$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6d37f34a-b79f-3672-876b-59aa28fd8204.roa File: 6d37f34a-b79f-3672-876b-59aa28fd8204.roa (raw, json) Hash identifier: nYgndOb9AWp2DOTcOAfiboGU25tqdK8x2idnjsV83/w= Subject key identifier: 8D:43:79:E1:E0:55:55:C3:EE:D4:14:3E:E6:9E:C2:88:3F:75:2A:C7 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285848D9C20CF5020D002EC85AC680 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6d37f34a-b79f-3672-876b-59aa28fd8204.roa Signing time: Tue 11 Feb 2025 20:08:17 +0000 ROA not before: Tue 11 Feb 2025 20:08:17 +0000 ROA not after: Mon 12 May 2025 19:08:17 +0000 asID: 3855 IP address blocks: 199.172.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d9:c2:0c:f5:02:0d:00:2e:c8:5a:c6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Feb 11 20:08:17 2025 GMT Not After : May 12 19:08:17 2025 GMT Subject: CN=592e9f6d-734d-4470-bef2-f5c8371998c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:3d:f6:d5:df:5c:a8:c1:cb:a8:af:59:c5:23: 58:eb:ed:96:09:7a:88:ff:16:4b:57:a4:a5:f3:3b: 74:c6:f8:7f:18:bc:de:a5:f6:9f:d6:80:de:44:0d: d5:4f:90:9d:e8:51:94:5a:31:8f:84:83:d7:7b:8f: 2a:97:45:c7:dc:e4:13:b9:65:f2:19:08:11:00:84: 41:9c:77:83:a5:a3:20:b7:d7:77:95:1f:83:8b:1d: c0:77:93:af:e8:6d:6d:1d:5a:85:2c:1e:88:96:29: c3:38:4a:2f:ea:63:a0:34:ce:82:a2:fd:31:a3:cb: 7b:ec:ae:6a:6c:de:4e:44:c8:8f:0a:c9:84:a1:2d: 8f:5e:e8:97:9f:aa:71:24:77:1e:ad:7f:36:f3:7d: 5c:98:31:48:3a:f5:16:ba:22:83:cb:ea:d4:78:6c: d5:13:d7:5a:3b:8a:77:90:aa:5e:05:ca:93:40:56: 89:c5:4d:cb:f3:95:8d:29:81:fa:8f:ff:5c:88:ff: ed:3c:2b:3a:36:7f:33:d3:a1:87:1c:5f:5a:15:47: 2c:e0:1a:85:40:94:c0:36:d9:4e:6e:53:70:2f:1d: 1e:aa:10:97:df:d8:d5:ae:bf:21:ff:e5:15:61:8e: 0e:be:c7:14:c6:b9:71:45:76:de:5e:a8:83:65:3d: b0:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:43:79:E1:E0:55:55:C3:EE:D4:14:3E:E6:9E:C2:88:3F:75:2A:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6d37f34a-b79f-3672-876b-59aa28fd8204.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 199.172.218.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:a2:8e:d4:dc:ce:f5:53:20:7d:26:b2:94:be:27:78:97:1c: a8:e9:93:2b:fb:3c:b1:d9:61:d7:5a:15:5d:43:92:04:33:52: 32:e7:9b:2c:42:2c:fd:98:75:91:37:f7:da:b0:cf:5a:1b:d5: 4f:7e:a4:e3:cc:f1:57:41:55:44:c6:76:0f:6d:6d:8e:a3:e3: 35:7e:5e:12:39:77:d0:c5:67:c6:d3:59:01:dc:91:68:7a:f8: ed:f4:5c:b2:51:8e:dc:ba:37:54:22:64:d4:6f:59:fc:4d:df: a1:6c:20:03:73:6c:fd:a4:b8:01:47:9c:18:18:da:9f:13:99: 9c:1d:10:c0:25:b7:7f:fd:7d:97:4f:3d:5b:72:60:0c:44:5c: e6:87:57:55:b1:76:d4:b1:3e:4f:68:8a:81:eb:49:61:22:1f: ab:b7:aa:5c:83:38:b9:0d:a5:d3:41:2a:97:e9:b2:fe:34:34: 5f:72:b3:74:55:74:26:8b:2b:6c:7d:6c:14:71:20:cc:67:10: 14:4f:64:9b:34:9b:26:f5:7f:b2:e6:ed:2a:d7:4e:88:c3:27: 1a:e6:75:56:bb:50:6a:38:05:7a:78:3a:53:60:20:54:ae:b4: 50:27:29:8d:33:a2:28:01:87:1e:09:63:26:5c:80:f2:b1:a4: 96:fa:a4:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjZwgz1Ag0ALshaxoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDIxMTIwMDgxN1oXDTI1MDUxMjE5MDgxN1owLzEtMCsGA1UEAxMk NTkyZTlmNmQtNzM0ZC00NDcwLWJlZjItZjVjODM3MTk5OGMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuT321d9cqMHLqK9ZxSNY6+2WCXqI/xZLV6Sl 8zt0xvh/GLzepfaf1oDeRA3VT5Cd6FGUWjGPhIPXe48ql0XH3OQTuWXyGQgRAIRB nHeDpaMgt9d3lR+Dix3Ad5Ov6G1tHVqFLB6IlinDOEov6mOgNM6Cov0xo8t77K5q bN5ORMiPCsmEoS2PXuiXn6pxJHcerX82831cmDFIOvUWuiKDy+rUeGzVE9daO4p3 kKpeBcqTQFaJxU3L85WNKYH6j/9ciP/tPCs6Nn8z06GHHF9aFUcs4BqFQJTANtlO blNwLx0eqhCX39jVrr8h/+UVYY4OvscUxrlxRXbeXqiDZT2wxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI1DeeHgVVXD7tQUPuaewog/dSrHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNmQzN2YzNGEtYjc5Zi0z NjcyLTg3NmItNTlhYTI4ZmQ4MjA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx6zaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACuijtTczvVTIH0mspS+J3iXHKjpkyv7PLHZYddaFV1DkgQzUjLnmyxC LP2YdZE399qwz1ob1U9+pOPM8VdBVUTGdg9tbY6j4zV+XhI5d9DFZ8bTWQHckWh6 +O30XLJRjty6N1QiZNRvWfxN36FsIANzbP2kuAFHnBgY2p8TmZwdEMAlt3/9fZdP PVtyYAxEXOaHV1WxdtSxPk9oioHrSWEiH6u3qlyDOLkNpdNBKpfpsv40NF9ys3RV dCaLK2x9bBRxIMxnEBRPZJs0myb1f7Lm7SrXTojDJxrmdVa7UGo4BXp4OlNgIFSu tFAnKY0zoigBhx4JYyZcgPKxpJb6pBY= -----END CERTIFICATE-----Generated at Sat Apr 5 23:23:10 2025 by rpki-client