$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3562be53-e179-3729-a3e8-c7e5ba1401c2.roa File: 3562be53-e179-3729-a3e8-c7e5ba1401c2.roa (raw, json) Hash identifier: VWrCaK+6ZR4KCDeAWDpRQILEcmAu8S1UYFNRKq/1swo= Subject key identifier: 52:AF:E6:83:3B:4B:A3:BA:98:2E:1B:C0:E6:FC:C6:7D:97:22:78:B0 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849C79F701CAEA64C6CE7702600 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3562be53-e179-3729-a3e8-c7e5ba1401c2.roa Signing time: Thu 08 May 2025 01:00:47 +0000 ROA not before: Thu 08 May 2025 01:00:47 +0000 ROA not after: Wed 06 Aug 2025 01:00:47 +0000 asID: 6167 IP address blocks: 174.226.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c7:9f:70:1c:ae:a6:4c:6c:e7:70:26:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: May 8 01:00:47 2025 GMT Not After : Aug 6 01:00:47 2025 GMT Subject: CN=d42043eb-345a-4c8c-8576-8e019879f6cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:9b:2b:3d:d5:d2:78:75:22:e2:d2:7e:f9:69: 3c:43:a2:ce:2c:20:c7:17:91:cb:ef:99:d3:c7:51: 64:81:58:32:46:1e:46:97:9e:f0:8b:2d:b8:8f:1d: 61:ae:8b:94:42:b8:eb:55:78:78:1a:8f:c7:35:f5: 60:54:f1:6e:95:44:a3:ce:36:25:c2:57:69:04:d3: 95:2a:7e:1d:f6:22:b0:9a:20:8a:24:5f:bf:cc:29: 13:4f:58:85:f3:21:92:ad:6a:a3:24:50:74:aa:22: b7:44:cc:15:6d:8f:c9:46:20:86:04:74:05:ad:87: db:74:dd:8a:ff:70:c4:1f:d6:e7:3b:28:b1:5d:86: c8:06:15:90:ea:50:09:20:b7:90:05:a4:bf:37:62: 5d:dc:b1:73:7e:9b:89:38:f1:39:04:04:da:a4:46: 6c:38:7a:a2:bf:5e:5c:33:30:2b:04:d6:e8:5f:55: 7f:91:ab:36:93:26:8c:f1:68:47:e3:af:39:23:88: 69:b6:ee:44:aa:7b:34:1c:9b:74:03:b6:f1:54:de: 48:41:b1:c0:f5:c0:b3:62:b2:d5:b1:3a:c0:f4:c4: c5:31:62:cb:31:cd:29:4f:19:09:fd:d1:1b:5c:3f: ba:e1:1a:06:21:18:50:64:9f:bf:1d:1e:61:74:48: c1:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:AF:E6:83:3B:4B:A3:BA:98:2E:1B:C0:E6:FC:C6:7D:97:22:78:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3562be53-e179-3729-a3e8-c7e5ba1401c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.226.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:a0:6f:f6:8a:62:41:07:c5:f7:84:bb:51:17:b2:76:d1:a9: 5d:54:d1:be:7c:59:f8:f1:fd:22:0a:98:91:1c:0d:0a:58:a5: 4d:ce:99:5b:0c:d6:c5:3b:f3:55:d1:9a:f5:1f:d3:29:52:84: e6:54:15:e9:2e:f4:79:88:b5:19:bc:e5:55:c5:a2:57:ae:15: dd:29:5e:1d:23:de:0c:d2:bf:78:05:42:2a:69:8c:a5:d4:5f: 4f:2e:ca:a4:ef:5b:c4:8c:9f:06:b9:ad:8f:3d:3b:2d:85:6d: 0a:23:67:0d:ab:9a:a0:a3:87:d6:ef:01:73:03:0c:e5:08:9c: 7c:e5:92:30:12:66:d4:f7:72:6d:f1:c3:57:03:5e:0a:73:41: 90:2e:28:86:34:53:bf:03:9f:e6:19:d9:8c:4e:f7:8a:b9:26: b7:e3:35:d0:06:00:05:07:12:7a:f2:1a:6c:26:9f:f0:3a:84: 7f:fc:95:68:95:bb:d5:1c:ea:66:85:ad:be:0c:b2:ff:81:46: 87:90:0f:5f:83:c5:7b:eb:03:a8:61:26:a6:2d:27:82:fe:20: f0:45:81:e8:3a:a1:3a:34:24:74:4d:a1:e3:24:5e:ba:3c:43: 78:7b:1d:e1:f7:68:8b:7d:72:3a:a0:4f:8f:ca:5f:54:79:02: c5:e6:c3:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnHn3AcrqZMbOdwJgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDUwODAxMDA0N1oXDTI1MDgwNjAxMDA0N1owLzEtMCsGA1UEAxMk ZDQyMDQzZWItMzQ1YS00YzhjLTg1NzYtOGUwMTk4NzlmNmNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZsrPdXSeHUi4tJ++Wk8Q6LOLCDHF5HL75nT x1FkgVgyRh5Gl57wiy24jx1hrouUQrjrVXh4Go/HNfVgVPFulUSjzjYlwldpBNOV Kn4d9iKwmiCKJF+/zCkTT1iF8yGSrWqjJFB0qiK3RMwVbY/JRiCGBHQFrYfbdN2K /3DEH9bnOyixXYbIBhWQ6lAJILeQBaS/N2Jd3LFzfpuJOPE5BATapEZsOHqiv15c MzArBNboX1V/kas2kyaM8WhH4685I4hptu5Eqns0HJt0A7bxVN5IQbHA9cCzYrLV sTrA9MTFMWLLMc0pTxkJ/dEbXD+64RoGIRhQZJ+/HR5hdEjBTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFKv5oM7S6O6mC4bwOb8xn2XIniwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMzU2MmJlNTMtZTE3OS0z NzI5LWEzZTgtYzdlNWJhMTQwMWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEruLwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACmgb/aKYkEHxfeEu1EXsnbRqV1U0b58Wfjx/SIKmJEcDQpYpU3OmVsM 1sU781XRmvUf0ylShOZUFeku9HmItRm85VXFoleuFd0pXh0j3gzSv3gFQippjKXU X08uyqTvW8SMnwa5rY89Oy2FbQojZw2rmqCjh9bvAXMDDOUInHzlkjASZtT3cm3x w1cDXgpzQZAuKIY0U78Dn+YZ2YxO94q5JrfjNdAGAAUHEnryGmwmn/A6hH/8lWiV u9Uc6maFrb4Msv+BRoeQD1+DxXvrA6hhJqYtJ4L+IPBFgeg6oTo0JHRNoeMkXro8 Q3h7HeH3aIt9cjqgT4/KX1R5AsXmw+Y= -----END CERTIFICATE-----Generated at Mon May 12 06:42:20 2025 by rpki-client