$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/922156f4-c611-3dd6-9d0e-b98df24ae729.roa File: 922156f4-c611-3dd6-9d0e-b98df24ae729.roa (raw, json) Hash identifier: SozupOIzwIjNWtDSuxYA6jl5jkMrePVwxncwRzg35OE= Subject key identifier: C9:8F:82:B2:F7:E7:67:ED:EF:68:DD:26:1A:7C:60:3C:7E:D3:BC:60 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F43285849912F2CE457B7070862156180 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/922156f4-c611-3dd6-9d0e-b98df24ae729.roa Signing time: Fri 18 Apr 2025 13:00:59 +0000 ROA not before: Fri 18 Apr 2025 13:00:59 +0000 ROA not after: Thu 17 Jul 2025 13:00:59 +0000 asID: 16509 IP address blocks: 173.199.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:91:2f:2c:e4:57:b7:07:08:62:15:61:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Apr 18 13:00:59 2025 GMT Not After : Jul 17 13:00:59 2025 GMT Subject: CN=623e0f77-0a18-43b5-a3ce-5b32a595577f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:61:94:db:00:99:67:81:bb:e2:f6:7c:71:52: 9c:b1:ae:b5:66:3c:e6:9a:7c:9a:df:0d:14:ef:0f: 3c:33:7b:ea:da:e4:87:5e:82:fc:56:26:2d:14:be: 3d:22:49:46:79:4b:1d:1e:1c:c3:4e:e2:89:98:6e: 9f:d9:ea:ab:3f:da:1e:b9:fa:a6:b6:45:f0:6c:28: 41:65:8c:66:43:ed:65:cd:43:34:e7:f1:8d:9e:6d: 16:ee:54:f5:a5:cc:21:8d:a7:df:4d:6d:db:22:e0: 4a:6a:aa:12:cf:bd:fb:41:be:56:22:7a:0a:fc:cc: 1c:83:75:c9:a1:1b:93:49:c8:0a:3c:b8:cd:cf:27: df:57:36:33:3f:90:2c:73:de:af:23:36:95:66:4f: 40:eb:f7:26:c5:d2:64:60:d2:43:0a:a7:c3:ca:11: ed:30:8f:62:00:a9:58:73:f8:7b:4a:e5:b4:2b:1b: a2:67:c1:cb:e8:89:e0:78:17:8d:68:8a:da:9f:59: 2e:8e:b0:2c:d3:ed:91:55:c6:97:85:a4:c8:0d:ae: d4:22:3d:50:47:8d:59:59:cc:4d:a3:bb:7b:c8:a1: 7e:38:f4:7e:5e:97:85:00:ac:b1:36:cc:c9:b8:e6: 16:e2:ae:f8:c9:19:01:c0:85:22:29:97:de:a1:5e: 1c:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:8F:82:B2:F7:E7:67:ED:EF:68:DD:26:1A:7C:60:3C:7E:D3:BC:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/922156f4-c611-3dd6-9d0e-b98df24ae729.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 173.199.59.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption db:47:11:08:71:39:b8:e4:a5:ad:05:7f:9a:70:2d:5b:93:a9: ee:b5:65:c1:58:fc:7b:88:1e:ec:5a:29:27:86:8b:a8:ec:dc: 20:9a:12:35:b3:dd:ee:c3:86:bf:4f:f4:ed:52:b4:f9:cb:f3: 66:85:6f:e6:98:fb:5f:ad:5b:a4:d5:18:1f:8c:15:d4:bc:05: 10:96:09:7b:3a:ef:3e:17:2b:8f:d2:85:fd:44:1d:a0:1c:d6: fc:7d:3d:d3:53:97:ad:af:ef:47:bb:00:36:8c:fb:e4:45:70: 85:f7:0e:d4:9a:c0:47:ff:13:01:48:59:2d:ef:88:0a:28:35: a8:21:5b:2c:e1:d7:84:14:5f:2b:32:8b:f1:d4:cf:1e:c5:f2: 61:e3:af:97:a9:dc:b3:57:86:6c:b1:6e:2d:76:5e:57:37:ec: f6:9e:dd:b1:f5:60:29:26:e9:80:e8:0c:e0:4b:b4:74:42:b3: 1d:da:7e:b7:3b:b8:d5:ce:0c:c1:54:bd:43:a5:e7:50:55:00: fd:70:29:6b:ef:35:70:3c:6e:e3:92:73:9b:3a:07:f8:bd:89: d2:84:72:86:e9:10:90:90:5a:27:06:22:f4:c9:f3:36:36:e8: 47:0b:1e:e7:94:5a:e9:3c:8b:57:ad:7d:b7:b3:6f:6d:da:bf: e0:65:d9:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmRLyzkV7cHCGIVYYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI1MDQxODEzMDA1OVoXDTI1MDcxNzEzMDA1OVowLzEtMCsGA1UEAxMk NjIzZTBmNzctMGExOC00M2I1LWEzY2UtNWIzMmE1OTU1NzdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGGU2wCZZ4G74vZ8cVKcsa61Zjzmmnya3w0U 7w88M3vq2uSHXoL8ViYtFL49IklGeUsdHhzDTuKJmG6f2eqrP9oeufqmtkXwbChB ZYxmQ+1lzUM05/GNnm0W7lT1pcwhjaffTW3bIuBKaqoSz737Qb5WInoK/Mwcg3XJ oRuTScgKPLjNzyffVzYzP5Asc96vIzaVZk9A6/cmxdJkYNJDCqfDyhHtMI9iAKlY c/h7SuW0KxuiZ8HL6IngeBeNaIran1kujrAs0+2RVcaXhaTIDa7UIj1QR41ZWcxN o7t7yKF+OPR+XpeFAKyxNszJuOYW4q74yRkBwIUiKZfeoV4ckQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMmPgrL352ft72jdJhp8YDx+07xgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvOTIyMTU2ZjQtYzYxMS0z ZGQ2LTlkMGUtYjk4ZGYyNGFlNzI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcc7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANtHEQhxObjkpa0Ff5pwLVuTqe61ZcFY/HuIHuxaKSeGi6js3CCaEjWz 3e7Dhr9P9O1StPnL82aFb+aY+1+tW6TVGB+MFdS8BRCWCXs67z4XK4/Shf1EHaAc 1vx9PdNTl62v70e7ADaM++RFcIX3DtSawEf/EwFIWS3viAooNaghWyzh14QUXysy i/HUzx7F8mHjr5ep3LNXhmyxbi12Xlc37Pae3bH1YCkm6YDoDOBLtHRCsx3afrc7 uNXODMFUvUOl51BVAP1wKWvvNXA8buOSc5s6B/i9idKEcobpEJCQWicGIvTJ8zY2 6EcLHueUWuk8i1etfbezb23av+Bl2RI= -----END CERTIFICATE-----Generated at Sat Apr 26 19:27:04 2025 by rpki-client