$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/da636e8c-4d89-3b3b-971d-d9b212de0db2.roa File: da636e8c-4d89-3b3b-971d-d9b212de0db2.roa (raw, json) Hash identifier: CBsYenAzq+xRkB0Dk4DB5IlXviHY+lYY8hW+1RQ8aWU= Subject key identifier: 1F:5D:5A:30:98:A1:62:76:A0:EE:0D:3B:5A:1C:F9:5C:6A:7B:A9:02 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F43285848EF615F67131B4293CBECB2C0 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/da636e8c-4d89-3b3b-971d-d9b212de0db2.roa Signing time: Wed 19 Feb 2025 14:00:52 +0000 ROA not before: Wed 19 Feb 2025 14:00:52 +0000 ROA not after: Tue 20 May 2025 13:00:52 +0000 asID: 16509 IP address blocks: 173.199.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ef:61:5f:67:13:1b:42:93:cb:ec:b2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Feb 19 14:00:52 2025 GMT Not After : May 20 13:00:52 2025 GMT Subject: CN=eeef46e6-6983-4a55-880d-9d82f72beaee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:6f:4c:78:aa:18:98:84:ca:14:82:c1:bb:e1: 12:a3:f2:9f:28:61:8c:0d:24:5c:f3:56:e3:d1:c1: 0b:93:e3:49:6b:06:44:08:6e:17:0f:59:72:c3:3d: b9:52:77:65:93:ae:7a:09:db:d8:fb:33:f4:55:76: e7:16:0c:99:cb:10:3e:7f:a0:6c:f6:b7:42:e5:e7: a2:d7:1f:40:23:36:e7:4d:5f:f4:ce:4f:94:a0:60: 88:94:4c:80:07:71:b2:44:51:16:e9:f4:60:f8:10: 8f:e4:c5:7e:c3:7d:21:56:a9:a3:86:af:2b:f8:65: f0:cb:c1:a4:3c:4c:86:f8:03:8a:d8:1d:21:8e:7a: 73:c3:45:e0:e0:68:fa:59:45:8a:20:0a:c3:b8:ac: 43:72:d6:c9:1d:1f:4a:60:c3:96:f1:f0:a0:c6:93: e1:65:66:e1:5d:4c:74:4d:3c:1d:19:b7:db:92:5e: 6b:ec:58:ea:7d:9d:6b:86:52:2e:6b:b9:ac:f0:ba: b0:d2:60:86:c4:92:e6:5a:53:00:4b:34:5c:c2:95: a7:92:60:4e:ec:7c:89:be:6e:39:d5:21:52:35:73: 48:3b:e7:a9:fc:da:c1:be:a1:2b:64:73:a7:21:e5: b8:c5:dd:d7:25:c9:00:b8:b0:63:7e:ae:26:a1:08: b9:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:5D:5A:30:98:A1:62:76:A0:EE:0D:3B:5A:1C:F9:5C:6A:7B:A9:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/da636e8c-4d89-3b3b-971d-d9b212de0db2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 173.199.37.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:4f:e4:f1:04:c3:5a:af:8b:05:72:15:39:16:f3:f4:96:3f: cc:c4:ed:ae:03:ec:fc:e2:9e:fa:e2:92:a8:31:bf:27:80:4e: 84:5d:9a:c3:7d:af:8e:87:c0:fc:90:40:d7:2e:60:f4:52:f8: bf:49:3d:45:81:35:5e:e7:62:94:66:f3:67:3a:77:07:f8:02: 29:2c:56:04:5d:33:61:a4:aa:1b:76:08:c5:75:4b:21:42:0c: da:f3:70:68:ab:c7:d1:6a:51:bf:4d:8e:07:bd:71:58:a5:67: dc:6b:24:ed:85:f7:75:b5:cc:ad:97:f5:d2:4d:ad:b2:68:2f: 6c:b0:9e:c6:d4:c9:54:45:cd:59:d7:3b:fc:21:59:d1:1d:52: 8a:58:6d:80:7a:a2:db:67:a9:3c:4b:74:84:49:99:2c:63:f4: 43:53:73:fd:44:82:a3:ae:ea:11:e9:60:fd:24:fd:91:72:ee: fa:2b:f9:6a:54:17:db:18:8d:17:be:c5:42:93:2d:0a:7d:28: 76:3b:77:b4:a2:b1:cb:59:2c:cc:7f:17:57:65:67:0a:6e:55: f0:34:78:bb:f1:97:75:21:c9:a5:30:18:c1:91:91:8f:cc:df: 52:dd:b2:5a:ee:b1:f9:9f:5f:8e:16:bf:93:59:b4:09:dd:10: 36:82:79:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjvYV9nExtCk8vsssAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk ZWVlZjQ2ZTYtNjk4My00YTU1LTg4MGQtOWQ4MmY3MmJlYWVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgG9MeKoYmITKFILBu+ESo/KfKGGMDSRc81bj 0cELk+NJawZECG4XD1lywz25Undlk656CdvY+zP0VXbnFgyZyxA+f6Bs9rdC5eei 1x9AIzbnTV/0zk+UoGCIlEyAB3GyRFEW6fRg+BCP5MV+w30hVqmjhq8r+GXwy8Gk PEyG+AOK2B0hjnpzw0Xg4Gj6WUWKIArDuKxDctbJHR9KYMOW8fCgxpPhZWbhXUx0 TTwdGbfbkl5r7FjqfZ1rhlIua7ms8Lqw0mCGxJLmWlMASzRcwpWnkmBO7HyJvm45 1SFSNXNIO+ep/NrBvqErZHOnIeW4xd3XJckAuLBjfq4moQi5kQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB9dWjCYoWJ2oO4NO1oc+Vxqe6kCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvZGE2MzZlOGMtNGQ4OS0z YjNiLTk3MWQtZDliMjEyZGUwZGIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcclMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABdP5PEEw1qviwVyFTkW8/SWP8zE7a4D7PzinvrikqgxvyeAToRdmsN9 r46HwPyQQNcuYPRS+L9JPUWBNV7nYpRm82c6dwf4AiksVgRdM2Gkqht2CMV1SyFC DNrzcGirx9FqUb9Njge9cVilZ9xrJO2F93W1zK2X9dJNrbJoL2ywnsbUyVRFzVnX O/whWdEdUopYbYB6ottnqTxLdIRJmSxj9ENTc/1EgqOu6hHpYP0k/ZFy7vor+WpU F9sYjRe+xUKTLQp9KHY7d7SisctZLMx/F1dlZwpuVfA0eLvxl3UhyaUwGMGRkY/M 31LdslrusfmfX44Wv5NZtAndEDaCeeY= -----END CERTIFICATE-----Generated at Fri Mar 14 10:58:56 2025 by rpki-client