$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/72e8c9b3-8829-39d0-be01-d850fdfe7dcb.roa File: 72e8c9b3-8829-39d0-be01-d850fdfe7dcb.roa (raw, json) Hash identifier: XWkm0uYzuZARlskUhrLXQwOXCUpe5VO+5pT+a7cMeOs= Subject key identifier: 28:AA:C2:BB:08:EE:98:7B:F4:DD:52:57:A2:BE:FD:2E:AC:4C:D5:34 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F43285848C9B0DBC78D7A20EBFBDF6AE0 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/72e8c9b3-8829-39d0-be01-d850fdfe7dcb.roa Signing time: Thu 06 Feb 2025 02:00:39 +0000 ROA not before: Thu 06 Feb 2025 02:00:39 +0000 ROA not after: Wed 07 May 2025 01:00:39 +0000 asID: 31898 IP address blocks: 199.36.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c9:b0:db:c7:8d:7a:20:eb:fb:df:6a:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Feb 6 02:00:39 2025 GMT Not After : May 7 01:00:39 2025 GMT Subject: CN=78c95a35-70b2-46d0-bb45-429b1b8e6d73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:46:c4:4a:fa:03:e7:a0:93:1d:72:43:3e:4c: c9:af:75:0c:ce:66:9c:4d:ae:7a:3a:40:27:7b:0f: da:40:cc:90:9b:69:20:61:9b:46:59:fd:f4:de:48: 6d:47:76:50:2f:43:4f:ac:c1:b2:d8:4d:14:57:5b: 1b:9b:91:f3:8b:56:98:4b:14:4b:37:53:44:00:3e: 48:64:b8:dd:50:02:a2:b2:67:e8:88:11:20:93:e3: 68:4c:08:9d:07:13:00:27:fb:1d:95:55:07:a1:77: 77:e9:96:79:ee:c3:d0:27:68:81:d3:cb:0d:d2:3f: 66:98:bb:b0:53:dd:e1:13:36:2b:98:0b:54:73:28: 60:48:af:d6:ec:3e:52:4a:7a:0a:41:5d:07:dd:b1: f6:42:e5:e7:3f:10:99:2d:69:a0:f5:ee:a2:b2:8d: 09:37:0b:4a:fa:c9:64:0e:97:02:28:11:4a:79:ba: c0:75:4a:86:40:7a:17:14:ea:80:14:23:ca:03:27: 78:c0:66:6c:a2:3f:4b:02:e4:40:d2:49:6c:8a:f3: 31:c7:9c:de:3d:f5:d2:99:df:ba:ab:00:95:9c:a8: 3b:e8:61:96:03:ad:f1:aa:8b:9e:9a:25:6c:32:c4: be:41:70:2b:be:4f:b5:ac:2a:fd:14:ec:a5:eb:da: eb:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:AA:C2:BB:08:EE:98:7B:F4:DD:52:57:A2:BE:FD:2E:AC:4C:D5:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/72e8c9b3-8829-39d0-be01-d850fdfe7dcb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 199.36.250.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:32:21:34:23:7d:e5:99:0c:02:ce:2a:ae:94:78:8f:b2:ac: 85:48:3a:25:f9:5d:c4:4d:6c:4c:20:1c:d0:1a:b9:50:4a:f9: ab:35:fc:23:fe:cf:b9:40:7e:64:dd:fa:81:40:f7:db:70:63: d9:22:a5:fe:ae:1a:8d:e8:cc:99:40:20:58:04:10:90:d6:fa: ea:83:c7:74:b5:dc:24:75:b7:84:b5:dd:a1:62:05:2d:9b:9b: 91:81:d5:5d:10:6e:ce:8d:c8:9d:40:0b:4f:05:f6:8c:21:ed: 46:f1:7f:c1:b6:bd:84:ec:5a:aa:3f:0f:6b:cd:82:4c:ca:21: 76:a6:c6:b6:77:0f:f5:87:fa:3e:7b:24:80:a1:7a:45:f3:09: 16:64:9e:a0:6f:6c:be:81:5f:30:48:67:29:05:53:e5:6a:6c: c4:4a:0c:4b:41:c4:ee:a2:33:c8:28:d8:36:4b:86:a7:6b:f3: 36:20:3e:3f:18:6e:fb:3b:8e:6e:63:37:8c:f9:7c:ae:2e:a8: 2d:2b:bc:3b:11:50:49:a9:bc:cc:ee:17:f1:b8:6f:37:40:ce: 1b:8f:a3:78:a7:0b:d0:70:df:b0:3f:c4:50:32:8d:88:06:03: 61:3f:ef:52:53:bb:dc:aa:c1:44:91:d5:e4:2c:6d:a1:56:1b: 01:af:f1:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjJsNvHjXog6/vfauAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI1MDIwNjAyMDAzOVoXDTI1MDUwNzAxMDAzOVowLzEtMCsGA1UEAxMk NzhjOTVhMzUtNzBiMi00NmQwLWJiNDUtNDI5YjFiOGU2ZDczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUbESvoD56CTHXJDPkzJr3UMzmacTa56OkAn ew/aQMyQm2kgYZtGWf303khtR3ZQL0NPrMGy2E0UV1sbm5Hzi1aYSxRLN1NEAD5I ZLjdUAKismfoiBEgk+NoTAidBxMAJ/sdlVUHoXd36ZZ57sPQJ2iB08sN0j9mmLuw U93hEzYrmAtUcyhgSK/W7D5SSnoKQV0H3bH2QuXnPxCZLWmg9e6iso0JNwtK+slk DpcCKBFKebrAdUqGQHoXFOqAFCPKAyd4wGZsoj9LAuRA0klsivMxx5zePfXSmd+6 qwCVnKg76GGWA63xqouemiVsMsS+QXArvk+1rCr9FOyl69rrXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCiqwrsI7ph79N1SV6K+/S6sTNU0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvNzJlOGM5YjMtODgyOS0z OWQwLWJlMDEtZDg1MGZkZmU3ZGNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxyT6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFgyITQjfeWZDALOKq6UeI+yrIVIOiX5XcRNbEwgHNAauVBK+as1/CP+ z7lAfmTd+oFA99twY9kipf6uGo3ozJlAIFgEEJDW+uqDx3S13CR1t4S13aFiBS2b m5GB1V0Qbs6NyJ1AC08F9owh7Ubxf8G2vYTsWqo/D2vNgkzKIXamxrZ3D/WH+j57 JIChekXzCRZknqBvbL6BXzBIZykFU+VqbMRKDEtBxO6iM8go2DZLhqdr8zYgPj8Y bvs7jm5jN4z5fK4uqC0rvDsRUEmpvMzuF/G4bzdAzhuPo3inC9Bw37A/xFAyjYgG A2E/71JTu9yqwUSR1eQsbaFWGwGv8fI= -----END CERTIFICATE-----Generated at Sat Apr 5 16:41:46 2025 by rpki-client