$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a7aa98c8-5315-3116-a00d-5e1f1b63dcf2.roa File: a7aa98c8-5315-3116-a00d-5e1f1b63dcf2.roa (raw, json) Hash identifier: 25W6DNjN6dxPJjud+0idKQw+xBNrhNkT5OvCFb1U594= Subject key identifier: 73:0C:45:0F:EE:2E:14:1A:06:9B:BE:43:64:66:1F:9E:99:55:99:BB Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584A374AD5521B06453D877BA740 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a7aa98c8-5315-3116-a00d-5e1f1b63dcf2.roa Signing time: Tue 17 Jun 2025 01:00:48 +0000 ROA not before: Tue 17 Jun 2025 01:00:48 +0000 ROA not after: Mon 15 Sep 2025 01:00:48 +0000 asID: 31898 IP address blocks: 173.199.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:37:4a:d5:52:1b:06:45:3d:87:7b:a7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Jun 17 01:00:48 2025 GMT Not After : Sep 15 01:00:48 2025 GMT Subject: CN=009dcf8b-559d-47b6-988d-7b2ef475afa8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:3b:f3:50:ed:16:6e:b8:a9:43:cd:f4:bb:64: 47:a2:15:20:77:e2:99:24:5e:72:f9:e3:55:52:b3: 95:d6:be:04:8c:cf:8c:92:61:7a:65:dd:d2:4a:68: d3:40:50:40:5d:84:89:dc:ef:cf:11:5d:95:1d:07: 14:aa:8f:63:f6:97:ed:83:2d:51:14:71:b9:38:14: 76:b5:02:79:6b:c3:16:59:20:fa:12:36:72:ee:e2: 40:5f:74:33:ec:ae:c6:f0:54:89:96:bc:0a:f0:5f: 6d:93:47:b3:40:35:67:03:a8:79:23:22:a6:bf:97: b2:b4:03:a9:5b:aa:26:d4:12:5e:4f:f4:61:55:ab: 76:ce:32:b2:0d:10:b2:7b:ae:c3:8f:f7:fc:ca:57: 9b:56:07:94:df:ba:20:2e:93:41:4a:1b:f8:04:19: 7d:b4:a4:59:9a:2c:d9:85:b1:51:ba:3f:33:3e:01: c6:fc:93:69:d5:8f:3b:bc:2d:aa:c7:ef:0e:93:44: 55:f6:3b:01:63:c0:f6:f5:06:aa:43:cf:3a:f9:e2: c2:dc:d9:a6:b8:3c:74:1a:ec:37:8b:4f:a9:d4:97: aa:d6:2f:9f:49:18:25:f8:0e:10:51:f5:67:46:4c: 4b:53:f0:e7:93:fb:f2:c0:5b:70:b9:86:0b:d5:90: fb:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:0C:45:0F:EE:2E:14:1A:06:9B:BE:43:64:66:1F:9E:99:55:99:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a7aa98c8-5315-3116-a00d-5e1f1b63dcf2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 173.199.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d1:ff:fb:6f:69:70:64:b3:91:d5:80:bb:5c:ab:ec:2c:ff:54: c8:a1:ae:da:c8:ef:96:f0:f0:16:0f:3e:db:7f:21:dd:ba:d8: 12:9d:f5:26:57:33:60:24:16:0d:15:df:b4:7d:09:8b:f1:8a: 2a:e8:87:5f:30:c0:d1:5c:35:74:ee:ac:a3:39:4b:69:cc:b3: 69:08:1b:19:30:28:d6:04:7b:dc:cc:9a:10:9e:3f:cf:78:6f: 30:f4:ec:49:e0:bc:2b:3d:19:00:70:eb:86:29:8e:a6:15:52: 27:fc:59:4f:33:2b:86:fd:8e:26:2f:bc:bb:3e:94:d4:ff:d8: 3c:59:c1:22:35:c3:05:ba:46:8d:06:45:b5:50:ce:96:90:16: d8:b7:89:24:fa:b3:2f:04:e3:ee:f8:8a:8e:45:00:1f:1e:9a: fb:39:18:bf:12:ff:11:fc:65:61:d5:00:7e:99:dc:85:9e:22: a0:61:1f:45:c8:0c:19:7f:81:05:fc:3c:2d:c4:0e:d4:f0:0f: a1:a9:ee:df:bd:4c:21:0e:88:9f:d8:7b:7a:4b:91:7f:78:f8: 6d:28:3d:ad:b4:00:ef:cd:a7:ef:cc:a7:d9:ef:66:68:e3:fd: 14:da:15:fb:f7:51:3f:40:68:88:40:30:6c:03:d0:98:80:3e: 95:b7:20:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo3StVSGwZFPYd7p0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI1MDYxNzAxMDA0OFoXDTI1MDkxNTAxMDA0OFowLzEtMCsGA1UEAxMk MDA5ZGNmOGItNTU5ZC00N2I2LTk4OGQtN2IyZWY0NzVhZmE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTvzUO0WbripQ830u2RHohUgd+KZJF5y+eNV UrOV1r4EjM+MkmF6Zd3SSmjTQFBAXYSJ3O/PEV2VHQcUqo9j9pftgy1RFHG5OBR2 tQJ5a8MWWSD6EjZy7uJAX3Qz7K7G8FSJlrwK8F9tk0ezQDVnA6h5IyKmv5eytAOp W6om1BJeT/RhVat2zjKyDRCye67Dj/f8ylebVgeU37ogLpNBShv4BBl9tKRZmizZ hbFRuj8zPgHG/JNp1Y87vC2qx+8Ok0RV9jsBY8D29QaqQ886+eLC3NmmuDx0Guw3 i0+p1Jeq1i+fSRgl+A4QUfVnRkxLU/Dnk/vywFtwuYYL1ZD7ewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHMMRQ/uLhQaBpu+Q2RmH56ZVZm7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvYTdhYTk4YzgtNTMxNS0z MTE2LWEwMGQtNWUxZjFiNjNkY2YyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArccOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANH/+29pcGSzkdWAu1yr7Cz/VMihrtrI75bw8BYPPtt/Id262BKd9SZX M2AkFg0V37R9CYvxiiroh18wwNFcNXTurKM5S2nMs2kIGxkwKNYEe9zMmhCeP894 bzD07EngvCs9GQBw64YpjqYVUif8WU8zK4b9jiYvvLs+lNT/2DxZwSI1wwW6Ro0G RbVQzpaQFti3iST6sy8E4+74io5FAB8emvs5GL8S/xH8ZWHVAH6Z3IWeIqBhH0XI DBl/gQX8PC3EDtTwD6Gp7t+9TCEOiJ/Ye3pLkX94+G0oPa20AO/Np+/Mp9nvZmjj /RTaFfv3UT9AaIhAMGwD0JiAPpW3IEQ= -----END CERTIFICATE-----Generated at Sun Jun 29 17:46:48 2025 by rpki-client