$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bcaab78c-ce5c-311e-8713-37d6f82d0e2d.roa File: bcaab78c-ce5c-311e-8713-37d6f82d0e2d.roa (raw, json) Hash identifier: vmImqPTHAlezgH2fKgYXa3PgucfJzpxHlEsJSB4bqj8= Subject key identifier: A5:DD:F8:D9:0C:42:F5:78:01:7C:83:94:A5:93:58:DC:66:74:B1:0E Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849A089E37B8062547A1CA74F80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bcaab78c-ce5c-311e-8713-37d6f82d0e2d.roa Signing time: Thu 24 Apr 2025 01:00:47 +0000 ROA not before: Thu 24 Apr 2025 01:00:47 +0000 ROA not after: Wed 23 Jul 2025 01:00:47 +0000 asID: 6167 IP address blocks: 174.218.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a0:89:e3:7b:80:62:54:7a:1c:a7:4f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 24 01:00:47 2025 GMT Not After : Jul 23 01:00:47 2025 GMT Subject: CN=57203ec2-1cca-47f7-bb96-39b3a26df020 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c2:34:b3:be:b1:e1:71:4d:a3:9e:4c:59:94: 9e:1f:68:3b:8a:dc:ef:c1:e1:0c:41:e0:62:bd:6c: 03:11:d0:29:d4:5f:04:5d:e8:61:f8:24:5f:85:15: 58:f8:a7:1c:d1:da:16:c4:d0:fa:5d:0d:0c:a5:72: 1c:b7:12:bc:49:62:64:90:2b:f5:b8:00:b8:b1:f3: 30:e7:dc:65:c0:88:fd:0b:9c:6d:0b:32:0c:f1:b6: 4e:c8:30:83:ea:36:a2:6d:52:4a:f5:14:bc:fd:aa: 11:34:e0:fc:09:c5:c4:09:b0:5f:06:0c:9d:40:48: 4e:b5:2a:33:d7:35:33:4d:78:14:b1:39:b0:cd:88: 39:bc:25:15:ef:31:9e:02:c8:11:ba:d5:10:d6:57: 8d:99:c3:31:bd:5d:23:a9:ee:32:4f:05:fa:c3:21: 74:0a:4e:7c:be:e5:70:26:b9:94:0f:77:7c:d0:d8: dd:45:7f:3d:bd:58:cf:36:95:37:8f:d2:1b:70:a2: 19:71:8b:d2:cd:7d:54:03:e5:68:07:ac:ce:80:1a: a4:ce:55:37:28:72:24:a5:f4:35:ec:bb:d2:a8:d5: 88:8d:89:a4:a7:1c:ef:b1:32:81:cd:b1:86:74:3a: 53:6d:34:c9:be:bb:a2:24:74:90:95:bc:de:af:9d: 27:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:DD:F8:D9:0C:42:F5:78:01:7C:83:94:A5:93:58:DC:66:74:B1:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bcaab78c-ce5c-311e-8713-37d6f82d0e2d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.218.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:80:aa:3e:08:bc:da:2a:d2:81:df:44:4c:93:71:c4:f2:f5: 0a:2d:4e:de:f9:35:44:40:d1:20:06:9d:f0:3e:d5:79:b6:a3: f7:cb:73:51:cf:2c:60:44:89:07:4f:26:80:0a:c8:65:62:e7: 62:39:72:f1:77:a4:22:63:2f:0a:28:36:a4:0f:5e:a9:70:d7: d8:cf:86:78:36:9b:47:ee:9a:04:16:a5:89:97:49:87:f7:15: fd:cd:38:de:8d:3e:33:6e:2d:fd:34:6f:95:07:d8:ee:69:ea: f7:11:c9:d6:a6:44:0f:8f:2e:f7:42:7f:e1:91:44:17:77:77: 16:64:8b:d5:db:a4:e4:0f:14:64:db:cd:4b:4c:d4:b2:3b:d6: e9:4d:3c:41:89:52:1b:56:14:ac:8e:6e:b5:ab:ae:6a:48:35: 27:c8:af:72:0d:48:32:5d:8b:75:96:c5:04:64:5d:b9:bc:5c: e2:2c:0a:8c:aa:f1:60:03:e1:de:eb:ff:4b:50:a9:1f:aa:e9: 7c:03:ea:75:0f:52:9b:c2:64:37:55:d5:5c:ac:9a:2b:0c:7d: 76:a0:3b:c5:18:86:8e:c2:10:69:b7:47:6f:05:31:f2:92:43: c2:1c:11:fd:19:0e:f0:c4:6d:69:7d:c2:47:5b:59:9b:db:5b: f9:0d:a6:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmgieN7gGJUehynT4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDQyNDAxMDA0N1oXDTI1MDcyMzAxMDA0N1owLzEtMCsGA1UEAxMk NTcyMDNlYzItMWNjYS00N2Y3LWJiOTYtMzliM2EyNmRmMDIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8I0s76x4XFNo55MWZSeH2g7itzvweEMQeBi vWwDEdAp1F8EXehh+CRfhRVY+Kcc0doWxND6XQ0MpXIctxK8SWJkkCv1uAC4sfMw 59xlwIj9C5xtCzIM8bZOyDCD6jaibVJK9RS8/aoRNOD8CcXECbBfBgydQEhOtSoz 1zUzTXgUsTmwzYg5vCUV7zGeAsgRutUQ1leNmcMxvV0jqe4yTwX6wyF0Ck58vuVw JrmUD3d80NjdRX89vVjPNpU3j9IbcKIZcYvSzX1UA+VoB6zOgBqkzlU3KHIkpfQ1 7LvSqNWIjYmkpxzvsTKBzbGGdDpTbTTJvruiJHSQlbzer50nKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKXd+NkMQvV4AXyDlKWTWNxmdLEOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYmNhYWI3OGMtY2U1Yy0z MTFlLTg3MTMtMzdkNmY4MmQwZTJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErtrgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAECAqj4IvNoq0oHfREyTccTy9QotTt75NURA0SAGnfA+1Xm2o/fLc1HP LGBEiQdPJoAKyGVi52I5cvF3pCJjLwooNqQPXqlw19jPhng2m0fumgQWpYmXSYf3 Ff3NON6NPjNuLf00b5UH2O5p6vcRydamRA+PLvdCf+GRRBd3dxZki9XbpOQPFGTb zUtM1LI71ulNPEGJUhtWFKyObrWrrmpINSfIr3INSDJdi3WWxQRkXbm8XOIsCoyq 8WAD4d7r/0tQqR+q6XwD6nUPUpvCZDdV1VysmisMfXagO8UYho7CEGm3R28FMfKS Q8IcEf0ZDvDEbWl9wkdbWZvbW/kNptA= -----END CERTIFICATE-----Generated at Mon May 5 07:42:27 2025 by rpki-client