$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1988590f-aafa-3f41-b2ea-8df5d93e3730.roa File: 1988590f-aafa-3f41-b2ea-8df5d93e3730.roa (raw, json) Hash identifier: RyY62oS6PTcNcG6ymLtxCAbyv6FmE/tHwwarO27o7VU= Subject key identifier: 5A:D0:3E:C2:31:4C:C1:C5:5A:4C:3A:9B:1F:A0:D4:02:C2:D9:7F:A6 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285848D9C20F118010DF4AA2773500 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1988590f-aafa-3f41-b2ea-8df5d93e3730.roa Signing time: Tue 11 Feb 2025 20:08:18 +0000 ROA not before: Tue 11 Feb 2025 20:08:18 +0000 ROA not after: Mon 12 May 2025 19:08:18 +0000 asID: 3855 IP address blocks: 199.172.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d9:c2:0f:11:80:10:df:4a:a2:77:35:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Feb 11 20:08:18 2025 GMT Not After : May 12 19:08:18 2025 GMT Subject: CN=7a7e587e-19c9-4558-a583-3e8750e0856e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:b2:17:d6:30:e6:44:6e:fa:af:76:17:32:60: 8d:15:6a:4b:b2:67:94:37:67:c2:be:99:f1:95:30: a2:2a:04:5c:d2:11:c5:1e:f2:e3:c1:63:3d:77:a7: 3a:92:a2:1d:1c:24:96:20:18:bb:7b:8b:62:21:fe: 6b:f5:6c:bf:47:9a:56:57:7c:01:cb:d4:3a:20:a5: 9a:97:1d:f8:f2:08:df:69:bc:69:7d:da:0c:84:65: ad:69:5e:35:ec:2a:f0:c4:32:be:6a:a7:d4:72:f8: 30:27:ca:3d:c7:83:a6:b1:a7:4d:ef:eb:22:7e:35: 5f:7d:64:58:89:48:7c:c6:6b:a1:50:76:e5:21:83: 16:e0:e5:80:1a:1a:63:70:10:d1:0e:2b:0b:8f:d2: 73:72:7f:f1:90:3c:e0:f8:21:25:a6:4c:3d:8c:6e: e2:b6:d1:86:27:5b:95:71:33:f9:b9:c9:1e:f6:3f: 70:24:14:0e:bb:d3:40:c4:32:5c:f2:9a:8a:ce:6f: d2:36:b2:87:3c:15:36:76:06:bb:1f:59:d7:e6:9f: a1:f9:e4:01:e5:f0:c7:33:9f:0b:55:90:e2:71:4d: 4b:35:50:7c:46:3a:1e:98:56:d5:c7:a8:31:1c:b9: 26:03:e6:0e:5a:34:9b:a0:72:1c:a2:b3:43:a8:e7: 0a:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:D0:3E:C2:31:4C:C1:C5:5A:4C:3A:9B:1F:A0:D4:02:C2:D9:7F:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1988590f-aafa-3f41-b2ea-8df5d93e3730.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 199.172.241.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:b7:5e:3a:6a:3a:21:90:3a:22:0d:e6:6c:30:09:cb:b7:e2: 8e:d3:98:b9:8b:17:29:c2:f2:d5:02:e0:14:32:9d:f1:0d:42: f7:68:84:91:27:18:fc:97:f2:72:07:22:69:3a:04:2d:3b:df: 33:06:f5:58:3c:a8:1a:c1:d5:2f:78:d6:2f:6f:74:5d:79:d6: 6b:08:d7:99:cf:a3:6c:f8:52:1c:88:09:7b:79:8f:c0:a0:c8: df:42:0b:ca:64:21:5d:a0:32:cc:c8:fb:15:f7:bf:9d:e3:55: cb:6f:31:f0:a2:1c:11:8e:de:11:3d:a6:68:ab:ef:7e:91:60: 4a:c1:ca:fd:3f:63:d9:0f:bb:95:11:07:21:60:6f:78:40:37: 38:a5:d7:ec:3d:50:61:13:46:48:ca:a0:d5:d9:24:07:89:71: cd:43:aa:99:07:8d:07:33:ef:0d:39:86:1e:ba:62:14:3d:b0: 6b:4b:75:c0:9a:84:df:d3:bd:f4:1b:fe:37:8d:61:3f:ee:37: b1:5f:ca:96:41:0f:1a:55:24:2e:75:f8:7d:77:29:ae:91:84: 77:13:e1:31:d5:40:58:e3:d8:a6:3e:b2:63:da:20:32:d2:4a: e9:c9:f3:13:20:55:80:00:a7:72:6a:df:62:37:d3:29:16:05: bd:90:f6:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjZwg8RgBDfSqJ3NQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDIxMTIwMDgxOFoXDTI1MDUxMjE5MDgxOFowLzEtMCsGA1UEAxMk N2E3ZTU4N2UtMTljOS00NTU4LWE1ODMtM2U4NzUwZTA4NTZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzLIX1jDmRG76r3YXMmCNFWpLsmeUN2fCvpnx lTCiKgRc0hHFHvLjwWM9d6c6kqIdHCSWIBi7e4tiIf5r9Wy/R5pWV3wBy9Q6IKWa lx348gjfabxpfdoMhGWtaV417CrwxDK+aqfUcvgwJ8o9x4OmsadN7+sifjVffWRY iUh8xmuhUHblIYMW4OWAGhpjcBDRDisLj9Jzcn/xkDzg+CElpkw9jG7ittGGJ1uV cTP5ucke9j9wJBQOu9NAxDJc8pqKzm/SNrKHPBU2dga7H1nX5p+h+eQB5fDHM58L VZDicU1LNVB8RjoemFbVx6gxHLkmA+YOWjSboHIcorNDqOcKYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFrQPsIxTMHFWkw6mx+g1ALC2X+mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMTk4ODU5MGYtYWFmYS0z ZjQxLWIyZWEtOGRmNWQ5M2UzNzMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx6zxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIe3XjpqOiGQOiIN5mwwCcu34o7TmLmLFynC8tUC4BQynfENQvdohJEn GPyX8nIHImk6BC073zMG9Vg8qBrB1S941i9vdF151msI15nPo2z4UhyICXt5j8Cg yN9CC8pkIV2gMszI+xX3v53jVctvMfCiHBGO3hE9pmir736RYErByv0/Y9kPu5UR ByFgb3hANzil1+w9UGETRkjKoNXZJAeJcc1DqpkHjQcz7w05hh66YhQ9sGtLdcCa hN/TvfQb/jeNYT/uN7FfypZBDxpVJC51+H13Ka6RhHcT4THVQFjj2KY+smPaIDLS SunJ8xMgVYAAp3Jq32I30ykWBb2Q9tA= -----END CERTIFICATE-----Generated at Thu Apr 10 11:38:48 2025 by rpki-client