$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c4d9141e-9370-3aa5-a129-89edc3ad7d6a.roa File: c4d9141e-9370-3aa5-a129-89edc3ad7d6a.roa (raw, json) Hash identifier: /MwjrQn/x1KVvqM8MfkB06h00fKL0PkNIDvFncJo3YQ= Subject key identifier: B2:E9:AF:CF:80:78:C7:5B:94:FF:DF:BF:87:AC:04:E2:42:12:0F:11 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285848EF6177D4C3264EAF38913180 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c4d9141e-9370-3aa5-a129-89edc3ad7d6a.roa Signing time: Wed 19 Feb 2025 14:00:52 +0000 ROA not before: Wed 19 Feb 2025 14:00:52 +0000 ROA not after: Tue 20 May 2025 13:00:52 +0000 asID: 6167 IP address blocks: 174.43.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ef:61:77:d4:c3:26:4e:af:38:91:31:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Feb 19 14:00:52 2025 GMT Not After : May 20 13:00:52 2025 GMT Subject: CN=876bd4b2-abf1-423c-b51e-050434cebb97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ee:da:6d:34:6b:ad:c7:3c:ab:4a:2f:ed:16: e1:b5:60:d4:6c:f4:64:34:77:c5:30:52:b7:9d:03: ec:01:45:49:8f:10:5d:1d:72:fa:39:d2:8c:4f:bc: 49:8e:b9:f5:44:8b:70:d8:72:ae:48:e7:be:fc:18: 22:1a:5f:ed:33:7f:29:c6:e8:28:48:50:8b:d9:f3: 5d:51:a8:62:bf:f3:0b:77:ed:ab:62:c6:60:b5:02: a3:9a:75:eb:dd:3f:47:68:66:22:98:e3:19:94:c4: 80:cc:1a:e5:6c:de:aa:46:49:d1:ed:61:92:45:21: 32:8b:77:cb:c7:ca:e3:cb:e3:4e:77:0b:29:d3:37: 30:72:3b:e4:96:52:11:fc:59:2c:e9:a7:9b:26:08: c1:89:ef:48:b8:49:02:86:7f:3b:fb:1c:09:f5:82: 33:99:0a:fc:e8:e6:d2:7e:b5:bb:0e:5e:66:02:83: ab:ee:46:75:af:73:4e:0e:d9:98:45:26:bd:38:01: ac:03:29:ab:62:9d:aa:98:f7:32:7e:d9:6c:64:0a: 20:bc:94:40:e6:f8:ea:d8:da:a8:19:63:35:dc:97: 42:05:0e:a7:aa:85:5d:95:6e:20:cd:81:94:5f:be: ad:f2:0a:57:b8:b5:a5:a6:68:28:19:66:58:8c:94: b0:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:E9:AF:CF:80:78:C7:5B:94:FF:DF:BF:87:AC:04:E2:42:12:0F:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c4d9141e-9370-3aa5-a129-89edc3ad7d6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.43.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:a1:ac:07:ba:d7:c0:bf:5a:11:79:3b:35:f3:60:e4:ba:7b: 11:07:b4:93:58:91:34:70:e4:86:98:3d:65:7d:88:be:e3:fa: 41:54:70:ab:37:91:8a:1b:7f:91:ce:43:b1:8e:6f:89:b0:0d: 2c:d6:13:72:c0:51:d2:80:06:69:00:71:e8:9e:53:13:ba:5c: 9d:6d:ad:87:aa:3f:d1:1f:5a:e2:64:ae:70:06:f5:6f:b3:8f: 5e:e3:70:fc:7a:16:41:1a:d3:f9:b1:a9:e4:01:67:9c:97:31: cc:22:6a:6d:13:61:32:3a:1e:4d:52:15:c8:78:49:a3:cd:ce: 2f:cf:5c:5b:fc:b2:8d:59:8e:4b:36:89:45:78:9a:35:3a:90: 5f:6c:9d:84:e6:07:e4:1e:34:75:f0:84:75:59:bf:11:26:70: 32:f7:1c:d7:73:f0:7e:8c:aa:c6:ee:05:d1:11:f3:65:21:bd: 78:d1:43:ee:c9:f4:14:24:f0:58:f6:39:06:52:4a:79:15:70: d1:d5:db:80:07:90:08:b7:33:07:3a:1d:00:be:02:62:46:f5: 33:d2:77:26:62:fe:18:d9:db:7d:ed:9f:6c:d1:19:47:2e:3f: 05:2f:68:0a:4e:da:f7:a8:2f:63:51:aa:58:d1:c1:aa:03:f3: 7e:9b:b9:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjvYXfUwyZOrziRMYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk ODc2YmQ0YjItYWJmMS00MjNjLWI1MWUtMDUwNDM0Y2ViYjk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoe7abTRrrcc8q0ov7RbhtWDUbPRkNHfFMFK3 nQPsAUVJjxBdHXL6OdKMT7xJjrn1RItw2HKuSOe+/BgiGl/tM38pxugoSFCL2fNd Uahiv/MLd+2rYsZgtQKjmnXr3T9HaGYimOMZlMSAzBrlbN6qRknR7WGSRSEyi3fL x8rjy+NOdwsp0zcwcjvkllIR/Fks6aebJgjBie9IuEkChn87+xwJ9YIzmQr86ObS frW7Dl5mAoOr7kZ1r3NODtmYRSa9OAGsAymrYp2qmPcyftlsZAogvJRA5vjq2Nqo GWM13JdCBQ6nqoVdlW4gzYGUX76t8gpXuLWlpmgoGWZYjJSw1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLLpr8+AeMdblP/fv4esBOJCEg8RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYzRkOTE0MWUtOTM3MC0z YWE1LWExMjktODllZGMzYWQ3ZDZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEritgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACKhrAe618C/WhF5OzXzYOS6exEHtJNYkTRw5IaYPWV9iL7j+kFUcKs3 kYobf5HOQ7GOb4mwDSzWE3LAUdKABmkAceieUxO6XJ1trYeqP9EfWuJkrnAG9W+z j17jcPx6FkEa0/mxqeQBZ5yXMcwiam0TYTI6Hk1SFch4SaPNzi/PXFv8so1Zjks2 iUV4mjU6kF9snYTmB+QeNHXwhHVZvxEmcDL3HNdz8H6MqsbuBdER82UhvXjRQ+7J 9BQk8Fj2OQZSSnkVcNHV24AHkAi3Mwc6HQC+AmJG9TPSdyZi/hjZ233tn2zRGUcu PwUvaApO2veoL2NRqljRwaoD836budU= -----END CERTIFICATE-----Generated at Wed Apr 9 22:17:27 2025 by rpki-client