$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d/28c24c1f-8ef8-3334-88d2-dbf93f7ef47c.roa File: 28c24c1f-8ef8-3334-88d2-dbf93f7ef47c.roa (raw, json) Hash identifier: WgVtsX4YBMjUyiS/qzR64HLYIoAhi0cQ8uJlC82Xp8I= Subject key identifier: 7B:44:79:05:9B:20:DF:4E:2B:CB:2B:21:D1:6E:1D:57:05:5A:D4:47 Certificate issuer: /CN=e8295820-03bc-4a4e-8072-7cbf748f4c6d Certificate serial: 010D0C9F432858492183FF554F589F743F60B600 Authority key identifier: 1A:DF:53:58:7E:52:6C:6F:CC:BA:16:03:BC:4D:10:35:18:E8:E6:A4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d/28c24c1f-8ef8-3334-88d2-dbf93f7ef47c.roa Signing time: Sun 09 Mar 2025 13:00:52 +0000 ROA not before: Sun 09 Mar 2025 13:00:52 +0000 ROA not after: Sat 07 Jun 2025 13:00:52 +0000 asID: 53999 IP address blocks: 173.237.208.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d/e8295820-03bc-4a4e-8072-7cbf748f4c6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d/e8295820-03bc-4a4e-8072-7cbf748f4c6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:21:83:ff:55:4f:58:9f:74:3f:60:b6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8295820-03bc-4a4e-8072-7cbf748f4c6d Validity Not Before: Mar 9 13:00:52 2025 GMT Not After : Jun 7 13:00:52 2025 GMT Subject: CN=1ea426ee-ec5e-498e-bf32-dd08ebf5c96f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:bc:a0:eb:a2:b1:90:cd:e4:08:7f:12:40:71: 7d:82:98:73:71:bf:78:5b:98:4a:c7:cd:bf:f4:a2: 57:0a:65:ac:5c:57:bb:5a:fe:94:8a:72:42:3a:24: ff:37:58:72:0e:6b:3f:00:03:bd:cd:16:3b:27:9e: 6d:36:89:4e:39:4b:3f:c3:92:2e:84:0f:b9:05:fe: 16:93:f7:97:3e:1d:d0:e2:38:2b:00:85:3d:ae:b3: 0b:70:78:f6:4b:65:f9:50:2d:d5:82:c5:35:45:4d: 09:6e:dc:90:80:cd:d2:79:ce:bc:ff:d8:33:fc:ac: 76:3d:bf:28:0f:94:48:a2:1b:0c:84:9a:8a:d1:cb: 9c:ff:6d:58:5d:c6:9a:2b:d9:46:f9:0e:fd:cf:8a: da:7a:de:d4:8b:ff:15:7a:c2:59:67:c2:fc:0d:99: 03:61:5b:93:d5:8d:1a:7f:3a:e9:4c:5f:90:82:14: f4:ef:11:f6:88:3c:67:5b:7e:d4:ce:3c:d7:d0:86: 72:84:53:e9:45:f6:b3:3f:8a:7b:20:d2:9f:a6:85: 5a:22:46:55:1e:ba:04:e4:fa:0d:cf:ba:4e:2c:86: 81:28:30:47:55:f0:ff:c7:f9:e5:89:80:a2:94:8c: 8d:1e:cf:17:5f:5e:b8:b1:d7:2f:6f:74:2f:ed:21: 78:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:44:79:05:9B:20:DF:4E:2B:CB:2B:21:D1:6E:1D:57:05:5A:D4:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d/28c24c1f-8ef8-3334-88d2-dbf93f7ef47c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d/e8295820-03bc-4a4e-8072-7cbf748f4c6d.crl X509v3 Authority Key Identifier: keyid:1A:DF:53:58:7E:52:6C:6F:CC:BA:16:03:BC:4D:10:35:18:E8:E6:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d.cer sbgp-ipAddrBlock: critical IPv4: 173.237.