$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/f630205b-9c91-3f36-9c56-8a7d876e6812.roa File: f630205b-9c91-3f36-9c56-8a7d876e6812.roa (raw, json) Hash identifier: lXvmEpzYH7J7hZwpqKAxoD9nq0PAJphCBus5q54FYts= Subject key identifier: 15:10:42:A0:16:A3:16:1A:3E:90:5A:00:E4:00:BC:84:56:A3:A7:07 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F43285849912F2CB0DC52D91AA0314B00 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/f630205b-9c91-3f36-9c56-8a7d876e6812.roa Signing time: Fri 18 Apr 2025 13:00:59 +0000 ROA not before: Fri 18 Apr 2025 13:00:59 +0000 ROA not after: Thu 17 Jul 2025 13:00:59 +0000 asID: 14618 IP address blocks: 173.199.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:91:2f:2c:b0:dc:52:d9:1a:a0:31:4b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Apr 18 13:00:59 2025 GMT Not After : Jul 17 13:00:59 2025 GMT Subject: CN=9ab49ea1-4cf7-4254-bbf2-9c5063097d70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:ce:83:ab:2c:51:bd:59:ec:5b:3d:4c:de:5a: 4b:64:ec:98:a8:50:2f:89:01:2c:68:48:c9:ef:a4: bd:3d:5c:2c:c1:e3:c8:b5:32:6d:9b:96:d8:84:41: aa:df:36:4b:37:43:e1:2a:c7:e1:6a:0a:4d:64:cb: 27:91:39:b0:2e:ce:e4:1a:af:61:01:e3:14:c8:1a: 50:47:c2:01:06:48:b6:55:25:f4:56:eb:4d:78:fd: be:6b:f0:62:9d:01:a5:7d:69:ff:14:ad:eb:ce:0f: ca:16:5b:b8:83:72:29:cc:90:79:e7:fb:78:f2:59: 06:58:a3:e8:5e:47:72:ee:7b:9e:a1:b8:18:80:a7: 1f:91:fe:da:bf:a4:ab:df:50:b0:13:02:26:19:0a: 71:7a:80:6f:a1:b8:8c:43:77:a2:39:08:a4:15:e4: 5b:d7:b0:b2:d1:40:7c:5d:9a:f8:52:a2:6c:85:97: 4c:12:18:f4:15:bd:25:2d:a3:ce:8a:a6:ae:63:5f: 27:03:c9:4f:7f:bc:d7:48:cd:dc:ee:0a:8c:08:c2: d0:40:d3:2c:c8:9f:89:ef:4e:19:f3:f6:39:9c:3b: 6a:77:41:e4:0c:a8:9b:91:5d:43:b3:e5:fa:d4:7c: a7:5f:02:fe:03:3f:31:1d:d8:d8:e7:ad:a3:83:68: 6d:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:10:42:A0:16:A3:16:1A:3E:90:5A:00:E4:00:BC:84:56:A3:A7:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/f630205b-9c91-3f36-9c56-8a7d876e6812.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 173.199.58.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c9:84:f4:bb:b0:bd:6c:dd:dc:d6:d5:d1:8f:2d:1f:5b:a2:b1: 51:8a:69:b0:da:4c:94:b5:22:56:fd:8f:ca:ce:0d:f3:92:af: ae:bc:07:f1:a7:e8:0c:ac:70:3d:a8:9a:24:34:6d:c0:ec:dd: 88:7f:62:83:41:bb:da:13:ef:c3:67:5c:22:f8:5a:32:56:77: fe:a7:ab:15:6b:ed:00:55:15:f1:d7:f6:9d:61:cd:6f:aa:9d: 3f:8d:6f:af:d8:48:55:90:77:09:51:30:cb:c8:19:42:f3:db: db:de:28:b6:9b:29:1f:2d:0a:af:71:b7:9b:3f:c9:e3:4e:05: 43:41:60:69:ff:4f:a6:dd:b2:c0:5e:1d:c8:1c:9b:f9:0b:00: 1a:6b:a6:f7:84:eb:82:10:c7:80:70:9a:9a:4e:6b:34:c9:a9: 3d:db:22:bc:0c:75:fb:70:74:47:22:4d:af:25:b5:b8:29:8a: 53:8a:a0:aa:87:c6:ad:bf:ea:70:67:e0:7c:3c:31:13:fb:f4: a9:77:7b:94:f1:3f:0d:44:54:bb:f2:51:63:f7:e2:28:5b:da: 43:52:d2:88:93:45:98:98:b2:d4:3d:b9:3e:9b:71:53:0d:4a: cb:64:90:9e:3b:7f:c8:a7:9f:2f:a4:ee:05:c1:0d:e5:fb:c5: 85:e1:dd:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmRLyyw3FLZGqAxSwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI1MDQxODEzMDA1OVoXDTI1MDcxNzEzMDA1OVowLzEtMCsGA1UEAxMk OWFiNDllYTEtNGNmNy00MjU0LWJiZjItOWM1MDYzMDk3ZDcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkM6DqyxRvVnsWz1M3lpLZOyYqFAviQEsaEjJ 76S9PVwswePItTJtm5bYhEGq3zZLN0PhKsfhagpNZMsnkTmwLs7kGq9hAeMUyBpQ R8IBBki2VSX0VutNeP2+a/BinQGlfWn/FK3rzg/KFlu4g3IpzJB55/t48lkGWKPo Xkdy7nueobgYgKcfkf7av6Sr31CwEwImGQpxeoBvobiMQ3eiOQikFeRb17Cy0UB8 XZr4UqJshZdMEhj0Fb0lLaPOiqauY18nA8lPf7zXSM3c7gqMCMLQQNMsyJ+J704Z 8/Y5nDtqd0HkDKibkV1Ds+X61HynXwL+Az8xHdjY562jg2htRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBUQQqAWoxYaPpBaAOQAvIRWo6cHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvZjYzMDIwNWItOWM5MS0z ZjM2LTljNTYtOGE3ZDg3NmU2ODEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcc6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMmE9LuwvWzd3NbV0Y8tH1uisVGKabDaTJS1Ilb9j8rODfOSr668B/Gn 6AyscD2omiQ0bcDs3Yh/YoNBu9oT78NnXCL4WjJWd/6nqxVr7QBVFfHX9p1hzW+q nT+Nb6/YSFWQdwlRMMvIGULz29veKLabKR8tCq9xt5s/yeNOBUNBYGn/T6bdssBe Hcgcm/kLABprpveE64IQx4BwmppOazTJqT3bIrwMdftwdEciTa8ltbgpilOKoKqH xq2/6nBn4Hw8MRP79Kl3e5TxPw1EVLvyUWP34ihb2kNS0oiTRZiYstQ9uT6bcVMN SstkkJ47f8inny+k7gXBDeX7xYXh3cg= -----END CERTIFICATE-----Generated at Sat Apr 26 13:34:23 2025 by rpki-client