$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4ef9f3a6-010a-3c55-ab1c-71d29c916f63.roa File: 4ef9f3a6-010a-3c55-ab1c-71d29c916f63.roa (raw, json) Hash identifier: UPxBN+yiGdnOrBBoQZDTBs2TzKMiXUX1AhwxZDz9BRs= Subject key identifier: 5F:1A:F2:EF:28:0E:9B:A7:19:E3:F9:A5:95:2A:EC:7B:66:BF:77:DF Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285848C150E4042C9F2DF7592029B0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4ef9f3a6-010a-3c55-ab1c-71d29c916f63.roa Signing time: Mon 03 Feb 2025 02:00:39 +0000 ROA not before: Mon 03 Feb 2025 02:00:39 +0000 ROA not after: Sun 04 May 2025 01:00:39 +0000 asID: 6167 IP address blocks: 174.219.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c1:50:e4:04:2c:9f:2d:f7:59:20:29:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Feb 3 02:00:39 2025 GMT Not After : May 4 01:00:39 2025 GMT Subject: CN=a0eda736-1136-4cdf-88f8-8036d09b5c5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:ee:d2:d3:6b:0b:f9:7c:96:a3:bc:41:20:c5: 41:9b:42:16:d0:41:e5:5f:e0:62:ad:2c:62:2e:9b: 5f:f4:7c:0c:cf:bb:d8:94:c6:51:26:90:47:d4:f9: 94:7f:3e:8b:ac:3d:56:4c:59:e7:cb:35:e5:2b:44: 77:23:4e:a4:a2:04:31:a7:e0:c3:cd:85:70:21:7f: 86:22:26:a9:22:3e:f0:11:2b:4e:e8:26:8c:3f:5d: fe:93:09:45:95:d0:d8:d4:6c:bc:02:79:a7:04:cd: 66:40:e7:ff:dd:7d:e2:54:51:fe:9d:b8:28:54:e9: 95:31:b4:f7:c7:6e:e5:bb:15:53:ed:d5:90:9f:77: bb:09:ad:15:52:03:a7:f4:8c:49:a0:f3:f5:e8:3b: 24:55:a1:94:05:75:4d:d7:f5:2a:92:62:70:15:06: f1:f0:4e:fa:06:08:c4:27:fa:4e:5f:48:ba:5a:71: 4c:63:5d:aa:53:99:aa:64:1c:e9:89:ec:5e:ed:c0: d5:50:84:68:e5:52:a7:1b:0d:55:d1:a6:b2:cd:51: 0b:02:1b:05:fc:83:26:26:b7:bf:8c:ff:60:33:35: 43:2c:ad:25:98:e6:13:f9:2e:c5:8f:0c:75:57:bf: d5:7d:40:cc:fc:7e:ac:62:c6:f2:59:05:a2:04:34: c8:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:1A:F2:EF:28:0E:9B:A7:19:E3:F9:A5:95:2A:EC:7B:66:BF:77:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4ef9f3a6-010a-3c55-ab1c-71d29c916f63.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.219.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:2f:c2:a0:67:b5:1a:3b:68:59:0c:a6:cb:eb:c1:6d:9b:7c: 2b:2c:34:3e:a4:81:e6:d6:35:b0:8f:72:01:cd:e2:b8:fd:46: e9:4b:58:66:26:7b:c2:6c:fa:d5:ee:3d:ec:24:ec:b9:1e:ef: 69:4d:be:55:71:48:3f:7f:21:68:d6:1f:b4:c5:f3:fd:37:eb: 4c:ca:e3:b0:dc:07:13:61:13:7f:bc:bb:3d:72:4c:9e:88:9c: 96:3b:06:73:d9:0f:f7:3d:a4:02:7d:a2:48:a7:c0:54:1c:6f: 45:d6:52:f8:c0:36:d7:b7:68:10:5b:10:36:b3:a8:51:d0:b4: ea:99:f2:00:24:05:f3:9f:f5:ac:a3:75:0d:58:eb:8a:2a:35: 2f:bf:44:b4:30:5a:9d:07:8a:c6:e9:e5:d6:cf:00:29:9c:b6: 9b:fa:b2:fc:ec:f4:c2:b4:1a:9a:91:a1:c9:93:5c:b8:b4:fe: 02:c9:9a:8b:e4:e2:65:96:b2:09:ac:0f:2d:23:9f:23:0b:63: 00:e7:22:f8:7a:50:b4:11:35:13:b7:82:e5:04:fe:d0:67:d6: d4:03:e6:d2:53:19:07:61:4a:a5:43:ab:0d:2d:2b:a0:a0:0e: ef:ca:fb:99:fc:a4:6d:69:3a:ca:a3:0b:6d:8b:db:9d:8e:a5: e9:1a:b9:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjBUOQELJ8t91kgKbAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDIwMzAyMDAzOVoXDTI1MDUwNDAxMDAzOVowLzEtMCsGA1UEAxMk YTBlZGE3MzYtMTEzNi00Y2RmLTg4ZjgtODAzNmQwOWI1YzVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiO7S02sL+XyWo7xBIMVBm0IW0EHlX+BirSxi Lptf9HwMz7vYlMZRJpBH1PmUfz6LrD1WTFnnyzXlK0R3I06kogQxp+DDzYVwIX+G IiapIj7wEStO6CaMP13+kwlFldDY1Gy8AnmnBM1mQOf/3X3iVFH+nbgoVOmVMbT3 x27luxVT7dWQn3e7Ca0VUgOn9IxJoPP16DskVaGUBXVN1/UqkmJwFQbx8E76BgjE J/pOX0i6WnFMY12qU5mqZBzpiexe7cDVUIRo5VKnGw1V0aayzVELAhsF/IMmJre/ jP9gMzVDLK0lmOYT+S7Fjwx1V7/VfUDM/H6sYsbyWQWiBDTIxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF8a8u8oDpunGeP5pZUq7Htmv3ffMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNGVmOWYzYTYtMDEwYS0z YzU1LWFiMWMtNzFkMjljOTE2ZjYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrtvYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ0vwqBntRo7aFkMpsvrwW2bfCssND6kgebWNbCPcgHN4rj9RulLWGYm e8Js+tXuPewk7Lke72lNvlVxSD9/IWjWH7TF8/0360zK47DcBxNhE3+8uz1yTJ6I nJY7BnPZD/c9pAJ9okinwFQcb0XWUvjANte3aBBbEDazqFHQtOqZ8gAkBfOf9ayj dQ1Y64oqNS+/RLQwWp0Hisbp5dbPACmctpv6svzs9MK0GpqRocmTXLi0/gLJmovk 4mWWsgmsDy0jnyMLYwDnIvh6ULQRNRO3guUE/tBn1tQD5tJTGQdhSqVDqw0tK6Cg Du/K+5n8pG1pOsqjC22L252OpekauRE= -----END CERTIFICATE-----Generated at Sat Apr 5 20:47:56 2025 by rpki-client