$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/f800c6d8-1be5-3d97-a5c7-e9434771ad19.roa File: f800c6d8-1be5-3d97-a5c7-e9434771ad19.roa (raw, json) Hash identifier: bWwMG9lE2bAC5RiOjeW25pDxEM8jrY2pdEJNZ0or3Fs= Subject key identifier: BA:BE:D9:3A:17:97:BC:D1:7C:F0:D5:6A:42:6E:A0:34:9F:17:8F:EB Certificate issuer: /CN=5597247f-2d88-4c51-805a-7ab2a9af9dc5 Certificate serial: 010D0C9F43285848EC9696BCC738558B243B5300 Authority key identifier: 3C:73:2A:DD:04:B3:6B:02:2D:46:03:FE:E9:87:D2:83:58:1C:8B:A4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/f800c6d8-1be5-3d97-a5c7-e9434771ad19.roa Signing time: Tue 18 Feb 2025 14:00:52 +0000 ROA not before: Tue 18 Feb 2025 14:00:52 +0000 ROA not after: Mon 19 May 2025 13:00:52 +0000 asID: 54878 IP address blocks: 173.249.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ec:96:96:bc:c7:38:55:8b:24:3b:53:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5597247f-2d88-4c51-805a-7ab2a9af9dc5 Validity Not Before: Feb 18 14:00:52 2025 GMT Not After : May 19 13:00:52 2025 GMT Subject: CN=7159c991-6441-4606-bdc8-5d0760024ddb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:4b:5e:33:e0:eb:e2:78:5f:5f:31:79:36:45: c4:15:87:48:d0:b2:9e:76:dc:43:9e:0f:c6:3b:31: f9:80:ee:97:72:8c:22:e1:2f:bb:1a:67:72:40:43: 8d:a8:3b:fb:d1:97:ba:7a:dc:63:85:fc:f9:6d:96: 2a:eb:bf:02:2f:f1:f9:f0:34:63:19:45:17:a9:f4: ea:56:17:79:6e:42:54:c0:f9:52:74:6c:6d:82:43: 50:b6:61:ff:87:9b:b4:bf:1a:96:b9:11:3d:8b:65: 51:43:ff:38:bc:4f:e6:f0:3d:12:08:f4:55:f8:57: 47:24:6e:99:7c:2b:52:35:8a:c0:ac:15:73:53:23: a2:5a:2f:13:73:73:3c:f6:75:8c:ae:5b:a4:2e:82: 6b:9b:88:62:6c:70:9d:17:45:d6:66:a8:6c:47:b6: dd:78:24:1b:48:0f:06:be:c9:aa:6a:3e:fb:fd:21: 27:7e:c5:9a:77:ba:32:25:0b:d8:f9:90:ab:45:90: 7e:5b:fc:23:7d:f3:55:2d:ed:c3:3f:d6:5e:e4:b6: 39:b6:4f:33:f2:a2:78:66:41:b0:44:98:94:a4:43: 39:55:2f:ee:1a:ad:22:65:5b:7e:68:f5:80:8f:2f: ea:0b:19:ba:a2:a9:67:7b:80:d4:f7:6d:42:72:35: 64:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:BE:D9:3A:17:97:BC:D1:7C:F0:D5:6A:42:6E:A0:34:9F:17:8F:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/f800c6d8-1be5-3d97-a5c7-e9434771ad19.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.crl X509v3 Authority Key Identifier: keyid:3C:73:2A:DD:04:B3:6B:02:2D:46:03:FE:E9:87:D2:83:58:1C:8B:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer sbgp-ipAddrBlock: critical IPv4: 173.249.