$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fe332a68-39a4-3096-aed3-8ddd302d6534.roa File: fe332a68-39a4-3096-aed3-8ddd302d6534.roa (raw, json) Hash identifier: AaBDOZZG9UZ4qnnclV4T3JaMh7W2XYWxs6UDYSABcEE= Subject key identifier: F9:FD:BB:91:53:5B:2B:75:11:4A:B4:07:25:3E:0C:81:E2:E7:77:2F Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285848EF61669DFE0607D013972FE8 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fe332a68-39a4-3096-aed3-8ddd302d6534.roa Signing time: Wed 19 Feb 2025 14:00:52 +0000 ROA not before: Wed 19 Feb 2025 14:00:52 +0000 ROA not after: Tue 20 May 2025 13:00:52 +0000 asID: 20447 IP address blocks: 199.170.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ef:61:66:9d:fe:06:07:d0:13:97:2f:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Feb 19 14:00:52 2025 GMT Not After : May 20 13:00:52 2025 GMT Subject: CN=57b12473-3481-48b5-83a8-9fd64d10ea3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c4:cc:77:43:34:76:a7:89:47:f2:82:9c:72: b1:1a:ed:6e:de:1d:f7:a4:b7:37:7f:40:c6:ec:19: cb:4a:7f:01:f6:73:ca:4a:e5:fe:e0:1a:96:ed:95: 1f:d8:74:17:da:f8:f7:96:ab:ad:81:e9:42:3c:c6: dc:5f:8d:ad:40:25:52:d6:d0:f7:12:33:d1:73:14: 77:51:40:36:00:5a:70:67:73:2f:d2:d9:96:6d:44: 10:dc:26:ac:1b:dd:41:d3:ff:1c:e3:b1:e3:bd:27: 51:c8:f8:ec:21:be:c9:0b:1a:81:7e:7f:ce:e6:bd: 23:2c:ea:1c:98:e6:21:9c:19:ef:e7:ec:71:9f:6d: 7e:d6:5b:20:85:31:e4:2f:c2:21:84:6e:5c:06:0e: df:5b:0c:1f:63:b7:9d:31:32:56:51:cd:d2:6e:5c: 3a:69:e7:90:fc:c5:58:d1:20:34:15:a1:d4:71:41: 27:5e:95:66:6f:85:21:f7:34:a6:f9:42:bd:a2:2e: e5:94:aa:58:d3:04:db:b6:a0:83:cf:db:52:f7:0c: 1f:5b:cf:fa:48:76:11:07:f6:25:e0:c2:30:7b:8d: 5b:4e:41:4e:67:e7:97:a4:71:f0:43:2c:be:ee:b3: f2:87:cb:80:06:e1:70:d1:79:94:78:af:aa:2d:5d: ec:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:FD:BB:91:53:5B:2B:75:11:4A:B4:07:25:3E:0C:81:E2:E7:77:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fe332a68-39a4-3096-aed3-8ddd302d6534.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 199.170.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:be:b0:f2:c0:90:7e:51:b0:c3:83:bf:44:39:07:1d:38:3e: 32:7f:0b:d3:82:ae:10:64:dd:7d:79:4c:21:32:f0:ac:61:20: ce:e0:12:bf:1b:30:fe:61:ca:4d:76:42:e7:92:a1:77:c2:6c: 7c:ba:8d:bd:d9:c4:e3:52:69:79:f4:1e:7d:e3:82:74:4d:a3: 7e:89:d6:da:a2:cb:e9:4f:fd:5b:75:c0:7c:78:a9:30:66:9d: 3a:be:32:5b:a6:11:c6:e0:56:42:e0:49:cf:77:79:26:af:14: 7c:48:e7:5a:7d:83:a9:27:cc:72:bd:f8:42:0e:c7:bd:81:41: 99:c8:ef:9b:60:49:53:a9:d0:ba:7e:79:5d:ff:8b:b7:18:83: c3:3f:96:c1:43:7e:81:3c:81:67:16:3b:7c:d7:70:2c:34:6a: d8:08:3a:ee:8a:1c:5e:85:52:47:7e:6f:59:0b:b3:cd:9b:b2: c7:79:f8:5c:f8:77:ae:12:64:7e:7f:c4:42:78:9d:bd:42:3e: 44:59:43:a5:fc:3c:5c:59:75:91:7c:60:31:59:23:2f:2e:ee: ea:13:5d:d3:e1:a2:6f:12:a3:44:d6:0f:c7:0b:fc:69:e5:88: 97:90:33:31:3c:f6:b0:22:3a:3e:05:f1:10:12:f6:e3:ae:33: b3:10:38:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjvYWad/gYH0BOXL+gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk NTdiMTI0NzMtMzQ4MS00OGI1LTgzYTgtOWZkNjRkMTBlYTNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8TMd0M0dqeJR/KCnHKxGu1u3h33pLc3f0DG 7BnLSn8B9nPKSuX+4BqW7ZUf2HQX2vj3lqutgelCPMbcX42tQCVS1tD3EjPRcxR3 UUA2AFpwZ3Mv0tmWbUQQ3CasG91B0/8c47HjvSdRyPjsIb7JCxqBfn/O5r0jLOoc mOYhnBnv5+xxn21+1lsghTHkL8IhhG5cBg7fWwwfY7edMTJWUc3Sblw6aeeQ/MVY 0SA0FaHUcUEnXpVmb4Uh9zSm+UK9oi7llKpY0wTbtqCDz9tS9wwfW8/6SHYRB/Yl 4MIwe41bTkFOZ+eXpHHwQyy+7rPyh8uABuFw0XmUeK+qLV3sjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPn9u5FTWyt1EUq0ByU+DIHi53cvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZmUzMzJhNjgtMzlhNC0z MDk2LWFlZDMtOGRkZDMwMmQ2NTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx6odMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGu+sPLAkH5RsMODv0Q5Bx04PjJ/C9OCrhBk3X15TCEy8KxhIM7gEr8b MP5hyk12QueSoXfCbHy6jb3ZxONSaXn0Hn3jgnRNo36J1tqiy+lP/Vt1wHx4qTBm nTq+MlumEcbgVkLgSc93eSavFHxI51p9g6knzHK9+EIOx72BQZnI75tgSVOp0Lp+ eV3/i7cYg8M/lsFDfoE8gWcWO3zXcCw0atgIOu6KHF6FUkd+b1kLs82bssd5+Fz4 d64SZH5/xEJ4nb1CPkRZQ6X8PFxZdZF8YDFZIy8u7uoTXdPhom8So0TWD8cL/Gnl iJeQMzE89rAiOj4F8RAS9uOuM7MQOFM= -----END CERTIFICATE-----Generated at Sat Apr 26 23:06:59 2025 by rpki-client