$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aaf41670-9101-34ad-ac92-f5d05de80639.roa File: aaf41670-9101-34ad-ac92-f5d05de80639.roa (raw, json) Hash identifier: Hp5P3mCHo6XlDJ5XQffSpiAVgFivg4R/2wVmCCJkRp0= Subject key identifier: C4:EE:66:0E:34:13:8D:49:8A:C8:AC:37:71:5D:1C:87:E8:FC:EA:5F Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285848FD56CCFFE300E296A4DF1180 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aaf41670-9101-34ad-ac92-f5d05de80639.roa Signing time: Mon 24 Feb 2025 14:00:52 +0000 ROA not before: Mon 24 Feb 2025 14:00:52 +0000 ROA not after: Sun 25 May 2025 13:00:52 +0000 asID: 0 IP address blocks: 199.222.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fd:56:cc:ff:e3:00:e2:96:a4:df:11:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Feb 24 14:00:52 2025 GMT Not After : May 25 13:00:52 2025 GMT Subject: CN=fd3e426f-e9f1-491d-afc1-08f5da5299a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:c3:b6:dc:76:86:db:22:c0:46:a7:67:54:0d: ca:73:88:fe:6c:7a:77:6e:f4:91:50:3b:81:9e:51: d3:ec:d8:7a:a5:53:ee:c3:3e:17:4a:04:7b:6e:e5: bf:51:17:77:aa:a6:7c:53:07:96:d1:1e:95:33:9c: e3:1c:cd:01:f9:b9:0b:98:a7:72:92:ee:53:9b:c4: d3:d7:77:f1:77:7b:d5:25:d7:cf:b2:b4:e2:f1:a1: 9d:c2:d9:7c:ac:ec:a8:11:15:da:18:43:32:cf:63: 07:3b:96:03:9f:97:6c:9e:5b:37:99:8f:9c:79:ae: 52:08:9c:1b:dc:ab:9b:08:a6:e2:35:fa:9e:b8:5e: ea:21:be:16:b8:a5:f7:cd:56:06:03:e6:d9:7f:4f: bd:a9:f1:43:c1:fe:9b:78:1a:a6:e9:ac:d9:76:55: 1e:ea:93:3f:8c:7f:8e:6e:a4:3e:1f:fd:5f:08:0f: 22:9b:fe:99:0e:8c:c5:6c:ee:d7:6a:cb:c4:ff:db: 76:ea:53:a6:b6:99:6e:b3:59:4a:25:f9:4c:3d:11: a7:5b:3c:36:9e:cb:52:98:5c:37:aa:d3:ea:18:1c: 35:36:4b:6f:86:ef:78:d2:1e:8e:2f:2f:52:08:66: 6a:2f:d9:0f:96:47:4f:e4:3e:36:77:6f:5a:69:7c: 85:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:EE:66:0E:34:13:8D:49:8A:C8:AC:37:71:5D:1C:87:E8:FC:EA:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aaf41670-9101-34ad-ac92-f5d05de80639.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 199.222.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:92:b1:84:b6:e8:8c:fc:d5:c2:c4:d3:fe:a5:97:5b:02:54: 9b:cb:3e:68:e2:43:56:ba:ba:97:f7:9f:d0:2e:a7:60:ad:2f: ce:a4:f5:ad:b0:60:16:84:0a:af:44:25:fc:33:18:63:d0:cb: 2e:dc:f8:93:12:9b:a2:a4:db:09:1a:df:68:60:1a:b0:65:8d: 39:9a:1c:9f:be:ad:31:b6:99:bf:da:28:cc:e0:65:67:1a:81: 54:9e:42:84:46:81:ff:21:cb:67:79:68:79:92:41:45:a1:17: 88:53:e8:75:57:fe:6a:13:35:55:d3:ba:22:73:a9:75:31:92: 0c:ff:76:43:6f:b7:99:a8:eb:a4:c8:e7:6c:7b:be:8d:b6:7c: 10:24:d0:0c:db:0e:e6:ed:0d:64:c4:4d:5a:a7:ac:55:0b:4e: e4:50:a5:23:3f:b0:0f:f5:cd:fc:ac:67:ff:1a:dd:c0:0b:8d: b7:ed:ca:39:db:5a:2b:d3:88:6e:bc:20:4b:8b:97:d0:63:23: 2a:0b:44:23:5d:0f:f2:79:d9:1c:99:34:8d:e3:11:59:fc:a0: ec:7e:a3:a5:19:f9:5f:bf:ef:81:2a:82:4a:ce:f2:f1:f2:67: 54:5f:95:db:bd:da:91:36:3a:3a:65:5b:af:9d:bd:b2:b1:22: e6:46:fb:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj9Vsz/4wDilqTfEYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDIyNDE0MDA1MloXDTI1MDUyNTEzMDA1MlowLzEtMCsGA1UEAxMk ZmQzZTQyNmYtZTlmMS00OTFkLWFmYzEtMDhmNWRhNTI5OWE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiMO23HaG2yLARqdnVA3Kc4j+bHp3bvSRUDuB nlHT7Nh6pVPuwz4XSgR7buW/URd3qqZ8UweW0R6VM5zjHM0B+bkLmKdyku5Tm8TT 13fxd3vVJdfPsrTi8aGdwtl8rOyoERXaGEMyz2MHO5YDn5dsnls3mY+cea5SCJwb 3KubCKbiNfqeuF7qIb4WuKX3zVYGA+bZf0+9qfFDwf6beBqm6azZdlUe6pM/jH+O bqQ+H/1fCA8im/6ZDozFbO7XasvE/9t26lOmtplus1lKJflMPRGnWzw2nstSmFw3 qtPqGBw1Nktvhu940h6OLy9SCGZqL9kPlkdP5D42d29aaXyFNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMTuZg40E41JisisN3FdHIfo/OpfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYWFmNDE2NzAtOTEwMS0z NGFkLWFjOTItZjVkMDVkZTgwNjM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEx96QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGOSsYS26Iz81cLE0/6ll1sCVJvLPmjiQ1a6upf3n9Aup2CtL86k9a2w YBaECq9EJfwzGGPQyy7c+JMSm6Kk2wka32hgGrBljTmaHJ++rTG2mb/aKMzgZWca gVSeQoRGgf8hy2d5aHmSQUWhF4hT6HVX/moTNVXTuiJzqXUxkgz/dkNvt5mo66TI 52x7vo22fBAk0AzbDubtDWTETVqnrFULTuRQpSM/sA/1zfysZ/8a3cALjbftyjnb WivTiG68IEuLl9BjIyoLRCNdD/J52RyZNI3jEVn8oOx+o6UZ+V+/74EqgkrO8vHy Z1Rfldu92pE2OjplW6+dvbKxIuZG+7c= -----END CERTIFICATE-----Generated at Sat Apr 26 15:19:48 2025 by rpki-client