$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aee11c08-7089-348a-b93f-9dfd274ffd68.roa File: aee11c08-7089-348a-b93f-9dfd274ffd68.roa (raw, json) Hash identifier: rJAk6PZGxlo+191KUZZ1zLMQWrUuy5HRpqH2YbYKv1k= Subject key identifier: 17:24:F8:4A:37:0B:0F:33:B0:DF:D0:5C:A9:AA:5A:5F:36:A7:E5:73 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285848EF61780F53C1FD6D0077FA80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aee11c08-7089-348a-b93f-9dfd274ffd68.roa Signing time: Wed 19 Feb 2025 14:00:52 +0000 ROA not before: Wed 19 Feb 2025 14:00:52 +0000 ROA not after: Tue 20 May 2025 13:00:52 +0000 asID: 6167 IP address blocks: 174.42.172.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ef:61:78:0f:53:c1:fd:6d:00:77:fa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Feb 19 14:00:52 2025 GMT Not After : May 20 13:00:52 2025 GMT Subject: CN=ab86aca6-0aea-4b57-9687-91e9d83071ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:30:ae:9b:c7:cf:8c:47:28:e9:6c:23:ee:1b: fb:a9:49:6b:38:00:8b:e9:aa:c5:0b:e8:c5:dd:c9: 3e:32:01:88:4d:ed:44:fe:fc:66:29:51:c7:f7:79: 98:69:c7:17:0c:c2:37:b5:27:6d:f6:c3:a2:32:19: 32:79:76:ea:0f:88:d9:d0:25:fb:74:ef:55:10:e3: 76:13:4f:2e:95:e1:65:dd:c3:a4:f9:35:53:e8:15: 32:c8:6b:21:51:7f:13:59:ed:a5:11:94:8e:e0:20: a5:5d:3c:b1:60:46:ca:49:33:1e:63:4c:90:75:d5: 34:e3:68:cc:0e:d1:52:08:76:8e:be:8c:bb:bd:7c: af:b5:7e:a4:50:15:62:b1:32:16:72:38:d3:e5:b6: 70:26:ea:b9:df:11:c2:c9:fb:87:c3:46:f5:26:4c: e1:c2:07:ab:39:9f:aa:70:68:7c:49:d9:df:eb:0c: b0:78:5b:25:8a:e0:81:2b:9d:05:54:52:c1:6d:64: 74:0b:ab:5a:be:60:fc:86:c7:c8:5f:ec:04:72:b2: 81:b6:9f:08:75:58:c6:07:58:cb:77:68:b3:24:43: 62:58:b5:0b:df:33:7b:09:ee:74:87:54:bb:35:29: 46:c3:d2:6d:da:2c:fa:ab:b8:17:62:19:c0:89:47: b6:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:24:F8:4A:37:0B:0F:33:B0:DF:D0:5C:A9:AA:5A:5F:36:A7:E5:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aee11c08-7089-348a-b93f-9dfd274ffd68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.42.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:d9:31:f3:85:12:b0:e9:57:e1:7b:ea:20:d1:53:59:dd:b6: 9f:cb:f2:1f:ad:f2:77:6c:dd:93:03:7a:2d:64:55:86:d8:63: 07:37:97:6a:74:d8:5e:76:fa:a7:f3:1f:b0:7b:31:5a:52:6c: 26:5f:9b:5a:f6:c4:07:5d:25:55:49:24:35:95:2f:57:1e:cd: bb:c4:d9:c5:99:2b:90:0d:5a:b6:36:a9:d4:b8:04:bf:cb:91: ec:a4:bc:fe:30:fb:c6:ab:49:4d:cb:aa:e0:28:8f:f4:c8:b9: 3a:79:69:5c:58:e4:5f:29:1b:e4:28:da:d4:6e:26:f4:0c:d9: ed:89:c6:02:cc:07:e5:95:3a:5b:46:4c:94:f3:a0:43:7c:94: fc:37:b0:3d:b1:b1:1b:82:e2:56:90:08:aa:da:fa:81:08:b2: 06:7e:60:04:07:ce:38:d1:44:7f:0e:ee:23:72:6e:d9:73:46: 0b:9f:55:2c:9f:1f:dc:25:bb:9d:d9:e5:3a:1c:63:38:16:44: 32:41:f1:7d:02:cd:ed:55:57:b3:cb:fd:92:d0:ec:db:a4:18: 6e:15:79:5f:96:b1:bf:b9:59:72:98:8e:0a:1f:b5:b1:d6:0f: 93:2f:2d:0a:3b:94:f4:76:c8:07:b7:2e:1b:58:30:82:b1:b5: 25:bd:b8:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjvYXgPU8H9bQB3+oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk YWI4NmFjYTYtMGFlYS00YjU3LTk2ODctOTFlOWQ4MzA3MWNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljCum8fPjEco6Wwj7hv7qUlrOACL6arFC+jF 3ck+MgGITe1E/vxmKVHH93mYaccXDMI3tSdt9sOiMhkyeXbqD4jZ0CX7dO9VEON2 E08uleFl3cOk+TVT6BUyyGshUX8TWe2lEZSO4CClXTyxYEbKSTMeY0yQddU042jM DtFSCHaOvoy7vXyvtX6kUBVisTIWcjjT5bZwJuq53xHCyfuHw0b1JkzhwgerOZ+q cGh8Sdnf6wyweFsliuCBK50FVFLBbWR0C6tavmD8hsfIX+wEcrKBtp8IdVjGB1jL d2izJENiWLUL3zN7Ce50h1S7NSlGw9Jt2iz6q7gXYhnAiUe27QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBck+Eo3Cw8zsN/QXKmqWl82p+VzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYWVlMTFjMDgtNzA4OS0z NDhhLWI5M2YtOWRmZDI3NGZmZDY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCriqsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGXZMfOFErDpV+F76iDRU1ndtp/L8h+t8nds3ZMDei1kVYbYYwc3l2p0 2F52+qfzH7B7MVpSbCZfm1r2xAddJVVJJDWVL1cezbvE2cWZK5ANWrY2qdS4BL/L keykvP4w+8arSU3LquAoj/TIuTp5aVxY5F8pG+Qo2tRuJvQM2e2JxgLMB+WVOltG TJTzoEN8lPw3sD2xsRuC4laQCKra+oEIsgZ+YAQHzjjRRH8O7iNybtlzRgufVSyf H9wlu53Z5TocYzgWRDJB8X0Cze1VV7PL/ZLQ7NukGG4VeV+Wsb+5WXKYjgoftbHW D5MvLQo7lPR2yAe3LhtYMIKxtSW9uDE= -----END CERTIFICATE-----Generated at Sun Apr 6 05:24:58 2025 by rpki-client