$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a7aa98c8-5315-3116-a00d-5e1f1b63dcf2.roa File: a7aa98c8-5315-3116-a00d-5e1f1b63dcf2.roa (raw, json) Hash identifier: isR4OCPCmthn0jK5lj7B12Ci7kw+0kxZ/78zXdSqISg= Subject key identifier: 6D:B8:12:92:B0:0C:2B:40:6C:7F:0F:83:A4:26:93:49:59:EB:E7:F6 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584957F4102D14ACCA6596BB7380 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a7aa98c8-5315-3116-a00d-5e1f1b63dcf2.roa Signing time: Sat 29 Mar 2025 01:00:39 +0000 ROA not before: Sat 29 Mar 2025 01:00:39 +0000 ROA not after: Fri 27 Jun 2025 01:00:39 +0000 asID: 31898 IP address blocks: 173.199.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:57:f4:10:2d:14:ac:ca:65:96:bb:73:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Mar 29 01:00:39 2025 GMT Not After : Jun 27 01:00:39 2025 GMT Subject: CN=cba3190e-44e8-4239-8ef1-7a0f8f53bc61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:4d:48:77:1b:32:f5:71:04:a2:07:aa:2b:ac: 63:6e:8f:03:cc:fc:dc:31:de:f5:fa:2b:db:af:29: 3c:14:a1:7a:19:3a:8f:3e:83:0c:c2:d0:95:38:81: 26:8d:85:6e:c7:af:e4:f2:f2:49:be:6f:72:85:61: b6:9f:30:b6:13:d0:e9:9b:a9:51:18:47:7c:7f:41: 0e:57:ec:51:b9:85:00:12:4c:30:38:bd:6f:ca:cc: c4:79:16:c0:26:28:40:e2:a0:af:b7:43:ec:2f:d6: b7:43:7c:8c:ae:ee:b5:3a:68:41:f5:7a:4b:3c:e2: c4:c8:54:8f:97:76:ac:36:11:75:83:f3:0a:44:df: 0d:a6:11:9d:75:dd:3f:55:71:02:c4:fb:28:9c:28: a9:a8:a9:bf:af:56:c3:b3:f9:24:3a:53:6c:e1:5b: 44:60:84:f1:4d:c3:8f:d6:a7:cb:47:e0:63:dd:d4: e3:e0:6a:39:1d:41:b5:6c:5e:87:85:2d:ba:a1:6f: e1:11:c8:71:76:14:a5:a8:71:b7:db:16:4d:b7:13: 0f:17:db:8f:65:da:8e:1c:32:9e:46:74:40:28:d7: c7:92:49:04:3b:de:e3:df:4c:6a:9d:d5:04:05:eb: 9f:4a:6f:ca:d3:0f:3c:c7:2f:16:33:1f:d9:57:f6: 0c:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:B8:12:92:B0:0C:2B:40:6C:7F:0F:83:A4:26:93:49:59:EB:E7:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a7aa98c8-5315-3116-a00d-5e1f1b63dcf2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 173.199.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:ef:2e:02:48:c1:cc:50:3e:2e:ba:1a:ce:fa:2f:ca:fa:3d: c7:01:43:7e:61:bd:da:19:d7:36:91:94:18:f7:78:f0:57:12: c3:68:8a:91:ba:96:b4:61:b0:e2:39:20:b8:81:bc:32:88:40: ea:21:7e:9b:7a:86:f4:0d:4f:a9:29:e3:3e:a7:b6:c1:a3:c2: 71:90:3a:a5:fb:c8:36:41:14:db:a0:42:ec:a3:f1:bc:10:6e: 02:c5:4c:c4:fb:9f:da:4c:f3:33:d3:17:1a:97:34:4f:e7:11: 3d:35:05:c8:ea:3a:5e:62:67:4a:c4:03:69:5e:ff:e4:3d:1e: 3b:49:c5:0f:86:76:df:99:47:9d:cb:b6:35:b3:c5:c1:e9:52: 71:f4:f4:d1:11:1b:37:8d:20:4f:9b:21:9e:b3:a9:45:6b:2b: b5:38:9a:9d:2c:8f:27:bc:c8:62:76:1c:47:91:55:3d:58:93: 4d:cf:de:a7:34:63:5c:82:27:4c:19:88:4e:5c:11:82:12:b3: ef:21:6c:88:96:42:f8:37:23:b5:5f:a6:61:b0:4d:c6:a5:94: 35:dd:65:4a:63:d2:02:52:48:4a:ec:d2:8d:c6:07:54:22:25: a9:54:62:41:1b:d0:2b:92:09:5b:32:27:e4:e6:5e:4d:90:6e: 31:9f:74:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElX9BAtFKzKZZa7c4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI1MDMyOTAxMDAzOVoXDTI1MDYyNzAxMDAzOVowLzEtMCsGA1UEAxMk Y2JhMzE5MGUtNDRlOC00MjM5LThlZjEtN2EwZjhmNTNiYzYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhk1Idxsy9XEEogeqK6xjbo8DzPzcMd71+ivb ryk8FKF6GTqPPoMMwtCVOIEmjYVux6/k8vJJvm9yhWG2nzC2E9Dpm6lRGEd8f0EO V+xRuYUAEkwwOL1vyszEeRbAJihA4qCvt0PsL9a3Q3yMru61OmhB9XpLPOLEyFSP l3asNhF1g/MKRN8NphGddd0/VXECxPsonCipqKm/r1bDs/kkOlNs4VtEYITxTcOP 1qfLR+Bj3dTj4Go5HUG1bF6HhS26oW/hEchxdhSlqHG32xZNtxMPF9uPZdqOHDKe RnRAKNfHkkkEO97j30xqndUEBeufSm/K0w88xy8WMx/ZV/YMfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG24EpKwDCtAbH8Pg6Qmk0lZ6+f2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvYTdhYTk4YzgtNTMxNS0z MTE2LWEwMGQtNWUxZjFiNjNkY2YyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArccOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHLvLgJIwcxQPi66Gs76L8r6PccBQ35hvdoZ1zaRlBj3ePBXEsNoipG6 lrRhsOI5ILiBvDKIQOohfpt6hvQNT6kp4z6ntsGjwnGQOqX7yDZBFNugQuyj8bwQ bgLFTMT7n9pM8zPTFxqXNE/nET01BcjqOl5iZ0rEA2le/+Q9HjtJxQ+Gdt+ZR53L tjWzxcHpUnH09NERGzeNIE+bIZ6zqUVrK7U4mp0sjye8yGJ2HEeRVT1Yk03P3qc0 Y1yCJ0wZiE5cEYISs+8hbIiWQvg3I7VfpmGwTcallDXdZUpj0gJSSErs0o3GB1Qi JalUYkEb0CuSCVsyJ+TmXk2QbjGfdGQ= -----END CERTIFICATE-----Generated at Sun Jun 15 12:55:09 2025 by rpki-client