$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d3d1077b-9e0d-30a7-b7e6-381210a7012f.roa File: d3d1077b-9e0d-30a7-b7e6-381210a7012f.roa (raw, json) Hash identifier: jh4dza/zgIpHdNdzYPJToAcYRWSrUzzvs+na8Obw5EI= Subject key identifier: 1A:97:AB:3C:24:61:81:FD:77:B2:20:57:76:AA:A0:7F:FA:9F:8F:5A Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285848ED4C680245B6CD15BA683840 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d3d1077b-9e0d-30a7-b7e6-381210a7012f.roa Signing time: Tue 18 Feb 2025 20:07:25 +0000 ROA not before: Tue 18 Feb 2025 20:07:25 +0000 ROA not after: Mon 19 May 2025 19:07:25 +0000 asID: 14618 IP address blocks: 208.213.180.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ed:4c:68:02:45:b6:cd:15:ba:68:38:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Feb 18 20:07:25 2025 GMT Not After : May 19 19:07:25 2025 GMT Subject: CN=fd9f99c0-45a7-4d07-ab29-1baf5e902a88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:b9:85:63:e1:49:8c:f2:49:fe:f1:80:84:11: 87:15:26:4c:94:48:cb:b5:c2:af:57:2a:76:3f:2c: 65:44:c6:6e:3e:a1:1d:de:ac:28:cf:eb:49:64:7e: d2:44:f7:14:f3:9d:29:57:31:a8:7e:cb:d3:2b:17: da:a1:92:1e:b6:51:4f:a4:56:e9:0c:04:0d:7e:0a: 58:08:01:36:bb:93:25:e5:40:a0:8a:cc:50:2c:e0: 00:89:97:9c:ec:68:e9:67:94:e0:8b:cf:20:84:29: 78:3b:3a:22:04:8a:6c:b6:96:ff:c2:9c:f2:d7:6a: 71:ce:19:f0:d5:98:2a:a0:2b:e5:a6:24:20:74:45: ca:b9:d1:4a:7d:1f:bb:5c:52:03:30:d8:e1:d1:2e: d0:ea:a5:3a:12:f0:8e:5e:c4:74:89:0a:25:1a:26: b0:7f:39:b9:53:1e:28:23:c0:cc:a2:ac:5e:05:57: 4e:9e:05:f3:85:0d:ee:ce:cf:f4:5e:c3:97:1b:ad: 09:57:5b:0b:83:8e:a6:b2:6f:72:a3:16:d5:1f:c3: 5b:0d:e7:81:eb:b8:f8:bd:e4:d5:63:a3:e3:d9:15: 52:d5:78:b5:ba:ea:d7:1e:5e:4a:f4:03:78:62:c6: c1:f8:16:41:43:90:78:cf:e6:bd:f3:38:98:2d:e0: 3b:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:97:AB:3C:24:61:81:FD:77:B2:20:57:76:AA:A0:7F:FA:9F:8F:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d3d1077b-9e0d-30a7-b7e6-381210a7012f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 208.213.180.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:38:58:a4:7d:2c:ef:48:30:b2:00:50:7a:9a:45:a8:da:8f: 72:ea:24:88:9f:bf:e9:98:29:46:92:18:8d:4c:74:5a:d0:ac: d0:3b:17:f4:80:7c:62:95:d6:3b:71:84:df:a7:49:4f:7b:7a: f1:b8:43:ec:11:68:d1:43:50:13:38:39:d0:7d:10:3e:5c:03: 62:c9:18:44:64:cd:68:02:fd:67:b1:dd:d4:5a:12:d9:41:3d: 75:83:c6:09:0d:4d:68:e5:36:9e:a2:67:c2:f0:84:a4:22:c4: 32:4e:ef:a2:77:94:4e:ef:46:d2:57:55:df:66:ca:27:37:12: 02:7c:d9:94:13:0b:cf:d9:51:46:cc:d7:b6:fb:41:01:51:78: 0e:32:37:b4:54:c4:a1:f6:a0:7b:ea:d9:12:73:84:5c:f0:7b: a2:5f:1f:a0:10:fe:ca:bd:a7:85:01:b8:a5:e6:73:23:7e:c1: 08:2f:5d:ec:43:5d:09:4f:0e:2a:47:ef:a4:b7:98:5d:9c:86: ca:d5:f2:f3:af:2b:79:b9:d1:a7:ff:b7:b6:04:d6:00:c9:7f: e2:2b:d4:61:2f:01:27:b1:b2:62:d2:02:47:42:23:23:fa:3a: 8a:61:21:53:22:60:0f:89:47:53:37:ff:65:ca:57:47:fc:13: 58:11:89:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjtTGgCRbbNFbpoOEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDIxODIwMDcyNVoXDTI1MDUxOTE5MDcyNVowLzEtMCsGA1UEAxMk ZmQ5Zjk5YzAtNDVhNy00ZDA3LWFiMjktMWJhZjVlOTAyYTg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgLmFY+FJjPJJ/vGAhBGHFSZMlEjLtcKvVyp2 PyxlRMZuPqEd3qwoz+tJZH7SRPcU850pVzGofsvTKxfaoZIetlFPpFbpDAQNfgpY CAE2u5Ml5UCgisxQLOAAiZec7GjpZ5Tgi88ghCl4OzoiBIpstpb/wpzy12pxzhnw 1ZgqoCvlpiQgdEXKudFKfR+7XFIDMNjh0S7Q6qU6EvCOXsR0iQolGiawfzm5Ux4o I8DMoqxeBVdOngXzhQ3uzs/0XsOXG60JV1sLg46msm9yoxbVH8NbDeeB67j4veTV Y6Pj2RVS1Xi1uurXHl5K9AN4YsbB+BZBQ5B4z+a98ziYLeA7cQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBqXqzwkYYH9d7IgV3aqoH/6n49aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZDNkMTA3N2ItOWUwZC0z MGE3LWI3ZTYtMzgxMjEwYTcwMTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0NW0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJI4WKR9LO9IMLIAUHqaRajaj3LqJIifv+mYKUaSGI1MdFrQrNA7F/SA fGKV1jtxhN+nSU97evG4Q+wRaNFDUBM4OdB9ED5cA2LJGERkzWgC/Wex3dRaEtlB PXWDxgkNTWjlNp6iZ8LwhKQixDJO76J3lE7vRtJXVd9myic3EgJ82ZQTC8/ZUUbM 17b7QQFReA4yN7RUxKH2oHvq2RJzhFzwe6JfH6AQ/sq9p4UBuKXmcyN+wQgvXexD XQlPDipH76S3mF2chsrV8vOvK3m50af/t7YE1gDJf+Ir1GEvASexsmLSAkdCIyP6 OophIVMiYA+JR1M3/2XKV0f8E1gRiak= -----END CERTIFICATE-----Generated at Sat Apr 26 13:29:56 2025 by rpki-client