$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1988590f-aafa-3f41-b2ea-8df5d93e3730.roa File: 1988590f-aafa-3f41-b2ea-8df5d93e3730.roa (raw, json) Hash identifier: /v5zdxbxd8rc3TPKO3Df3ttTH6qrIB0He9eANMJOgZ8= Subject key identifier: D5:2B:D1:82:10:BF:82:CA:D7:55:09:19:7C:BE:AC:5F:F7:02:A9:95 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849B9A9FB92E04025BF32453940 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1988590f-aafa-3f41-b2ea-8df5d93e3730.roa Signing time: Sat 03 May 2025 01:00:47 +0000 ROA not before: Sat 03 May 2025 01:00:47 +0000 ROA not after: Fri 01 Aug 2025 01:00:47 +0000 asID: 3855 IP address blocks: 199.172.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b9:a9:fb:92:e0:40:25:bf:32:45:39:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: May 3 01:00:47 2025 GMT Not After : Aug 1 01:00:47 2025 GMT Subject: CN=8fada1f8-4fb4-433f-9e59-7f8303e4e8db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:7f:d3:9b:7e:77:ea:32:1a:d3:af:dd:f4:ed: 65:75:9d:75:64:c8:6b:88:32:45:52:ee:68:51:a0: 8b:15:d6:e5:70:06:d3:77:c9:f7:8a:ee:81:d1:1f: ff:96:f6:9f:11:33:89:1a:a9:bb:26:3d:53:91:89: 1e:f3:aa:be:85:0e:f8:95:50:1e:22:95:5e:82:72: c1:0e:72:0a:10:4a:1b:4c:b9:7f:ef:43:1c:33:7e: 0d:eb:3d:d8:4e:68:6b:57:a7:fd:5c:61:1c:b0:f4: d8:56:83:36:a4:55:9a:f0:e1:f1:43:0c:b9:c1:cd: a8:62:f3:ba:32:a3:63:39:27:fb:06:98:04:53:d8: 83:e1:77:4c:26:0a:f9:63:2a:48:7e:80:bb:50:77: 3f:e0:03:0e:64:73:14:41:4e:5c:5d:62:d9:50:03: 73:13:98:0f:e7:a0:27:d2:3b:10:b1:0a:f6:d9:3e: b5:b7:a5:a7:67:1f:8d:a3:73:7a:3f:86:ec:1f:49: 64:c3:f5:b8:eb:45:ad:96:20:bb:b6:b4:f0:45:c3: f8:17:67:ed:15:69:66:49:d9:39:44:74:9f:86:7c: 5d:5d:7b:1e:70:43:70:be:b1:24:4d:a7:44:74:85: e9:cc:79:85:fe:e4:6c:a7:53:a5:1d:e4:27:92:01: 4d:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:2B:D1:82:10:BF:82:CA:D7:55:09:19:7C:BE:AC:5F:F7:02:A9:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1988590f-aafa-3f41-b2ea-8df5d93e3730.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 199.172.241.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:e2:e2:f1:20:cd:54:0f:66:96:b3:2c:59:7e:1f:1e:96:85: 1d:39:cc:0b:e3:43:21:87:b7:26:c1:c9:30:f1:54:41:c6:8a: 1c:f1:65:94:96:e4:88:98:d9:62:72:58:29:3b:e7:72:77:a5: 7c:6a:4c:39:9a:90:b0:e2:92:5d:40:31:40:00:cc:4d:d2:da: 26:f7:aa:67:20:2d:68:c9:05:a4:ff:bd:c1:19:80:c1:9b:d4: 75:ae:56:9c:8f:e2:67:98:bc:71:29:50:25:98:18:99:15:31: 48:ae:5c:ef:96:33:78:a1:18:ea:f9:14:42:97:15:97:68:6f: 89:63:fe:89:1e:10:09:45:07:fd:4b:ea:49:01:f9:85:df:6d: be:51:3f:34:fd:5d:db:b3:72:96:cf:73:48:90:f9:56:59:78: 28:c1:f8:0b:39:c5:9b:4c:0f:80:65:86:79:5e:58:5d:15:cf: 81:0a:af:a7:55:00:97:fa:d5:10:8d:74:fe:9d:08:78:da:40: 6f:45:63:1f:21:f4:99:6e:a9:e0:d3:c2:bc:88:d8:a6:15:56: e4:1e:10:e2:ad:7d:ef:ec:bc:e9:48:57:a4:7a:e1:a9:3a:00: 4a:33:72:24:31:0d:d1:1c:1c:eb:c8:26:46:23:5e:0e:89:97: 9b:1f:30:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm5qfuS4EAlvzJFOUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDUwMzAxMDA0N1oXDTI1MDgwMTAxMDA0N1owLzEtMCsGA1UEAxMk OGZhZGExZjgtNGZiNC00MzNmLTllNTktN2Y4MzAzZTRlOGRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAin/Tm3536jIa06/d9O1ldZ11ZMhriDJFUu5o UaCLFdblcAbTd8n3iu6B0R//lvafETOJGqm7Jj1TkYke86q+hQ74lVAeIpVegnLB DnIKEEobTLl/70McM34N6z3YTmhrV6f9XGEcsPTYVoM2pFWa8OHxQwy5wc2oYvO6 MqNjOSf7BpgEU9iD4XdMJgr5YypIfoC7UHc/4AMOZHMUQU5cXWLZUANzE5gP56An 0jsQsQr22T61t6WnZx+No3N6P4bsH0lkw/W460WtliC7trTwRcP4F2ftFWlmSdk5 RHSfhnxdXXsecENwvrEkTadEdIXpzHmF/uRsp1OlHeQnkgFNuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNUr0YIQv4LK11UJGXy+rF/3AqmVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMTk4ODU5MGYtYWFmYS0z ZjQxLWIyZWEtOGRmNWQ5M2UzNzMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx6zxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIDi4vEgzVQPZpazLFl+Hx6WhR05zAvjQyGHtybByTDxVEHGihzxZZSW 5IiY2WJyWCk753J3pXxqTDmakLDikl1AMUAAzE3S2ib3qmcgLWjJBaT/vcEZgMGb 1HWuVpyP4meYvHEpUCWYGJkVMUiuXO+WM3ihGOr5FEKXFZdob4lj/okeEAlFB/1L 6kkB+YXfbb5RPzT9XduzcpbPc0iQ+VZZeCjB+As5xZtMD4BlhnleWF0Vz4EKr6dV AJf61RCNdP6dCHjaQG9FYx8h9JluqeDTwryI2KYVVuQeEOKtfe/svOlIV6R64ak6 AEozciQxDdEcHOvIJkYjXg6Jl5sfMIo= -----END CERTIFICATE-----Generated at Sun May 11 15:33:46 2025 by rpki-client