$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5ebcb0aa-6695-324b-b1b3-7f671947ce14.roa File: 5ebcb0aa-6695-324b-b1b3-7f671947ce14.roa (raw, json) Hash identifier: BUXeU+ws2AxWAEXU7/j81e1TlHwMEJqgznWqy+4+fvY= Subject key identifier: D7:A1:B9:05:7C:C4:AD:A8:5D:70:43:79:00:55:E0:71:16:9D:4D:C7 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285848D9C20CC206F7B3B791FA3700 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5ebcb0aa-6695-324b-b1b3-7f671947ce14.roa Signing time: Tue 11 Feb 2025 20:08:17 +0000 ROA not before: Tue 11 Feb 2025 20:08:17 +0000 ROA not after: Mon 12 May 2025 19:08:17 +0000 asID: 3855 IP address blocks: 199.172.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d9:c2:0c:c2:06:f7:b3:b7:91:fa:37:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Feb 11 20:08:17 2025 GMT Not After : May 12 19:08:17 2025 GMT Subject: CN=f2590d85-d797-48df-8dff-e1aa1dc6d456 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:76:8c:c7:99:09:58:ee:f0:d0:2b:49:cd:79: ed:59:0a:a3:7b:a1:14:4a:92:64:04:2c:93:d0:86: 10:51:61:07:c0:94:b8:da:91:68:42:b7:39:e6:6a: a2:44:96:82:7d:c4:50:cc:36:81:15:10:27:5b:aa: 83:5c:f7:58:bd:6e:57:54:c2:b4:01:35:e0:1a:6f: d1:3a:58:e6:e5:5a:6f:1e:0b:b9:05:cd:54:fc:8f: 6b:1f:c2:01:95:7e:26:7a:b4:f0:8c:80:82:48:e9: d0:d9:5c:51:04:68:c9:61:a3:a7:7d:05:2b:d5:81: 60:99:4d:a2:31:26:fc:25:bd:e2:c2:46:fe:c8:dd: 87:cf:fd:ed:a7:85:a7:31:06:7b:96:fe:32:53:36: 06:bb:69:db:ff:e0:e4:e1:fc:32:0d:02:c9:a6:04: 5f:96:d6:8d:f7:9f:db:d9:ea:c4:d6:84:79:3b:51: f7:f6:cc:61:ce:41:9c:e2:33:3d:4b:3b:48:78:97: df:2f:c1:c9:05:80:45:22:2b:78:73:15:e3:3c:24: ce:fe:4e:d3:95:85:bd:45:26:98:6e:31:af:74:4e: 1b:b0:cc:87:70:0d:71:d1:38:d5:e0:58:a1:30:bd: 11:b4:ff:3f:2a:e7:c9:e8:bb:54:1d:f0:06:f3:dd: 41:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:A1:B9:05:7C:C4:AD:A8:5D:70:43:79:00:55:E0:71:16:9D:4D:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5ebcb0aa-6695-324b-b1b3-7f671947ce14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 199.172.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:0b:36:88:eb:1b:97:3b:48:c5:cb:ce:fe:15:67:70:f9:c9: 40:5b:46:a3:5e:78:11:d8:94:26:50:78:17:88:92:90:7d:90: be:e1:42:e7:f7:1d:f3:2a:5a:8f:b9:45:1b:8a:6a:09:5f:6a: e3:2d:62:d3:f0:dd:fb:cc:28:48:0d:63:8b:3e:c3:1e:54:b5: 9b:07:c6:da:0c:1a:a2:7e:d3:c0:9a:b4:41:0d:39:c2:fd:ec: 91:31:bd:85:57:d3:b9:4f:85:03:33:72:66:ad:fd:41:4d:b0: 9b:5d:cf:f8:f4:0a:4b:64:90:a9:a1:37:d8:95:6f:7a:9a:b6: 57:e0:ab:a2:a9:eb:fe:2b:f7:78:e8:34:1f:16:e6:fc:b8:21: b2:3c:63:9a:b1:48:5f:97:29:ea:d4:1a:23:46:a5:f3:77:da: a1:e2:4a:cb:4b:45:df:f5:7d:06:38:70:ab:dc:0b:51:c3:74: 5e:c5:63:ce:26:e4:98:09:24:a0:ea:a8:32:51:ed:a0:e4:a2: 1a:e5:19:4e:32:89:4b:91:7a:76:35:d9:a6:10:8a:a5:1a:b2: e4:41:5f:63:0a:3a:d3:7b:d0:33:0d:e8:3c:ce:2e:03:03:2c: 3e:f1:83:50:a0:21:77:ca:3d:7c:ec:28:84:9d:71:e5:d4:a6: 76:1c:54:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjZwgzCBvezt5H6NwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDIxMTIwMDgxN1oXDTI1MDUxMjE5MDgxN1owLzEtMCsGA1UEAxMk ZjI1OTBkODUtZDc5Ny00OGRmLThkZmYtZTFhYTFkYzZkNDU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHaMx5kJWO7w0CtJzXntWQqje6EUSpJkBCyT 0IYQUWEHwJS42pFoQrc55mqiRJaCfcRQzDaBFRAnW6qDXPdYvW5XVMK0ATXgGm/R Oljm5VpvHgu5Bc1U/I9rH8IBlX4merTwjICCSOnQ2VxRBGjJYaOnfQUr1YFgmU2i MSb8Jb3iwkb+yN2Hz/3tp4WnMQZ7lv4yUzYGu2nb/+Dk4fwyDQLJpgRfltaN95/b 2erE1oR5O1H39sxhzkGc4jM9SztIeJffL8HJBYBFIit4cxXjPCTO/k7TlYW9RSaY bjGvdE4bsMyHcA1x0TjV4FihML0RtP8/KufJ6LtUHfAG891BcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNehuQV8xK2oXXBDeQBV4HEWnU3HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNWViY2IwYWEtNjY5NS0z MjRiLWIxYjMtN2Y2NzE5NDdjZTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx6zYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFcLNojrG5c7SMXLzv4VZ3D5yUBbRqNeeBHYlCZQeBeIkpB9kL7hQuf3 HfMqWo+5RRuKaglfauMtYtPw3fvMKEgNY4s+wx5UtZsHxtoMGqJ+08CatEENOcL9 7JExvYVX07lPhQMzcmat/UFNsJtdz/j0CktkkKmhN9iVb3qatlfgq6Kp6/4r93jo NB8W5vy4IbI8Y5qxSF+XKerUGiNGpfN32qHiSstLRd/1fQY4cKvcC1HDdF7FY84m 5JgJJKDqqDJR7aDkohrlGU4yiUuRenY12aYQiqUasuRBX2MKOtN70DMN6DzOLgMD LD7xg1CgIXfKPXzsKISdceXUpnYcVKM= -----END CERTIFICATE-----Generated at Thu Apr 10 16:53:30 2025 by rpki-client