$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/33dd2e0a-3c38-3dfc-8538-02c19f370233.roa File: 33dd2e0a-3c38-3dfc-8538-02c19f370233.roa (raw, json) Hash identifier: XMNXrMWBSEC/k84cnnBhp6eVt7frHlQcJ2YR0gyGHGM= Subject key identifier: FE:97:1C:EC:9D:F7:41:2D:0E:BC:9B:D1:8E:6F:C3:46:50:3E:7F:1F Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849F17FDCA15EDDF6EB67B01920 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/33dd2e0a-3c38-3dfc-8538-02c19f370233.roa Signing time: Fri 23 May 2025 01:00:49 +0000 ROA not before: Fri 23 May 2025 01:00:49 +0000 ROA not after: Thu 21 Aug 2025 01:00:49 +0000 asID: 701 IP address blocks: 199.202.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f1:7f:dc:a1:5e:dd:f6:eb:67:b0:19:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: May 23 01:00:49 2025 GMT Not After : Aug 21 01:00:49 2025 GMT Subject: CN=3342a45e-06fd-4370-b0d7-78b79ee0ce08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:88:46:69:ca:35:4a:7a:2d:0a:e1:03:4d:94: 2e:9a:69:e9:de:17:74:82:d2:cb:6c:e6:18:34:36: 96:fb:f5:11:76:b5:ac:d5:31:34:5a:65:e1:66:2b: b2:d7:a2:b5:91:c9:5e:41:3c:fa:1b:d3:6d:5e:ab: d5:9e:46:bd:13:5c:cd:37:92:13:65:cb:c0:b3:37: be:b2:f1:43:5f:ee:f9:9f:dc:4d:86:90:23:13:24: 40:29:31:55:09:5d:5c:62:a0:1b:05:87:7e:27:74: 5b:03:a7:70:f3:19:4c:88:37:a9:e0:92:fe:a0:a1: ab:14:a4:19:71:51:de:e1:44:4e:3c:a3:cd:68:59: 77:46:c8:be:38:9d:16:7d:83:a6:38:08:8b:c0:47: 76:a7:d8:9b:97:cf:9f:a0:5e:e4:c2:d3:93:9f:a0: 85:14:b0:b3:e7:30:a2:da:a8:c4:68:61:6b:d8:9e: 12:22:57:3f:57:95:1f:ac:1a:52:c6:c9:41:fb:83: 2c:e8:39:67:03:ee:df:51:ed:aa:39:92:c1:8f:7b: a2:5c:27:32:50:e5:de:01:ae:64:56:69:1f:9f:a1: 88:62:ef:e5:1c:43:32:cf:8b:35:13:0d:9a:9b:5c: c2:26:e3:79:c9:5a:8a:c5:c7:6e:0d:58:09:f8:70: 20:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:97:1C:EC:9D:F7:41:2D:0E:BC:9B:D1:8E:6F:C3:46:50:3E:7F:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/33dd2e0a-3c38-3dfc-8538-02c19f370233.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 199.202.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:95:42:f7:e2:b9:b2:d5:52:75:eb:70:6f:ab:4e:53:cd:b4: a7:cb:44:8c:1c:df:28:d1:01:8e:ed:83:f0:5e:25:12:bb:f9: 17:71:ff:af:31:37:e6:fa:a7:56:78:64:5a:c9:d8:b2:db:b1: 94:7f:e3:4a:dc:ab:ec:59:e7:0e:88:9e:5b:1b:e6:a0:df:18: af:73:d2:9f:f3:67:10:ac:b6:33:e1:d3:13:0f:70:da:e5:e3: df:7b:f2:f9:71:fa:70:31:25:7f:31:8f:49:48:84:ef:8f:d2: a4:58:44:27:00:e6:e9:43:04:91:38:45:19:8c:23:df:c0:2b: d8:f0:32:33:9d:01:55:20:45:07:28:65:3a:90:10:3c:ab:1e: 68:9f:81:9d:27:14:03:6f:52:5c:b0:db:c0:f0:f6:91:9b:5b: cc:c5:48:6a:b9:95:6a:fc:d0:49:87:f4:e5:8a:90:cd:67:ad: f6:df:84:2c:43:dd:ed:62:1b:ec:4a:ab:f1:0b:41:76:63:e0: 4c:8c:cb:a5:5d:05:9c:63:2e:ac:86:37:65:c4:9b:c8:fe:0d: fc:ab:fd:5d:33:d8:ac:23:e0:00:06:b0:70:72:81:97:c1:77: 19:05:89:41:22:c5:32:53:3a:c0:61:1b:72:b9:dc:ca:27:ef: 51:ce:95:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnxf9yhXt3262ewGSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDUyMzAxMDA0OVoXDTI1MDgyMTAxMDA0OVowLzEtMCsGA1UEAxMk MzM0MmE0NWUtMDZmZC00MzcwLWIwZDctNzhiNzllZTBjZTA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj4hGaco1SnotCuEDTZQummnp3hd0gtLLbOYY NDaW+/URdrWs1TE0WmXhZiuy16K1kcleQTz6G9NtXqvVnka9E1zNN5ITZcvAsze+ svFDX+75n9xNhpAjEyRAKTFVCV1cYqAbBYd+J3RbA6dw8xlMiDep4JL+oKGrFKQZ cVHe4UROPKPNaFl3Rsi+OJ0WfYOmOAiLwEd2p9ibl8+foF7kwtOTn6CFFLCz5zCi 2qjEaGFr2J4SIlc/V5UfrBpSxslB+4Ms6DlnA+7fUe2qOZLBj3uiXCcyUOXeAa5k Vmkfn6GIYu/lHEMyz4s1Ew2am1zCJuN5yVqKxcduDVgJ+HAg3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP6XHOyd90EtDryb0Y5vw0ZQPn8fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMzNkZDJlMGEtM2MzOC0z ZGZjLTg1MzgtMDJjMTlmMzcwMjMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx8qAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAqVQvfiubLVUnXrcG+rTlPNtKfLRIwc3yjRAY7tg/BeJRK7+Rdx/68x N+b6p1Z4ZFrJ2LLbsZR/40rcq+xZ5w6Inlsb5qDfGK9z0p/zZxCstjPh0xMPcNrl 49978vlx+nAxJX8xj0lIhO+P0qRYRCcA5ulDBJE4RRmMI9/AK9jwMjOdAVUgRQco ZTqQEDyrHmifgZ0nFANvUlyw28Dw9pGbW8zFSGq5lWr80EmH9OWKkM1nrfbfhCxD 3e1iG+xKq/ELQXZj4EyMy6VdBZxjLqyGN2XEm8j+Dfyr/V0z2Kwj4AAGsHBygZfB dxkFiUEixTJTOsBhG3K53Mon71HOlYY= -----END CERTIFICATE-----Generated at Fri Jun 6 19:34:41 2025 by rpki-client