$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c85801cb-9284-3f2f-9e2e-814a4c92e525.roa File: c85801cb-9284-3f2f-9e2e-814a4c92e525.roa (raw, json) Hash identifier: MUxI7xTXpAeSKmkLba581kSqLdd6go3OYIl1jSLqtKk= Subject key identifier: 06:06:02:CA:FD:88:B2:1C:D6:1E:FB:8A:91:E1:E8:14:DE:C0:D4:91 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849A089D7B084B1A7E7FAA3F540 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c85801cb-9284-3f2f-9e2e-814a4c92e525.roa Signing time: Thu 24 Apr 2025 01:00:47 +0000 ROA not before: Thu 24 Apr 2025 01:00:47 +0000 ROA not after: Wed 23 Jul 2025 01:00:47 +0000 asID: 6167 IP address blocks: 174.199.160.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a0:89:d7:b0:84:b1:a7:e7:fa:a3:f5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 24 01:00:47 2025 GMT Not After : Jul 23 01:00:47 2025 GMT Subject: CN=077678e0-60ac-4407-ad8c-4c44cd563a01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:ec:8c:c9:e9:af:14:33:30:92:f5:e5:0c:1b: 06:62:85:3d:22:12:26:06:45:da:80:a7:d2:36:b7: 9f:25:85:6b:a4:77:6f:ff:f2:16:a6:c1:c9:30:e3: 48:4c:b6:f4:e2:0c:c2:f8:0c:39:df:0a:e9:11:b6: a7:e0:59:44:ec:4a:f5:1e:d6:29:d2:26:61:94:0a: db:fb:4c:60:95:85:e6:2a:da:89:ed:39:39:dc:f9: 5e:74:a0:98:86:09:e7:12:dc:1c:58:5e:c3:ad:aa: 1c:44:5e:84:a4:30:30:cc:3e:1e:3a:ba:62:50:ad: d0:da:55:bd:7b:47:be:0a:e4:5f:1b:84:05:34:3e: f1:8a:11:30:b3:03:03:5d:e6:12:b5:1c:ce:d4:91: 77:1b:01:1f:c0:15:c6:91:8f:60:23:f0:0f:e5:08: 47:ec:a4:95:6f:16:bd:4b:06:88:17:f9:78:9c:f8: 95:43:f7:47:59:cb:e2:6b:56:58:4b:2e:0e:f1:47: 75:32:1c:b8:2a:30:57:06:aa:c1:ff:04:41:d4:22: 08:e5:1b:ed:c4:7d:05:51:d9:38:ef:15:1a:a6:53: 9f:98:ae:d7:6f:9b:c6:31:26:35:a2:c8:82:46:c9: 13:08:d9:ea:42:2e:17:b2:71:2b:e9:06:7d:ec:3f: e3:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:06:02:CA:FD:88:B2:1C:D6:1E:FB:8A:91:E1:E8:14:DE:C0:D4:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c85801cb-9284-3f2f-9e2e-814a4c92e525.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.199.160.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:e3:8e:11:6d:c4:38:c9:ca:d7:fa:d3:bb:b2:11:a4:eb:f7: fc:9b:b6:51:16:fb:56:43:34:dd:17:61:2a:16:0f:ec:0b:82: d5:cd:93:0e:c9:65:f6:a2:28:47:66:8f:7f:f6:ec:c0:a5:56: 1d:30:7d:5d:4a:16:2e:7a:f3:ac:09:a3:ca:bf:ee:09:73:08: 26:6b:08:fe:d2:7f:45:9f:64:57:0e:f7:ec:80:85:e6:c1:85: f9:03:28:31:c8:98:f1:e0:39:83:14:57:29:65:4e:27:dd:24: ac:2d:e5:df:f0:f8:79:e7:ea:a9:e3:1b:18:cc:9e:04:08:ed: ca:43:4c:69:a3:a7:1d:1d:ef:dc:d3:c7:81:40:c7:3a:39:44: 67:e3:5b:bc:76:35:0b:c3:c0:d0:1b:87:e2:b7:71:22:d3:97: 48:5d:37:77:46:81:e6:f4:2c:9d:bb:53:04:6e:47:13:ea:d6: 7d:6e:29:a5:63:5f:b7:67:08:4d:f7:41:e7:a3:14:5c:f0:50: 94:ba:53:32:ed:3d:00:45:2e:db:78:7c:e7:01:69:4b:30:bd: ee:5b:a6:94:f3:0d:39:d1:c8:b2:9b:f5:58:09:04:85:76:b5: 48:8c:7d:86:94:ec:d8:75:1a:14:84:48:11:84:fa:b3:22:97: 57:df:51:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmgidewhLGn5/qj9UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDQyNDAxMDA0N1oXDTI1MDcyMzAxMDA0N1owLzEtMCsGA1UEAxMk MDc3Njc4ZTAtNjBhYy00NDA3LWFkOGMtNGM0NGNkNTYzYTAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4uyMyemvFDMwkvXlDBsGYoU9IhImBkXagKfS NrefJYVrpHdv//IWpsHJMONITLb04gzC+Aw53wrpEban4FlE7Er1HtYp0iZhlArb +0xglYXmKtqJ7Tk53PledKCYhgnnEtwcWF7DraocRF6EpDAwzD4eOrpiUK3Q2lW9 e0e+CuRfG4QFND7xihEwswMDXeYStRzO1JF3GwEfwBXGkY9gI/AP5QhH7KSVbxa9 SwaIF/l4nPiVQ/dHWcvia1ZYSy4O8Ud1Mhy4KjBXBqrB/wRB1CII5RvtxH0FUdk4 7xUaplOfmK7Xb5vGMSY1osiCRskTCNnqQi4XsnEr6QZ97D/jeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAYGAsr9iLIc1h77ipHh6BTewNSRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYzg1ODAxY2ItOTI4NC0z ZjJmLTllMmUtODE0YTRjOTJlNTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFrsegMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE7jjhFtxDjJytf607uyEaTr9/ybtlEW+1ZDNN0XYSoWD+wLgtXNkw7J ZfaiKEdmj3/27MClVh0wfV1KFi5686wJo8q/7glzCCZrCP7Sf0WfZFcO9+yAhebB hfkDKDHImPHgOYMUVyllTifdJKwt5d/w+Hnn6qnjGxjMngQI7cpDTGmjpx0d79zT x4FAxzo5RGfjW7x2NQvDwNAbh+K3cSLTl0hdN3dGgeb0LJ27UwRuRxPq1n1uKaVj X7dnCE33QeejFFzwUJS6UzLtPQBFLtt4fOcBaUswve5bppTzDTnRyLKb9VgJBIV2 tUiMfYaU7Nh1GhSESBGE+rMil1ffUeU= -----END CERTIFICATE-----Generated at Mon May 5 02:57:55 2025 by rpki-client