$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/84087b24-b3ca-3e6e-b8ce-25bea801b6e2.roa File: 84087b24-b3ca-3e6e-b8ce-25bea801b6e2.roa (raw, json) Hash identifier: WNqMb295zlSg6h8nSfY1U9h2wiYWNhZH4k7w8lCTjQE= Subject key identifier: 10:EB:F1:67:D7:1D:37:33:7A:DF:56:77:18:AF:1C:E8:BA:70:D2:49 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849CE9A5C37AB52E36BDCB91900 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/84087b24-b3ca-3e6e-b8ce-25bea801b6e2.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 20447 IP address blocks: 199.170.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:5c:37:ab:52:e3:6b:dc:b9:19:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=f4102435-f3c1-4056-b689-fd672d8822a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:2f:c4:55:63:dd:f4:e6:ba:df:26:1f:01:dd: bf:01:22:5c:c4:41:94:65:67:d2:a2:ce:18:71:72: 54:42:79:8d:b6:34:50:49:89:f0:39:fa:a9:08:83: 38:4f:ae:54:8e:82:fd:c3:d5:2d:0a:15:3d:c2:67: 9b:f3:e7:f2:15:76:41:92:2a:95:39:c8:7c:c9:6e: cb:36:52:db:a8:2d:95:b4:0d:b8:fc:ef:91:28:c5: 19:45:1f:ef:ea:c0:44:18:48:6a:3d:a0:df:b1:fe: 8a:14:19:90:d4:02:69:5b:14:72:98:0d:c3:d7:24: cc:bf:54:83:84:90:5e:fb:e3:9e:6c:0f:6d:c3:03: 50:aa:62:d6:75:06:f7:5f:24:a8:8c:b4:25:30:3b: 78:aa:71:9e:f5:3e:de:42:0f:0d:76:8a:6e:44:ac: 59:74:a0:0e:e4:57:ad:1c:79:45:ca:78:43:77:4e: 3f:2c:df:c8:49:60:ad:0c:87:3c:7d:99:5c:9c:1e: ea:15:2a:c0:8a:25:cf:b5:23:86:22:fe:7b:90:56: 24:15:42:cd:69:9d:68:9d:36:4c:a5:ff:25:12:c0: 68:e5:c5:67:6e:d5:1f:a9:c4:1c:91:8d:7d:e6:2a: ed:72:ec:a3:04:b1:95:21:03:0f:ff:5a:e8:c1:a1: d6:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:EB:F1:67:D7:1D:37:33:7A:DF:56:77:18:AF:1C:E8:BA:70:D2:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/84087b24-b3ca-3e6e-b8ce-25bea801b6e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 199.170.25.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:8e:fa:57:7a:2b:30:ba:4d:53:9c:9e:80:3b:45:70:26:95: de:ed:bf:83:29:56:3f:f9:84:1c:ee:d3:7d:49:ec:06:fc:3c: 5e:94:d7:d5:c3:e8:72:d2:52:9b:74:f0:b5:36:a8:2c:e2:2a: bd:e3:ce:a3:42:77:f3:65:04:70:b3:a6:4e:d2:eb:18:d5:4a: 02:8e:4d:df:b7:14:85:44:68:cd:0b:05:5e:ea:b6:b9:57:67: 9a:09:5c:b1:57:e0:47:6e:8f:33:fa:e7:2a:e0:02:07:59:de: df:99:54:80:90:83:b5:ca:d9:f4:46:4f:ea:17:5a:0c:b6:c9: 13:ec:49:bc:76:f8:2e:fd:f3:5c:52:1d:ef:79:46:3a:47:15: c7:91:55:08:80:6f:40:89:35:9b:5f:5b:13:e4:6e:1e:a4:b4: be:00:98:f8:9c:f0:63:de:85:76:d5:ed:b8:60:b7:06:8d:f7: da:b9:92:16:6e:79:8e:50:0e:f0:f9:88:93:2c:f9:af:9c:e5: d4:7e:16:c8:27:49:c3:15:48:30:56:5d:63:6e:7f:b5:89:f5: cd:2f:d1:ac:21:34:8a:ae:cf:20:0c:73:ab:ea:9d:01:34:33: ba:a5:73:db:38:a3:66:b7:23:bc:ad:3d:f2:f0:4a:8f:97:b7: f1:9b:45:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnOmlw3q1Lja9y5GQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk ZjQxMDI0MzUtZjNjMS00MDU2LWI2ODktZmQ2NzJkODgyMmE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkS/EVWPd9Oa63yYfAd2/ASJcxEGUZWfSos4Y cXJUQnmNtjRQSYnwOfqpCIM4T65UjoL9w9UtChU9wmeb8+fyFXZBkiqVOch8yW7L NlLbqC2VtA24/O+RKMUZRR/v6sBEGEhqPaDfsf6KFBmQ1AJpWxRymA3D1yTMv1SD hJBe++OebA9twwNQqmLWdQb3XySojLQlMDt4qnGe9T7eQg8NdopuRKxZdKAO5Fet HHlFynhDd04/LN/ISWCtDIc8fZlcnB7qFSrAiiXPtSOGIv57kFYkFULNaZ1onTZM pf8lEsBo5cVnbtUfqcQckY195irtcuyjBLGVIQMP/1rowaHWlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBDr8WfXHTczet9WdxivHOi6cNJJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvODQwODdiMjQtYjNjYS0z ZTZlLWI4Y2UtMjViZWE4MDFiNmUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx6oZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF2O+ld6KzC6TVOcnoA7RXAmld7tv4MpVj/5hBzu031J7Ab8PF6U19XD 6HLSUpt08LU2qCziKr3jzqNCd/NlBHCzpk7S6xjVSgKOTd+3FIVEaM0LBV7qtrlX Z5oJXLFX4EdujzP65yrgAgdZ3t+ZVICQg7XK2fRGT+oXWgy2yRPsSbx2+C7981xS He95RjpHFceRVQiAb0CJNZtfWxPkbh6ktL4AmPic8GPehXbV7bhgtwaN99q5khZu eY5QDvD5iJMs+a+c5dR+FsgnScMVSDBWXWNuf7WJ9c0v0awhNIquzyAMc6vqnQE0 M7qlc9s4o2a3I7ytPfLwSo+Xt/GbRYE= -----END CERTIFICATE-----Generated at Sun May 11 21:59:41 2025 by rpki-client