$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/84087b24-b3ca-3e6e-b8ce-25bea801b6e2.roa File: 84087b24-b3ca-3e6e-b8ce-25bea801b6e2.roa (raw, json) Hash identifier: XbjD1J38kJiWj7islLrBDdXq7pb80WIXP5GoqiRujV8= Subject key identifier: 97:2C:F1:F9:61:70:CC:07:48:48:C5:3F:3F:61:85:58:06:4F:2B:E9 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285848EF61666EDC3487564BDE1E80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/84087b24-b3ca-3e6e-b8ce-25bea801b6e2.roa Signing time: Wed 19 Feb 2025 14:00:52 +0000 ROA not before: Wed 19 Feb 2025 14:00:52 +0000 ROA not after: Tue 20 May 2025 13:00:52 +0000 asID: 20447 IP address blocks: 199.170.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ef:61:66:6e:dc:34:87:56:4b:de:1e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Feb 19 14:00:52 2025 GMT Not After : May 20 13:00:52 2025 GMT Subject: CN=b0c6f9ad-aee8-4277-bf6f-17a9e1c703b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:38:31:39:14:c7:59:0d:10:38:3f:20:6f:2e: 4f:78:18:06:84:9f:c8:ad:73:e8:d7:8e:51:48:4b: 2d:c0:1a:a3:05:d0:ec:de:74:26:ab:40:b1:48:be: 62:0c:64:18:7f:df:ca:9b:e4:ee:4e:cc:98:f3:19: 45:bb:73:ae:11:52:91:c7:6b:1b:51:6a:54:96:44: 17:88:24:56:9d:55:24:cf:53:fc:dc:0f:01:16:03: f0:e5:8d:78:80:0a:cb:1c:15:da:a3:18:f7:97:e0: fa:af:10:e5:92:c8:a1:d2:83:63:7a:a8:ee:5f:b0: 10:fc:da:fc:5c:5c:49:b6:fd:ae:6e:67:e8:69:7a: 61:7b:c1:ec:4f:10:58:f0:ca:b1:f7:a0:70:02:54: 14:97:f6:49:e6:16:4f:65:e3:23:01:85:31:26:59: be:0e:1c:15:48:2a:95:83:9b:da:09:70:17:99:a9: d9:0a:77:b4:6d:f2:16:db:31:e8:13:df:b3:a6:01: 76:57:9a:7e:55:1b:10:0c:49:f1:73:63:48:43:89: f1:3a:2f:75:3d:23:7b:33:0b:21:97:e5:63:6f:05: 26:43:b3:23:1a:95:2d:8a:33:04:e2:70:8b:ce:7b: f5:f3:2b:55:f6:c2:d7:a8:56:d2:5b:75:fc:af:f9: 80:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:2C:F1:F9:61:70:CC:07:48:48:C5:3F:3F:61:85:58:06:4F:2B:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/84087b24-b3ca-3e6e-b8ce-25bea801b6e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 199.170.25.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:09:7f:3f:75:0d:c3:e4:fe:10:60:54:e3:de:38:87:ac:8a: 0e:db:0f:7f:92:76:12:e8:67:e7:19:72:e3:9c:64:6e:fd:f7: cc:e9:96:b8:a0:47:0e:31:22:34:65:df:78:27:9b:52:9b:6b: 90:4d:bb:05:c6:c5:23:3b:cc:d4:db:c6:fc:fa:5d:45:ff:6b: b6:49:6c:c5:1e:30:52:d7:77:1f:b0:05:d1:5b:7f:7b:0f:39: 37:41:04:65:4a:c2:d1:12:ba:7c:c1:45:10:88:58:3c:fe:81: a3:0f:36:56:26:53:c0:d1:62:f8:84:a6:92:58:4b:0d:4c:cd: cd:75:89:fc:22:34:10:f5:65:20:ed:45:60:86:bd:04:a6:80: 88:bf:cc:0e:64:95:9b:9a:88:54:4c:8e:8a:41:41:42:dd:e6: aa:e6:64:45:44:d7:e1:de:f3:cf:52:86:0e:5f:90:fd:54:42: 14:4a:12:4b:3f:dd:bc:47:3b:15:f7:a5:e8:d2:e4:51:bb:0b: b4:26:81:48:97:be:0b:49:1a:67:77:d6:20:56:d6:53:6d:f0: 95:c6:15:d1:e4:cb:0b:a0:30:de:05:92:87:da:6b:79:29:e5: 27:75:48:df:8b:4b:fb:0d:1d:1f:4d:64:fd:fe:8b:7c:56:7a: 94:42:82:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjvYWZu3DSHVkveHoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk YjBjNmY5YWQtYWVlOC00Mjc3LWJmNmYtMTdhOWUxYzcwM2I2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzgxORTHWQ0QOD8gby5PeBgGhJ/IrXPo145R SEstwBqjBdDs3nQmq0CxSL5iDGQYf9/Km+TuTsyY8xlFu3OuEVKRx2sbUWpUlkQX iCRWnVUkz1P83A8BFgPw5Y14gArLHBXaoxj3l+D6rxDlksih0oNjeqjuX7AQ/Nr8 XFxJtv2ubmfoaXphe8HsTxBY8Mqx96BwAlQUl/ZJ5hZPZeMjAYUxJlm+DhwVSCqV g5vaCXAXmanZCne0bfIW2zHoE9+zpgF2V5p+VRsQDEnxc2NIQ4nxOi91PSN7Mwsh l+VjbwUmQ7MjGpUtijME4nCLznv18ytV9sLXqFbSW3X8r/mArwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJcs8flhcMwHSEjFPz9hhVgGTyvpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvODQwODdiMjQtYjNjYS0z ZTZlLWI4Y2UtMjViZWE4MDFiNmUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx6oZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACoJfz91DcPk/hBgVOPeOIesig7bD3+SdhLoZ+cZcuOcZG7998zplrig Rw4xIjRl33gnm1Kba5BNuwXGxSM7zNTbxvz6XUX/a7ZJbMUeMFLXdx+wBdFbf3sP OTdBBGVKwtESunzBRRCIWDz+gaMPNlYmU8DRYviEppJYSw1Mzc11ifwiNBD1ZSDt RWCGvQSmgIi/zA5klZuaiFRMjopBQULd5qrmZEVE1+He889Shg5fkP1UQhRKEks/ 3bxHOxX3pejS5FG7C7QmgUiXvgtJGmd31iBW1lNt8JXGFdHkywugMN4Fkofaa3kp 5Sd1SN+LS/sNHR9NZP3+i3xWepRCgqc= -----END CERTIFICATE-----Generated at Sun Apr 6 02:21:49 2025 by rpki-client