$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1fc3acc7-15c0-321b-b509-37123809f614.roa File: 1fc3acc7-15c0-321b-b509-37123809f614.roa (raw, json) Hash identifier: l7MuEeB6wJFS5IDNr1LoSLSlNf2TNYH1SrJ6Rat/d7E= Subject key identifier: C3:92:79:CF:0C:CA:CA:64:35:C5:28:81:99:B5:E3:BC:13:4B:54:B2 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285848ED4C6BA02F896F31748DAB40 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1fc3acc7-15c0-321b-b509-37123809f614.roa Signing time: Tue 18 Feb 2025 20:07:27 +0000 ROA not before: Tue 18 Feb 2025 20:07:27 +0000 ROA not after: Mon 19 May 2025 19:07:27 +0000 asID: 16509 IP address blocks: 208.214.230.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ed:4c:6b:a0:2f:89:6f:31:74:8d:ab:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Feb 18 20:07:27 2025 GMT Not After : May 19 19:07:27 2025 GMT Subject: CN=2575e1bf-49e2-495a-a6c4-273354edcabd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:d8:7e:f4:df:37:95:50:f6:e8:ff:20:11:90: 4d:7f:fa:42:cb:fa:a9:05:3a:cf:dc:10:8d:4e:96: 2d:f2:07:09:a4:4f:91:31:5b:07:6d:51:40:e0:6d: 54:99:5c:31:30:d9:78:3b:78:e5:1d:b2:1a:2c:93: ea:3c:0b:83:93:95:4e:a7:51:00:0a:ae:7a:f0:63: af:7d:de:60:09:c1:81:de:1b:a1:4d:e4:95:42:9f: 1d:ff:f2:73:2d:ef:41:a5:77:a7:a1:e4:cb:c5:72: 84:e9:48:66:47:3d:48:ae:cc:37:f4:f6:1f:f9:ce: 11:7a:c5:a1:d8:89:de:9f:3f:5e:2e:9c:1b:44:ec: 62:01:1b:30:ed:9a:bf:48:ae:ed:1e:16:1b:c7:50: 61:69:6f:5a:37:1d:bc:7a:17:e9:70:31:dc:b8:d1: a6:40:bb:7a:a6:e7:9e:bc:55:30:76:1c:f3:68:f7: 91:52:c4:6b:cf:16:cc:e1:cc:d0:7a:0b:c0:9a:6c: 58:54:a3:92:25:e2:9e:5b:a9:f2:cb:8f:64:cb:b0: 2d:40:d8:63:1d:fb:37:73:63:aa:30:a7:a9:37:5d: dd:ca:95:bf:24:78:29:c3:54:5b:53:ec:24:fb:bf: 2c:fc:22:f4:af:7d:14:1a:8f:cc:d0:96:78:0b:34: b6:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:92:79:CF:0C:CA:CA:64:35:C5:28:81:99:B5:E3:BC:13:4B:54:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1fc3acc7-15c0-321b-b509-37123809f614.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 208.214.230.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:1b:b5:6a:ed:e9:0c:b8:f0:3f:7d:3b:d4:e0:ee:36:3c:9e: 44:b6:39:79:d5:e6:d5:55:10:77:a5:19:a1:b5:3c:21:9c:03: ce:78:29:81:9f:53:f2:1e:2d:7b:8a:0f:5f:1f:bf:6c:99:e6: 55:2b:da:2f:22:eb:b9:9e:b5:6a:1b:ed:63:98:87:22:fa:42: b9:0b:77:40:93:55:26:8d:c7:39:b8:2d:08:e3:15:93:24:44: c3:11:5b:96:4a:df:94:1c:b7:74:bb:0f:40:fc:ae:67:01:d8: 54:f6:3b:1a:81:e5:89:35:c6:43:4b:48:86:44:35:ca:5e:b4: 27:17:5a:ef:07:b8:52:2b:c5:05:b8:b0:d9:10:30:2e:ad:e2: 0e:fd:33:7e:d3:a5:17:03:f4:1d:09:40:4a:7e:fb:fc:68:c6: 0a:9b:69:25:7d:b4:28:97:30:06:12:f1:3b:65:fb:db:ce:9c: 3b:0d:c1:eb:92:ba:a2:00:39:f6:b6:25:04:63:62:e0:9b:04: 0f:b6:56:e0:8f:ba:3a:1d:d3:55:8f:6d:6f:8e:9f:f4:dc:ec: 00:d9:eb:a2:c5:02:fb:06:50:c7:6d:86:8c:cd:e5:65:6d:37: 2c:ed:e3:12:f3:cd:d7:88:a0:db:22:23:f8:22:a4:5b:bd:71: 4c:9a:6f:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjtTGugL4lvMXSNq0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDIxODIwMDcyN1oXDTI1MDUxOTE5MDcyN1owLzEtMCsGA1UEAxMk MjU3NWUxYmYtNDllMi00OTVhLWE2YzQtMjczMzU0ZWRjYWJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjdh+9N83lVD26P8gEZBNf/pCy/qpBTrP3BCN TpYt8gcJpE+RMVsHbVFA4G1UmVwxMNl4O3jlHbIaLJPqPAuDk5VOp1EACq568GOv fd5gCcGB3huhTeSVQp8d//JzLe9BpXenoeTLxXKE6UhmRz1Irsw39PYf+c4ResWh 2Inenz9eLpwbROxiARsw7Zq/SK7tHhYbx1BhaW9aNx28ehfpcDHcuNGmQLt6puee vFUwdhzzaPeRUsRrzxbM4czQegvAmmxYVKOSJeKeW6nyy49ky7AtQNhjHfs3c2Oq MKepN13dypW/JHgpw1RbU+wk+78s/CL0r30UGo/M0JZ4CzS26wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMOSec8MyspkNcUogZm147wTS1SyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMWZjM2FjYzctMTVjMC0z MjFiLWI1MDktMzcxMjM4MDlmNjE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0NbmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHMbtWrt6Qy48D99O9Tg7jY8nkS2OXnV5tVVEHelGaG1PCGcA854KYGf U/IeLXuKD18fv2yZ5lUr2i8i67metWob7WOYhyL6QrkLd0CTVSaNxzm4LQjjFZMk RMMRW5ZK35Qct3S7D0D8rmcB2FT2OxqB5Yk1xkNLSIZENcpetCcXWu8HuFIrxQW4 sNkQMC6t4g79M37TpRcD9B0JQEp++/xoxgqbaSV9tCiXMAYS8Ttl+9vOnDsNweuS uqIAOfa2JQRjYuCbBA+2VuCPujod01WPbW+On/Tc7ADZ66LFAvsGUMdthozN5WVt Nyzt4xLzzdeIoNsiI/gipFu9cUyab70= -----END CERTIFICATE-----Generated at Sat Apr 5 11:22:05 2025 by rpki-client