$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4df9cd9a-6433-3f1c-841e-383577969fc2.roa File: 4df9cd9a-6433-3f1c-841e-383577969fc2.roa (raw, json) Hash identifier: eQJRBp7vYzY6rA3eGt3OClu1W68Tmjwu4pgLfLds0hM= Subject key identifier: 1F:5E:68:0E:FB:5D:6C:67:B8:82:4D:99:DB:E0:78:A5:8E:7D:7F:9A Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285848E86679843FE3311BFB226940 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4df9cd9a-6433-3f1c-841e-383577969fc2.roa Signing time: Mon 17 Feb 2025 02:00:38 +0000 ROA not before: Mon 17 Feb 2025 02:00:38 +0000 ROA not after: Sun 18 May 2025 01:00:38 +0000 asID: 6167 IP address blocks: 174.248.44.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e8:66:79:84:3f:e3:31:1b:fb:22:69:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Feb 17 02:00:38 2025 GMT Not After : May 18 01:00:38 2025 GMT Subject: CN=8156a1f0-1485-446b-b426-daf65945b838 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:50:7a:19:17:ce:a1:57:26:f7:8d:e6:e9:12: 18:44:5b:80:c4:97:b6:df:73:64:78:4a:21:a7:37: 1a:77:50:ea:c4:c5:d4:22:25:e9:91:f9:a4:3d:0a: 1f:d2:08:bb:e3:72:e4:22:0f:33:24:3f:00:ca:f2: 3d:43:3d:aa:a0:54:38:81:66:59:9b:7b:1f:31:f8: c3:34:6a:19:2a:6a:22:d5:2e:8a:b8:73:38:04:15: ad:6a:c9:67:33:9e:d2:83:65:af:6b:d0:55:ee:cb: a9:f9:d2:72:4d:83:87:99:cb:d1:07:cc:70:4a:d3: c5:d4:33:c7:3b:91:50:c8:8c:79:7a:32:90:81:51: 94:ba:ab:88:4b:ed:ff:08:c1:f5:da:37:83:7a:a0: f3:3a:b4:11:ab:a2:2a:b5:8f:7e:db:af:f6:b0:44: bb:3e:03:1c:a1:30:2f:a1:b1:fe:42:b1:5e:e8:11: 7e:98:b8:1b:ed:0c:5d:0c:15:b8:ac:e0:2b:e4:f5: 89:8e:2a:c8:e2:ec:42:4f:a9:b6:6e:50:52:6f:6a: 56:ff:1c:02:b5:f8:ea:14:12:4e:1e:73:37:ae:68: 6e:a0:f8:44:24:d0:3f:6d:3c:a4:49:c1:c5:6b:c2: dc:4b:a4:b3:bb:9f:da:66:06:40:52:b2:b9:5d:d5: 2b:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:5E:68:0E:FB:5D:6C:67:B8:82:4D:99:DB:E0:78:A5:8E:7D:7F:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4df9cd9a-6433-3f1c-841e-383577969fc2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.248.44.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:04:35:94:9f:9c:29:52:f2:a7:48:3e:be:14:9a:0a:5d:eb: 7d:c5:59:85:fa:45:a0:63:62:10:7a:f7:d4:30:70:91:c8:68: ac:d7:32:f1:7c:ab:7f:45:10:cb:60:29:3d:65:4e:2c:18:16: 15:eb:bf:7e:3c:1b:98:99:55:16:0b:b6:c1:9c:7b:8c:8b:42: 41:db:24:ce:d0:6b:36:85:1f:cf:79:c8:24:49:51:d7:56:b4: c0:9d:45:ae:7c:84:c4:46:9f:2e:07:65:50:3c:d8:0c:17:fd: 74:ea:51:f2:49:46:df:9c:30:84:9d:41:fb:f2:15:f2:a7:5a: 07:c0:35:7b:89:9a:43:dc:72:05:fb:8e:f6:1f:fb:ae:6f:e3: ea:52:31:e1:66:5f:a6:15:1d:fa:2f:a9:54:05:63:42:ac:84: 85:dd:d4:a1:02:7f:f7:e6:15:62:1a:e9:97:bc:87:77:49:5c: 66:6d:8f:a1:4b:15:60:fb:b7:a3:30:8c:ec:a3:c5:0d:f3:79: 71:5f:25:f3:78:74:76:79:37:ca:9b:d0:86:e3:eb:28:d2:7e: d1:6e:ff:7e:05:a3:66:a2:1f:2d:07:d0:59:f3:ae:47:5d:55: bd:30:75:22:4e:41:6d:23:d5:af:82:53:d5:12:55:e1:97:ff: e6:55:33:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjoZnmEP+MxG/siaUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDIxNzAyMDAzOFoXDTI1MDUxODAxMDAzOFowLzEtMCsGA1UEAxMk ODE1NmExZjAtMTQ4NS00NDZiLWI0MjYtZGFmNjU5NDViODM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj1B6GRfOoVcm943m6RIYRFuAxJe233NkeEoh pzcad1DqxMXUIiXpkfmkPQof0gi743LkIg8zJD8AyvI9Qz2qoFQ4gWZZm3sfMfjD NGoZKmoi1S6KuHM4BBWtaslnM57Sg2Wva9BV7sup+dJyTYOHmcvRB8xwStPF1DPH O5FQyIx5ejKQgVGUuquIS+3/CMH12jeDeqDzOrQRq6IqtY9+26/2sES7PgMcoTAv obH+QrFe6BF+mLgb7QxdDBW4rOAr5PWJjirI4uxCT6m2blBSb2pW/xwCtfjqFBJO HnM3rmhuoPhEJNA/bTykScHFa8LcS6Szu5/aZgZAUrK5XdUrcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB9eaA77XWxnuIJNmdvgeKWOfX+aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNGRmOWNkOWEtNjQzMy0z ZjFjLTg0MWUtMzgzNTc3OTY5ZmMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrvgsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALMENZSfnClS8qdIPr4Umgpd633FWYX6RaBjYhB699QwcJHIaKzXMvF8 q39FEMtgKT1lTiwYFhXrv348G5iZVRYLtsGce4yLQkHbJM7QazaFH895yCRJUddW tMCdRa58hMRGny4HZVA82AwX/XTqUfJJRt+cMISdQfvyFfKnWgfANXuJmkPccgX7 jvYf+65v4+pSMeFmX6YVHfovqVQFY0KshIXd1KECf/fmFWIa6Ze8h3dJXGZtj6FL FWD7t6MwjOyjxQ3zeXFfJfN4dHZ5N8qb0Ibj6yjSftFu/34Fo2aiHy0H0Fnzrkdd Vb0wdSJOQW0j1a+CU9USVeGX/+ZVM9o= -----END CERTIFICATE-----Generated at Sun Apr 6 12:43:31 2025 by rpki-client