$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/baa66279-ec8c-360c-9e3e-a47d742b8d67.roa File: baa66279-ec8c-360c-9e3e-a47d742b8d67.roa (raw, json) Hash identifier: fMANjvCSTn8Isy+fwClGwr6OkyDE9zxuBjkA3o3JdIw= Subject key identifier: AF:A9:70:F1:26:4D:32:26:B6:10:21:F4:DD:87:5C:5B:28:C9:8E:59 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285848D9C20D276FB74F1B02E1D680 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/baa66279-ec8c-360c-9e3e-a47d742b8d67.roa Signing time: Tue 11 Feb 2025 20:08:17 +0000 ROA not before: Tue 11 Feb 2025 20:08:17 +0000 ROA not after: Mon 12 May 2025 19:08:17 +0000 asID: 3855 IP address blocks: 199.172.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d9:c2:0d:27:6f:b7:4f:1b:02:e1:d6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Feb 11 20:08:17 2025 GMT Not After : May 12 19:08:17 2025 GMT Subject: CN=6e54cd9a-98a7-4967-be90-96203966193c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:2d:1d:22:23:48:75:25:b6:54:1a:7b:0d:b9: eb:47:c1:c0:fd:52:4e:d0:5d:81:ad:60:6b:01:59: 0a:f9:4a:a2:13:4e:91:7c:f5:1b:d0:af:6c:8a:ed: 8e:9e:08:f6:a0:91:da:bf:eb:cc:3c:7e:69:da:5c: 66:f6:10:56:be:7c:2b:2f:3b:50:14:8f:36:d8:73: 94:d6:d0:7f:5b:f7:8e:49:33:13:51:8f:a4:b4:7e: fd:a2:e3:25:6e:63:e9:31:c2:d0:52:76:50:64:37: 41:97:fa:04:7e:17:bc:ff:7c:9b:81:1e:86:da:d6: 21:0e:f7:0a:07:96:6d:7a:a1:8e:d3:9f:11:96:66: 63:dd:c5:1c:76:60:a1:28:3c:29:1e:ef:e2:40:fa: e5:a2:bb:14:3d:89:3b:67:03:0e:03:43:fd:25:4b: 57:a5:59:b8:3b:9d:25:74:d1:54:a5:0a:6a:41:bb: 34:bc:0a:db:75:a7:0e:74:e7:58:75:3e:dc:47:0f: 69:8f:2a:dd:7b:e0:86:ea:bc:3c:6b:c6:7c:e6:ba: ff:51:c7:08:01:72:ab:1c:57:27:9a:6f:14:4a:76: 7e:72:65:83:fd:86:66:73:6f:fa:55:be:07:58:fe: ea:1e:1a:18:ab:64:81:c5:25:81:f0:2f:ae:46:42: 1b:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:A9:70:F1:26:4D:32:26:B6:10:21:F4:DD:87:5C:5B:28:C9:8E:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/baa66279-ec8c-360c-9e3e-a47d742b8d67.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 199.172.219.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:58:91:59:ca:3a:57:7b:6e:bf:a4:d8:33:67:79:bd:67:5e: 3c:01:6b:b1:19:ed:89:f6:e8:63:65:0c:87:b8:f2:52:3e:34: d5:07:fa:f0:8c:df:f3:f4:c1:1c:c3:57:07:47:00:1f:d3:58: 4c:41:79:6b:31:15:b9:e5:6a:32:cf:62:fb:2d:4a:bd:ef:5e: a7:3f:d9:e5:ab:02:52:25:90:c1:23:de:27:ec:64:ea:a2:21: c1:03:26:74:dd:98:01:e5:fc:63:f5:11:49:3b:c0:10:d9:9f: 3d:6e:b3:26:db:9b:1d:09:51:bd:2a:3f:2c:b7:b0:26:9f:39: 8a:89:a6:76:0f:64:df:32:1d:db:8a:5a:9c:c6:05:e3:5a:e6: 76:f0:3e:64:87:d8:64:38:5a:94:69:57:4a:0a:df:78:96:6c: 4f:50:75:98:a7:21:66:fd:99:e7:8e:bb:bc:a3:de:3e:aa:35: 04:08:4f:71:13:22:5a:da:4f:47:48:e2:86:d7:6d:14:dc:06: eb:1b:d0:42:fb:8d:0f:e0:77:de:29:2b:9f:1e:58:1e:11:4f: 89:7c:21:92:d0:64:21:f3:7e:dd:57:aa:1d:f3:ad:c0:2a:97: 7e:f2:12:a4:1f:3c:de:88:d1:9a:52:3b:a7:d5:a8:ed:eb:c8: 93:d6:2e:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjZwg0nb7dPGwLh1oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDIxMTIwMDgxN1oXDTI1MDUxMjE5MDgxN1owLzEtMCsGA1UEAxMk NmU1NGNkOWEtOThhNy00OTY3LWJlOTAtOTYyMDM5NjYxOTNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjC0dIiNIdSW2VBp7DbnrR8HA/VJO0F2BrWBr AVkK+UqiE06RfPUb0K9siu2Ongj2oJHav+vMPH5p2lxm9hBWvnwrLztQFI822HOU 1tB/W/eOSTMTUY+ktH79ouMlbmPpMcLQUnZQZDdBl/oEfhe8/3ybgR6G2tYhDvcK B5ZteqGO058RlmZj3cUcdmChKDwpHu/iQPrlorsUPYk7ZwMOA0P9JUtXpVm4O50l dNFUpQpqQbs0vArbdacOdOdYdT7cRw9pjyrde+CG6rw8a8Z85rr/UccIAXKrHFcn mm8USnZ+cmWD/YZmc2/6Vb4HWP7qHhoYq2SBxSWB8C+uRkIbVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK+pcPEmTTImthAh9N2HXFsoyY5ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYmFhNjYyNzktZWM4Yy0z NjBjLTllM2UtYTQ3ZDc0MmI4ZDY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx6zbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIBYkVnKOld7br+k2DNneb1nXjwBa7EZ7Yn26GNlDIe48lI+NNUH+vCM 3/P0wRzDVwdHAB/TWExBeWsxFbnlajLPYvstSr3vXqc/2eWrAlIlkMEj3ifsZOqi IcEDJnTdmAHl/GP1EUk7wBDZnz1usybbmx0JUb0qPyy3sCafOYqJpnYPZN8yHduK WpzGBeNa5nbwPmSH2GQ4WpRpV0oK33iWbE9QdZinIWb9meeOu7yj3j6qNQQIT3ET IlraT0dI4obXbRTcBusb0EL7jQ/gd94pK58eWB4RT4l8IZLQZCHzft1Xqh3zrcAq l37yEqQfPN6I0ZpSO6fVqO3ryJPWLrk= -----END CERTIFICATE-----Generated at Sun Apr 27 01:11:15 2025 by rpki-client