$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/138c37f4-da8d-3d4a-87fa-bc060940932c.roa File: 138c37f4-da8d-3d4a-87fa-bc060940932c.roa (raw, json) Hash identifier: utVJP2l7UUT20rliQj6VMR1SxjXldebVrzt3Eqhjg7A= Subject key identifier: E8:A2:A2:17:9C:36:BE:0E:2B:DD:83:A1:C7:42:51:1C:8C:87:17:ED Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285848E8666525CA376D46518C7E80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/138c37f4-da8d-3d4a-87fa-bc060940932c.roa Signing time: Mon 17 Feb 2025 02:00:38 +0000 ROA not before: Mon 17 Feb 2025 02:00:38 +0000 ROA not after: Sun 18 May 2025 01:00:38 +0000 asID: 6167 IP address blocks: 174.230.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e8:66:65:25:ca:37:6d:46:51:8c:7e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Feb 17 02:00:38 2025 GMT Not After : May 18 01:00:38 2025 GMT Subject: CN=b8220755-b8ab-4bbf-ab4f-19bd68616c10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:47:6d:5b:37:ec:35:68:4d:53:ad:5b:3f:aa: 5e:f8:ae:18:86:77:4d:36:ba:65:2d:3f:f2:73:bc: 8c:4e:43:ac:2e:13:ff:58:71:b7:27:3d:63:31:0e: b0:d6:c4:e4:e0:2e:5d:4b:9b:ee:7d:22:4c:10:45: 71:71:b4:f8:88:64:68:4e:4c:93:c2:37:e9:6a:23: 14:0a:3c:af:d9:6f:fd:29:27:6b:f2:8b:e7:70:6f: cf:6a:de:28:4a:6e:f2:80:6a:8e:89:e3:a4:a5:b1: 67:94:e5:21:cf:f6:d7:44:7b:25:46:bf:17:29:1b: 7f:42:39:e0:cb:d1:2f:6b:12:17:25:fd:d9:68:1e: e2:d3:7e:fb:0c:0a:eb:05:df:cb:35:39:be:15:25: 80:20:33:d7:7b:25:be:39:ab:43:b3:91:e1:34:ac: a0:bb:fe:5f:d0:9a:b7:37:a3:60:f2:28:3d:c4:be: 33:d4:5d:d2:66:6e:44:b1:d9:35:58:64:7a:66:2e: 59:df:eb:a7:db:04:b8:87:d3:32:ea:86:e8:6a:66: 8c:19:07:1b:6f:cc:00:93:d7:60:f9:c5:e3:e7:e0: 87:64:d3:3d:e1:a6:55:73:61:f7:af:8f:3c:87:cb: d0:3c:22:89:22:d6:24:c7:a4:b4:c4:14:da:bc:fa: e2:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:A2:A2:17:9C:36:BE:0E:2B:DD:83:A1:C7:42:51:1C:8C:87:17:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/138c37f4-da8d-3d4a-87fa-bc060940932c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.230.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:b2:dd:d6:47:52:4c:87:01:dc:af:13:84:97:57:70:17:6f: c2:ec:c5:d9:1f:cb:c7:cc:6e:93:da:25:94:a9:43:14:d3:de: 74:e3:7e:28:fe:2b:75:b4:64:4d:b3:90:ed:9e:d6:ec:51:c3: 3e:61:df:40:41:5e:4b:26:e7:9d:18:29:72:0a:ee:90:59:07: b2:3b:c4:82:87:bf:83:a8:06:91:55:1c:ed:38:a3:ff:55:54: af:9c:ee:69:fd:26:02:b3:41:1d:78:9d:98:48:00:21:b3:02: d1:21:4b:e5:5c:71:e7:c4:a7:f8:1c:51:60:6b:9e:14:c3:05: 3f:e5:e5:32:3c:40:d1:93:8c:dd:32:f4:67:06:98:66:1e:bf: 8b:28:59:f4:af:0f:0a:7f:fc:c7:06:19:a5:f7:ce:2b:86:5b: f1:27:66:b4:8c:04:94:63:3a:00:99:16:9c:19:84:94:3b:45: 5a:96:84:fa:8a:d6:43:65:4c:be:cc:cd:e7:db:0e:4b:93:2c: 2b:be:0d:43:5f:53:0c:71:1e:05:c0:29:85:d8:b4:92:51:f0: 6c:7d:55:c6:35:32:77:09:4c:28:ee:7f:80:bc:2c:70:7e:28: 08:ae:f8:82:29:c3:a8:ce:cb:46:78:24:27:e1:25:a2:04:f5: 1a:af:1b:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjoZmUlyjdtRlGMfoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDIxNzAyMDAzOFoXDTI1MDUxODAxMDAzOFowLzEtMCsGA1UEAxMk YjgyMjA3NTUtYjhhYi00YmJmLWFiNGYtMTliZDY4NjE2YzEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkdtWzfsNWhNU61bP6pe+K4YhndNNrplLT/y c7yMTkOsLhP/WHG3Jz1jMQ6w1sTk4C5dS5vufSJMEEVxcbT4iGRoTkyTwjfpaiMU Cjyv2W/9KSdr8ovncG/Pat4oSm7ygGqOieOkpbFnlOUhz/bXRHslRr8XKRt/Qjng y9EvaxIXJf3ZaB7i0377DArrBd/LNTm+FSWAIDPXeyW+OatDs5HhNKygu/5f0Jq3 N6Ng8ig9xL4z1F3SZm5Esdk1WGR6Zi5Z3+un2wS4h9My6oboamaMGQcbb8wAk9dg +cXj5+CHZNM94aZVc2H3r488h8vQPCKJItYkx6S0xBTavPri9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOiiohecNr4OK92DocdCURyMhxftMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMTM4YzM3ZjQtZGE4ZC0z ZDRhLTg3ZmEtYmMwNjA5NDA5MzJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEruaAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKWy3dZHUkyHAdyvE4SXV3AXb8Lsxdkfy8fMbpPaJZSpQxTT3nTjfij+ K3W0ZE2zkO2e1uxRwz5h30BBXksm550YKXIK7pBZB7I7xIKHv4OoBpFVHO04o/9V VK+c7mn9JgKzQR14nZhIACGzAtEhS+VccefEp/gcUWBrnhTDBT/l5TI8QNGTjN0y 9GcGmGYev4soWfSvDwp//McGGaX3ziuGW/EnZrSMBJRjOgCZFpwZhJQ7RVqWhPqK 1kNlTL7MzefbDkuTLCu+DUNfUwxxHgXAKYXYtJJR8Gx9VcY1MncJTCjuf4C8LHB+ KAiu+IIpw6jOy0Z4JCfhJaIE9RqvGx4= -----END CERTIFICATE-----Generated at Sun Apr 6 03:28:46 2025 by rpki-client