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:7c:2a:f3:fa:ea:19:dd:12:41:83:b0:cd:c0:ea:ee:24:89: 0b:21:5d:76:7d:dd:61:15:fb:d9:69:93:e3:89:c6:8d:0d:8b: 4b:4b:a4:da:79:92:9b:cf:5f:14:b4:78:35:ee:0f:2f:6d:31: 1d:c5:e6:f7:41:fe:ff:87:65:a4:63:b1:44:33:ae:39:6b:47: 35:67:a6:4d:b9:6a:7c:aa:c8:ab:85:e4:96:c2:48:8d:d4:bf: 70:b0:02:6d:56:19:9f:aa:bf:e4:ca:0e:d4:ab:e3:02:ed:12: 91:fa:6b:77:4b:8d:28:93:c4:3a:db:bf:0f:bf:bb:74:18:c0: 23:f5:f1:48:e2:d0:02:3b:fe:d0:fd:eb:2c:e8:91:21:76:93: 43:8f:cb:c9:77:e5:2c:26:e7:a8:bf:a7:33:23:99:41:5b:13: 2d:a2:78:ed:11:89:6a:2b:bf:b5:f4:df:13:77:cf:1b:bf:9b: 28:80:8a:aa:57:f5:2a:18:84:98:4e:3f:91:d9:ba:9c:2e:46: 84:24:52:1d:32:13:6d:4e:97:dd:57:5b:4d:09:14:f4:c3:1f: 44:51:04:53:64:16:58:97:2c:89:ff:9d:6f:64:2a:c3:82:bd: fb:c3:41:6e:70:de:95:75:72:3e:7f:92:23:89:c7:db:2b:a5: 2d:0e:57:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkhg/9VT1ifdD9gtgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTgyOTU4MjAtMDNiYy00YTRlLTgwNzItN2NiZjc0OGY0 YzZkMB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk MWVhNDI2ZWUtZWM1ZS00OThlLWJmMzItZGQwOGViZjVjOTZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbyg66KxkM3kCH8SQHF9gphzcb94W5hKx82/ 9KJXCmWsXFe7Wv6UinJCOiT/N1hyDms/AAO9zRY7J55tNolOOUs/w5IuhA+5Bf4W k/eXPh3Q4jgrAIU9rrMLcHj2S2X5UC3VgsU1RU0JbtyQgM3Sec68/9gz/Kx2Pb8o D5RIohsMhJqK0cuc/21YXcaaK9lG+Q79z4raet7Ui/8VesJZZ8L8DZkDYVuT1Y0a fzrpTF+QghT07xH2iDxnW37UzjzX0IZyhFPpRfazP4p7INKfpoVaIkZVHroE5PoN z7pOLIaBKDBHVfD/x/nliYCilIyNHs8XX164sdcvb3Qv7SF4XQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHtEeQWbIN9OK8srIdFuHVcFWtRHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lODI5 NTgyMC0wM2JjLTRhNGUtODA3Mi03Y2JmNzQ4ZjRjNmQvMjhjMjRjMWYtOGVmOC0z MzM0LTg4ZDItZGJmOTNmN2VmNDdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTgyOTU4MjAtMDNiYy00YTRlLTgw NzItN2NiZjc0OGY0YzZkL2U4Mjk1ODIwLTAzYmMtNGE0ZS04MDcyLTdjYmY3NDhm NGM2ZC5jcmwwHwYDVR0jBBgwFoAUGt9TWH5SbG/MuhYDvE0QNRjo5qQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lODI5NTgyMC0wM2JjLTRhNGUtODA3Mi03Y2Jm NzQ4ZjRjNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEre3QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAZ8KvP66hndEkGDsM3A6u4kiQshXXZ93WEV+9lpk+OJxo0Ni0tLpNp5 kpvPXxS0eDXuDy9tMR3F5vdB/v+HZaRjsUQzrjlrRzVnpk25anyqyKuF5JbCSI3U v3CwAm1WGZ+qv+TKDtSr4wLtEpH6a3dLjSiTxDrbvw+/u3QYwCP18Uji0AI7/tD9 6yzokSF2k0OPy8l35Swm56i/pzMjmUFbEy2ieO0RiWorv7X03xN3zxu/myiAiqpX 9SoYhJhOP5HZupwuRoQkUh0yE21Ol91XW00JFPTDH0RRBFNkFliXLIn/nW9kKsOC vfvDQW5w3pV1cj5/kiOJx9srpS0OV9E= -----END CERTIFICATE-----Generated at Sat Apr 12 13:29:35 2025 by rpki-client