$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/44a7f58b-00a4-36c5-b816-5c96203cd990.roa File: 44a7f58b-00a4-36c5-b816-5c96203cd990.roa (raw, json) Hash identifier: lFsxbq2RGWw3ehK762UKjNWpJuaZzKwiX+x1rm1YvE4= Subject key identifier: D1:56:1F:99:02:1B:63:45:DF:21:FE:10:83:70:11:72:EE:3C:A2:8C Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F43285849CE9A5072AA7B839DC4964980 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/44a7f58b-00a4-36c5-b816-5c96203cd990.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 14618 IP address blocks: 173.199.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:50:72:aa:7b:83:9d:c4:96:49:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=686d9617-dc5a-4587-b078-27cdf2685fc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:50:ab:f3:ef:f8:71:de:7f:b4:fc:1c:f9:2a: 01:9e:56:d4:5b:76:b7:f5:eb:29:3d:8a:32:c3:52: 35:ca:c9:bf:81:fe:5f:3b:1c:db:ef:21:6d:6a:b1: b9:ae:f4:a5:59:42:31:6e:b2:b1:e4:79:91:e0:4f: 90:42:1f:9a:90:e0:51:8d:cd:af:6e:a5:d1:a5:9b: ec:c6:a2:34:a9:02:07:e9:0a:13:9a:c4:ae:5d:27: 2e:65:a4:05:5b:41:f2:03:2a:66:f1:6e:5c:cc:51: 5a:f5:0c:9c:2c:bf:52:b4:ee:a3:9b:e0:c2:ce:ea: bb:a3:ab:a0:5b:c5:30:f3:e4:94:67:d0:02:7e:68: d2:2e:19:08:97:bc:cc:e6:be:de:6d:8a:93:4e:98: 49:ad:e5:b3:4a:11:f3:a4:54:a8:1b:ed:df:3d:d3: 61:81:12:56:34:54:dd:46:be:ca:db:9d:0b:18:2f: c7:69:a9:f6:7d:76:02:a8:e4:0b:85:e6:68:b0:bd: 33:fd:ec:1b:6c:be:b1:09:27:f2:f7:f6:02:93:02: c0:bf:95:45:47:99:9a:9e:06:db:79:ed:dc:c7:9a: 51:23:55:93:b2:62:e6:68:ad:c8:d6:5b:10:c4:84: 1b:66:1b:69:19:06:cd:28:8b:20:38:df:04:84:84: 7a:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:56:1F:99:02:1B:63:45:DF:21:FE:10:83:70:11:72:EE:3C:A2:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/44a7f58b-00a4-36c5-b816-5c96203cd990.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 173.199.37.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:13:95:98:ff:ef:d9:e2:ee:fa:41:d8:4b:5a:ff:48:8f:e0: 6e:c7:f1:29:bc:66:28:db:0b:f5:f9:51:ce:3b:f5:23:f5:a2: cf:33:48:cf:56:35:db:08:ae:ef:ae:38:08:99:6e:3c:b7:e5: 2b:1f:81:30:71:80:b0:25:2e:42:7f:b7:56:ac:8c:e1:ca:eb: 0e:8f:e6:31:5e:7c:ae:db:fd:61:bf:83:3b:fb:88:7f:69:53: 92:64:22:9f:5d:01:e4:2d:83:7c:5b:b6:4c:c5:c4:0f:8b:4c: d0:7e:0b:d4:5e:78:e7:47:cb:8f:68:89:26:ce:31:b5:df:cf: 90:4f:7a:48:e2:54:46:47:9b:4e:55:80:b1:c2:1d:51:83:9b: e9:a3:e8:25:33:f1:66:f5:50:f5:de:3e:9f:39:bb:67:96:1a: e8:d2:d0:e2:da:5f:aa:53:d8:20:73:c5:f1:b7:e7:6a:d3:3c: 56:d1:cb:ac:27:cc:b4:64:04:d0:be:2f:5a:62:ed:db:cd:8f: f5:bd:18:fd:73:3b:f0:e4:3b:e3:e8:7b:5d:78:be:f1:4b:8c: 85:ba:7a:b7:47:ee:63:e8:f9:fc:d8:e8:42:c1:2a:5e:c8:84: 87:30:02:fd:08:ab:60:5b:34:4e:89:4a:ca:30:fa:a8:26:7f: ca:63:f9:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnOmlByqnuDncSWSYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk Njg2ZDk2MTctZGM1YS00NTg3LWIwNzgtMjdjZGYyNjg1ZmM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVCr8+/4cd5/tPwc+SoBnlbUW3a39espPYoy w1I1ysm/gf5fOxzb7yFtarG5rvSlWUIxbrKx5HmR4E+QQh+akOBRjc2vbqXRpZvs xqI0qQIH6QoTmsSuXScuZaQFW0HyAypm8W5czFFa9QycLL9StO6jm+DCzuq7o6ug W8Uw8+SUZ9ACfmjSLhkIl7zM5r7ebYqTTphJreWzShHzpFSoG+3fPdNhgRJWNFTd Rr7K250LGC/Haan2fXYCqOQLheZosL0z/ewbbL6xCSfy9/YCkwLAv5VFR5mangbb ee3cx5pRI1WTsmLmaK3I1lsQxIQbZhtpGQbNKIsgON8EhIR6WwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNFWH5kCG2NF3yH+EINwEXLuPKKMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvNDRhN2Y1OGItMDBhNC0z NmM1LWI4MTYtNWM5NjIwM2NkOTkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcclMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF4TlZj/79ni7vpB2Eta/0iP4G7H8Sm8ZijbC/X5Uc479SP1os8zSM9W NdsIru+uOAiZbjy35SsfgTBxgLAlLkJ/t1asjOHK6w6P5jFefK7b/WG/gzv7iH9p U5JkIp9dAeQtg3xbtkzFxA+LTNB+C9ReeOdHy49oiSbOMbXfz5BPekjiVEZHm05V gLHCHVGDm+mj6CUz8Wb1UPXePp85u2eWGujS0OLaX6pT2CBzxfG352rTPFbRy6wn zLRkBNC+L1pi7dvNj/W9GP1zO/DkO+Poe114vvFLjIW6erdH7mPo+fzY6ELBKl7I hIcwAv0Iq2BbNE6JSsow+qgmf8pj+YE= -----END CERTIFICATE-----Generated at Sun May 11 13:33:14 2025 by rpki-client