$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a7aa98c8-5315-3116-a00d-5e1f1b63dcf2.roa File: a7aa98c8-5315-3116-a00d-5e1f1b63dcf2.roa (raw, json) Hash identifier: LqzLY2w/RpULprHIBYqPaowZ2SRPW8yyfy8CYeH7oNo= Subject key identifier: 84:81:0C:8F:AD:FC:78:8A:58:EA:7A:83:D8:63:81:10:F2:68:DA:1B Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F432858487804B132C9AAE60A6EBB1E1F Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a7aa98c8-5315-3116-a00d-5e1f1b63dcf2.roa Signing time: Tue 07 Jan 2025 19:53:21 +0000 ROA not before: Tue 07 Jan 2025 19:53:21 +0000 ROA not after: Mon 07 Apr 2025 18:53:21 +0000 asID: 31898 IP address blocks: 173.199.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 14 Mar 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:78:04:b1:32:c9:aa:e6:0a:6e:bb:1e:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Jan 7 19:53:21 2025 GMT Not After : Apr 7 18:53:21 2025 GMT Subject: CN=835423e1-c070-4798-9ff9-3d7a531257ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:bf:e9:02:f2:14:cf:7d:75:29:4e:a7:fd:09: 77:de:41:df:6a:1f:8a:32:fa:8d:34:ec:0d:7f:6f: 35:e0:9f:46:70:d3:43:e9:20:ed:ff:12:72:64:01: 93:48:c9:09:15:18:ff:4d:81:1d:82:17:07:79:d2: ad:27:0f:0e:d0:cd:b8:f4:46:27:a5:24:06:2a:72: 13:91:95:50:d3:b1:0f:49:31:f4:59:64:bf:09:98: ad:f9:fa:b0:16:a5:a1:e9:93:15:f7:29:c8:99:56: a0:c8:2a:28:1d:0b:07:99:31:82:9e:ba:bf:b1:19: ac:a2:c9:79:ed:71:0d:41:a6:a0:4c:53:ed:72:f4: b5:9e:4e:46:45:86:79:2d:11:bd:87:01:4b:28:68: e3:c8:17:8b:eb:66:f6:a1:06:f9:58:d0:26:9d:46: c7:c3:10:06:ff:22:82:ad:8d:e9:6d:cb:cd:b6:96: 67:a4:3c:69:02:7d:b1:83:69:d9:46:0f:61:1a:df: 00:6a:25:14:34:12:d6:95:33:73:ee:de:ce:82:10: 1c:95:4c:7b:db:24:6d:c3:11:24:fa:9c:81:03:52: d9:06:48:fc:c5:55:03:cc:3a:bf:77:83:1f:dc:7a: 87:e6:94:62:5a:1c:70:56:af:01:0f:fb:2f:6e:e7: b9:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:81:0C:8F:AD:FC:78:8A:58:EA:7A:83:D8:63:81:10:F2:68:DA:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a7aa98c8-5315-3116-a00d-5e1f1b63dcf2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 173.199.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:8f:4f:6a:7f:7e:3a:cd:30:17:17:39:03:f8:6b:85:c5:3a: 8a:b9:48:81:c3:7a:28:82:89:03:06:a4:c9:e0:dd:0a:52:e8: ad:22:31:99:bf:11:ff:aa:81:02:e9:f3:e6:6c:9c:81:c2:dd: e0:d8:b3:77:96:34:0c:0b:35:7a:22:7d:8e:8d:d7:b4:12:41: 38:55:eb:50:77:bd:f6:34:1e:ff:8f:55:5c:90:58:df:99:08: 6b:b6:2a:07:bb:3d:dc:21:15:e1:2d:69:ce:29:60:3f:ed:ee: 7c:9a:51:1a:39:21:ec:3a:b1:b7:4e:c7:18:fe:6f:03:b2:cb: 50:a6:6d:fb:68:2f:3d:28:06:9c:7c:fc:e8:5c:6f:25:d1:85: 1a:ff:b0:b6:54:e6:bb:9e:f5:6b:73:ae:c0:50:0c:44:80:1d: fd:2d:a0:a4:b5:46:41:d3:cf:7f:3c:7e:a9:70:cb:4b:af:d9: bb:a2:0c:c2:28:0e:1d:6c:ca:24:14:72:0d:9a:82:5a:6f:38: 3d:fd:88:e8:a0:8e:6b:fc:95:f1:98:ee:4a:ed:df:bd:60:e9: 08:5e:6e:38:1d:7c:33:a4:b8:f4:e9:75:5a:04:55:22:a5:48: 10:2a:6b:aa:fa:f4:7e:02:c0:0c:18:14:af:4b:85:c7:56:5a: e9:97:08:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh4BLEyyarmCm67Hh8wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI1MDEwNzE5NTMyMVoXDTI1MDQwNzE4NTMyMVowLzEtMCsGA1UEAxMk ODM1NDIzZTEtYzA3MC00Nzk4LTlmZjktM2Q3YTUzMTI1N2VjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7/pAvIUz311KU6n/Ql33kHfah+KMvqNNOwN f2814J9GcNND6SDt/xJyZAGTSMkJFRj/TYEdghcHedKtJw8O0M249EYnpSQGKnIT kZVQ07EPSTH0WWS/CZit+fqwFqWh6ZMV9ynImVagyCooHQsHmTGCnrq/sRmsosl5 7XENQaagTFPtcvS1nk5GRYZ5LRG9hwFLKGjjyBeL62b2oQb5WNAmnUbHwxAG/yKC rY3pbcvNtpZnpDxpAn2xg2nZRg9hGt8AaiUUNBLWlTNz7t7OghAclUx72yRtwxEk +pyBA1LZBkj8xVUDzDq/d4Mf3HqH5pRiWhxwVq8BD/svbue5QQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFISBDI+t/HiKWOp6g9hjgRDyaNobMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvYTdhYTk4YzgtNTMxNS0z MTE2LWEwMGQtNWUxZjFiNjNkY2YyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArccOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI2PT2p/fjrNMBcXOQP4a4XFOoq5SIHDeiiCiQMGpMng3QpS6K0iMZm/ Ef+qgQLp8+ZsnIHC3eDYs3eWNAwLNXoifY6N17QSQThV61B3vfY0Hv+PVVyQWN+Z CGu2Kge7PdwhFeEtac4pYD/t7nyaURo5Iew6sbdOxxj+bwOyy1CmbftoLz0oBpx8 /OhcbyXRhRr/sLZU5rue9WtzrsBQDESAHf0toKS1RkHTz388fqlwy0uv2buiDMIo Dh1syiQUcg2aglpvOD39iOigjmv8lfGY7krt371g6QhebjgdfDOkuPTpdVoEVSKl SBAqa6r69H4CwAwYFK9LhcdWWumXCIU= -----END CERTIFICATE-----Generated at Thu Mar 13 17:01:24 2025 by rpki-client