$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bfdbcad4-ac9e-33fe-a00a-00a8dae49b96.roa File: bfdbcad4-ac9e-33fe-a00a-00a8dae49b96.roa (raw, json) Hash identifier: OIX0xZdy2WqVVon0FaGBEfyEipc25s5DRU4VxA9eaaQ= Subject key identifier: 21:56:3E:6A:63:38:CD:FE:5E:7C:D2:3C:47:5D:4B:00:CA:05:6F:85 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285848C150EA0DB68097C35443B6C0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bfdbcad4-ac9e-33fe-a00a-00a8dae49b96.roa Signing time: Mon 03 Feb 2025 02:00:39 +0000 ROA not before: Mon 03 Feb 2025 02:00:39 +0000 ROA not after: Sun 04 May 2025 01:00:39 +0000 asID: 6167 IP address blocks: 174.211.160.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c1:50:ea:0d:b6:80:97:c3:54:43:b6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Feb 3 02:00:39 2025 GMT Not After : May 4 01:00:39 2025 GMT Subject: CN=20c350f9-f72d-46fd-bc07-3e3da941075f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:e0:be:c0:69:da:eb:79:ef:0f:c0:1f:c0:ac: 0e:bd:ed:f9:47:66:ae:82:8c:f2:b3:a1:96:de:f5: d9:20:b5:ba:3c:88:ac:18:d1:51:1a:53:65:e8:dc: ba:39:55:13:3b:8f:69:9d:f1:10:52:42:42:b5:ee: 4b:76:e3:1f:e6:07:c1:77:ca:51:46:4c:8a:23:c2: e1:f9:91:17:9c:87:f1:2d:e7:63:36:1a:5d:e5:7f: 9a:fb:f5:28:36:eb:0a:4c:d3:87:e4:36:a0:17:17: c4:64:40:a2:80:b2:b4:54:fd:8d:8f:ed:d6:dd:5c: f2:c8:7e:4d:c5:65:a3:34:6a:18:ec:7a:92:8b:ce: 2e:db:1a:10:44:5e:b7:9b:47:58:46:a7:c0:dd:8e: 95:aa:5f:b0:69:e8:26:e8:eb:c4:be:9c:ea:17:b3: 73:71:70:68:8e:ef:d2:e3:d2:bc:45:3b:65:64:55: df:db:36:54:3b:30:e6:db:97:1a:21:08:20:58:89: 8f:45:1e:be:46:93:bc:3f:ee:3b:f0:87:94:03:a8: f3:47:24:ca:c5:1a:df:5f:d8:f2:12:92:f9:c1:81: 0d:4d:fe:3e:07:b2:7e:34:8b:ed:58:f5:86:01:56: 6e:8d:83:59:04:f9:b5:c6:86:ea:e8:af:70:05:df: 9f:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:56:3E:6A:63:38:CD:FE:5E:7C:D2:3C:47:5D:4B:00:CA:05:6F:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bfdbcad4-ac9e-33fe-a00a-00a8dae49b96.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.211.160.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:b1:f3:34:58:85:4e:3a:7d:af:f5:6a:4b:6e:b3:b1:43:9c: 35:ab:96:fd:c3:e9:c0:50:6f:1b:8f:4f:31:f3:b4:3b:dc:ba: d4:df:0b:ac:dc:5a:aa:07:7c:79:a2:fa:88:41:bf:3a:51:b9: b7:95:ac:60:b8:6b:e9:5e:77:bb:d7:b3:e8:f6:db:0c:0e:af: 95:78:1b:0b:95:36:2d:55:a2:5a:3f:94:07:f6:72:c3:cf:72: 23:f2:12:e0:cb:6e:f2:b2:a0:c1:1a:18:7c:29:44:36:12:c8: 5e:22:89:31:6f:51:8b:1f:2d:28:33:ea:67:67:eb:56:ea:9e: 2a:05:7a:f6:75:20:06:00:f8:3a:0b:12:c1:ac:ae:57:a1:71: e0:f1:2a:3c:e8:75:01:8d:43:6d:49:e2:7b:dd:7e:37:44:f5: 38:a2:ff:3c:e1:58:51:d1:41:60:c2:d1:40:73:2a:77:42:7d: d2:61:e1:05:e5:9e:41:45:f2:6a:4b:38:b3:20:c8:1d:bc:13: 21:ac:a9:b1:ec:7c:67:56:6c:e2:03:88:68:4a:c8:1b:47:8c: 4c:68:36:ac:8b:d4:54:45:2f:54:e9:21:61:11:ac:d7:53:46: 7e:40:97:14:91:26:2a:9a:a5:26:88:32:76:48:a5:b4:ba:ed: 88:3e:d8:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjBUOoNtoCXw1RDtsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDIwMzAyMDAzOVoXDTI1MDUwNDAxMDAzOVowLzEtMCsGA1UEAxMk MjBjMzUwZjktZjcyZC00NmZkLWJjMDctM2UzZGE5NDEwNzVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiOC+wGna63nvD8AfwKwOve35R2augozys6GW 3vXZILW6PIisGNFRGlNl6Ny6OVUTO49pnfEQUkJCte5LduMf5gfBd8pRRkyKI8Lh +ZEXnIfxLedjNhpd5X+a+/UoNusKTNOH5DagFxfEZECigLK0VP2Nj+3W3VzyyH5N xWWjNGoY7HqSi84u2xoQRF63m0dYRqfA3Y6Vql+waegm6OvEvpzqF7NzcXBoju/S 49K8RTtlZFXf2zZUOzDm25caIQggWImPRR6+RpO8P+478IeUA6jzRyTKxRrfX9jy EpL5wYENTf4+B7J+NIvtWPWGAVZujYNZBPm1xobq6K9wBd+faQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCFWPmpjOM3+XnzSPEddSwDKBW+FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYmZkYmNhZDQtYWM5ZS0z M2ZlLWEwMGEtMDBhOGRhZTQ5Yjk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFrtOgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFqx8zRYhU46fa/1aktus7FDnDWrlv3D6cBQbxuPTzHztDvcutTfC6zc WqoHfHmi+ohBvzpRubeVrGC4a+led7vXs+j22wwOr5V4GwuVNi1Volo/lAf2csPP ciPyEuDLbvKyoMEaGHwpRDYSyF4iiTFvUYsfLSgz6mdn61bqnioFevZ1IAYA+DoL EsGsrlehceDxKjzodQGNQ21J4nvdfjdE9Tii/zzhWFHRQWDC0UBzKndCfdJh4QXl nkFF8mpLOLMgyB28EyGsqbHsfGdWbOIDiGhKyBtHjExoNqyL1FRFL1TpIWERrNdT Rn5AlxSRJiqapSaIMnZIpbS67Yg+2Ow= -----END CERTIFICATE-----Generated at Sat Apr 5 20:44:50 2025 by rpki-client