$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a3e55cbd-876e-36e8-91ef-1bd971886b83.roa File: a3e55cbd-876e-36e8-91ef-1bd971886b83.roa (raw, json) Hash identifier: +JVTFXGA8JdNFMyyGHDFP8d6QUNCeUDgBsQlQX/OJF4= Subject key identifier: 87:44:6E:09:11:99:FD:45:57:32:7A:84:5F:A9:26:AC:EB:8D:15:68 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F43285849A8E9E13EA1F3A17B344AA9C0 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a3e55cbd-876e-36e8-91ef-1bd971886b83.roa Signing time: Sun 27 Apr 2025 01:00:46 +0000 ROA not before: Sun 27 Apr 2025 01:00:46 +0000 ROA not after: Sat 26 Jul 2025 01:00:46 +0000 asID: 31898 IP address blocks: 173.199.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a8:e9:e1:3e:a1:f3:a1:7b:34:4a:a9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Apr 27 01:00:46 2025 GMT Not After : Jul 26 01:00:46 2025 GMT Subject: CN=b16b858c-505a-4c5e-91f5-9e267facc9ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a4:05:72:2e:3c:05:e3:b9:5f:d4:a0:08:25: 45:54:0c:39:d6:9a:c2:81:94:25:65:c5:c9:74:03: 14:36:f6:3e:fc:ba:1c:7a:68:9f:cb:66:3f:d3:e7: 1a:ea:72:10:e0:ad:6d:33:d3:da:3f:cf:a5:6f:ef: 4e:41:56:d6:05:fa:1d:1e:3b:1a:2d:b1:27:90:27: ef:c5:55:48:38:d6:fa:22:f7:70:84:84:4d:08:43: 78:ff:94:4e:e8:30:54:f1:56:24:66:b2:23:41:4d: c5:2b:07:22:69:d0:5e:f0:84:55:51:c0:29:91:f2: 7f:22:9e:ca:06:5a:c9:b5:30:18:c0:8d:33:1a:e7: fd:f6:79:c6:f9:67:0e:98:f0:57:96:6e:92:14:05: e5:45:17:ec:55:4b:24:8b:8d:15:7c:37:fa:0d:3a: 05:28:10:8d:fd:d9:d2:ae:7f:d3:ce:73:b8:b0:a3: 4c:3a:c4:91:f1:d3:e9:8a:fa:47:59:fd:63:90:de: e7:01:f7:54:b6:09:5b:bf:52:86:4f:a6:36:88:7d: ba:45:37:40:1b:1f:d9:a8:21:e5:c4:23:43:6d:3e: 90:29:13:e7:cd:cf:6c:07:3b:a6:48:52:89:39:fa: b8:d3:de:73:13:86:4a:3b:31:3b:f9:a4:f8:d6:fc: 89:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:44:6E:09:11:99:FD:45:57:32:7A:84:5F:A9:26:AC:EB:8D:15:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a3e55cbd-876e-36e8-91ef-1bd971886b83.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 173.199.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cf:19:3d:2a:70:ef:c9:a0:d7:04:80:f8:97:68:52:09:13:e9: cb:c7:a2:1b:9e:e6:7b:ef:84:ef:b6:3e:21:b5:20:92:46:de: 6b:26:ac:85:93:40:03:5b:2d:4e:fe:6e:c7:ff:55:28:14:1a: 13:eb:63:85:57:67:73:64:cc:f4:49:a5:f8:ab:6c:30:08:4e: 62:d5:23:74:db:9b:ef:00:da:38:8f:a6:84:94:7e:99:53:b4: 58:28:2d:e3:a2:00:22:2a:2a:1a:85:7f:ec:c0:2d:5c:bf:2b: b3:cf:1a:16:ef:0a:4f:2c:c6:69:e6:c6:15:f9:ce:b7:42:0e: 88:ef:20:f2:31:2d:b1:44:d0:f2:bb:ba:65:9c:fa:22:52:c4: b0:96:d6:42:5f:bd:0f:36:a5:37:5a:e4:62:2a:0b:57:bb:29: 94:12:a8:a2:b0:a5:89:71:64:ce:3d:73:0b:cf:26:94:6d:3c: af:d7:49:74:0a:9a:93:c8:4f:91:b3:83:ee:22:3c:89:59:53: 9f:25:fb:6c:96:ff:3d:e2:20:0b:32:72:49:2e:6b:e5:e6:b9: 76:25:3b:09:6a:59:97:b9:87:6b:e1:1e:3e:7e:f8:6b:66:a4: 53:f0:d0:93:be:ae:cc:08:26:b0:18:3d:c4:c3:a4:b9:6b:76: d7:29:d1:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmo6eE+ofOhezRKqcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI1MDQyNzAxMDA0NloXDTI1MDcyNjAxMDA0NlowLzEtMCsGA1UEAxMk YjE2Yjg1OGMtNTA1YS00YzVlLTkxZjUtOWUyNjdmYWNjOWVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKQFci48BeO5X9SgCCVFVAw51prCgZQlZcXJ dAMUNvY+/Locemify2Y/0+ca6nIQ4K1tM9PaP8+lb+9OQVbWBfodHjsaLbEnkCfv xVVIONb6IvdwhIRNCEN4/5RO6DBU8VYkZrIjQU3FKwciadBe8IRVUcApkfJ/Ip7K BlrJtTAYwI0zGuf99nnG+WcOmPBXlm6SFAXlRRfsVUski40VfDf6DToFKBCN/dnS rn/TznO4sKNMOsSR8dPpivpHWf1jkN7nAfdUtglbv1KGT6Y2iH26RTdAGx/ZqCHl xCNDbT6QKRPnzc9sBzumSFKJOfq4095zE4ZKOzE7+aT41vyJyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIdEbgkRmf1FVzJ6hF+pJqzrjRVoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvYTNlNTVjYmQtODc2ZS0z NmU4LTkxZWYtMWJkOTcxODg2YjgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArccLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAM8ZPSpw78mg1wSA+JdoUgkT6cvHohue5nvvhO+2PiG1IJJG3msmrIWT QANbLU7+bsf/VSgUGhPrY4VXZ3NkzPRJpfirbDAITmLVI3Tbm+8A2jiPpoSUfplT tFgoLeOiACIqKhqFf+zALVy/K7PPGhbvCk8sxmnmxhX5zrdCDojvIPIxLbFE0PK7 umWc+iJSxLCW1kJfvQ82pTda5GIqC1e7KZQSqKKwpYlxZM49cwvPJpRtPK/XSXQK mpPIT5Gzg+4iPIlZU58l+2yW/z3iIAsyckkua+XmuXYlOwlqWZe5h2vhHj5++Gtm pFPw0JO+rswIJrAYPcTDpLlrdtcp0fk= -----END CERTIFICATE-----Generated at Mon May 12 00:17:01 2025 by rpki-client