$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/25988580-4265-3e67-b9da-0bcc5b7a589f.roa File: 25988580-4265-3e67-b9da-0bcc5b7a589f.roa (raw, json) Hash identifier: GchjWYbfQs7kKpWcsWhHfRY/IeSucssadBO233wGjlg= Subject key identifier: B8:8B:EB:BF:00:DA:19:B1:CF:DF:3E:A2:5A:F8:B5:BB:F5:4B:B1:65 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F43285849CE9A504F6A17EE97E08ED400 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/25988580-4265-3e67-b9da-0bcc5b7a589f.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 14618 IP address blocks: 173.199.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:50:4f:6a:17:ee:97:e0:8e:d4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=68c695d5-ec31-486a-a360-f34cffed96fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:ef:83:c5:06:12:4e:08:54:a5:be:c3:a3:90: 99:81:28:37:88:6e:c3:cd:08:4e:f6:3e:e4:c1:53: 5c:40:7a:2d:a8:fe:46:9b:c3:9b:bd:42:56:c7:a9: bf:41:ca:51:54:41:37:66:29:fa:d7:20:00:3a:c2: b2:0b:4a:1c:40:6f:8e:90:22:5d:15:52:7e:78:d1: 8a:ce:fc:da:44:15:16:6a:4e:d2:7a:6e:c3:b0:53: 27:04:d3:21:72:a7:44:35:c2:62:3d:c3:db:23:46: 1e:15:df:a7:e4:0f:ae:32:68:be:c8:a5:05:97:24: ff:7d:6f:08:e4:e6:80:0c:b9:6d:e6:9f:99:cc:68: 1b:0a:06:e4:97:f5:8b:5c:c1:d0:71:9a:1a:1f:17: 92:b4:93:72:5d:9b:a3:5c:28:e5:d3:65:c9:86:e4: df:b9:27:09:d6:b4:c2:49:90:9c:6b:42:ea:bf:3c: e6:c7:81:51:96:ae:97:2c:ee:52:e6:8c:87:1d:6d: ac:38:ed:9c:17:69:aa:a5:fa:c6:5d:a8:a6:47:a6: e6:cb:28:a3:98:20:78:f1:36:28:7a:b6:93:16:2c: 44:42:3f:ba:cb:88:30:d5:d0:9b:da:96:d3:ae:f6: 9f:37:4d:24:b6:66:3e:a7:57:3f:93:c6:b7:37:f2: 22:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:8B:EB:BF:00:DA:19:B1:CF:DF:3E:A2:5A:F8:B5:BB:F5:4B:B1:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/25988580-4265-3e67-b9da-0bcc5b7a589f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 173.199.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c6:9c:ab:9d:8a:4a:4f:dc:e6:ae:27:5b:f5:39:c0:b5:25:4d: f3:79:6c:87:9c:04:15:1b:16:ce:c6:35:a3:a1:5a:1e:0e:58: 88:f3:b9:dc:8f:09:87:a9:ae:dc:7b:8e:0a:43:13:90:df:3f: c7:3c:ec:71:ae:75:e5:38:ce:a2:d4:7b:e0:81:74:01:39:bf: 13:eb:ae:39:e7:c8:fa:78:22:ff:63:fb:4c:a8:0b:37:5b:75: 42:45:48:b4:bc:0b:19:e0:53:5c:5e:d0:8b:92:4a:23:b3:ac: 67:a3:11:2d:40:12:d2:e8:cc:75:85:db:e8:81:d0:b6:81:63: 83:d3:cd:37:f5:65:fb:74:64:50:1d:61:c1:66:68:51:1f:e2: 6c:e6:b2:c7:36:7a:39:f5:d7:61:b2:b4:a8:70:e2:41:6b:a4: 60:69:ab:ad:89:fd:a5:5f:30:3f:55:e4:ba:9d:e2:d5:d5:52: 59:bb:3e:51:5a:31:d8:9b:73:7f:cf:ee:f3:a5:e6:71:a8:18: 2c:2c:9d:8c:aa:df:fc:7e:1f:dd:e4:c9:c3:cf:f5:70:4e:b6: 3b:a9:b2:32:ec:e1:6f:f5:be:f8:a2:bc:56:21:15:3c:bc:6d: d5:b1:88:a4:0d:22:23:17:5c:34:d9:2c:52:65:59:b4:02:8a: f9:73:83:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnOmlBPahful+CO1AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk NjhjNjk1ZDUtZWMzMS00ODZhLWEzNjAtZjM0Y2ZmZWQ5NmZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhe+DxQYSTghUpb7Do5CZgSg3iG7DzQhO9j7k wVNcQHotqP5Gm8ObvUJWx6m/QcpRVEE3Zin61yAAOsKyC0ocQG+OkCJdFVJ+eNGK zvzaRBUWak7Sem7DsFMnBNMhcqdENcJiPcPbI0YeFd+n5A+uMmi+yKUFlyT/fW8I 5OaADLlt5p+ZzGgbCgbkl/WLXMHQcZoaHxeStJNyXZujXCjl02XJhuTfuScJ1rTC SZCca0Lqvzzmx4FRlq6XLO5S5oyHHW2sOO2cF2mqpfrGXaimR6bmyyijmCB48TYo eraTFixEQj+6y4gw1dCb2pbTrvafN00ktmY+p1c/k8a3N/IilQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLiL678A2hmxz98+olr4tbv1S7FlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvMjU5ODg1ODAtNDI2NS0z ZTY3LWI5ZGEtMGJjYzViN2E1ODlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArccQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMacq52KSk/c5q4nW/U5wLUlTfN5bIecBBUbFs7GNaOhWh4OWIjzudyP CYeprtx7jgpDE5DfP8c87HGudeU4zqLUe+CBdAE5vxPrrjnnyPp4Iv9j+0yoCzdb dUJFSLS8CxngU1xe0IuSSiOzrGejES1AEtLozHWF2+iB0LaBY4PTzTf1Zft0ZFAd YcFmaFEf4mzmssc2ejn112GytKhw4kFrpGBpq62J/aVfMD9V5Lqd4tXVUlm7PlFa Mdibc3/P7vOl5nGoGCwsnYyq3/x+H93kycPP9XBOtjupsjLs4W/1vviivFYhFTy8 bdWxiKQNIiMXXDTZLFJlWbQCivlzg7g= -----END CERTIFICATE-----Generated at Sat May 10 20:54:07 2025 by rpki-client