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:e0:b5:c3:08:96:40:ed:a8:0d:0c:93:40:8a:35:ea:1f:68: a5:20:e3:95:37:44:be:9c:36:ad:b1:cd:6f:9f:69:d7:58:13: a5:44:b0:ca:24:2c:c9:ff:82:c5:38:e0:0b:f9:6a:54:a6:d0: b1:9e:d7:71:5f:03:24:6b:d8:20:87:2b:6c:5b:30:81:67:e3: 94:79:86:6c:dd:83:c7:f0:e5:ad:ee:bb:30:b0:2a:38:66:b0: a9:3b:16:3c:cd:c4:51:ef:ec:42:f5:bf:fa:03:76:9e:c6:10: 8b:93:74:a7:81:f0:26:b6:7e:98:4a:f8:27:6b:1a:6d:77:83: 90:e8:40:73:a9:39:33:22:7b:d5:ef:83:42:47:e7:6a:c9:83: dc:41:d6:d2:71:07:8a:63:a7:c0:42:ad:05:84:2e:cb:64:1f: 5d:01:d9:71:e2:88:0a:85:d1:bd:4a:34:40:73:8e:c9:be:a6: d1:c4:c1:0d:24:91:b8:de:62:1b:35:7c:5c:2a:95:dc:03:b7: e9:97:d0:16:dd:5a:c2:2b:d4:f6:2b:3b:5b:0c:5c:1a:ca:d2: 3a:fe:cb:b1:17:e7:e4:74:5b:44:25:45:fc:a5:82:98:1f:7a: b4:b7:36:ba:3e:a5:ed:05:62:6c:18:95:8d:fe:c0:a7:be:1d: 87:5f:e9:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjslpa8xzhViyQ7UwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTU5NzI0N2YtMmQ4OC00YzUxLTgwNWEtN2FiMmE5YWY5 ZGM1MB4XDTI1MDIxODE0MDA1MloXDTI1MDUxOTEzMDA1MlowLzEtMCsGA1UEAxMk NzE1OWM5OTEtNjQ0MS00NjA2LWJkYzgtNWQwNzYwMDI0ZGRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAykteM+Dr4nhfXzF5NkXEFYdI0LKedtxDng/G OzH5gO6Xcowi4S+7GmdyQEONqDv70Ze6etxjhfz5bZYq678CL/H58DRjGUUXqfTq Vhd5bkJUwPlSdGxtgkNQtmH/h5u0vxqWuRE9i2VRQ/84vE/m8D0SCPRV+FdHJG6Z fCtSNYrArBVzUyOiWi8Tc3M89nWMrlukLoJrm4hibHCdF0XWZqhsR7bdeCQbSA8G vsmqaj77/SEnfsWad7oyJQvY+ZCrRZB+W/wjffNVLe3DP9Ze5LY5tk8z8qJ4ZkGw RJiUpEM5VS/uGq0iZVt+aPWAjy/qCxm6oqlne4DU921CcjVkEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLq+2ToXl7zRfPDVakJuoDSfF4/rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81NTk3 MjQ3Zi0yZDg4LTRjNTEtODA1YS03YWIyYTlhZjlkYzUvZjgwMGM2ZDgtMWJlNS0z ZDk3LWE1YzctZTk0MzQ3NzFhZDE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTU5NzI0N2YtMmQ4OC00YzUxLTgw NWEtN2FiMmE5YWY5ZGM1LzU1OTcyNDdmLTJkODgtNGM1MS04MDVhLTdhYjJhOWFm OWRjNS5jcmwwHwYDVR0jBBgwFoAUPHMq3QSzawItRgP+6YfSg1gci6QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81NTk3MjQ3Zi0yZDg4LTRjNTEtODA1YS03YWIy YTlhZjlkYzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArflGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ/gtcMIlkDtqA0Mk0CKNeofaKUg45U3RL6cNq2xzW+faddYE6VEsMok LMn/gsU44Av5alSm0LGe13FfAyRr2CCHK2xbMIFn45R5hmzdg8fw5a3uuzCwKjhm sKk7FjzNxFHv7EL1v/oDdp7GEIuTdKeB8Ca2fphK+CdrGm13g5DoQHOpOTMie9Xv g0JH52rJg9xB1tJxB4pjp8BCrQWELstkH10B2XHiiAqF0b1KNEBzjsm+ptHEwQ0k kbjeYhs1fFwqldwDt+mX0BbdWsIr1PYrO1sMXBrK0jr+y7EX5+R0W0QlRfylgpgf erS3Nro+pe0FYmwYlY3+wKe+HYdf6TU= -----END CERTIFICATE-----Generated at Fri Apr 11 21:13:30 2025 by rpki-client