$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7fc3f3ae-3c51-3e85-aa54-877129bc7df9.roa File: 7fc3f3ae-3c51-3e85-aa54-877129bc7df9.roa (raw, json) Hash identifier: S20WDgf/D/jsRmRwLUiU7tJMjRjis2sJ+HBnrHJSq7s= Subject key identifier: 48:BE:9A:9A:43:6C:68:57:27:0B:4A:C9:31:DE:D9:4B:22:49:CF:9F Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849CD34C3CA88DA74C76E441300 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7fc3f3ae-3c51-3e85-aa54-877129bc7df9.roa Signing time: Sat 10 May 2025 01:00:47 +0000 ROA not before: Sat 10 May 2025 01:00:47 +0000 ROA not after: Fri 08 Aug 2025 01:00:47 +0000 asID: 16509 IP address blocks: 208.214.224.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cd:34:c3:ca:88:da:74:c7:6e:44:13:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: May 10 01:00:47 2025 GMT Not After : Aug 8 01:00:47 2025 GMT Subject: CN=30f6ace9-ef6c-45ac-9645-10fa5e33e8ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:27:f3:28:e8:0a:1e:5c:a5:99:90:52:83:d8: ac:1a:a5:7f:4d:2a:1b:c8:82:f3:37:67:e2:4a:b4: 7c:e6:0b:a9:78:fc:47:29:ce:be:de:a6:d9:e4:01: 80:ba:9a:13:fe:cf:e8:f7:a2:1c:27:07:40:68:bd: dc:69:44:2b:a7:ea:1f:83:88:9e:91:e7:82:e1:17: d1:a0:3b:e5:a1:ef:1c:8a:cb:e3:5a:a7:75:b7:03: 08:15:8d:a8:3e:9e:10:0f:ee:26:c1:fb:11:9f:70: ff:d3:73:df:70:af:89:6c:a5:db:cc:86:d0:86:02: 25:c9:a2:3d:0a:e4:41:70:96:55:c1:dd:00:19:83: 50:2d:5b:d7:f9:ad:54:83:0c:47:04:80:a1:b1:a8: 5c:74:9f:69:3d:9a:83:5c:17:51:1a:53:e4:e6:11: 23:d6:78:13:37:7d:e9:f8:e0:90:6c:18:69:05:37: 0d:cf:2e:88:6b:c1:f5:e6:9a:d9:d9:b8:c5:04:c2: 33:ea:76:c6:49:cd:c9:f4:44:79:52:f1:fa:4e:7d: 7a:e2:e4:90:b8:32:e8:a8:92:3a:94:0e:02:c2:cd: 40:7b:da:90:b6:d1:ca:eb:db:b9:d2:ed:0b:6e:97: ca:eb:98:15:b6:d5:75:c4:00:50:e7:6c:b2:64:35: 73:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:BE:9A:9A:43:6C:68:57:27:0B:4A:C9:31:DE:D9:4B:22:49:CF:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7fc3f3ae-3c51-3e85-aa54-877129bc7df9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 208.214.224.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:a0:cb:77:1e:c4:59:d7:67:dc:2a:bb:41:ab:12:d3:3a:5b: 72:73:24:66:8a:f2:c1:22:0a:2d:ad:98:53:a9:23:45:0a:91: 50:f4:ba:d9:4e:46:5b:3b:48:a9:4b:a1:21:0e:f6:72:fe:cf: 2d:54:4b:df:82:9e:4d:c8:0f:12:ba:21:78:4a:d9:12:2d:8d: a9:dd:6f:41:6d:a2:72:20:e2:7b:17:60:6d:e4:ea:1b:6e:56: 0a:0c:b6:f9:76:32:4e:19:ad:b9:44:c6:28:78:21:8b:76:4c: c0:b1:a9:21:64:d3:94:65:85:68:79:33:95:5a:3f:d1:fe:b9: 46:94:92:0f:4e:8f:e4:fd:52:38:82:db:7f:01:ad:30:3c:11: b7:eb:28:b1:57:c3:e9:7d:8e:b0:d1:ad:65:6b:9a:72:69:86: ec:92:58:5b:86:bb:35:e8:a7:b3:22:ad:14:e6:fa:5c:38:65: 51:d6:4e:24:cd:fe:92:02:78:22:51:04:4e:14:04:e0:a8:e0: 45:17:1d:bc:68:cc:51:c8:57:ad:56:c4:b1:c3:4b:15:7e:8d: bd:fa:ed:ac:c0:b1:72:c4:bf:01:99:7a:b8:ac:d9:89:7f:b6: bd:c5:55:08:9a:03:f8:ca:27:2a:e5:e4:98:7e:96:70:33:3d: 42:f7:99:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnNNMPKiNp0x25EEwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDUxMDAxMDA0N1oXDTI1MDgwODAxMDA0N1owLzEtMCsGA1UEAxMk MzBmNmFjZTktZWY2Yy00NWFjLTk2NDUtMTBmYTVlMzNlOGNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlCfzKOgKHlylmZBSg9isGqV/TSobyILzN2fi SrR85gupePxHKc6+3qbZ5AGAupoT/s/o96IcJwdAaL3caUQrp+ofg4iekeeC4RfR oDvloe8cisvjWqd1twMIFY2oPp4QD+4mwfsRn3D/03PfcK+JbKXbzIbQhgIlyaI9 CuRBcJZVwd0AGYNQLVvX+a1UgwxHBIChsahcdJ9pPZqDXBdRGlPk5hEj1ngTN33p +OCQbBhpBTcNzy6Ia8H15prZ2bjFBMIz6nbGSc3J9ER5UvH6Tn164uSQuDLoqJI6 lA4Cws1Ae9qQttHK69u50u0LbpfK65gVttV1xABQ52yyZDVzHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEi+mppDbGhXJwtKyTHe2UsiSc+fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvN2ZjM2YzYWUtM2M1MS0z ZTg1LWFhNTQtODc3MTI5YmM3ZGY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0NbgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKOgy3cexFnXZ9wqu0GrEtM6W3JzJGaK8sEiCi2tmFOpI0UKkVD0utlO Rls7SKlLoSEO9nL+zy1US9+Cnk3IDxK6IXhK2RItjandb0FtonIg4nsXYG3k6htu VgoMtvl2Mk4ZrblExih4IYt2TMCxqSFk05RlhWh5M5VaP9H+uUaUkg9Oj+T9UjiC 238BrTA8EbfrKLFXw+l9jrDRrWVrmnJphuySWFuGuzXop7MirRTm+lw4ZVHWTiTN /pICeCJRBE4UBOCo4EUXHbxozFHIV61WxLHDSxV+jb367azAsXLEvwGZeris2Yl/ tr3FVQiaA/jKJyrl5Jh+lnAzPUL3mRM= -----END CERTIFICATE-----Generated at Sun May 11 16:18:12 2025 by rpki-client