$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b32c6bf9-77f8-35d7-9824-2b9d050b3d69.roa File: b32c6bf9-77f8-35d7-9824-2b9d050b3d69.roa (raw, json) Hash identifier: fDV0kSml2QBQksxtbmljdAjVzrdnlzJSUTFEphZVFbA= Subject key identifier: B8:38:A6:13:E6:47:C4:F0:3D:D4:00:92:E2:38:F7:E5:41:53:A7:B6 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849C79F76802D022F0C6DF0A0B0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b32c6bf9-77f8-35d7-9824-2b9d050b3d69.roa Signing time: Thu 08 May 2025 01:00:47 +0000 ROA not before: Thu 08 May 2025 01:00:47 +0000 ROA not after: Wed 06 Aug 2025 01:00:47 +0000 asID: 6167 IP address blocks: 174.238.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c7:9f:76:80:2d:02:2f:0c:6d:f0:a0:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: May 8 01:00:47 2025 GMT Not After : Aug 6 01:00:47 2025 GMT Subject: CN=7d177147-9952-479d-8af1-332740b04e8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:c9:ab:42:22:fc:af:ff:64:86:ce:9c:38:df: a1:55:7f:19:7a:31:8f:c1:76:9c:6f:bb:1e:68:9d: a2:cf:11:37:20:ca:01:5a:28:dd:a1:21:aa:83:7b: 55:3b:8c:70:8c:51:8d:70:86:a5:df:af:d9:16:69: 23:5f:5c:c8:8c:79:61:6a:ca:cd:73:15:e4:f6:80: 0f:b9:02:58:98:c2:ce:a3:31:cd:f4:0a:81:08:fd: dd:74:2e:3d:c3:e4:76:d0:14:87:07:7b:8b:1c:3a: ab:74:31:fe:4a:a9:65:c0:f9:f5:f0:71:d7:44:4f: 54:3f:76:6f:b1:d1:70:b8:f8:71:f9:1f:55:80:ea: 16:da:e4:fa:3b:69:8b:a9:4a:3b:71:34:2b:ff:1f: 19:e9:dc:73:d8:3b:b4:bf:4c:92:fa:11:ae:eb:aa: fd:0f:18:a5:28:37:a6:00:fc:9e:d3:38:ee:13:f3: c9:49:f1:80:6b:cf:b4:b6:76:3d:9d:c0:95:6d:d6: 12:27:7d:f7:cf:d2:55:6c:ea:b9:94:0b:0a:be:16: 1b:67:a5:e9:94:ce:1c:94:38:a3:d7:2f:c3:bc:70: 94:99:f0:5a:59:ae:f9:82:89:98:f9:3e:38:e5:36: f7:4b:50:a1:63:af:eb:d1:4a:0b:2e:6a:18:59:99: 20:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:38:A6:13:E6:47:C4:F0:3D:D4:00:92:E2:38:F7:E5:41:53:A7:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b32c6bf9-77f8-35d7-9824-2b9d050b3d69.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.238.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:03:54:2d:58:41:b6:83:1c:c9:79:16:a9:0e:be:b0:36:79: d3:d4:5e:6f:69:e6:12:54:97:64:d5:a2:bf:6a:70:19:84:45: 04:67:4f:3f:92:fa:86:47:5d:7c:27:c4:19:6e:95:c0:7c:7e: 1f:49:8a:5f:e6:ce:2c:fd:4c:75:23:9d:f5:bb:cd:3c:2a:04: 18:dd:23:b3:ea:d2:1f:f7:22:90:7c:20:31:92:0d:3a:fb:21: 45:b9:a9:1b:d0:6e:46:45:85:50:af:8a:7e:54:6e:fb:ae:2f: 7d:a4:b8:0a:82:14:62:ed:6d:97:aa:33:d4:cc:98:fe:b0:f0: e2:04:72:e1:1f:32:98:74:a2:0a:ad:82:71:78:62:30:ec:0c: f3:99:61:89:10:03:08:46:b5:fe:be:cb:a3:af:70:7c:f7:2f: 21:aa:f7:74:3e:fe:64:ee:c5:75:d7:4a:bc:98:a6:8d:7b:36: c1:32:bd:10:91:f4:f3:f3:ef:77:c9:9f:be:7d:a5:3e:4d:7d: 0d:bc:10:12:db:a8:09:63:38:7a:91:5e:87:86:63:1d:19:e4: b6:5a:0d:81:76:e9:25:c2:78:56:43:71:48:5d:45:db:c2:27: 7f:53:86:51:03:7c:d8:17:ed:c3:ce:9f:84:0d:ac:38:9a:1a: 75:59:25:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnHn3aALQIvDG3woLAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDUwODAxMDA0N1oXDTI1MDgwNjAxMDA0N1owLzEtMCsGA1UEAxMk N2QxNzcxNDctOTk1Mi00NzlkLThhZjEtMzMyNzQwYjA0ZThmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA38mrQiL8r/9khs6cON+hVX8ZejGPwXacb7se aJ2izxE3IMoBWijdoSGqg3tVO4xwjFGNcIal36/ZFmkjX1zIjHlhasrNcxXk9oAP uQJYmMLOozHN9AqBCP3ddC49w+R20BSHB3uLHDqrdDH+SqllwPn18HHXRE9UP3Zv sdFwuPhx+R9VgOoW2uT6O2mLqUo7cTQr/x8Z6dxz2Du0v0yS+hGu66r9DxilKDem APye0zjuE/PJSfGAa8+0tnY9ncCVbdYSJ333z9JVbOq5lAsKvhYbZ6XplM4clDij 1y/DvHCUmfBaWa75gomY+T445Tb3S1ChY6/r0UoLLmoYWZkgvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLg4phPmR8TwPdQAkuI49+VBU6e2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYjMyYzZiZjktNzdmOC0z NWQ3LTk4MjQtMmI5ZDA1MGIzZDY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEru4wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFcDVC1YQbaDHMl5FqkOvrA2edPUXm9p5hJUl2TVor9qcBmERQRnTz+S +oZHXXwnxBlulcB8fh9Jil/mziz9THUjnfW7zTwqBBjdI7Pq0h/3IpB8IDGSDTr7 IUW5qRvQbkZFhVCvin5UbvuuL32kuAqCFGLtbZeqM9TMmP6w8OIEcuEfMph0ogqt gnF4YjDsDPOZYYkQAwhGtf6+y6OvcHz3LyGq93Q+/mTuxXXXSryYpo17NsEyvRCR 9PPz73fJn759pT5NfQ28EBLbqAljOHqRXoeGYx0Z5LZaDYF26SXCeFZDcUhdRdvC J39ThlEDfNgX7cPOn4QNrDiaGnVZJWI= -----END CERTIFICATE-----Generated at Tue Jul 1 09:21:55 2025 by rpki-client