$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1645e6e4-ee74-38eb-8728-ce4175262d98.roa File: 1645e6e4-ee74-38eb-8728-ce4175262d98.roa (raw, json) Hash identifier: BrPlGhNWSPALaYeLPBq7z3+NcDzr/i5+6VL4NQ9AB1o= Subject key identifier: 4B:BD:76:5B:5E:5E:D6:01:47:23:65:1C:5F:91:FF:85:48:75:B7:1D Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285848D9C20D900E997F4F1E87EF00 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1645e6e4-ee74-38eb-8728-ce4175262d98.roa Signing time: Tue 11 Feb 2025 20:08:18 +0000 ROA not before: Tue 11 Feb 2025 20:08:18 +0000 ROA not after: Mon 12 May 2025 19:08:18 +0000 asID: 3855 IP address blocks: 199.172.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d9:c2:0d:90:0e:99:7f:4f:1e:87:ef:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Feb 11 20:08:18 2025 GMT Not After : May 12 19:08:18 2025 GMT Subject: CN=c9273238-b2e6-408c-b96a-16705a9decdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:ba:9e:b3:94:34:c3:1f:3e:1d:40:83:c4:6f: 5f:39:4e:48:82:bf:76:b8:07:a1:bb:a6:5d:9c:4c: db:76:72:08:13:de:ab:d4:0a:b1:e2:64:6e:32:ea: d6:aa:03:b1:19:1c:e8:31:a3:b1:ee:f6:c5:38:65: 35:e5:21:1f:f4:3e:da:e0:1f:b0:3c:e2:54:05:7b: 73:08:57:17:06:1a:72:01:cc:be:65:04:46:2a:71: 65:1d:9c:cb:c7:6d:b2:0a:c7:a9:57:0f:28:89:13: 88:00:9c:3b:fc:a7:dc:5d:be:c3:74:af:e1:c7:10: d6:12:94:f7:20:7e:e1:70:50:df:96:43:de:67:5b: f6:fc:fc:cf:31:ff:7c:43:e1:44:8a:bc:c9:e8:ff: 51:cb:54:ed:75:02:65:3f:8e:71:67:99:ba:a1:5c: be:0a:53:9a:81:e2:fd:50:2f:1e:83:98:06:30:eb: 2c:0e:c4:60:3f:05:c8:fe:49:7b:21:69:fd:c6:cf: e4:64:91:16:e4:35:64:17:a9:db:01:ae:5c:f1:6c: ca:d0:d6:6e:35:e6:24:cd:ab:13:7f:95:5c:76:e0: 42:75:90:fe:36:9c:7a:a4:6d:23:18:18:9c:90:08: d9:32:44:8d:f1:19:a4:98:28:f2:a3:1b:3b:e1:06: b6:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:BD:76:5B:5E:5E:D6:01:47:23:65:1C:5F:91:FF:85:48:75:B7:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1645e6e4-ee74-38eb-8728-ce4175262d98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 199.172.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:28:54:28:b2:68:b6:e9:f5:ab:cb:8d:05:fb:2d:ed:d3:de: 78:3c:8a:50:ac:22:23:ce:65:f4:79:ec:6a:82:02:08:04:5c: 71:d5:d8:70:e2:d5:ab:df:c7:34:80:04:b4:b4:e1:dc:c1:ed: dd:1b:a5:5e:b3:66:0b:b8:26:7d:13:b9:80:ae:90:e1:be:93: 02:35:a0:b9:c8:9d:c0:4e:ef:3b:cb:4e:df:90:7e:94:79:c7: d7:2e:1f:6c:eb:fe:f5:cc:90:65:8b:12:5e:2b:a2:20:69:7a: 6a:b3:fb:ed:b5:00:91:03:29:13:a5:c7:5c:9e:43:33:8f:f2: 0d:f6:2b:a8:5f:1e:9b:3b:37:16:53:41:bb:67:8e:ed:c0:8d: 16:53:e2:e8:9d:69:89:b0:e3:e8:4f:1e:45:19:d3:c4:2d:47: 4e:8f:d0:93:8c:b5:cc:62:42:f1:c6:0d:02:e1:db:06:ce:f6: 7b:50:25:ee:fa:b6:36:fc:87:16:9b:b1:09:9e:2b:49:bb:35: 99:c0:fe:bf:d2:74:50:1b:63:92:e3:95:fb:de:d7:b9:47:a9: d3:c8:0f:2b:36:c2:54:b5:41:de:93:e7:4b:0d:5c:05:f1:3f: a5:fb:c5:52:bd:9e:c6:c0:16:3e:8c:8a:fc:e3:c7:0a:f0:7b: f8:1f:01:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjZwg2QDpl/Tx6H7wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDIxMTIwMDgxOFoXDTI1MDUxMjE5MDgxOFowLzEtMCsGA1UEAxMk YzkyNzMyMzgtYjJlNi00MDhjLWI5NmEtMTY3MDVhOWRlY2RkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAibqes5Q0wx8+HUCDxG9fOU5Igr92uAehu6Zd nEzbdnIIE96r1Aqx4mRuMurWqgOxGRzoMaOx7vbFOGU15SEf9D7a4B+wPOJUBXtz CFcXBhpyAcy+ZQRGKnFlHZzLx22yCsepVw8oiROIAJw7/KfcXb7DdK/hxxDWEpT3 IH7hcFDflkPeZ1v2/PzPMf98Q+FEirzJ6P9Ry1TtdQJlP45xZ5m6oVy+ClOageL9 UC8eg5gGMOssDsRgPwXI/kl7IWn9xs/kZJEW5DVkF6nbAa5c8WzK0NZuNeYkzasT f5VcduBCdZD+Npx6pG0jGBickAjZMkSN8RmkmCjyoxs74Qa2KQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEu9dlteXtYBRyNlHF+R/4VIdbcdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMTY0NWU2ZTQtZWU3NC0z OGViLTg3MjgtY2U0MTc1MjYyZDk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx6zhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALYoVCiyaLbp9avLjQX7Le3T3ng8ilCsIiPOZfR57GqCAggEXHHV2HDi 1avfxzSABLS04dzB7d0bpV6zZgu4Jn0TuYCukOG+kwI1oLnIncBO7zvLTt+QfpR5 x9cuH2zr/vXMkGWLEl4roiBpemqz++21AJEDKROlx1yeQzOP8g32K6hfHps7NxZT Qbtnju3AjRZT4uidaYmw4+hPHkUZ08QtR06P0JOMtcxiQvHGDQLh2wbO9ntQJe76 tjb8hxabsQmeK0m7NZnA/r/SdFAbY5Ljlfve17lHqdPIDys2wlS1Qd6T50sNXAXx P6X7xVK9nsbAFj6Mivzjxwrwe/gfAdg= -----END CERTIFICATE-----Generated at Sun Apr 27 04:19:44 2025 by rpki-client