$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/14f7b891-db77-3c9b-8c94-762cea3fa41e.roa File: 14f7b891-db77-3c9b-8c94-762cea3fa41e.roa (raw, json) Hash identifier: oJRMYXu2pjZaIQbnaqileILu5LJIH04ToKpKfnABbdY= Subject key identifier: 81:F2:3D:EF:32:CA:77:73:B5:EE:B7:1C:DA:D7:13:0B:0D:82:40:4B Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584902EC3619133422DE31046E10 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/14f7b891-db77-3c9b-8c94-762cea3fa41e.roa Signing time: Wed 26 Feb 2025 14:00:51 +0000 ROA not before: Wed 26 Feb 2025 14:00:51 +0000 ROA not after: Tue 27 May 2025 13:00:51 +0000 asID: 701 IP address blocks: 204.91.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:02:ec:36:19:13:34:22:de:31:04:6e:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Feb 26 14:00:51 2025 GMT Not After : May 27 13:00:51 2025 GMT Subject: CN=d2d31f87-f57c-4dab-ba32-9fa0a3b4ef37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:a2:cc:4a:db:e8:61:fd:ca:78:f0:67:e9:74: 6b:a3:aa:99:b9:37:69:b6:dc:07:61:25:f5:07:3a: 30:50:d9:2a:85:8f:77:a9:0f:5d:c0:bb:a3:ff:54: a2:eb:75:14:8d:5d:99:24:d9:79:f1:7f:25:2c:74: d2:8e:99:82:87:17:59:5b:9b:17:31:00:4e:24:ca: 9f:92:3a:3f:cd:9e:30:f0:32:de:57:b9:b5:8a:0a: 2d:4f:91:74:71:7d:09:25:c7:ff:09:c9:e3:92:eb: 16:db:97:00:37:33:9b:7e:0d:9a:4e:c8:9f:de:f6: ea:61:64:65:f3:37:7c:ca:17:e9:33:24:f5:dd:ae: 45:12:08:f6:91:06:a9:fe:1f:1e:48:ba:cb:33:87: 33:d9:31:d9:fa:5a:e5:9d:6f:1f:a2:05:ae:ec:72: d6:db:79:57:b7:68:ff:22:11:2d:80:15:54:81:92: 3c:06:74:aa:53:6d:10:d1:76:6c:27:77:e6:9c:50: fc:f1:2a:ca:ba:be:ee:cf:1f:88:92:f0:7a:e0:50: 93:05:4a:28:12:40:ca:cf:98:cf:89:15:00:cc:43: c9:ea:93:46:2c:5b:6d:26:7f:58:91:87:25:2f:4a: bd:44:11:99:28:db:2c:70:49:5e:d7:80:2c:9a:de: 4a:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:F2:3D:EF:32:CA:77:73:B5:EE:B7:1C:DA:D7:13:0B:0D:82:40:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/14f7b891-db77-3c9b-8c94-762cea3fa41e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 204.91.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:fd:f7:41:8c:57:e2:d4:c7:bb:8b:a5:b6:a5:c3:42:43:a7: 40:88:8a:f1:e0:f2:cb:f5:81:9e:d6:78:c4:3e:4a:84:ca:42: cb:92:84:28:42:48:d4:6c:fa:a1:aa:44:f8:66:7f:28:b2:5e: 6c:a3:c6:16:9c:dd:73:d3:85:18:0c:9f:c8:a5:56:02:5f:70: 6d:40:65:c7:03:bc:35:a4:86:ab:19:18:1b:f6:fb:25:2d:5c: 2a:e0:29:16:14:9b:b2:a9:4f:6d:3c:3f:4d:56:f2:ca:bc:87: 5f:2f:41:58:32:a3:83:81:aa:99:c0:ad:10:97:cd:2c:6c:56: f0:23:2b:e2:b3:40:30:3f:11:ae:1f:4f:2a:d1:ad:94:bf:d6: 0a:a8:2b:c2:54:cb:e9:5d:c3:c0:74:64:65:35:b9:c7:6c:87: 01:c0:68:08:a6:ab:76:47:0e:96:d9:6e:7d:25:bc:dc:d1:ff: 98:0b:dd:e2:48:38:c9:04:33:64:64:40:59:1b:51:3b:34:cb: 80:bf:9e:b6:77:87:e8:24:60:80:6c:3a:34:03:8e:85:fc:77: 77:66:67:07:92:47:96:74:87:15:a3:19:4b:75:68:cc:cd:ee: 94:b9:a6:42:10:86:8e:a3:15:03:07:34:33:7c:da:6b:ec:13: 8c:5a:91:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkC7DYZEzQi3jEEbhAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk ZDJkMzFmODctZjU3Yy00ZGFiLWJhMzItOWZhMGEzYjRlZjM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgaLMStvoYf3KePBn6XRro6qZuTdpttwHYSX1 BzowUNkqhY93qQ9dwLuj/1Si63UUjV2ZJNl58X8lLHTSjpmChxdZW5sXMQBOJMqf kjo/zZ4w8DLeV7m1igotT5F0cX0JJcf/CcnjkusW25cANzObfg2aTsif3vbqYWRl 8zd8yhfpMyT13a5FEgj2kQap/h8eSLrLM4cz2THZ+lrlnW8fogWu7HLW23lXt2j/ IhEtgBVUgZI8BnSqU20Q0XZsJ3fmnFD88SrKur7uzx+IkvB64FCTBUooEkDKz5jP iRUAzEPJ6pNGLFttJn9YkYclL0q9RBGZKNsscEle14Asmt5KCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIHyPe8yyndzte63HNrXEwsNgkBLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMTRmN2I4OTEtZGI3Ny0z YzliLThjOTQtNzYyY2VhM2ZhNDFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzFsRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGf990GMV+LUx7uLpbalw0JDp0CIivHg8sv1gZ7WeMQ+SoTKQsuShChC SNRs+qGqRPhmfyiyXmyjxhac3XPThRgMn8ilVgJfcG1AZccDvDWkhqsZGBv2+yUt XCrgKRYUm7KpT208P01W8sq8h18vQVgyo4OBqpnArRCXzSxsVvAjK+KzQDA/Ea4f TyrRrZS/1gqoK8JUy+ldw8B0ZGU1ucdshwHAaAimq3ZHDpbZbn0lvNzR/5gL3eJI OMkEM2RkQFkbUTs0y4C/nrZ3h+gkYIBsOjQDjoX8d3dmZweSR5Z0hxWjGUt1aMzN 7pS5pkIQho6jFQMHNDN82mvsE4xakSg= -----END CERTIFICATE-----Generated at Sat May 10 07:01:53 2025 by rpki-client