$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3c11ec4a-6d68-3629-a79f-b6806ea00b7c.roa File: 3c11ec4a-6d68-3629-a79f-b6806ea00b7c.roa (raw, json) Hash identifier: ECrfWW3h6Zvrf5fZNkozXf0BqhCTlVjR2xSB8lfD+3E= Subject key identifier: EC:DA:DF:C3:CE:A4:3C:1F:0B:90:2C:49:E2:6E:4D:F1:B3:A4:52:3C Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285848E8667722ECD7B51E80A07100 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3c11ec4a-6d68-3629-a79f-b6806ea00b7c.roa Signing time: Mon 17 Feb 2025 02:00:38 +0000 ROA not before: Mon 17 Feb 2025 02:00:38 +0000 ROA not after: Sun 18 May 2025 01:00:38 +0000 asID: 6167 IP address blocks: 174.244.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e8:66:77:22:ec:d7:b5:1e:80:a0:71:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Feb 17 02:00:38 2025 GMT Not After : May 18 01:00:38 2025 GMT Subject: CN=45f7022b-1c80-4494-bcd8-6126d320b12f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:bb:d6:a6:f5:09:07:b5:19:d5:0c:04:34:60: 33:66:0e:eb:e5:ba:82:07:b2:60:fc:7b:c3:5e:8d: f6:ad:9a:28:19:f3:8b:eb:7b:50:0d:61:aa:2d:c0: 79:b9:66:cf:7c:f7:a1:6a:ff:fa:99:bb:a0:7c:19: de:68:1c:b7:20:a3:05:4d:90:9d:ea:8e:0f:12:80: 65:85:d8:d8:a6:6e:ca:ab:2c:4c:dc:28:ae:34:41: 44:95:13:6a:2d:d8:0b:17:ee:17:a3:76:c9:7e:96: 19:11:2e:d6:66:5d:dd:12:0e:29:0e:1f:04:d4:01: fa:a3:4d:fe:81:9b:6c:05:6b:49:66:3f:1b:a5:94: b8:5c:8a:79:66:e9:3d:95:6e:a6:35:93:d7:38:b7: cc:b8:20:78:9e:b6:fb:6b:7d:7a:e0:ac:69:41:af: 67:7e:45:f0:15:46:6c:1b:b6:4f:01:85:95:a5:ff: 05:91:a7:46:42:f6:8c:f3:ea:c1:8b:2b:1b:a8:41: b4:cc:b7:4e:b5:1d:67:af:60:05:03:e6:41:bd:17: e2:e4:f3:5f:4d:f0:a4:dd:61:37:16:2f:2b:f9:a4: c1:41:c1:3c:74:ff:eb:cd:76:38:5e:3e:9b:d1:57: 29:1c:f5:8d:4e:23:a9:cb:28:6b:7a:a5:41:69:d3: cc:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:DA:DF:C3:CE:A4:3C:1F:0B:90:2C:49:E2:6E:4D:F1:B3:A4:52:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3c11ec4a-6d68-3629-a79f-b6806ea00b7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.244.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:19:e6:ca:e4:df:f6:12:36:f3:e1:f2:b5:80:51:49:fa:47: 85:de:67:72:29:42:59:1d:ec:69:54:30:ab:42:d2:d0:b7:85: 5a:cc:06:3a:06:ee:1d:ef:9b:1e:97:05:dc:10:cc:57:d7:f9: 72:00:6d:3f:a9:94:e1:a7:50:2e:4f:bb:52:2e:20:40:3e:71: a9:82:ca:be:8b:9d:1a:38:98:74:bb:b8:5c:8f:14:84:b9:a4: 27:fc:0e:9c:96:e4:ab:84:da:20:76:bf:d4:cf:82:7c:83:af: 66:1b:ad:cc:8a:84:fc:ae:43:7a:d9:49:aa:ec:b5:1d:1c:e3: f0:3c:aa:b6:f1:78:19:19:4d:7c:d9:12:c5:e5:96:69:f8:cf: c2:49:96:87:14:f6:4d:d4:be:b4:0e:15:52:46:c4:f7:f0:ff: 9c:eb:b7:c8:51:c4:98:cf:e4:ed:90:be:3f:2e:fc:c7:f6:25: 8e:08:58:d8:50:08:3d:46:37:41:b3:73:c1:42:77:cf:4d:3d: 41:bb:d4:b7:56:c1:74:c2:2f:17:41:65:54:3f:e8:5d:ea:63: 8d:17:c7:ff:d1:9f:08:91:a7:c0:34:5b:0b:51:64:9e:40:3e: 2a:98:45:bf:9b:91:a3:4e:2e:19:c8:f0:02:7a:83:4b:c5:d6: 6e:ca:c0:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjoZnci7Ne1HoCgcQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDIxNzAyMDAzOFoXDTI1MDUxODAxMDAzOFowLzEtMCsGA1UEAxMk NDVmNzAyMmItMWM4MC00NDk0LWJjZDgtNjEyNmQzMjBiMTJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7vWpvUJB7UZ1QwENGAzZg7r5bqCB7Jg/HvD Xo32rZooGfOL63tQDWGqLcB5uWbPfPehav/6mbugfBneaBy3IKMFTZCd6o4PEoBl hdjYpm7KqyxM3CiuNEFElRNqLdgLF+4Xo3bJfpYZES7WZl3dEg4pDh8E1AH6o03+ gZtsBWtJZj8bpZS4XIp5Zuk9lW6mNZPXOLfMuCB4nrb7a3164KxpQa9nfkXwFUZs G7ZPAYWVpf8FkadGQvaM8+rBiysbqEG0zLdOtR1nr2AFA+ZBvRfi5PNfTfCk3WE3 Fi8r+aTBQcE8dP/rzXY4Xj6b0VcpHPWNTiOpyyhreqVBadPMdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOza38POpDwfC5AsSeJuTfGzpFI8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvM2MxMWVjNGEtNmQ2OC0z NjI5LWE3OWYtYjY4MDZlYTAwYjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErvSAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF8Z5srk3/YSNvPh8rWAUUn6R4XeZ3IpQlkd7GlUMKtC0tC3hVrMBjoG 7h3vmx6XBdwQzFfX+XIAbT+plOGnUC5Pu1IuIEA+camCyr6LnRo4mHS7uFyPFIS5 pCf8DpyW5KuE2iB2v9TPgnyDr2YbrcyKhPyuQ3rZSarstR0c4/A8qrbxeBkZTXzZ EsXllmn4z8JJlocU9k3UvrQOFVJGxPfw/5zrt8hRxJjP5O2Qvj8u/Mf2JY4IWNhQ CD1GN0Gzc8FCd89NPUG71LdWwXTCLxdBZVQ/6F3qY40Xx//RnwiRp8A0WwtRZJ5A PiqYRb+bkaNOLhnI8AJ6g0vF1m7KwDI= -----END CERTIFICATE-----Generated at Sat Apr 5 23:19:39 2025 by rpki-client