$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/28035f27-ad57-320d-bfca-d00f76dfdca3.roa File: 28035f27-ad57-320d-bfca-d00f76dfdca3.roa (raw, json) Hash identifier: OVmG7WvCBekJ7loM29LByk9PMV9tXmfeca9tQEpOKFY= Subject key identifier: 69:EE:80:0D:16:B2:14:55:4E:2B:FB:36:82:5A:F9:08:BB:0E:58:0B Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849C79F77469456D4AF17A2E9A4 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/28035f27-ad57-320d-bfca-d00f76dfdca3.roa Signing time: Thu 08 May 2025 01:00:47 +0000 ROA not before: Thu 08 May 2025 01:00:47 +0000 ROA not after: Wed 06 Aug 2025 01:00:47 +0000 asID: 6167 IP address blocks: 174.239.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c7:9f:77:46:94:56:d4:af:17:a2:e9:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: May 8 01:00:47 2025 GMT Not After : Aug 6 01:00:47 2025 GMT Subject: CN=67109573-a03a-4c04-b6e0-7a827a73a031 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:0e:19:1c:e5:18:fa:06:aa:28:b7:f5:57:3d: 72:50:e8:76:ef:f8:03:19:fb:4f:b8:48:82:2a:f7: d5:6c:03:5d:7e:54:1e:f1:43:24:9f:13:00:ec:ac: 81:da:5b:28:04:fe:fc:c6:5e:13:4e:f2:b2:66:70: db:f7:01:38:bc:86:f9:f6:9b:26:2c:c8:93:7d:a4: 3d:b1:21:77:73:2a:1e:58:85:25:d5:7d:53:93:a6: 32:ec:85:a0:55:11:1e:6f:3d:59:6f:89:13:44:68: c9:f6:95:58:c7:94:b0:23:8d:6e:44:b9:81:6c:79: 10:69:57:c8:99:1e:bc:ad:43:eb:84:36:52:4e:fe: 3b:27:7e:62:ce:45:d3:eb:03:ad:83:79:25:e7:47: 7d:c5:a4:1d:a0:0c:0f:f5:85:d7:a7:6b:34:85:4c: 64:32:e1:e3:4c:d4:58:a1:0a:5c:2b:68:3d:de:73: 87:6b:4f:4b:1f:eb:2a:c8:51:77:fd:32:52:f5:2a: 11:49:ed:9a:1c:d2:cf:dd:3a:3c:e5:06:21:1f:0b: 52:f1:2d:92:df:a6:39:8a:77:27:ae:60:5b:af:23: f9:ad:f6:24:48:76:bd:39:75:2b:29:3f:c6:87:80: a3:04:c3:13:68:48:05:f8:5e:c5:08:1f:50:bc:62: 27:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:EE:80:0D:16:B2:14:55:4E:2B:FB:36:82:5A:F9:08:BB:0E:58:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/28035f27-ad57-320d-bfca-d00f76dfdca3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.239.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:75:d7:c7:d2:1d:1e:f9:1b:05:17:1f:09:60:28:0b:e3:48: 19:36:61:cb:ff:36:5e:63:8f:30:fe:6d:c0:c2:ee:e9:40:4c: ac:be:03:db:65:b4:64:c4:74:9e:ff:2c:3d:1d:f6:7e:99:5a: 5e:5e:ac:48:46:1c:8b:d8:6b:4c:41:28:9f:b3:86:7b:9c:ec: 35:83:82:13:79:f7:a4:54:66:f5:37:ae:91:56:67:50:24:ed: a6:e0:ce:90:69:24:ad:02:b1:6f:24:3d:1a:3d:ae:8f:47:54: 68:44:59:8d:31:e0:b9:75:3a:a2:25:62:14:e2:df:28:9f:d5: 79:cf:0f:09:51:2b:57:62:25:56:8d:e0:0e:2a:07:90:c0:a8: 62:98:17:a4:8d:c0:a4:52:17:06:f6:3b:1f:ff:4b:55:1f:80: 58:1f:1c:6e:c7:e4:3d:e5:b3:77:21:ba:e0:ea:e6:0e:30:b2: a4:bc:ea:f8:6b:d3:04:6e:eb:92:05:c2:1b:97:fb:8b:75:f8: 27:41:1a:ed:35:bb:f9:38:9a:44:2f:8b:96:73:e6:e0:26:e4: d2:91:32:67:31:e9:1b:51:04:bc:26:5f:31:d6:e3:a4:a0:4e: 99:2f:e8:62:ab:62:95:51:b1:f3:f4:5c:8b:57:25:cf:01:05: 75:37:26:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnHn3dGlFbUrxei6aQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDUwODAxMDA0N1oXDTI1MDgwNjAxMDA0N1owLzEtMCsGA1UEAxMk NjcxMDk1NzMtYTAzYS00YzA0LWI2ZTAtN2E4MjdhNzNhMDMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQ4ZHOUY+gaqKLf1Vz1yUOh27/gDGftPuEiC KvfVbANdflQe8UMknxMA7KyB2lsoBP78xl4TTvKyZnDb9wE4vIb59psmLMiTfaQ9 sSF3cyoeWIUl1X1Tk6Yy7IWgVREebz1Zb4kTRGjJ9pVYx5SwI41uRLmBbHkQaVfI mR68rUPrhDZSTv47J35izkXT6wOtg3kl50d9xaQdoAwP9YXXp2s0hUxkMuHjTNRY oQpcK2g93nOHa09LH+sqyFF3/TJS9SoRSe2aHNLP3To85QYhHwtS8S2S36Y5incn rmBbryP5rfYkSHa9OXUrKT/Gh4CjBMMTaEgF+F7FCB9QvGInEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGnugA0WshRVTiv7NoJa+Qi7DlgLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMjgwMzVmMjctYWQ1Ny0z MjBkLWJmY2EtZDAwZjc2ZGZkY2EzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEru9AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGR118fSHR75GwUXHwlgKAvjSBk2Ycv/Nl5jjzD+bcDC7ulATKy+A9tl tGTEdJ7/LD0d9n6ZWl5erEhGHIvYa0xBKJ+zhnuc7DWDghN596RUZvU3rpFWZ1Ak 7abgzpBpJK0CsW8kPRo9ro9HVGhEWY0x4Ll1OqIlYhTi3yif1XnPDwlRK1diJVaN 4A4qB5DAqGKYF6SNwKRSFwb2Ox//S1UfgFgfHG7H5D3ls3chuuDq5g4wsqS86vhr 0wRu65IFwhuX+4t1+CdBGu01u/k4mkQvi5Zz5uAm5NKRMmcx6RtRBLwmXzHW46Sg Tpkv6GKrYpVRsfP0XItXJc8BBXU3Jq0= -----END CERTIFICATE-----Generated at Sun May 11 15:34:38 2025 by rpki-client