$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/500978f3-c4cc-3f8f-b956-839c562a2430.roa File: 500978f3-c4cc-3f8f-b956-839c562a2430.roa (raw, json) Hash identifier: e7FUROm9WTA0qR4xkK9LktTHLLRnIU90K7QeY/ggLn8= Subject key identifier: 02:A2:D1:EC:38:DC:74:B0:A1:9B:88:E5:5A:F3:12:AE:38:58:6D:BE Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849C79F7A9083C76ECC31910800 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/500978f3-c4cc-3f8f-b956-839c562a2430.roa Signing time: Thu 08 May 2025 01:00:47 +0000 ROA not before: Thu 08 May 2025 01:00:47 +0000 ROA not after: Wed 06 Aug 2025 01:00:47 +0000 asID: 6167 IP address blocks: 174.244.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c7:9f:7a:90:83:c7:6e:cc:31:91:08:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: May 8 01:00:47 2025 GMT Not After : Aug 6 01:00:47 2025 GMT Subject: CN=e3f022d2-8912-49ad-8571-cc5e9b8f56e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:ef:e1:88:9e:a5:6c:8a:b5:d1:cd:24:c9:32: d8:94:26:5f:3b:31:0e:3e:95:05:72:dd:40:f0:8d: f0:f4:08:20:eb:74:be:60:65:2c:5a:59:31:6b:3d: 1c:28:3f:da:a7:ce:76:4c:8a:0e:84:60:b7:65:89: 9b:ea:97:d5:19:49:dc:42:52:e5:aa:00:d3:0e:15: a7:7f:8e:9a:5e:be:48:3f:50:11:d5:ea:cb:38:c6: c4:4c:b0:f4:fb:ae:4e:a6:77:ea:03:06:57:2c:17: 06:2b:de:bf:c2:a0:02:4f:53:6f:3b:72:82:90:40: 17:0e:4e:d1:24:ce:fd:9c:12:94:b1:11:37:ea:95: ff:4f:70:8e:81:eb:22:8f:95:92:fb:e6:66:3e:95: e3:a6:1b:48:da:01:65:93:86:eb:54:01:b6:7e:2b: 24:02:f3:16:f8:4c:9f:f5:ef:0d:e0:ee:0a:4d:7d: c7:d4:85:de:53:3e:be:4e:94:11:d3:00:4e:d9:c2: 44:71:36:47:b0:d7:12:88:c2:04:4a:64:87:58:9d: d6:49:31:bb:29:a2:df:ad:2d:97:1f:bc:2d:3b:2e: 33:ae:db:c9:30:98:be:ba:d1:01:ba:10:26:08:d2: 4e:bc:80:40:89:72:48:73:18:ca:92:cc:a7:3e:b7: 0a:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:A2:D1:EC:38:DC:74:B0:A1:9B:88:E5:5A:F3:12:AE:38:58:6D:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/500978f3-c4cc-3f8f-b956-839c562a2430.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.244.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:7e:98:80:2e:4c:87:b2:c8:1e:c3:ad:c7:84:b0:e5:10:97: c7:bf:13:6c:80:da:b2:dc:c4:44:25:b1:4e:6e:95:27:ef:df: 90:eb:ef:53:ba:d4:b1:45:94:40:48:f7:92:70:f4:db:b4:5d: ac:ca:4e:b8:f7:94:2b:71:c0:5c:9f:e3:e2:04:50:70:13:71: 6c:a6:53:6b:53:56:c6:43:e9:c7:d8:bf:e0:10:76:2c:bb:d9: 0e:c1:50:f9:13:ed:81:eb:23:29:08:9d:0a:0b:3a:1d:e9:b1: 2a:eb:95:2a:a8:db:84:76:f0:b1:f4:84:8b:61:0d:2c:3c:09: f6:9b:6f:c9:1d:b5:47:35:d2:35:b1:c5:52:83:bc:62:d3:3b: 4b:aa:49:3c:27:d0:d9:33:49:66:5a:6b:3c:5a:01:e8:40:b9: 52:96:bd:5c:d7:83:c9:4d:0e:c3:42:ed:ed:27:13:7d:a6:e1: ed:08:a3:26:af:3a:23:48:20:43:cd:a7:57:6f:71:59:c2:de: 53:54:89:20:d2:e9:b0:2b:24:a1:7d:f1:94:fc:5c:14:fa:b7: 36:5e:09:82:3f:d6:d2:d4:26:99:b4:81:ff:e5:43:2f:d9:45: 09:50:4e:35:1d:f2:5c:58:e1:d2:02:dd:f9:13:48:85:f1:13: dd:e4:7e:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnHn3qQg8duzDGRCAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDUwODAxMDA0N1oXDTI1MDgwNjAxMDA0N1owLzEtMCsGA1UEAxMk ZTNmMDIyZDItODkxMi00OWFkLTg1NzEtY2M1ZTliOGY1NmU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiu/hiJ6lbIq10c0kyTLYlCZfOzEOPpUFct1A 8I3w9Agg63S+YGUsWlkxaz0cKD/ap852TIoOhGC3ZYmb6pfVGUncQlLlqgDTDhWn f46aXr5IP1AR1erLOMbETLD0+65OpnfqAwZXLBcGK96/wqACT1NvO3KCkEAXDk7R JM79nBKUsRE36pX/T3COgesij5WS++ZmPpXjphtI2gFlk4brVAG2fiskAvMW+Eyf 9e8N4O4KTX3H1IXeUz6+TpQR0wBO2cJEcTZHsNcSiMIESmSHWJ3WSTG7KaLfrS2X H7wtOy4zrtvJMJi+utEBuhAmCNJOvIBAiXJIcxjKksynPrcKzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAKi0ew43HSwoZuI5VrzEq44WG2+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNTAwOTc4ZjMtYzRjYy0z ZjhmLWI5NTYtODM5YzU2MmEyNDMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErvRAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADt+mIAuTIeyyB7DrceEsOUQl8e/E2yA2rLcxEQlsU5ulSfv35Dr71O6 1LFFlEBI95Jw9Nu0XazKTrj3lCtxwFyf4+IEUHATcWymU2tTVsZD6cfYv+AQdiy7 2Q7BUPkT7YHrIykInQoLOh3psSrrlSqo24R28LH0hIthDSw8Cfabb8kdtUc10jWx xVKDvGLTO0uqSTwn0NkzSWZaazxaAehAuVKWvVzXg8lNDsNC7e0nE32m4e0Ioyav OiNIIEPNp1dvcVnC3lNUiSDS6bArJKF98ZT8XBT6tzZeCYI/1tLUJpm0gf/lQy/Z RQlQTjUd8lxY4dIC3fkTSIXxE93kfj8= -----END CERTIFICATE-----Generated at Mon May 12 10:24:31 2025 by rpki-client