$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/248312dc-19c8-397f-8f1b-0b15ff00a2ea.roa File: 248312dc-19c8-397f-8f1b-0b15ff00a2ea.roa (raw, json) Hash identifier: ZJp/H8on1wLnCQXKjbVxeKuPVEeHjaedFlHAKYzZzHU= Subject key identifier: E6:B0:85:68:39:64:54:B1:7E:2D:A3:50:13:5C:D2:AB:80:AF:17:98 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F43285848B1F62B4BB8784DE6FD7FE400 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/248312dc-19c8-397f-8f1b-0b15ff00a2ea.roa Signing time: Tue 28 Jan 2025 14:00:52 +0000 ROA not before: Tue 28 Jan 2025 14:00:52 +0000 ROA not after: Mon 28 Apr 2025 13:00:52 +0000 asID: 14618 IP address blocks: 173.199.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b1:f6:2b:4b:b8:78:4d:e6:fd:7f:e4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Jan 28 14:00:52 2025 GMT Not After : Apr 28 13:00:52 2025 GMT Subject: CN=957850fe-983a-4d47-ad59-6089d4131734 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:19:17:c1:9e:a8:43:40:c4:0e:1b:39:6f:86: a4:70:5e:ca:3d:bd:e4:48:8e:20:62:7c:9e:42:86: 2c:14:62:cc:b8:4e:e0:ef:9c:cd:70:43:3f:ae:93: c0:97:56:77:3c:2c:d2:91:b4:c2:96:73:e0:64:76: d3:85:d5:16:1b:32:1a:cc:42:55:82:f2:28:75:f5: 9f:69:be:df:33:8b:e6:96:c7:3e:1f:89:f4:bd:1e: 7d:63:63:e9:cd:30:ed:2b:4a:ce:7b:75:e8:04:61: 7a:c8:99:11:f3:23:cb:f7:17:87:ac:d5:91:86:79: 7d:ca:07:aa:02:0a:68:1d:c1:d8:a6:a1:b1:0e:25: 57:41:d9:0c:61:83:91:c2:75:2c:af:f4:c6:59:4f: c1:fd:00:4a:1f:57:74:9c:57:cb:03:21:09:71:11: 4f:b5:f4:f5:10:28:ba:e1:60:52:a7:76:45:af:9b: 08:f2:4c:e3:cd:f1:e0:6f:d6:e4:54:0c:9b:77:df: 05:0f:85:0b:a3:69:f4:3b:50:ca:86:29:a5:87:c3: cf:6d:f6:7c:e9:c8:7b:3b:7b:e1:a9:5d:63:83:3c: 44:72:83:b1:d3:48:c3:50:af:3a:03:0e:dc:6e:e2: 80:db:e6:6b:5b:df:25:05:8e:f8:a2:37:cb:0e:1a: c2:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:B0:85:68:39:64:54:B1:7E:2D:A3:50:13:5C:D2:AB:80:AF:17:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/248312dc-19c8-397f-8f1b-0b15ff00a2ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 173.199.59.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:e8:1b:25:d3:be:8b:0c:70:fc:6c:91:23:88:f5:9d:9b:76: 64:06:fe:48:58:15:31:a1:0f:0b:ba:7f:f9:7e:c1:fd:e1:06: 92:21:eb:10:95:4a:62:88:86:0f:e9:bc:91:f8:74:4d:93:f6: 16:1e:46:2b:17:60:0f:e2:1c:9d:3b:82:90:d6:83:e1:b0:a5: cf:b5:6e:92:85:cc:c0:b1:24:6d:fa:32:8e:58:34:12:bf:3c: 16:94:98:62:64:13:f1:d2:f4:34:f1:88:60:99:ed:d8:66:98: 7b:72:d8:9b:4a:24:35:df:1d:27:f7:36:4e:5c:5c:1d:99:ae: d8:22:e8:dc:5b:e2:eb:8e:26:4a:a8:f2:c9:b9:83:c3:d2:38: eb:6b:43:a0:72:17:2e:00:5c:c9:0e:17:70:e7:9c:ae:55:3d: 11:1f:05:0a:c9:70:7d:27:e3:7f:f6:ea:6b:8f:70:34:30:d0: 3e:9b:a8:91:df:d2:dd:25:4c:1d:67:57:b2:4c:b4:3e:ef:fa: ef:e4:c7:89:ec:91:08:81:e9:50:5d:66:a1:af:c2:2e:0e:5b: 22:6e:d1:87:59:ad:3b:f0:37:c9:2b:20:5c:5e:f9:e1:ce:1a: 68:e6:5f:52:30:b5:7c:94:93:24:96:67:1f:e5:e2:7a:49:2e: e4:b5:49:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEix9itLuHhN5v1/5AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI1MDEyODE0MDA1MloXDTI1MDQyODEzMDA1MlowLzEtMCsGA1UEAxMk OTU3ODUwZmUtOTgzYS00ZDQ3LWFkNTktNjA4OWQ0MTMxNzM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRkXwZ6oQ0DEDhs5b4akcF7KPb3kSI4gYnye QoYsFGLMuE7g75zNcEM/rpPAl1Z3PCzSkbTClnPgZHbThdUWGzIazEJVgvIodfWf ab7fM4vmlsc+H4n0vR59Y2PpzTDtK0rOe3XoBGF6yJkR8yPL9xeHrNWRhnl9ygeq AgpoHcHYpqGxDiVXQdkMYYORwnUsr/TGWU/B/QBKH1d0nFfLAyEJcRFPtfT1ECi6 4WBSp3ZFr5sI8kzjzfHgb9bkVAybd98FD4ULo2n0O1DKhimlh8PPbfZ86ch7O3vh qV1jgzxEcoOx00jDUK86Aw7cbuKA2+ZrW98lBY74ojfLDhrCAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOawhWg5ZFSxfi2jUBNc0quArxeYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvMjQ4MzEyZGMtMTljOC0z OTdmLThmMWItMGIxNWZmMDBhMmVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcc7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG7oGyXTvosMcPxskSOI9Z2bdmQG/khYFTGhDwu6f/l+wf3hBpIh6xCV SmKIhg/pvJH4dE2T9hYeRisXYA/iHJ07gpDWg+Gwpc+1bpKFzMCxJG36Mo5YNBK/ PBaUmGJkE/HS9DTxiGCZ7dhmmHty2JtKJDXfHSf3Nk5cXB2Zrtgi6Nxb4uuOJkqo 8sm5g8PSOOtrQ6ByFy4AXMkOF3DnnK5VPREfBQrJcH0n43/26muPcDQw0D6bqJHf 0t0lTB1nV7JMtD7v+u/kx4nskQiB6VBdZqGvwi4OWyJu0YdZrTvwN8krIFxe+eHO GmjmX1IwtXyUkySWZx/l4npJLuS1Sak= -----END CERTIFICATE-----Generated at Fri Apr 4 23:45:33 2025 by rpki-client