$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/f081b6e7-ddd3-3548-ad84-0c4e7f1e97bc.roa File: f081b6e7-ddd3-3548-ad84-0c4e7f1e97bc.roa (raw, json) Hash identifier: aXKR402zv7qGtJOBrt+5cI+bNriOgNpg0lwifMad/Ss= Subject key identifier: 94:B6:E4:F0:90:61:32:3B:A2:54:89:3D:11:A8:92:3F:80:68:E1:AF Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F43285848EF615F4BF4D50BE6E3634400 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/f081b6e7-ddd3-3548-ad84-0c4e7f1e97bc.roa Signing time: Wed 19 Feb 2025 14:00:52 +0000 ROA not before: Wed 19 Feb 2025 14:00:52 +0000 ROA not after: Tue 20 May 2025 13:00:52 +0000 asID: 16509 IP address blocks: 173.199.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ef:61:5f:4b:f4:d5:0b:e6:e3:63:44:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Feb 19 14:00:52 2025 GMT Not After : May 20 13:00:52 2025 GMT Subject: CN=6c91a9de-37e5-4d57-9f8a-c281ad48a7d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:ef:25:c2:19:3c:59:76:7c:e3:41:52:75:ed: b0:98:9d:56:53:da:53:2d:a8:f4:ae:fa:53:97:17: 4a:9a:35:0b:65:1c:11:14:16:a5:8a:6a:c1:8a:22: c6:77:2d:59:d2:28:97:9a:8e:e3:59:60:c2:f0:96: 44:4d:95:70:b8:0f:40:4b:50:03:8c:40:6a:b7:1f: ca:c0:35:fa:b6:bb:9e:58:2e:79:0a:0b:7c:c1:d6: 98:30:a1:f2:44:09:85:fa:8c:8f:90:b4:1a:75:7e: cf:9d:4c:c0:b8:a0:6e:ab:ba:65:4e:25:90:b4:5f: 3f:51:8d:04:b6:15:bc:c7:c4:20:9b:eb:07:90:3e: 17:fa:af:b5:6a:4a:2c:d6:e3:40:4b:12:52:4b:f1: a5:ea:49:f0:b7:db:ba:70:3d:e0:fd:52:a9:98:92: 56:f1:ba:c3:24:3f:20:14:9f:e6:91:55:03:e7:6a: 49:54:13:a1:79:8d:05:f4:37:62:f0:48:e8:91:5c: 07:94:76:62:d3:15:d6:4f:dc:86:5a:62:22:de:4f: 0c:d6:a9:cd:1f:ae:8e:62:42:d7:d0:d1:21:8c:fd: c9:95:b7:30:64:1a:12:7f:b8:e0:e5:3c:17:ed:fe: f6:09:e3:8c:4b:71:7c:43:0c:23:52:11:dc:2a:8f: aa:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:B6:E4:F0:90:61:32:3B:A2:54:89:3D:11:A8:92:3F:80:68:E1:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/f081b6e7-ddd3-3548-ad84-0c4e7f1e97bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 173.199.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:82:e8:bb:ba:27:e3:57:0a:d4:58:76:f9:63:ce:1f:5f:d0: 07:aa:d2:86:e2:32:46:82:2b:c6:6b:dd:d3:89:8e:a7:45:66: ce:e3:08:c5:77:a1:5f:c1:70:d3:6d:6b:9d:25:cc:0a:1a:e7: f1:05:a0:51:e8:71:dd:0c:ea:d4:91:cd:d9:be:da:fc:f2:d1: 42:6a:b7:fb:c7:3b:fc:9f:53:f4:47:11:32:6b:7a:c1:32:5a: 3c:17:15:4b:2c:3c:1e:df:3a:c8:62:6c:c0:fa:98:c9:58:62: e1:fa:3c:32:47:57:89:eb:6b:3d:5e:02:eb:1a:e3:a4:ad:74: 58:b2:05:08:ee:76:52:23:20:c8:22:88:fa:90:11:6c:41:bd: 43:52:3a:ea:90:73:14:a5:01:e2:80:73:15:b3:dd:3a:a0:e1: 8f:f8:14:c2:58:e1:4b:7b:a2:a4:fc:ef:51:ed:68:4b:41:5e: de:dd:aa:09:c1:f5:b8:af:80:e9:08:9b:64:56:18:20:5b:de: 89:7d:b7:00:47:62:41:2e:8f:5a:8f:7d:74:0c:bc:2a:ce:22: 59:07:bd:1e:e8:b2:10:0f:15:ea:d7:91:5c:cd:bd:84:3d:c9: 99:a7:10:02:7d:b1:ad:f6:0f:80:dd:65:00:cc:a7:e2:17:9a: 20:b9:47:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjvYV9L9NUL5uNjRAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk NmM5MWE5ZGUtMzdlNS00ZDU3LTlmOGEtYzI4MWFkNDhhN2QwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlu8lwhk8WXZ840FSde2wmJ1WU9pTLaj0rvpT lxdKmjULZRwRFBalimrBiiLGdy1Z0iiXmo7jWWDC8JZETZVwuA9AS1ADjEBqtx/K wDX6trueWC55Cgt8wdaYMKHyRAmF+oyPkLQadX7PnUzAuKBuq7plTiWQtF8/UY0E thW8x8Qgm+sHkD4X+q+1akos1uNASxJSS/Gl6knwt9u6cD3g/VKpmJJW8brDJD8g FJ/mkVUD52pJVBOheY0F9Ddi8EjokVwHlHZi0xXWT9yGWmIi3k8M1qnNH66OYkLX 0NEhjP3JlbcwZBoSf7jg5TwX7f72CeOMS3F8QwwjUhHcKo+q/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJS25PCQYTI7olSJPRGokj+AaOGvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvZjA4MWI2ZTctZGRkMy0z NTQ4LWFkODQtMGM0ZTdmMWU5N2JjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArccQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABOC6Lu6J+NXCtRYdvljzh9f0Aeq0obiMkaCK8Zr3dOJjqdFZs7jCMV3 oV/BcNNta50lzAoa5/EFoFHocd0M6tSRzdm+2vzy0UJqt/vHO/yfU/RHETJresEy WjwXFUssPB7fOshibMD6mMlYYuH6PDJHV4nraz1eAusa46StdFiyBQjudlIjIMgi iPqQEWxBvUNSOuqQcxSlAeKAcxWz3Tqg4Y/4FMJY4Ut7oqT871HtaEtBXt7dqgnB 9bivgOkIm2RWGCBb3ol9twBHYkEuj1qPfXQMvCrOIlkHvR7oshAPFerXkVzNvYQ9 yZmnEAJ9sa32D4DdZQDMp+IXmiC5R5U= -----END CERTIFICATE-----Generated at Fri Mar 14 08:04:53 2025 by rpki-client