$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5bcce5b7-9e7e-31a5-8039-cc476e8ad966.roa File: 5bcce5b7-9e7e-31a5-8039-cc476e8ad966.roa (raw, json) Hash identifier: NwA03zO40ksLtcxs6tZeaHY9w2nUq6+AyW6wFp2u/Xg= Subject key identifier: AF:F8:EF:14:7D:36:C2:76:A0:5C:59:4E:5B:CE:BF:29:CB:61:8A:FF Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849A089DEFC10F25CF2CC948EC0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5bcce5b7-9e7e-31a5-8039-cc476e8ad966.roa Signing time: Thu 24 Apr 2025 01:00:47 +0000 ROA not before: Thu 24 Apr 2025 01:00:47 +0000 ROA not after: Wed 23 Jul 2025 01:00:47 +0000 asID: 6167 IP address blocks: 174.213.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a0:89:de:fc:10:f2:5c:f2:cc:94:8e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 24 01:00:47 2025 GMT Not After : Jul 23 01:00:47 2025 GMT Subject: CN=04f236ef-0fb1-4402-82b4-b67756d15c87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:b1:2f:9f:72:c4:15:36:aa:03:2a:ae:21:6b: f5:21:9d:ce:f6:6a:71:1f:3f:23:28:0a:1f:ef:ad: f0:7c:46:5f:7d:1e:0c:a4:46:5a:f3:d3:5d:fd:06: c4:eb:04:69:ba:35:73:49:45:69:81:22:71:e5:1c: 23:ae:2d:3a:73:63:1a:ce:f5:6c:c4:21:2d:4d:bd: 75:ba:31:3b:42:15:e8:7a:25:f8:f7:8d:dc:dc:ba: 6a:51:28:9f:f6:e6:a8:2f:b1:ff:0b:da:67:e8:df: 20:1c:f2:5f:5d:77:2e:86:ae:19:cd:14:6c:77:0f: 23:6d:c6:1e:ca:c9:f8:d7:8c:60:7b:94:0d:48:49: ac:7d:13:9c:cb:fa:96:2c:de:a4:b1:ab:8a:23:1f: bc:56:6d:d6:ca:1d:fb:36:02:9e:b1:3f:2f:7c:1a: 95:3c:19:0b:05:45:5c:88:ea:1b:00:83:70:4f:d7: 8f:06:7b:85:d1:da:93:d7:66:f3:f6:f1:80:61:13: 43:f1:21:17:d0:7d:27:9f:e3:a9:8a:d5:a2:bc:77: 08:cf:a0:21:42:f2:2c:61:9e:2e:8b:79:11:71:2c: ff:0f:20:21:c9:7c:83:f7:46:7f:30:92:e1:eb:7a: 19:e2:d4:20:c7:06:0a:2c:2f:2e:f8:2c:d3:c9:1f: 02:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:F8:EF:14:7D:36:C2:76:A0:5C:59:4E:5B:CE:BF:29:CB:61:8A:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5bcce5b7-9e7e-31a5-8039-cc476e8ad966.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.213.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:6e:10:7b:5c:15:3e:60:7c:5b:07:19:6a:e1:b1:a9:20:cd: b2:be:ce:3d:24:3b:1a:1f:de:49:5d:d1:92:b5:ab:95:2d:54: 07:12:a3:29:c9:84:64:48:3a:2a:75:01:9d:14:dd:f9:52:03: c4:71:e6:49:f8:3c:e6:d4:75:1e:32:33:ce:06:9d:b6:7b:ce: 9a:b4:26:c0:27:bc:8e:7b:1d:d8:7d:48:2c:8b:42:75:18:a4: 37:1d:55:23:8e:83:66:11:15:2c:3b:81:76:51:ae:49:68:23: 53:9f:32:9a:ce:69:16:57:c1:17:71:b6:e2:11:a7:de:f9:45: 3e:68:04:94:e9:61:8b:8d:12:ca:49:f6:be:9b:84:5b:ba:51: 07:2e:96:2f:46:96:2d:c7:2c:0b:79:9d:84:f3:cb:8b:41:47: cd:0c:5e:ac:88:31:fd:92:74:08:08:fa:5e:71:27:c0:c0:78: b7:43:29:61:77:bb:51:29:5e:fc:4d:6a:c2:43:04:f6:74:bf: ab:da:5a:ee:5f:31:1b:66:dd:22:63:85:64:ec:1b:fb:46:64: f0:e7:ca:9c:d9:0a:4c:a2:28:53:2e:e6:fe:55:ac:88:31:6a: 17:f0:68:ec:e7:c9:4e:59:7d:9a:d3:20:b0:4d:fc:a5:19:06: ff:fa:67:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmgid78EPJc8syUjsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDQyNDAxMDA0N1oXDTI1MDcyMzAxMDA0N1owLzEtMCsGA1UEAxMk MDRmMjM2ZWYtMGZiMS00NDAyLTgyYjQtYjY3NzU2ZDE1Yzg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7Evn3LEFTaqAyquIWv1IZ3O9mpxHz8jKAof 763wfEZffR4MpEZa89Nd/QbE6wRpujVzSUVpgSJx5Rwjri06c2MazvVsxCEtTb11 ujE7QhXoeiX4943c3LpqUSif9uaoL7H/C9pn6N8gHPJfXXcuhq4ZzRRsdw8jbcYe ysn414xge5QNSEmsfROcy/qWLN6ksauKIx+8Vm3Wyh37NgKesT8vfBqVPBkLBUVc iOobAINwT9ePBnuF0dqT12bz9vGAYRND8SEX0H0nn+OpitWivHcIz6AhQvIsYZ4u i3kRcSz/DyAhyXyD90Z/MJLh63oZ4tQgxwYKLC8u+CzTyR8CnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK/47xR9NsJ2oFxZTlvOvynLYYr/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNWJjY2U1YjctOWU3ZS0z MWE1LTgwMzktY2M0NzZlOGFkOTY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErtXQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEhuEHtcFT5gfFsHGWrhsakgzbK+zj0kOxof3kld0ZK1q5UtVAcSoynJ hGRIOip1AZ0U3flSA8Rx5kn4PObUdR4yM84GnbZ7zpq0JsAnvI57Hdh9SCyLQnUY pDcdVSOOg2YRFSw7gXZRrkloI1OfMprOaRZXwRdxtuIRp975RT5oBJTpYYuNEspJ 9r6bhFu6UQculi9Gli3HLAt5nYTzy4tBR80MXqyIMf2SdAgI+l5xJ8DAeLdDKWF3 u1EpXvxNasJDBPZ0v6vaWu5fMRtm3SJjhWTsG/tGZPDnypzZCkyiKFMu5v5VrIgx ahfwaOznyU5ZfZrTILBN/KUZBv/6Z0c= -----END CERTIFICATE-----Generated at Sun May 11 01:55:20 2025 by rpki-client