$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aaf41670-9101-34ad-ac92-f5d05de80639.roa File: aaf41670-9101-34ad-ac92-f5d05de80639.roa (raw, json) Hash identifier: INrxLjgfVhekMHGIelpOePEyueJQrYftIh1mJ4atlpk= Subject key identifier: 5D:30:CC:37:C6:73:75:23:81:2E:AE:56:D0:FE:5E:58:86:78:9E:BC Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849DC8FD3330E9AB2DCE7172600 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aaf41670-9101-34ad-ac92-f5d05de80639.roa Signing time: Thu 15 May 2025 13:01:00 +0000 ROA not before: Thu 15 May 2025 13:01:00 +0000 ROA not after: Wed 13 Aug 2025 13:01:00 +0000 asID: 0 IP address blocks: 199.222.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:dc:8f:d3:33:0e:9a:b2:dc:e7:17:26:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: May 15 13:01:00 2025 GMT Not After : Aug 13 13:01:00 2025 GMT Subject: CN=db37eb6c-31f6-44a4-85e0-a1888eff44ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ae:7f:37:23:20:db:b8:ca:4a:6a:d8:b2:bc: 5e:0c:25:96:bf:b9:2e:57:17:47:07:0e:88:6d:fb: 9e:e6:38:25:20:55:72:9e:f5:da:30:d8:9c:ca:0a: 9c:d1:32:31:a6:e1:9f:f1:b8:0c:a4:03:ea:10:96: f8:53:a9:21:89:51:47:07:50:f3:66:d5:f3:05:18: 6b:e7:7b:43:77:09:ec:39:08:91:39:74:80:00:03: 8c:11:c1:af:42:fd:d7:03:84:ff:f7:f2:b6:2e:bb: 96:d8:9a:4a:ae:89:43:14:6b:57:05:6e:40:75:50: e6:65:04:40:10:fb:18:06:47:3a:c8:7f:a0:65:21: 7e:7c:81:40:8a:42:c7:27:bf:fc:9e:84:35:37:4d: 81:d2:6e:bf:24:54:30:9a:64:b0:69:1c:70:50:7a: 7d:c9:c9:da:02:44:ba:e0:97:54:99:6b:18:bd:65: d9:73:5c:00:72:e8:99:76:0c:b3:0e:be:c5:96:29: 06:c1:28:0f:6c:54:8f:d4:4a:3e:88:6d:bd:99:08: 97:4c:b9:8e:f8:b2:5f:fb:02:b9:3f:17:82:f6:74: f0:90:c2:4e:9d:e6:65:e5:6a:30:55:9c:1b:d3:16: 96:24:2b:3d:85:a1:db:c6:e1:5f:ed:d9:65:cc:d2: 08:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:30:CC:37:C6:73:75:23:81:2E:AE:56:D0:FE:5E:58:86:78:9E:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aaf41670-9101-34ad-ac92-f5d05de80639.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 199.222.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:36:62:79:1d:6d:75:b6:62:66:38:c6:a5:ad:42:36:c4:1b: c0:2f:00:c8:08:4f:60:54:a4:0d:fe:0e:b2:fa:96:87:9b:a3: c3:79:14:17:c0:c3:6a:d3:de:6a:81:73:3a:02:e0:d8:11:0e: 9d:a3:a8:0f:cb:f2:4b:55:00:02:49:30:6f:36:03:79:28:3c: 19:b1:0a:a5:53:8d:c4:92:6b:36:94:10:d9:06:e4:54:eb:92: 35:f1:57:17:a5:9e:ad:76:ee:e4:b2:ce:44:89:d8:a1:17:20: 7c:31:f3:65:27:12:9a:2a:36:28:18:56:49:f6:a7:69:0d:53: 9b:84:73:97:36:f5:a5:4c:ac:1b:21:d0:73:8c:9b:8c:5f:34: 0e:5e:e4:c4:c0:c1:49:93:95:65:4d:4d:7b:0b:ce:f2:39:9f: 2f:a0:e8:7a:b5:29:79:33:01:1c:10:29:3d:57:e2:99:e2:a7: 2c:41:f1:53:45:11:09:9d:7c:b8:4d:0e:50:4a:54:b1:2e:1b: 92:ed:f6:f0:7f:d5:98:14:9f:06:98:5f:6d:d0:b8:ea:d8:76: 39:81:45:c2:45:f0:3e:3c:db:2e:c4:b7:0a:4c:43:ee:c9:61: 82:35:a7:46:4b:38:33:93:0e:1c:2e:80:be:6e:bb:fb:47:2d: 25:12:07:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEncj9MzDpqy3OcXJgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDUxNTEzMDEwMFoXDTI1MDgxMzEzMDEwMFowLzEtMCsGA1UEAxMk ZGIzN2ViNmMtMzFmNi00NGE0LTg1ZTAtYTE4ODhlZmY0NGZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArq5/NyMg27jKSmrYsrxeDCWWv7kuVxdHBw6I bfue5jglIFVynvXaMNicygqc0TIxpuGf8bgMpAPqEJb4U6khiVFHB1DzZtXzBRhr 53tDdwnsOQiROXSAAAOMEcGvQv3XA4T/9/K2LruW2JpKrolDFGtXBW5AdVDmZQRA EPsYBkc6yH+gZSF+fIFAikLHJ7/8noQ1N02B0m6/JFQwmmSwaRxwUHp9ycnaAkS6 4JdUmWsYvWXZc1wAcuiZdgyzDr7FlikGwSgPbFSP1Eo+iG29mQiXTLmO+LJf+wK5 PxeC9nTwkMJOneZl5WowVZwb0xaWJCs9haHbxuFf7dllzNIIcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF0wzDfGc3UjgS6uVtD+XliGeJ68MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYWFmNDE2NzAtOTEwMS0z NGFkLWFjOTItZjVkMDVkZTgwNjM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEx96QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACw2YnkdbXW2YmY4xqWtQjbEG8AvAMgIT2BUpA3+DrL6loebo8N5FBfA w2rT3mqBczoC4NgRDp2jqA/L8ktVAAJJMG82A3koPBmxCqVTjcSSazaUENkG5FTr kjXxVxelnq127uSyzkSJ2KEXIHwx82UnEpoqNigYVkn2p2kNU5uEc5c29aVMrBsh 0HOMm4xfNA5e5MTAwUmTlWVNTXsLzvI5ny+g6Hq1KXkzARwQKT1X4pnipyxB8VNF EQmdfLhNDlBKVLEuG5Lt9vB/1ZgUnwaYX23QuOrYdjmBRcJF8D482y7EtwpMQ+7J YYI1p0ZLODOTDhwugL5uu/tHLSUSB7o= -----END CERTIFICATE-----Generated at Sun Jun 1 03:56:52 2025 by rpki-client