$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/eb0b1b9c-76be-355a-8c6e-d69b301f1822.roa File: eb0b1b9c-76be-355a-8c6e-d69b301f1822.roa (raw, json) Hash identifier: PdkQOn1+SSGCDEz6CpKfOQWu4InwvBibStlVUFNNnNk= Subject key identifier: A4:66:73:3E:D5:EB:4E:7C:A9:09:BF:F9:60:9F:5D:D6:FD:96:5F:10 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285848EF616FC94A318517A8915BE8 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/eb0b1b9c-76be-355a-8c6e-d69b301f1822.roa Signing time: Wed 19 Feb 2025 14:00:52 +0000 ROA not before: Wed 19 Feb 2025 14:00:52 +0000 ROA not after: Tue 20 May 2025 13:00:52 +0000 asID: 22394 IP address blocks: 174.41.242.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ef:61:6f:c9:4a:31:85:17:a8:91:5b:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Feb 19 14:00:52 2025 GMT Not After : May 20 13:00:52 2025 GMT Subject: CN=d9105dd7-4f64-41ed-a6b5-4e20a61437cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f3:47:21:4e:2d:82:0c:08:01:d9:9b:30:8f: 3b:e6:88:61:c6:30:42:22:8d:07:bb:d1:77:e4:06: f3:b7:b0:5c:9e:63:55:7d:40:4c:84:10:ec:64:19: 44:44:3c:71:68:fd:7a:49:4b:fa:48:b7:a9:4a:14: 10:d9:84:01:d1:44:c5:da:9f:4b:6a:18:89:8b:5a: 96:94:60:80:b2:16:ea:76:7c:ab:2c:47:2e:ba:39: c8:33:84:92:ac:3e:10:74:14:d5:b8:ee:7a:d5:fd: 95:9d:37:20:8c:1c:9d:39:60:48:b4:d9:5c:30:73: 28:52:6d:f4:66:4b:30:62:28:95:e4:b6:ac:74:9f: e2:4e:92:04:98:a2:2e:d6:2a:4f:cc:f6:6f:66:17: 00:4c:71:3b:59:5b:3f:01:26:f0:90:3f:28:d0:6d: eb:28:a0:3e:10:f6:0b:0e:53:eb:63:a0:75:85:2d: 46:0d:ff:8c:f0:46:68:7a:c8:f6:39:18:7f:33:2a: f6:29:2f:1e:e1:46:a5:3f:28:38:a5:8b:90:be:74: e0:a5:51:58:7d:e3:59:d0:b0:33:6a:b2:f8:9f:b7: f1:f8:e9:98:6f:22:ff:d3:d5:80:ab:1b:c2:13:01: cb:9c:15:fb:b2:46:39:90:71:50:20:db:18:2f:71: 58:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:66:73:3E:D5:EB:4E:7C:A9:09:BF:F9:60:9F:5D:D6:FD:96:5F:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/eb0b1b9c-76be-355a-8c6e-d69b301f1822.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.41.242.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:27:7d:b0:61:e0:d0:6b:d7:4c:b5:3c:d3:a8:69:1e:00:0f: 68:be:46:fc:8a:f2:e2:12:d3:5a:6a:43:2d:0b:31:dc:4f:cf: 90:39:16:f5:08:64:5c:5d:41:9d:a9:73:18:30:9a:57:11:70: 03:97:14:2c:db:1b:e2:20:fe:bb:c1:9f:00:bc:0b:1c:be:6b: 77:c0:b4:a8:38:a5:9b:c4:1c:fd:ab:10:7d:11:f4:8d:7b:3a: 97:7e:5e:6c:8e:4e:7d:7b:80:97:2d:35:37:0e:75:b3:36:8b: cc:3a:78:19:5c:80:a9:67:b5:8d:9c:ab:63:9f:e4:c8:ac:aa: 3a:77:54:27:c4:85:a8:2a:aa:11:8e:23:c6:51:ad:86:3d:c7: fc:9a:2f:ac:1f:29:a8:4d:54:09:5a:f4:b0:49:fa:34:fb:90: 30:90:43:1a:de:91:ff:67:60:fe:98:d5:0e:ef:1c:f1:1e:cb: 7f:6b:73:b0:48:a6:dd:8d:cc:47:ed:fb:2c:c7:9d:27:f6:61: 89:30:9a:73:e1:89:c9:7f:c1:ff:6e:b6:4f:0f:c7:25:b7:a6: b1:3a:fe:14:66:12:0c:52:d1:5a:c4:18:58:db:98:1f:ae:22: b7:14:f8:bb:71:c6:e7:6c:9f:8b:01:1c:d6:bb:d1:12:5d:6b: 7d:c8:92:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjvYW/JSjGFF6iRW+gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk ZDkxMDVkZDctNGY2NC00MWVkLWE2YjUtNGUyMGE2MTQzN2NmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPNHIU4tggwIAdmbMI875ohhxjBCIo0Hu9F3 5Abzt7BcnmNVfUBMhBDsZBlERDxxaP16SUv6SLepShQQ2YQB0UTF2p9LahiJi1qW lGCAshbqdnyrLEcuujnIM4SSrD4QdBTVuO561f2VnTcgjBydOWBItNlcMHMoUm30 ZkswYiiV5LasdJ/iTpIEmKIu1ipPzPZvZhcATHE7WVs/ASbwkD8o0G3rKKA+EPYL DlPrY6B1hS1GDf+M8EZoesj2ORh/Myr2KS8e4UalPyg4pYuQvnTgpVFYfeNZ0LAz arL4n7fx+OmYbyL/09WAqxvCEwHLnBX7skY5kHFQINsYL3FYQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKRmcz7V6058qQm/+WCfXdb9ll8QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZWIwYjFiOWMtNzZiZS0z NTVhLThjNmUtZDY5YjMwMWYxODIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrinyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIsnfbBh4NBr10y1PNOoaR4AD2i+RvyK8uIS01pqQy0LMdxPz5A5FvUI ZFxdQZ2pcxgwmlcRcAOXFCzbG+Ig/rvBnwC8Cxy+a3fAtKg4pZvEHP2rEH0R9I17 Opd+XmyOTn17gJctNTcOdbM2i8w6eBlcgKlntY2cq2Of5Misqjp3VCfEhagqqhGO I8ZRrYY9x/yaL6wfKahNVAla9LBJ+jT7kDCQQxrekf9nYP6Y1Q7vHPEey39rc7BI pt2NzEft+yzHnSf2YYkwmnPhicl/wf9utk8PxyW3prE6/hRmEgxS0VrEGFjbmB+u IrcU+Ltxxudsn4sBHNa70RJda33IkrQ= -----END CERTIFICATE-----Generated at Fri May 9 18:10:16 2025 by rpki-client