$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aba6f58c-6459-31a0-9fff-1281ae7f9c64.roa File: aba6f58c-6459-31a0-9fff-1281ae7f9c64.roa (raw, json) Hash identifier: 2MlLjamkUfonc3rYJSt8v2LhGH8n2al8KXgDrKAxuFU= Subject key identifier: CE:68:B0:57:43:F9:13:F0:89:B7:0F:60:6F:F3:6F:F8:5E:3B:8F:0F Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285848EF61700AE2758FE2BD910928 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aba6f58c-6459-31a0-9fff-1281ae7f9c64.roa Signing time: Wed 19 Feb 2025 14:00:52 +0000 ROA not before: Wed 19 Feb 2025 14:00:52 +0000 ROA not after: Tue 20 May 2025 13:00:52 +0000 asID: 22394 IP address blocks: 174.41.250.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ef:61:70:0a:e2:75:8f:e2:bd:91:09:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Feb 19 14:00:52 2025 GMT Not After : May 20 13:00:52 2025 GMT Subject: CN=d441c42a-6f82-4074-866f-936efed0fe3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:c5:ea:5c:10:68:b2:4c:ff:ba:ac:58:12:fc: ed:e8:1e:41:d2:d6:14:d0:93:21:90:26:51:6f:a8: b4:40:ba:85:22:85:de:86:e1:36:d1:a2:67:f5:a5: d7:3e:47:2e:28:45:ea:4b:94:36:c6:84:f1:31:98: c2:dc:87:e4:ca:82:80:c5:7f:9c:47:d4:4d:96:d5: 7f:42:ed:6d:22:01:16:d4:0f:85:80:30:7a:13:e6: e4:7f:27:0e:45:03:34:6b:ec:b0:1c:13:55:56:20: 13:28:63:a7:ac:e6:4e:39:1b:b0:05:05:19:6b:c3: 3d:1a:91:4b:fe:54:8b:85:ba:26:4f:f2:0e:54:c3: ea:10:68:44:04:98:f6:d6:d2:67:be:60:6a:80:06: df:e6:ec:d0:64:39:37:3e:88:8d:11:65:05:65:3b: 61:59:29:ed:32:a8:6c:56:57:cb:7d:91:17:78:a0: 12:c5:e0:4f:cb:3f:da:aa:3c:f0:4e:29:df:89:3f: 4c:5f:6a:4f:2f:0c:e6:6c:aa:96:ba:b2:d4:e0:15: 08:f7:f7:d1:8b:41:3f:21:20:87:54:ac:91:3a:dc: de:09:03:68:0b:0b:82:27:b1:ab:2e:a9:75:4e:3b: c2:81:e9:03:b8:7a:51:14:b5:74:a7:92:c3:4b:b7: 30:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:68:B0:57:43:F9:13:F0:89:B7:0F:60:6F:F3:6F:F8:5E:3B:8F:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aba6f58c-6459-31a0-9fff-1281ae7f9c64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.41.250.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:dd:da:1b:7d:f6:a9:04:d2:af:43:37:ab:cc:88:ec:f5:76: dc:fb:ce:e5:db:88:0e:91:5a:1c:92:25:d6:f9:51:8e:b6:d0: d9:33:c3:f5:85:63:3e:c3:84:59:70:1b:86:db:2f:d5:24:2e: ea:33:84:4a:4f:92:df:9e:c3:71:c4:d1:15:da:e8:f5:e0:bd: 33:cb:40:f9:13:45:e2:c8:1f:d6:f6:e2:c6:2d:cf:e6:ee:a0: 41:42:15:cb:5a:2f:c8:45:0f:87:05:21:a4:fa:96:3c:2d:7e: 22:c3:e0:26:a7:8c:d0:d0:3e:ec:23:dd:70:12:1f:4b:0b:81: 52:01:9b:27:87:69:60:21:57:69:50:41:29:f3:34:b5:b8:47: b9:ae:5b:24:12:cc:87:1e:ba:15:10:9f:cb:0b:1c:18:e2:3d: 5a:0e:46:0b:73:17:54:37:1c:b1:4f:ec:76:f8:76:61:b3:4e: 90:36:90:1e:cf:bc:a6:e3:11:cf:eb:74:84:8b:ca:4c:10:3e: 62:05:3f:63:75:01:83:ee:72:68:16:1c:25:19:e5:3c:16:26: 8c:8c:a0:f0:5d:3f:bf:d8:53:ec:21:4e:d3:6e:9b:75:d8:16: a6:56:d1:c8:13:2a:a2:13:26:af:a6:9f:ef:f4:4b:1e:00:ac: a8:a4:8d:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjvYXAK4nWP4r2RCSgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk ZDQ0MWM0MmEtNmY4Mi00MDc0LTg2NmYtOTM2ZWZlZDBmZTNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmcXqXBBoskz/uqxYEvzt6B5B0tYU0JMhkCZR b6i0QLqFIoXehuE20aJn9aXXPkcuKEXqS5Q2xoTxMZjC3IfkyoKAxX+cR9RNltV/ Qu1tIgEW1A+FgDB6E+bkfycORQM0a+ywHBNVViATKGOnrOZOORuwBQUZa8M9GpFL /lSLhbomT/IOVMPqEGhEBJj21tJnvmBqgAbf5uzQZDk3PoiNEWUFZTthWSntMqhs VlfLfZEXeKASxeBPyz/aqjzwTinfiT9MX2pPLwzmbKqWurLU4BUI9/fRi0E/ISCH VKyROtzeCQNoCwuCJ7GrLql1TjvCgekDuHpRFLV0p5LDS7cwLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM5osFdD+RPwibcPYG/zb/heO48PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYWJhNmY1OGMtNjQ1OS0z MWEwLTlmZmYtMTI4MWFlN2Y5YzY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrin6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKbd2ht99qkE0q9DN6vMiOz1dtz7zuXbiA6RWhySJdb5UY620Nkzw/WF Yz7DhFlwG4bbL9UkLuozhEpPkt+ew3HE0RXa6PXgvTPLQPkTReLIH9b24sYtz+bu oEFCFctaL8hFD4cFIaT6ljwtfiLD4CanjNDQPuwj3XASH0sLgVIBmyeHaWAhV2lQ QSnzNLW4R7muWyQSzIceuhUQn8sLHBjiPVoORgtzF1Q3HLFP7Hb4dmGzTpA2kB7P vKbjEc/rdISLykwQPmIFP2N1AYPucmgWHCUZ5TwWJoyMoPBdP7/YU+whTtNum3XY FqZW0cgTKqITJq+mn+/0Sx4ArKikjWQ= -----END CERTIFICATE-----Generated at Sun Apr 6 01:09:38 2025 by rpki-client