$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/34abd26d-f1a8-3be5-bc4e-46a39278feac.roa File: 34abd26d-f1a8-3be5-bc4e-46a39278feac.roa (raw, json) Hash identifier: 1+BI21GFKWfNPByRgVQDKBElrd8eKCwhWKsq668qkqo= Subject key identifier: 86:F2:3B:10:39:D2:54:2E:68:F4:75:9C:02:0D:FC:AD:18:F5:7C:49 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285848D9C20B8604D3771A946C3080 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/34abd26d-f1a8-3be5-bc4e-46a39278feac.roa Signing time: Tue 11 Feb 2025 20:08:17 +0000 ROA not before: Tue 11 Feb 2025 20:08:17 +0000 ROA not after: Mon 12 May 2025 19:08:17 +0000 asID: 3855 IP address blocks: 199.172.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d9:c2:0b:86:04:d3:77:1a:94:6c:30:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Feb 11 20:08:17 2025 GMT Not After : May 12 19:08:17 2025 GMT Subject: CN=cbd5dcfa-7f8b-4d02-98fa-199072c7c4f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:47:b7:ea:ca:61:6e:6d:95:79:1b:7c:70:3b: 28:18:cb:ff:9a:47:af:6b:b0:4c:ba:10:4d:ca:aa: 68:8e:cd:c0:2a:ff:24:9c:45:e1:a0:69:6b:11:bb: 3b:08:d2:84:ec:aa:91:f5:8b:ff:da:e8:01:6f:4f: 1f:b0:a2:33:c0:92:29:64:10:5d:d5:7f:4a:64:5a: 2f:18:b4:de:22:8f:36:52:89:3e:a1:c3:7b:15:b2: 58:d4:eb:6a:bd:3b:00:cd:ea:5e:09:90:3b:35:ac: 9b:87:a3:11:90:02:27:f8:d9:08:41:71:e1:97:f9: 08:2d:07:de:8a:dc:be:d1:bf:81:9c:60:b5:4e:24: db:b8:b2:46:f0:13:a4:a6:08:2e:3e:0c:d7:31:0f: fa:76:b7:c5:a8:a8:ff:bf:d0:fe:7e:14:ef:48:18: f2:5f:52:2c:95:b7:4c:33:7a:f4:93:fa:dc:25:a6: 69:8c:5b:c7:ab:b7:e3:c3:2e:78:14:03:54:5d:6f: 1e:d4:94:4d:36:fd:7c:26:31:7d:f0:a8:6e:65:f8: 46:66:13:69:ac:c9:c3:5d:09:e4:34:29:47:b9:e1: 47:66:e1:c3:72:af:6b:98:07:6b:f8:d1:ce:13:bb: 62:34:98:d2:f4:00:51:06:ab:66:d8:e8:c5:bd:00: ee:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:F2:3B:10:39:D2:54:2E:68:F4:75:9C:02:0D:FC:AD:18:F5:7C:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/34abd26d-f1a8-3be5-bc4e-46a39278feac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 199.172.198.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:c2:12:c2:f0:0d:d9:e3:f2:3f:3a:6e:c8:30:b6:22:15:ff: 24:12:e4:e9:b7:e5:4f:c1:68:f8:2d:13:b5:b5:8a:51:d7:52: 30:ca:82:62:c7:ae:f5:d1:da:f6:00:81:7a:a2:1e:e9:ef:4e: e8:54:39:89:74:72:94:11:1c:38:47:2c:02:4e:47:2e:90:ca: fa:fe:1d:fd:7a:6e:4c:b0:61:f9:ca:e8:80:20:78:f9:dc:54: 4b:83:0c:bf:d5:bf:ae:03:d9:ef:df:5b:b2:12:98:78:b2:8b: 5b:d8:66:4d:93:6f:06:b2:b1:a7:cd:b1:a8:d8:bb:ad:4d:17: 28:bd:77:17:98:23:c8:87:99:e2:5b:e1:7c:38:5d:4c:a3:48: 21:74:16:fb:07:a3:62:cd:77:e2:ec:2f:14:f3:56:4a:53:0a: 71:83:8c:67:bb:c0:02:1a:61:c1:de:d6:b1:78:2c:ab:35:bb: 4e:3e:cc:4b:74:4c:27:fc:29:f3:ec:96:16:33:55:17:de:ac: be:5c:3b:36:00:af:68:4e:48:fd:54:10:bc:b7:b9:60:e9:69: ee:b7:09:4b:25:f3:db:3b:d8:93:db:af:d0:63:be:4b:2a:92: 03:e1:7e:bd:9b:4d:d8:a2:54:fb:62:64:7e:4a:a7:92:0b:eb: 14:88:ca:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjZwguGBNN3GpRsMIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDIxMTIwMDgxN1oXDTI1MDUxMjE5MDgxN1owLzEtMCsGA1UEAxMk Y2JkNWRjZmEtN2Y4Yi00ZDAyLTk4ZmEtMTk5MDcyYzdjNGY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUe36sphbm2VeRt8cDsoGMv/mkeva7BMuhBN yqpojs3AKv8knEXhoGlrEbs7CNKE7KqR9Yv/2ugBb08fsKIzwJIpZBBd1X9KZFov GLTeIo82Uok+ocN7FbJY1OtqvTsAzepeCZA7Naybh6MRkAIn+NkIQXHhl/kILQfe ity+0b+BnGC1TiTbuLJG8BOkpgguPgzXMQ/6drfFqKj/v9D+fhTvSBjyX1IslbdM M3r0k/rcJaZpjFvHq7fjwy54FANUXW8e1JRNNv18JjF98KhuZfhGZhNprMnDXQnk NClHueFHZuHDcq9rmAdr+NHOE7tiNJjS9ABRBqtm2OjFvQDuFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIbyOxA50lQuaPR1nAIN/K0Y9XxJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMzRhYmQyNmQtZjFhOC0z YmU1LWJjNGUtNDZhMzkyNzhmZWFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx6zGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADrCEsLwDdnj8j86bsgwtiIV/yQS5Om35U/BaPgtE7W1ilHXUjDKgmLH rvXR2vYAgXqiHunvTuhUOYl0cpQRHDhHLAJORy6Qyvr+Hf16bkywYfnK6IAgePnc VEuDDL/Vv64D2e/fW7ISmHiyi1vYZk2TbwaysafNsajYu61NFyi9dxeYI8iHmeJb 4Xw4XUyjSCF0FvsHo2LNd+LsLxTzVkpTCnGDjGe7wAIaYcHe1rF4LKs1u04+zEt0 TCf8KfPslhYzVRferL5cOzYAr2hOSP1UELy3uWDpae63CUsl89s72JPbr9Bjvksq kgPhfr2bTdiiVPtiZH5Kp5IL6xSIykY= -----END CERTIFICATE-----Generated at Sat Apr 5 23:19:47 2025 by rpki-client