$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/248312dc-19c8-397f-8f1b-0b15ff00a2ea.roa File: 248312dc-19c8-397f-8f1b-0b15ff00a2ea.roa (raw, json) Hash identifier: h2JEIfrsBDsdQqXAZY4TKiAT3jfaENJtOP3yLITJg7Y= Subject key identifier: BD:AD:FF:27:04:88:A9:6A:1B:A5:B4:22:9E:4F:32:24:98:1E:83:FD Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F43285849912F2CD526DA70E0D7CF18C0 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/248312dc-19c8-397f-8f1b-0b15ff00a2ea.roa Signing time: Fri 18 Apr 2025 13:00:59 +0000 ROA not before: Fri 18 Apr 2025 13:00:59 +0000 ROA not after: Thu 17 Jul 2025 13:00:59 +0000 asID: 14618 IP address blocks: 173.199.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:91:2f:2c:d5:26:da:70:e0:d7:cf:18:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Apr 18 13:00:59 2025 GMT Not After : Jul 17 13:00:59 2025 GMT Subject: CN=f34d4cc2-6513-4642-b7ee-e15a8b8fea67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:78:27:cc:b5:d1:fd:0e:7e:fe:dd:35:47:f9: c7:4b:5d:8a:70:bc:75:e7:10:73:92:70:36:b8:85: 5e:4a:fb:ab:53:34:7b:c4:07:a4:35:06:1d:88:a5: ec:92:e4:d3:d5:00:80:c7:ef:2f:68:49:ed:9b:77: 57:15:b1:0d:d0:1c:2f:5c:3a:75:e8:ee:93:97:56: 23:48:01:85:3d:95:59:be:06:28:9c:cc:d6:49:82: 01:cb:87:a8:ae:d4:a1:c1:0d:b1:46:93:89:88:7d: 89:0e:3b:c2:36:14:02:f4:0d:32:32:50:1d:c9:58: 05:bc:30:b7:0b:b6:8c:43:ba:9d:f0:e1:a5:41:db: fc:1a:2e:75:78:8f:1b:42:68:db:9e:d5:a6:e8:ac: 6b:d4:b5:60:8e:4e:ae:e8:ed:fe:eb:5e:b4:c8:94: 6a:8f:f2:d6:2f:e0:00:1d:2f:c4:36:64:0d:5e:d4: ea:77:93:4a:19:80:9d:92:ed:ec:da:5b:00:87:b6: e9:9c:20:2e:7d:33:3b:d3:38:38:03:6d:b1:19:bf: 0a:14:80:37:58:a4:5c:11:8b:a7:27:01:89:a3:75: 89:4d:31:0e:d2:f8:64:d3:46:e6:d3:b1:6a:54:6b: 77:8f:ff:cf:f6:b3:40:4f:7f:03:4a:d5:58:57:92: 6a:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:AD:FF:27:04:88:A9:6A:1B:A5:B4:22:9E:4F:32:24:98:1E:83:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/248312dc-19c8-397f-8f1b-0b15ff00a2ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 173.199.59.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c2:aa:01:a1:c4:59:84:bd:ca:bf:23:a1:a8:06:51:54:5e:12: 5c:a1:98:75:24:2d:e8:d2:e2:75:8f:80:c8:1d:24:a0:4e:52: eb:fd:4f:89:1c:82:c6:8a:6b:f6:5d:1f:61:06:e2:49:c0:8c: b6:47:7e:37:6c:5b:c2:cb:a8:3f:f7:74:36:e8:dc:60:aa:8f: ca:1e:4a:1e:a3:21:6e:8c:e9:25:50:48:57:a8:d7:f7:24:2a: 9b:cc:99:d1:d1:95:b4:40:f8:46:1a:cc:4b:1d:15:1f:2a:82: 15:68:af:0c:75:c0:b4:6b:80:2d:66:be:28:30:9c:5b:69:9e: 26:ad:ea:76:08:e8:ab:01:e9:97:7f:69:34:45:99:f8:82:81: 0d:d0:93:52:72:e5:ef:c9:c0:65:9c:d8:b3:63:27:e1:d0:2f: 47:26:1f:ed:85:77:3a:29:e7:6d:21:ec:22:12:4a:5e:01:7f: 2e:b2:8b:3a:13:2f:bf:ad:ab:d0:54:6a:1a:cf:ab:33:2d:84: 7e:b8:ca:47:31:8c:99:97:b4:81:60:1f:01:b9:86:5f:06:6d: 63:5c:f6:6e:63:3b:7e:f6:39:52:93:b4:f2:bc:92:27:95:98: f2:d1:65:ee:2c:41:34:5d:0e:a0:81:a9:77:95:97:f3:bb:ea: 6e:78:91:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmRLyzVJtpw4NfPGMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI1MDQxODEzMDA1OVoXDTI1MDcxNzEzMDA1OVowLzEtMCsGA1UEAxMk ZjM0ZDRjYzItNjUxMy00NjQyLWI3ZWUtZTE1YThiOGZlYTY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3gnzLXR/Q5+/t01R/nHS12KcLx15xBzknA2 uIVeSvurUzR7xAekNQYdiKXskuTT1QCAx+8vaEntm3dXFbEN0BwvXDp16O6Tl1Yj SAGFPZVZvgYonMzWSYIBy4eortShwQ2xRpOJiH2JDjvCNhQC9A0yMlAdyVgFvDC3 C7aMQ7qd8OGlQdv8Gi51eI8bQmjbntWm6Kxr1LVgjk6u6O3+6160yJRqj/LWL+AA HS/ENmQNXtTqd5NKGYCdku3s2lsAh7bpnCAufTM70zg4A22xGb8KFIA3WKRcEYun JwGJo3WJTTEO0vhk00bm07FqVGt3j//P9rNAT38DStVYV5JqSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL2t/ycEiKlqG6W0Ip5PMiSYHoP9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvMjQ4MzEyZGMtMTljOC0z OTdmLThmMWItMGIxNWZmMDBhMmVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcc7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMKqAaHEWYS9yr8joagGUVReElyhmHUkLejS4nWPgMgdJKBOUuv9T4kc gsaKa/ZdH2EG4knAjLZHfjdsW8LLqD/3dDbo3GCqj8oeSh6jIW6M6SVQSFeo1/ck KpvMmdHRlbRA+EYazEsdFR8qghVorwx1wLRrgC1mvigwnFtpniat6nYI6KsB6Zd/ aTRFmfiCgQ3Qk1Jy5e/JwGWc2LNjJ+HQL0cmH+2Fdzop520h7CISSl4Bfy6yizoT L7+tq9BUahrPqzMthH64ykcxjJmXtIFgHwG5hl8GbWNc9m5jO372OVKTtPK8kieV mPLRZe4sQTRdDqCBqXeVl/O76m54kRE= -----END CERTIFICATE-----Generated at Sat Apr 26 13:26:13 2025 by rpki-client