$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e0c52a66-cb31-399c-a2d5-cb4b2efcf1fa.roa File: e0c52a66-cb31-399c-a2d5-cb4b2efcf1fa.roa (raw, json) Hash identifier: N6hU0iVrZEelg/soSpGnUtfw8Co3cGJypU/SCS9GlY8= Subject key identifier: 6E:32:35:43:E9:2B:E2:59:2A:65:0C:39:98:D9:EB:30:77:89:21:D0 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849A089E19A9E7014F5C1721178 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e0c52a66-cb31-399c-a2d5-cb4b2efcf1fa.roa Signing time: Thu 24 Apr 2025 01:00:47 +0000 ROA not before: Thu 24 Apr 2025 01:00:47 +0000 ROA not after: Wed 23 Jul 2025 01:00:47 +0000 asID: 6167 IP address blocks: 174.216.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a0:89:e1:9a:9e:70:14:f5:c1:72:11:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 24 01:00:47 2025 GMT Not After : Jul 23 01:00:47 2025 GMT Subject: CN=0f52dbe0-1d49-432a-90f2-17b7ed6111b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:44:c5:95:bc:43:41:28:a0:f4:76:ab:7e:6c: 29:0e:5a:8b:25:2a:ec:20:a2:9c:6f:77:a2:b3:a1: dd:b4:ed:43:e3:f0:dd:72:d4:e0:37:b4:00:48:46: 7a:66:15:b5:16:62:45:f9:80:80:3c:3c:6d:b2:fc: db:4e:e5:cb:7d:d0:6b:c0:06:29:ab:19:e3:5c:41: 7a:24:48:94:5a:99:ba:2e:10:32:d1:12:75:98:79: 8e:4b:50:6d:40:1d:dc:93:93:85:f1:cd:06:60:d5: 2c:18:f0:db:ee:a0:48:09:0d:ea:10:07:e4:d3:11: fa:5a:e9:eb:2d:4b:fe:76:bb:fd:69:f6:8f:3a:a9: e8:dc:27:25:70:b9:3c:0c:9d:57:8f:7a:5f:82:ab: 70:f9:8d:35:ef:05:57:76:bb:0c:3d:d9:f8:99:77: 74:76:d3:6b:29:f0:57:4d:35:0b:da:79:e6:4d:2d: 02:69:a3:35:5b:51:95:52:b3:7e:6d:8a:66:f7:ac: 0f:2f:6a:f1:ef:a6:e9:d2:17:11:90:cf:4e:4b:70: bf:d3:d8:69:9e:bf:6e:94:80:aa:25:70:05:65:86: e8:6c:57:c1:a1:f2:68:88:36:cd:f1:85:95:51:a3: f4:0b:67:59:18:fa:32:ca:0e:cd:b5:f3:99:3b:1f: 0b:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:32:35:43:E9:2B:E2:59:2A:65:0C:39:98:D9:EB:30:77:89:21:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e0c52a66-cb31-399c-a2d5-cb4b2efcf1fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.216.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:b4:d5:e8:29:49:96:f4:b7:a3:21:a1:33:76:c9:cb:e2:07: 9c:b0:17:5a:d0:45:e5:59:35:19:89:02:91:e1:94:80:dd:20: f5:1f:4a:e9:d1:66:80:33:5d:02:55:f5:b7:0e:59:aa:b8:60: 29:c4:56:0b:41:59:ce:e4:2d:b9:cb:f1:15:85:83:5b:ee:99: a9:49:09:ab:6f:f4:6b:86:27:31:d0:55:db:18:23:46:f9:18: f8:ca:d5:62:d3:33:cd:08:7f:93:6e:b0:02:ef:77:d0:fb:86: 76:e8:71:6b:c4:d6:09:78:3a:d7:f5:5b:a0:f4:5c:29:64:d4: f6:e0:28:02:c1:a8:5f:02:ed:9d:d0:7d:4b:58:be:2b:65:39: 44:7e:82:15:00:95:57:7a:28:c3:1a:72:82:b1:e5:3b:f4:d1: 82:c6:1a:09:9f:3b:f8:80:f5:4b:cb:65:27:46:70:57:04:8d: 9d:be:23:91:f5:92:54:93:05:22:20:20:67:6d:4a:71:a3:32: d4:fc:2a:e8:10:b4:01:c1:b8:3c:bc:e2:24:6b:b6:ac:ed:50: d7:93:de:6c:99:6c:73:2d:4a:e7:23:e1:28:ea:b5:33:34:ee: 13:d2:0d:87:2f:bc:3c:51:9d:f8:f2:10:14:bd:64:86:be:9b: b6:63:89:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmgieGannAU9cFyEXgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDQyNDAxMDA0N1oXDTI1MDcyMzAxMDA0N1owLzEtMCsGA1UEAxMk MGY1MmRiZTAtMWQ0OS00MzJhLTkwZjItMTdiN2VkNjExMWIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkTFlbxDQSig9HarfmwpDlqLJSrsIKKcb3ei s6HdtO1D4/DdctTgN7QASEZ6ZhW1FmJF+YCAPDxtsvzbTuXLfdBrwAYpqxnjXEF6 JEiUWpm6LhAy0RJ1mHmOS1BtQB3ck5OF8c0GYNUsGPDb7qBICQ3qEAfk0xH6Wunr LUv+drv9afaPOqno3CclcLk8DJ1Xj3pfgqtw+Y017wVXdrsMPdn4mXd0dtNrKfBX TTUL2nnmTS0CaaM1W1GVUrN+bYpm96wPL2rx76bp0hcRkM9OS3C/09hpnr9ulICq JXAFZYbobFfBofJoiDbN8YWVUaP0C2dZGPoyyg7NtfOZOx8L8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG4yNUPpK+JZKmUMOZjZ6zB3iSHQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZTBjNTJhNjYtY2IzMS0z OTljLWEyZDUtY2I0YjJlZmNmMWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErtjgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFm01egpSZb0t6MhoTN2ycviB5ywF1rQReVZNRmJApHhlIDdIPUfSunR ZoAzXQJV9bcOWaq4YCnEVgtBWc7kLbnL8RWFg1vumalJCatv9GuGJzHQVdsYI0b5 GPjK1WLTM80If5NusALvd9D7hnbocWvE1gl4Otf1W6D0XClk1PbgKALBqF8C7Z3Q fUtYvitlOUR+ghUAlVd6KMMacoKx5Tv00YLGGgmfO/iA9UvLZSdGcFcEjZ2+I5H1 klSTBSIgIGdtSnGjMtT8KugQtAHBuDy84iRrtqztUNeT3myZbHMtSucj4SjqtTM0 7hPSDYcvvDxRnfjyEBS9ZIa+m7ZjiaU= -----END CERTIFICATE-----Generated at Sun Apr 27 04:06:58 2025 by rpki-client