$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/922156f4-c611-3dd6-9d0e-b98df24ae729.roa File: 922156f4-c611-3dd6-9d0e-b98df24ae729.roa (raw, json) Hash identifier: 1wf33s2ZG2LMNH9RV4XTRVZnYJUaNFM+Ydl1AYgywEo= Subject key identifier: 55:C6:5D:EF:3E:4B:D4:20:8B:44:99:C8:D0:C3:9E:63:7C:13:BA:A5 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F43285848B1F62B5A4F229D062B30FF00 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/922156f4-c611-3dd6-9d0e-b98df24ae729.roa Signing time: Tue 28 Jan 2025 14:00:52 +0000 ROA not before: Tue 28 Jan 2025 14:00:52 +0000 ROA not after: Mon 28 Apr 2025 13:00:52 +0000 asID: 16509 IP address blocks: 173.199.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b1:f6:2b:5a:4f:22:9d:06:2b:30:ff:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Jan 28 14:00:52 2025 GMT Not After : Apr 28 13:00:52 2025 GMT Subject: CN=6504f9f3-b55b-4951-893b-01043f8686e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c9:b5:c7:0b:a8:cb:ea:01:1d:01:7c:70:68: 6a:95:16:78:20:b6:ae:03:c8:d0:8f:79:65:20:c4: 62:1f:b7:30:9a:04:e6:5f:70:5c:6c:86:1f:05:14: fa:4d:9a:58:c1:8e:ec:d5:68:da:d4:05:1f:8b:c8: 8b:2c:63:d0:a2:56:97:e7:f1:fb:e6:92:0c:ec:78: 28:df:f0:a3:90:c4:59:74:cb:3c:ff:85:a8:da:51: 1a:ba:38:48:61:50:49:aa:d3:48:a1:a4:09:68:01: 63:15:de:b3:a9:71:08:05:10:44:b8:2f:1c:65:f8: 20:6e:f9:d6:b7:d9:0b:da:25:76:9b:e3:4c:50:32: 93:1c:86:03:94:78:7f:0d:5d:e6:f0:b6:56:01:98: ad:7a:08:23:23:d4:18:82:63:58:6d:c4:99:ff:5d: 05:50:5a:d2:19:ae:5f:9e:20:06:fc:4e:05:97:d1: e6:bc:11:80:d1:fc:7b:17:4a:70:87:58:6a:55:31: b3:aa:c1:fc:85:b6:10:27:09:69:13:ff:a9:1d:f1: 23:ab:17:5c:81:4b:4f:ae:f2:2d:6d:c4:46:54:29: 3b:7e:15:6d:ed:07:47:1f:fa:cb:01:28:49:a3:4b: 0d:e6:42:55:1b:81:27:8f:13:aa:34:c1:4d:8f:80: 6a:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:C6:5D:EF:3E:4B:D4:20:8B:44:99:C8:D0:C3:9E:63:7C:13:BA:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/922156f4-c611-3dd6-9d0e-b98df24ae729.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 173.199.59.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:0d:b5:27:09:cc:99:d9:f2:96:c1:c2:31:c6:42:f7:38:a0: c3:20:82:ba:cf:14:53:73:4f:7c:60:09:57:c0:64:84:79:76: 3e:fb:27:9e:83:d5:29:6c:c2:77:4b:14:64:b3:1b:81:a0:a4: 5e:c3:43:1f:af:8c:ec:48:15:c3:8d:24:05:99:96:e9:53:36: 50:81:cd:bb:7c:07:fa:68:c6:da:b1:3a:95:28:09:77:04:81: 91:f7:5c:53:e0:8e:20:4d:52:ac:c3:6c:bd:16:da:e0:0d:47: 9a:31:ae:b7:d4:30:73:bd:82:51:f0:58:8f:3e:5a:36:b3:65: 18:c9:29:b5:be:f8:86:d8:6d:01:3e:b7:e2:09:a2:32:a0:67: 97:4e:3d:36:b6:20:be:2e:cb:20:67:9b:03:f6:ad:df:d4:98: 97:55:c3:53:55:79:9b:bb:ad:b1:3a:68:43:82:4b:6c:cb:72: cd:11:65:69:85:e9:bc:a3:6d:7c:4e:2e:96:93:d3:e4:e3:88: 12:9c:42:05:86:f7:7e:d7:57:3e:6e:88:ef:f8:cf:dd:e3:d7: ae:bb:bb:10:37:4d:6b:14:9a:64:71:1e:4f:17:7f:5c:75:bc: 70:bf:0e:84:20:39:bf:63:86:2b:1f:cc:a7:d3:ef:2e:17:80: d8:54:d2:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEix9itaTyKdBisw/wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI1MDEyODE0MDA1MloXDTI1MDQyODEzMDA1MlowLzEtMCsGA1UEAxMk NjUwNGY5ZjMtYjU1Yi00OTUxLTg5M2ItMDEwNDNmODY4NmUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcm1xwuoy+oBHQF8cGhqlRZ4ILauA8jQj3ll IMRiH7cwmgTmX3BcbIYfBRT6TZpYwY7s1Wja1AUfi8iLLGPQolaX5/H75pIM7Hgo 3/CjkMRZdMs8/4Wo2lEaujhIYVBJqtNIoaQJaAFjFd6zqXEIBRBEuC8cZfggbvnW t9kL2iV2m+NMUDKTHIYDlHh/DV3m8LZWAZiteggjI9QYgmNYbcSZ/10FUFrSGa5f niAG/E4Fl9HmvBGA0fx7F0pwh1hqVTGzqsH8hbYQJwlpE/+pHfEjqxdcgUtPrvIt bcRGVCk7fhVt7QdHH/rLAShJo0sN5kJVG4EnjxOqNMFNj4Bq3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFXGXe8+S9Qgi0SZyNDDnmN8E7qlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvOTIyMTU2ZjQtYzYxMS0z ZGQ2LTlkMGUtYjk4ZGYyNGFlNzI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcc7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALQNtScJzJnZ8pbBwjHGQvc4oMMggrrPFFNzT3xgCVfAZIR5dj77J56D 1SlswndLFGSzG4GgpF7DQx+vjOxIFcONJAWZlulTNlCBzbt8B/poxtqxOpUoCXcE gZH3XFPgjiBNUqzDbL0W2uANR5oxrrfUMHO9glHwWI8+WjazZRjJKbW++IbYbQE+ t+IJojKgZ5dOPTa2IL4uyyBnmwP2rd/UmJdVw1NVeZu7rbE6aEOCS2zLcs0RZWmF 6byjbXxOLpaT0+TjiBKcQgWG937XVz5uiO/4z93j1667uxA3TWsUmmRxHk8Xf1x1 vHC/DoQgOb9jhisfzKfT7y4XgNhU0j0= -----END CERTIFICATE-----Generated at Fri Mar 14 11:05:52 2025 by rpki-client