$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0207d928-48bf-3f2c-ac73-b6f82d23e91e.roa File: 0207d928-48bf-3f2c-ac73-b6f82d23e91e.roa (raw, json) Hash identifier: wMonkKjhZmbDtRegBHtxr4Ev7j4qpcQIx6Sc8TlP3Jg= Subject key identifier: 5D:64:46:1E:DF:51:76:CE:3E:EE:5C:CB:0D:12:00:F6:CA:EB:2E:79 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285848EF617190B09C333546854200 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0207d928-48bf-3f2c-ac73-b6f82d23e91e.roa Signing time: Wed 19 Feb 2025 14:00:52 +0000 ROA not before: Wed 19 Feb 2025 14:00:52 +0000 ROA not after: Tue 20 May 2025 13:00:52 +0000 asID: 6167 IP address blocks: 174.42.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ef:61:71:90:b0:9c:33:35:46:85:42:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Feb 19 14:00:52 2025 GMT Not After : May 20 13:00:52 2025 GMT Subject: CN=3f909c72-89f0-4a9c-9ea0-4ea159f00630 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:b0:36:b0:a5:1f:3b:10:8b:4a:f5:75:6a:b8: e0:1b:92:da:4a:b5:88:cb:64:96:dd:93:e1:d6:5d: 52:96:8e:00:72:f0:46:bd:e5:32:7c:13:cf:fa:a9: 83:a8:a3:29:a5:2a:be:a4:30:1d:64:c2:b4:de:f5: db:ea:c3:8c:42:84:7c:61:9c:85:53:26:93:d5:55: 4e:a2:39:57:c2:cc:72:71:e7:d8:e1:dc:19:21:ab: 98:79:40:99:d4:79:40:33:ae:12:27:e6:51:62:d1: 24:c7:0a:36:98:59:32:3c:93:a3:bc:1b:96:a9:e9: 9e:af:0c:93:1e:a6:19:c4:7c:ed:20:fd:4f:fe:fe: 81:09:da:81:71:60:3e:e9:54:5e:38:31:5c:aa:4f: bb:5d:9c:60:d8:e1:27:1c:29:75:6b:ea:49:a4:4f: aa:02:ec:90:38:5d:0c:cf:a8:d4:62:52:d1:b6:87: 12:10:59:08:9f:51:95:9e:2f:3e:59:a4:52:98:19: bf:6f:8b:e5:fb:4a:8d:ef:01:55:2d:22:56:5f:86: 61:44:80:3c:0f:92:7e:47:25:b2:85:28:75:81:a2: 29:2a:4d:99:81:6f:b2:6b:b6:1a:70:a5:28:22:48: b8:c7:be:94:78:91:d3:26:29:e2:c0:5e:da:f8:d1: e5:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:64:46:1E:DF:51:76:CE:3E:EE:5C:CB:0D:12:00:F6:CA:EB:2E:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0207d928-48bf-3f2c-ac73-b6f82d23e91e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.42.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:07:cf:01:24:42:0b:f1:5f:fd:cf:33:30:c0:f7:8d:c2:c3: 9f:47:3c:96:ac:f4:a0:22:ec:65:64:85:90:95:6d:3b:86:02: 63:6c:0b:0e:d4:64:5c:8c:a2:08:e8:ce:95:57:7d:61:04:54: 8d:35:3c:a8:f6:71:89:ed:8e:c7:dd:00:97:9c:66:c1:06:c3: 29:c9:c3:54:3f:df:11:e8:63:8e:df:3b:0a:6a:a8:a1:c0:aa: a5:c7:ed:89:48:1e:fc:25:2b:66:83:5a:9c:a9:24:69:68:f7: 2c:64:ac:3f:36:44:25:01:ef:8d:64:03:a8:7a:60:16:fe:79: 13:92:fa:0a:a7:3c:83:06:f6:ea:e4:59:da:08:36:76:0a:cf: 6c:6d:b6:9e:08:4d:95:77:54:42:11:af:e8:3c:21:f7:4b:d0: 73:b1:15:7d:38:db:09:26:e6:c6:f2:94:79:9a:ce:92:35:1e: 2d:bd:49:26:e1:cd:04:3f:48:e7:4e:38:07:17:a7:5f:4a:a8: 6a:f2:e8:c2:c5:9b:60:e5:5b:66:7b:de:c9:f4:15:d2:8d:2a: b5:6d:f2:7d:47:25:45:97:e4:7a:6e:c1:ab:4d:07:7b:02:7e: 9e:e5:c2:18:d4:ad:38:a7:32:85:0f:a5:12:ad:4c:3a:0e:48: 4c:b0:37:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjvYXGQsJwzNUaFQgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk M2Y5MDljNzItODlmMC00YTljLTllYTAtNGVhMTU5ZjAwNjMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgrA2sKUfOxCLSvV1arjgG5LaSrWIy2SW3ZPh 1l1Slo4AcvBGveUyfBPP+qmDqKMppSq+pDAdZMK03vXb6sOMQoR8YZyFUyaT1VVO ojlXwsxycefY4dwZIauYeUCZ1HlAM64SJ+ZRYtEkxwo2mFkyPJOjvBuWqemerwyT HqYZxHztIP1P/v6BCdqBcWA+6VReODFcqk+7XZxg2OEnHCl1a+pJpE+qAuyQOF0M z6jUYlLRtocSEFkIn1GVni8+WaRSmBm/b4vl+0qN7wFVLSJWX4ZhRIA8D5J+RyWy hSh1gaIpKk2ZgW+ya7YacKUoIki4x76UeJHTJiniwF7a+NHlLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF1kRh7fUXbOPu5cyw0SAPbK6y55MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMDIwN2Q5MjgtNDhiZi0z ZjJjLWFjNzMtYjZmODJkMjNlOTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErirgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIsHzwEkQgvxX/3PMzDA943Cw59HPJas9KAi7GVkhZCVbTuGAmNsCw7U ZFyMogjozpVXfWEEVI01PKj2cYntjsfdAJecZsEGwynJw1Q/3xHoY47fOwpqqKHA qqXH7YlIHvwlK2aDWpypJGlo9yxkrD82RCUB741kA6h6YBb+eROS+gqnPIMG9urk WdoINnYKz2xttp4ITZV3VEIRr+g8IfdL0HOxFX042wkm5sbylHmazpI1Hi29SSbh zQQ/SOdOOAcXp19KqGry6MLFm2DlW2Z73sn0FdKNKrVt8n1HJUWX5HpuwatNB3sC fp7lwhjUrTinMoUPpRKtTDoOSEywN6Y= -----END CERTIFICATE-----Generated at Sat Apr 5 18:24:22 2025 by rpki-client