZU/W/BTVV9tjZMFkoNeuFVrdavAZ4YB6WyyLUmJir9EApC i9Mi4ZXz1XRBKGjP8mssIZP9chAExu8W0+N00lopwJnitdocJVEZ4rgDYMHHrI70 BG8tW15IdsZWjU2nacAHzH3k6BI4cp8Gnh7zeyYa416174LkeAHyn31+IG2JT2Sg +qpHVPWqNhcaQxUYxAaPhwp28eb9OKBmPUBWjI/WT/eoP9KjZWKTgKtiBH0/UkyI YKWCj8AGhU7ktN08hkPfAIUFtGAyPsCj74OpWJ+9y/r60GtnmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKUrmS5eQvOZBGoyGawMDQhhWY+BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZDMwMDljNjQtMmZhYi0z ZmYyLWI3MmItZDQxZWFmNDk1Mzg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrvk4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHBD0yS1GtYKSoBzqfsey2mvBnwdomOPZtF30YmGIy4zcD56MQ3Vzg/J RJ2H9DNOkfPC+hUSaP5SDVIPrtfhjI/BvBJChfgVcPnntL25sC0FP4fjyzT9nnwM zsIkEcBTXuJo8Ty8KTCxKBOR88gpA37ZczLoPzi/+Op6HIQCoRcdWaIemzSUjhd9 FkutIhEGGSIvAjXX+zPqQQcvV3ef9Ibh17QFplN7fTNHeWb20YoVBWNJ7UyE1R79 2cWd/H49DR2HAEU0pqwunWJmdXviI0o6WA2eqGxs1yAhHWj3mPBrrVCe8KYoy0Hf xV7J6WuPDDR0O5O9k3tZxL3xfBDD15U= -----END CERTIFICATE-----Generated at Sun Apr 27 00:25:32 2025 by rpki-client