$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/220d0e56-fc3d-3262-b19e-0960e7257296.roa File: 220d0e56-fc3d-3262-b19e-0960e7257296.roa (raw, json) Hash identifier: 5y7dfG/BCV+GqoeNmoIFO/SvljBaXkSBaPIqWv8ZDm0= Subject key identifier: 63:93:8E:64:AF:7F:65:A3:08:10:1F:7A:47:83:73:B0:1B:0D:96:9F Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285848E8667171BCB2B9D8DF8704C8 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/220d0e56-fc3d-3262-b19e-0960e7257296.roa Signing time: Mon 17 Feb 2025 02:00:38 +0000 ROA not before: Mon 17 Feb 2025 02:00:38 +0000 ROA not after: Sun 18 May 2025 01:00:38 +0000 asID: 6167 IP address blocks: 174.235.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e8:66:71:71:bc:b2:b9:d8:df:87:04:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Feb 17 02:00:38 2025 GMT Not After : May 18 01:00:38 2025 GMT Subject: CN=f2457df0-3078-4980-bbe0-e85a9671efbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:fa:1d:e3:7e:32:a1:4b:2a:0b:44:50:31:5f: a9:30:f7:12:7d:8e:df:d9:15:99:2d:24:75:b0:95: 6a:6e:fb:6c:4c:b4:24:f9:fa:3c:f3:7e:5b:bf:f1: 5f:80:3a:3e:6c:7d:6c:8a:04:f9:e3:4f:66:3b:fe: 1b:e6:2e:62:6a:dd:47:3f:57:81:a6:45:55:d4:5a: 44:ba:1b:5b:92:8e:4c:6b:e4:c9:b4:35:ea:cd:74: 71:d2:12:16:3a:22:09:34:3e:14:d9:54:6a:1a:59: 16:83:d5:65:53:a2:b6:19:4a:45:b0:3a:a4:83:8d: f6:78:01:c0:e3:0d:7e:e5:02:27:7c:99:3e:fa:4f: ae:2d:91:32:91:3c:39:47:46:63:08:71:65:71:3d: b1:69:b9:2c:19:7e:78:a4:e8:a1:f3:5e:8e:c7:f9: f2:9b:36:d5:6d:cb:d8:d6:a8:c7:45:dc:d0:fe:2a: 92:6e:22:12:b9:26:75:0c:b7:96:7a:67:99:a7:24: 65:43:b6:93:01:48:f5:67:30:83:4b:eb:10:e1:ec: cb:c5:7e:cd:7f:7c:ec:bf:b5:f0:d0:cb:2e:0a:fb: e2:90:92:04:53:0b:73:e1:e4:44:76:ff:5b:a6:9b: 9d:18:11:0b:8b:ce:93:06:6f:9d:43:24:8f:91:be: 3d:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:93:8E:64:AF:7F:65:A3:08:10:1F:7A:47:83:73:B0:1B:0D:96:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/220d0e56-fc3d-3262-b19e-0960e7257296.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.235.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:8d:6d:b2:52:1f:c0:f4:53:49:ef:8c:91:a1:40:6b:d1:ab: 02:51:67:38:e1:bf:23:d3:03:f1:fd:08:04:80:42:84:ee:61: 0a:47:ea:9b:18:f0:c9:9b:20:79:9b:36:cd:8f:b7:39:a4:88: 21:c5:d7:f6:40:46:f7:c5:57:ad:63:1c:ce:1d:89:ac:da:77: 1d:0b:31:f2:14:07:fe:1e:c1:80:c7:a5:ae:4d:e3:06:e4:dc: c4:a2:23:cf:24:91:20:0b:05:6b:a3:f1:22:3d:44:71:2b:a1: 23:06:17:61:34:bd:21:4b:dc:86:a2:67:41:a6:96:11:95:4a: 5d:4b:77:4e:c5:50:97:32:1f:3f:db:20:3d:06:23:49:5e:69: 9e:2f:a4:88:c6:12:bd:9c:fd:d4:29:96:95:2c:75:96:ce:31: 2f:42:3f:0d:06:3d:9c:4d:43:f0:4e:c9:1d:bf:29:61:60:85: c2:3d:16:1d:71:7e:19:83:da:c9:c2:50:d4:d0:a8:a1:e3:cc: 67:89:bf:ce:34:6a:7d:76:b7:4d:16:b0:dd:33:38:6e:4b:12: 50:8a:1f:40:d3:8c:58:26:99:59:04:02:e9:e8:a3:c3:dd:bb: f7:f2:a9:83:27:29:6e:11:69:85:eb:c1:e9:fb:08:d1:43:2c: f3:8c:07:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjoZnFxvLK52N+HBMgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDIxNzAyMDAzOFoXDTI1MDUxODAxMDAzOFowLzEtMCsGA1UEAxMk ZjI0NTdkZjAtMzA3OC00OTgwLWJiZTAtZTg1YTk2NzFlZmJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0fod434yoUsqC0RQMV+pMPcSfY7f2RWZLSR1 sJVqbvtsTLQk+fo8835bv/FfgDo+bH1sigT5409mO/4b5i5iat1HP1eBpkVV1FpE uhtbko5Ma+TJtDXqzXRx0hIWOiIJND4U2VRqGlkWg9VlU6K2GUpFsDqkg432eAHA 4w1+5QInfJk++k+uLZEykTw5R0ZjCHFlcT2xabksGX54pOih816Ox/nymzbVbcvY 1qjHRdzQ/iqSbiISuSZ1DLeWemeZpyRlQ7aTAUj1ZzCDS+sQ4ezLxX7Nf3zsv7Xw 0MsuCvvikJIEUwtz4eREdv9bppudGBELi86TBm+dQySPkb49fwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGOTjmSvf2WjCBAfekeDc7AbDZafMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMjIwZDBlNTYtZmMzZC0z MjYyLWIxOWUtMDk2MGU3MjU3Mjk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEruvQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKKNbbJSH8D0U0nvjJGhQGvRqwJRZzjhvyPTA/H9CASAQoTuYQpH6psY 8MmbIHmbNs2PtzmkiCHF1/ZARvfFV61jHM4diazadx0LMfIUB/4ewYDHpa5N4wbk 3MSiI88kkSALBWuj8SI9RHEroSMGF2E0vSFL3IaiZ0GmlhGVSl1Ld07FUJcyHz/b ID0GI0leaZ4vpIjGEr2c/dQplpUsdZbOMS9CPw0GPZxNQ/BOyR2/KWFghcI9Fh1x fhmD2snCUNTQqKHjzGeJv840an12t00WsN0zOG5LElCKH0DTjFgmmVkEAunoo8Pd u/fyqYMnKW4RaYXrwen7CNFDLPOMB7k= -----END CERTIFICATE-----Generated at Sun Apr 6 01:06:29 2025 by rpki-client