$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7a25149c-289e-3b21-b201-3ff82aa6090d.roa File: 7a25149c-289e-3b21-b201-3ff82aa6090d.roa (raw, json) Hash identifier: mCx3OsLQbRYWWo4W0vdLU0jdRbf4WSDU8Xhj7+aaoQA= Subject key identifier: 57:EB:81:30:99:52:3A:B9:28:3A:FE:FB:DB:B8:67:89:8E:A5:53:3C Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849B631E6BD0BFA3A081F5B2300 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7a25149c-289e-3b21-b201-3ff82aa6090d.roa Signing time: Thu 01 May 2025 19:11:29 +0000 ROA not before: Thu 01 May 2025 19:11:29 +0000 ROA not after: Wed 30 Jul 2025 19:11:29 +0000 asID: 6167 IP address blocks: 174.253.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b6:31:e6:bd:0b:fa:3a:08:1f:5b:23:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: May 1 19:11:29 2025 GMT Not After : Jul 30 19:11:29 2025 GMT Subject: CN=f2ff4fc2-e2ac-4886-a765-12bb92fe5401 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:8e:c7:c2:a0:7e:f9:5c:b5:0c:74:59:1c:be: b5:fa:d3:36:77:24:2f:f8:18:ae:57:00:0f:85:25: 7a:0c:3b:9d:92:e8:37:a4:40:7b:f1:1c:74:3f:40: 9d:99:52:cb:3c:1b:6b:17:8e:8c:35:af:93:57:02: bc:0a:cb:d9:b3:4b:d8:9c:50:d0:b5:91:e3:ca:17: 76:f7:ba:5a:d1:75:45:06:f9:16:41:cf:d4:dc:c8: fe:8d:27:e3:bf:5b:03:e2:8f:fc:e4:56:ed:9f:1f: 03:c8:88:8c:4f:0c:d8:58:e1:50:77:2b:f2:19:93: 09:dc:3e:3d:77:da:a0:f0:cb:de:62:f8:4c:c7:68: 97:20:b5:65:fe:4d:bc:b5:35:04:03:05:77:17:ff: 5d:85:9f:e6:45:08:66:9e:69:23:c6:7e:9a:bd:97: 4b:3a:2a:fe:52:eb:9e:0a:98:2b:6a:54:fb:e1:ef: 83:12:ba:fa:f0:2a:eb:48:bb:91:45:ec:54:bd:ae: 9c:4f:b1:31:6d:1e:87:1b:5e:cc:03:d4:c2:ae:f3: b1:24:a1:99:e8:45:02:ad:06:9f:d1:b6:81:0f:cb: 0a:f8:04:08:8d:43:b6:22:38:23:2f:0d:2d:8b:e9: f6:80:ba:59:bd:51:31:45:bc:1d:ca:7c:76:5d:cd: 17:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:EB:81:30:99:52:3A:B9:28:3A:FE:FB:DB:B8:67:89:8E:A5:53:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7a25149c-289e-3b21-b201-3ff82aa6090d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.253.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:ee:b0:34:29:97:f1:b9:4e:9f:6d:e9:5d:ee:62:81:a8:f1: aa:6c:e1:97:fd:65:c4:c9:6b:8e:44:29:1b:17:36:4d:82:23: dc:f0:17:35:8d:ae:92:ec:ff:67:07:93:7b:28:6b:b8:e6:8b: 87:0b:be:f0:e0:68:ae:31:61:f3:9c:0b:45:f9:a2:fb:fd:9a: 5f:f5:30:9c:f4:c0:5d:cd:c8:d3:58:9c:41:57:d0:df:73:98: 0b:b7:e5:33:e9:f5:9d:2a:71:46:f8:0a:86:42:dd:64:c1:62: 2a:b8:4b:7f:7d:dc:3a:b7:5b:95:04:3d:63:18:78:af:ea:e2: d3:9d:a6:1d:ce:20:e0:af:b2:e6:25:b0:b8:1d:f2:e6:41:4b: 7a:8e:86:80:ce:cd:a8:34:74:31:63:58:d4:0e:23:b4:cf:dc: 4f:00:aa:89:85:2b:77:c8:8f:33:bd:4c:93:3d:bb:44:4b:4c: 68:08:0c:ca:66:38:5a:7e:10:97:ea:fb:0d:06:2f:0c:ee:25: de:87:82:02:93:a8:a2:dd:d5:e1:b7:a6:fb:a2:20:1e:eb:6e: 2d:99:1e:1e:25:ee:a5:78:b0:26:ab:11:e5:36:32:40:db:04: a2:4a:82:68:ec:5c:26:62:b3:be:f6:0c:6f:9e:8e:fb:b3:dd: 47:9c:5d:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm2Mea9C/o6CB9bIwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDUwMTE5MTEyOVoXDTI1MDczMDE5MTEyOVowLzEtMCsGA1UEAxMk ZjJmZjRmYzItZTJhYy00ODg2LWE3NjUtMTJiYjkyZmU1NDAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk47HwqB++Vy1DHRZHL61+tM2dyQv+BiuVwAP hSV6DDudkug3pEB78Rx0P0CdmVLLPBtrF46MNa+TVwK8CsvZs0vYnFDQtZHjyhd2 97pa0XVFBvkWQc/U3Mj+jSfjv1sD4o/85Fbtnx8DyIiMTwzYWOFQdyvyGZMJ3D49 d9qg8MveYvhMx2iXILVl/k28tTUEAwV3F/9dhZ/mRQhmnmkjxn6avZdLOir+Uuue CpgralT74e+DErr68CrrSLuRRexUva6cT7ExbR6HG17MA9TCrvOxJKGZ6EUCrQaf 0baBD8sK+AQIjUO2IjgjLw0ti+n2gLpZvVExRbwdynx2Xc0XsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFfrgTCZUjq5KDr++9u4Z4mOpVM8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvN2EyNTE0OWMtMjg5ZS0z YjIxLWIyMDEtM2ZmODJhYTYwOTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErv1AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAInusDQpl/G5Tp9t6V3uYoGo8aps4Zf9ZcTJa45EKRsXNk2CI9zwFzWN rpLs/2cHk3soa7jmi4cLvvDgaK4xYfOcC0X5ovv9ml/1MJz0wF3NyNNYnEFX0N9z mAu35TPp9Z0qcUb4CoZC3WTBYiq4S3993Dq3W5UEPWMYeK/q4tOdph3OIOCvsuYl sLgd8uZBS3qOhoDOzag0dDFjWNQOI7TP3E8AqomFK3fIjzO9TJM9u0RLTGgIDMpm OFp+EJfq+w0GLwzuJd6HggKTqKLd1eG3pvuiIB7rbi2ZHh4l7qV4sCarEeU2MkDb BKJKgmjsXCZis772DG+ejvuz3UecXX4= -----END CERTIFICATE-----Generated at Sun May 11 14:58:36 2025 by rpki-client