$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/67a49580-9049-3a8a-9d15-8cebbb7e9659.roa File: 67a49580-9049-3a8a-9d15-8cebbb7e9659.roa (raw, json) Hash identifier: n+fPskM+l/7sPWRemz7yeQK5u59KnIJbW6i78+XCt78= Subject key identifier: 49:EF:52:3B:69:69:04:09:76:A7:E7:BD:0A:3E:A3:A8:75:D7:9E:09 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285848D9C20E6B99AF4C7175765000 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/67a49580-9049-3a8a-9d15-8cebbb7e9659.roa Signing time: Tue 11 Feb 2025 20:08:18 +0000 ROA not before: Tue 11 Feb 2025 20:08:18 +0000 ROA not after: Mon 12 May 2025 19:08:18 +0000 asID: 3855 IP address blocks: 199.172.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d9:c2:0e:6b:99:af:4c:71:75:76:50:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Feb 11 20:08:18 2025 GMT Not After : May 12 19:08:18 2025 GMT Subject: CN=6cbe9d0d-48c8-4849-a6e1-341a12e173e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:05:01:1f:76:9b:71:66:d3:02:2f:2d:72:fe: 82:20:b5:d8:bf:ee:f1:57:40:73:b2:00:88:e7:1a: e1:85:d3:73:4b:1d:21:a5:dc:ed:fc:a4:be:25:b8: 59:43:cd:87:1d:76:4b:c5:3f:4d:88:4b:fb:a9:21: cb:0a:b3:06:c1:05:87:11:b1:52:ee:67:70:89:bb: 98:25:75:57:0d:28:2c:cf:ed:b8:95:6a:8a:62:88: 39:34:d5:e3:5a:75:6f:53:2c:6d:e7:80:b9:07:4f: e2:11:e9:c5:e2:2d:09:7d:d0:bf:e5:b2:82:07:b5: 6c:3c:ea:0c:66:d1:f6:b4:98:1c:5f:97:15:8a:35: c4:9e:34:5c:fb:b3:b9:8b:06:73:2a:88:ba:3a:ea: cc:87:32:c3:5b:7a:6d:2f:e7:0a:b3:ac:62:60:5a: ad:bc:8a:12:28:42:4e:92:4f:17:2a:3f:a4:54:ba: 55:54:e6:54:a2:78:cc:8a:2d:17:8c:c6:4e:dc:34: 74:88:74:e4:a9:1d:76:59:b8:94:99:27:2b:2d:df: 31:e1:f6:e0:de:26:67:a7:06:80:0a:16:82:7a:6f: be:91:f2:bf:04:95:36:d8:12:0c:62:72:7f:df:2d: 48:3b:d4:21:25:ad:1e:87:bd:ee:60:8b:c5:e4:88: 80:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:EF:52:3B:69:69:04:09:76:A7:E7:BD:0A:3E:A3:A8:75:D7:9E:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/67a49580-9049-3a8a-9d15-8cebbb7e9659.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 199.172.230.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:35:39:e9:06:f5:0d:44:4b:f3:1f:76:e0:bd:dd:32:77:4b: 28:92:58:79:1f:1c:09:2c:13:af:5c:97:32:af:2c:b0:79:94: 3f:66:5c:b3:c0:51:19:ec:c2:99:e6:f7:35:f5:6d:a4:ab:ec: 87:a4:48:46:4e:15:f2:ed:77:c9:01:92:e5:58:09:d7:43:67: c5:e1:3e:99:14:d9:f3:67:16:fa:bb:93:67:5a:e7:b2:f6:31: 89:76:80:d6:4c:1e:25:b6:b1:23:a4:cd:d8:13:24:29:79:d1: d0:77:20:d1:ac:1b:3d:c5:61:e2:53:8e:73:19:e1:bf:e4:f7: 86:7c:2a:cf:55:0a:5c:00:00:3f:18:28:80:7c:e0:72:db:49: 9e:60:36:bc:de:95:f3:3a:68:37:b4:93:b9:78:0d:e0:5c:e1: 9d:18:92:4e:b7:7c:92:76:8f:16:0f:b6:b9:e7:68:15:ee:98: 25:bb:48:41:6f:ca:d7:a1:ed:14:63:b0:87:58:04:2e:82:11: a0:dc:20:92:38:e9:10:03:54:06:45:89:01:97:ff:8b:f3:c6: 92:b6:ca:91:db:5a:27:be:55:bd:f7:f9:23:45:fe:96:92:cb: 03:59:2a:d7:70:58:f6:30:aa:10:a4:54:ca:83:ef:ce:31:a9: 97:de:cd:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjZwg5rma9McXV2UAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDIxMTIwMDgxOFoXDTI1MDUxMjE5MDgxOFowLzEtMCsGA1UEAxMk NmNiZTlkMGQtNDhjOC00ODQ5LWE2ZTEtMzQxYTEyZTE3M2UzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkAUBH3abcWbTAi8tcv6CILXYv+7xV0BzsgCI 5xrhhdNzSx0hpdzt/KS+JbhZQ82HHXZLxT9NiEv7qSHLCrMGwQWHEbFS7mdwibuY JXVXDSgsz+24lWqKYog5NNXjWnVvUyxt54C5B0/iEenF4i0JfdC/5bKCB7VsPOoM ZtH2tJgcX5cVijXEnjRc+7O5iwZzKoi6OurMhzLDW3ptL+cKs6xiYFqtvIoSKEJO kk8XKj+kVLpVVOZUonjMii0XjMZO3DR0iHTkqR12WbiUmScrLd8x4fbg3iZnpwaA ChaCem++kfK/BJU22BIMYnJ/3y1IO9QhJa0eh73uYIvF5IiAMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEnvUjtpaQQJdqfnvQo+o6h1154JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNjdhNDk1ODAtOTA0OS0z YThhLTlkMTUtOGNlYmJiN2U5NjU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx6zmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADE1OekG9Q1ES/MfduC93TJ3SyiSWHkfHAksE69clzKvLLB5lD9mXLPA URnswpnm9zX1baSr7IekSEZOFfLtd8kBkuVYCddDZ8XhPpkU2fNnFvq7k2da57L2 MYl2gNZMHiW2sSOkzdgTJCl50dB3INGsGz3FYeJTjnMZ4b/k94Z8Ks9VClwAAD8Y KIB84HLbSZ5gNrzelfM6aDe0k7l4DeBc4Z0Ykk63fJJ2jxYPtrnnaBXumCW7SEFv yteh7RRjsIdYBC6CEaDcIJI46RADVAZFiQGX/4vzxpK2ypHbWie+Vb33+SNF/paS ywNZKtdwWPYwqhCkVMqD784xqZfezdQ= -----END CERTIFICATE-----Generated at Sun Apr 6 05:25:07 2025 by rpki-client