$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d3d1077b-9e0d-30a7-b7e6-381210a7012f.roa File: d3d1077b-9e0d-30a7-b7e6-381210a7012f.roa (raw, json) Hash identifier: xmRSNGZ9HsuIAYfz1g+Gv77DerzeVzp1U2LFCS6LYwU= Subject key identifier: CB:76:CE:E3:C3:8D:EB:49:6A:F7:F1:54:C6:89:E6:1C:25:34:99:AD Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849CD34C2E059E5C30304FFA480 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d3d1077b-9e0d-30a7-b7e6-381210a7012f.roa Signing time: Sat 10 May 2025 01:00:47 +0000 ROA not before: Sat 10 May 2025 01:00:47 +0000 ROA not after: Fri 08 Aug 2025 01:00:47 +0000 asID: 14618 IP address blocks: 208.213.180.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cd:34:c2:e0:59:e5:c3:03:04:ff:a4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: May 10 01:00:47 2025 GMT Not After : Aug 8 01:00:47 2025 GMT Subject: CN=2d1dd0cd-58a4-4f4e-ace4-312c075c429f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:fc:8e:48:6c:11:b4:4b:a5:57:d2:8a:9d:db: ea:75:b0:7d:ab:8f:9e:72:2e:9a:af:d0:90:d3:0c: f8:a6:bb:67:a0:6e:0f:fa:1f:e7:fe:7f:12:57:66: 66:86:dc:cd:6b:e2:f9:c0:47:71:ce:d4:c6:c1:1b: 78:ce:37:19:e6:62:ff:70:42:92:f7:61:f4:9f:bd: d4:2f:26:b0:85:d9:46:f3:be:ec:c9:b2:88:60:bf: 49:5b:22:52:ef:2b:1c:76:77:78:45:65:02:a1:40: c5:c4:13:5b:67:1d:80:33:69:d4:32:35:35:16:65: f9:17:64:08:8b:f8:2f:e7:ec:d7:0d:03:d5:7d:08: f6:fa:4f:81:7d:cc:60:ba:40:b8:7b:ea:12:b3:c0: d5:43:2e:4d:93:fd:0e:93:2f:15:10:45:2b:08:e4: 23:6b:83:5e:71:99:e4:95:22:29:55:d2:2b:90:a1: 53:87:71:0e:df:5c:fe:4f:90:f0:b9:a0:c5:c2:d0: f1:d5:5b:ee:50:56:7c:42:c9:a0:fd:ec:f8:c1:cf: d6:1d:2d:7f:f4:92:3a:1e:1f:6c:f3:7e:7d:47:66: b9:ba:e3:51:28:65:28:85:6d:fd:6c:ce:49:a3:a5: 1d:94:02:32:a3:39:44:25:8b:7f:7d:99:59:29:60: d2:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:76:CE:E3:C3:8D:EB:49:6A:F7:F1:54:C6:89:E6:1C:25:34:99:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d3d1077b-9e0d-30a7-b7e6-381210a7012f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 208.213.180.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:e0:20:ba:a3:56:62:67:19:9d:bb:0e:e4:e0:61:49:65:f5: b3:3b:87:64:71:4e:5a:a8:3a:9f:20:b5:d3:dc:96:6c:70:1d: 5d:56:16:a0:ff:52:70:d9:d2:ef:6d:66:f9:3e:0a:b4:f9:b4: c9:e0:5c:7a:be:02:28:3e:75:21:6a:88:a0:c6:12:e6:1f:16: 29:5d:6d:66:f3:d3:ef:32:38:5b:20:9c:fc:0a:44:0e:80:24: 94:06:6e:21:4e:be:d3:f8:b6:f6:a4:f6:f6:26:f6:d5:c5:38: 82:f0:35:c1:14:e9:14:5f:a5:b1:32:e6:0c:c9:4a:6c:06:68: e1:8d:2d:04:ae:bb:25:5e:fa:ae:d6:3e:81:be:35:5c:09:f1: af:04:a6:c1:cc:fa:b4:6e:61:c7:f8:d2:69:86:56:24:ff:57: 6f:07:d3:49:4d:8a:e1:a0:c8:74:63:8f:dc:46:4d:8a:bc:f4: 00:33:5b:47:e0:60:5b:e3:2e:a2:ce:a7:37:c5:82:4b:4a:01: dd:ba:ec:f1:2a:a9:f8:77:d0:68:8f:f6:7f:fa:50:43:f6:be: d6:05:09:98:61:61:94:b7:4f:e8:2b:ce:01:dc:c5:be:86:9d: b4:d9:d5:a5:20:f8:ce:9f:32:ae:aa:4a:45:21:d4:0e:ef:f6: 06:1c:66:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnNNMLgWeXDAwT/pIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDUxMDAxMDA0N1oXDTI1MDgwODAxMDA0N1owLzEtMCsGA1UEAxMk MmQxZGQwY2QtNThhNC00ZjRlLWFjZTQtMzEyYzA3NWM0MjlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAifyOSGwRtEulV9KKndvqdbB9q4+eci6ar9CQ 0wz4prtnoG4P+h/n/n8SV2ZmhtzNa+L5wEdxztTGwRt4zjcZ5mL/cEKS92H0n73U LyawhdlG877sybKIYL9JWyJS7yscdnd4RWUCoUDFxBNbZx2AM2nUMjU1FmX5F2QI i/gv5+zXDQPVfQj2+k+BfcxgukC4e+oSs8DVQy5Nk/0Oky8VEEUrCOQja4NecZnk lSIpVdIrkKFTh3EO31z+T5DwuaDFwtDx1VvuUFZ8Qsmg/ez4wc/WHS1/9JI6Hh9s 8359R2a5uuNRKGUohW39bM5Jo6UdlAIyozlEJYt/fZlZKWDS1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMt2zuPDjetJavfxVMaJ5hwlNJmtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZDNkMTA3N2ItOWUwZC0z MGE3LWI3ZTYtMzgxMjEwYTcwMTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0NW0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEngILqjVmJnGZ27DuTgYUll9bM7h2RxTlqoOp8gtdPclmxwHV1WFqD/ UnDZ0u9tZvk+CrT5tMngXHq+Aig+dSFqiKDGEuYfFildbWbz0+8yOFsgnPwKRA6A JJQGbiFOvtP4tvak9vYm9tXFOILwNcEU6RRfpbEy5gzJSmwGaOGNLQSuuyVe+q7W PoG+NVwJ8a8EpsHM+rRuYcf40mmGViT/V28H00lNiuGgyHRjj9xGTYq89AAzW0fg YFvjLqLOpzfFgktKAd267PEqqfh30GiP9n/6UEP2vtYFCZhhYZS3T+grzgHcxb6G nbTZ1aUg+M6fMq6qSkUh1A7v9gYcZqw= -----END CERTIFICATE-----Generated at Sun May 11 13:50:07 2025 by rpki-client