$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/fd4c2771-c57e-3ebb-8bcc-c93a2d84c4f3.roa File: fd4c2771-c57e-3ebb-8bcc-c93a2d84c4f3.roa (raw, json) Hash identifier: aOvTgG7RYils+TbZD5scel7umPWUcZZREXOzb5ypU3I= Subject key identifier: 00:E5:83:91:C2:2C:99:7C:D9:8B:DC:88:10:D3:11:DB:93:5D:63:D3 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584A3E45993EBCB452C21492B200 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/fd4c2771-c57e-3ebb-8bcc-c93a2d84c4f3.roa Signing time: Thu 19 Jun 2025 13:01:02 +0000 ROA not before: Thu 19 Jun 2025 13:01:02 +0000 ROA not after: Wed 17 Sep 2025 13:01:02 +0000 asID: 31898 IP address blocks: 173.199.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:45:99:3e:bc:b4:52:c2:14:92:b2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Jun 19 13:01:02 2025 GMT Not After : Sep 17 13:01:02 2025 GMT Subject: CN=741b13b4-2fa8-461d-ac4d-3a2c9dd5881d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:70:27:98:48:cf:81:f4:64:b9:8f:78:ea:86: d3:f6:2f:bd:5e:19:9f:10:61:7b:5f:40:04:1a:8b: f4:bc:52:07:61:eb:8c:c9:36:c1:36:92:f9:91:3b: 10:2c:61:24:70:a9:9d:44:99:8f:8d:a0:ca:c8:c2: 55:77:84:f2:27:44:fb:54:59:eb:94:f8:cb:7d:98: b3:56:c2:77:64:9e:a3:67:15:04:68:4e:e5:7a:e1: 0f:9e:09:82:9e:eb:35:70:3f:a7:9a:b9:0d:92:ae: eb:3b:f5:05:4a:54:b1:ef:31:7e:37:6f:78:a2:a2: ab:93:26:c0:77:37:77:e9:30:d1:a4:40:2a:10:2f: 23:f1:d9:14:b8:cb:df:ca:1b:e9:cd:74:7e:4f:48: 2f:ec:ac:d1:fb:04:36:f5:5d:0c:c7:a9:67:be:f6: 1a:ad:ca:8a:69:e8:08:e2:6f:7d:c0:cd:65:9b:d6: 0d:80:f6:b2:b2:82:0c:73:b5:0a:62:dc:b8:ef:25: 30:0c:44:8c:b3:b2:2e:0a:4f:88:c7:9c:b4:f9:84: e3:f5:87:71:cb:51:52:f6:d4:68:79:61:48:48:f2: f9:c2:ba:9b:b4:53:56:ee:42:88:eb:f4:10:90:b1: a9:55:5b:77:d6:77:ab:c8:90:a6:55:e7:08:46:75: a5:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:E5:83:91:C2:2C:99:7C:D9:8B:DC:88:10:D3:11:DB:93:5D:63:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/fd4c2771-c57e-3ebb-8bcc-c93a2d84c4f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 173.199.10.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:bf:98:67:36:94:fb:d4:66:79:a4:69:c7:08:bd:7a:68:76: 0c:5b:06:46:09:42:d2:f0:c2:03:2f:c3:6b:5a:af:d8:f0:6d: 27:f3:ec:12:f5:d7:a5:54:a8:6d:3e:43:89:00:92:a6:92:cd: 30:95:ec:90:c1:77:ab:ae:94:c4:17:b5:6f:d4:c9:8c:c0:ae: 64:ac:09:c4:5d:04:80:84:58:67:39:6b:6e:59:7a:a9:8a:bb: 48:2e:0d:7d:79:7f:91:8d:8f:26:5e:c5:e5:94:e1:ef:c5:b6: c3:0b:ef:5c:06:93:00:56:3b:28:e7:a9:2a:da:e7:46:87:36: d8:e2:f5:11:f1:05:3c:f6:13:da:d1:ba:e9:97:b7:6e:cb:e6: 0f:d4:2c:ba:4b:ec:5d:22:e7:fa:3b:84:a1:91:70:33:4b:f5: 7d:98:7c:89:54:1c:48:4f:6c:37:85:86:f6:79:54:2c:33:50: ef:2c:f7:90:98:b7:e7:00:02:2a:f2:16:db:1a:78:15:b7:b8: dc:75:94:02:57:d1:e4:67:bc:2d:0d:b7:d9:48:44:5a:d2:c6: 5a:23:cf:d2:0f:c7:85:d4:15:7d:37:d9:d7:6a:38:97:88:1f: 0f:e0:75:6b:bb:79:09:63:31:03:ec:23:29:71:a9:e0:f6:76: f5:64:58:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+RZk+vLRSwhSSsgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI1MDYxOTEzMDEwMloXDTI1MDkxNzEzMDEwMlowLzEtMCsGA1UEAxMk NzQxYjEzYjQtMmZhOC00NjFkLWFjNGQtM2EyYzlkZDU4ODFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHAnmEjPgfRkuY946obT9i+9XhmfEGF7X0AE Gov0vFIHYeuMyTbBNpL5kTsQLGEkcKmdRJmPjaDKyMJVd4TyJ0T7VFnrlPjLfZiz VsJ3ZJ6jZxUEaE7leuEPngmCnus1cD+nmrkNkq7rO/UFSlSx7zF+N294oqKrkybA dzd36TDRpEAqEC8j8dkUuMvfyhvpzXR+T0gv7KzR+wQ29V0Mx6lnvvYarcqKaegI 4m99wM1lm9YNgPaysoIMc7UKYty47yUwDESMs7IuCk+Ix5y0+YTj9Ydxy1FS9tRo eWFISPL5wrqbtFNW7kKI6/QQkLGpVVt31neryJCmVecIRnWlxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFADlg5HCLJl82YvciBDTEduTXWPTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvZmQ0YzI3NzEtYzU3ZS0z ZWJiLThiY2MtYzkzYTJkODRjNGYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArccKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGG/mGc2lPvUZnmkaccIvXpodgxbBkYJQtLwwgMvw2tar9jwbSfz7BL1 16VUqG0+Q4kAkqaSzTCV7JDBd6uulMQXtW/UyYzArmSsCcRdBICEWGc5a25ZeqmK u0guDX15f5GNjyZexeWU4e/FtsML71wGkwBWOyjnqSra50aHNtji9RHxBTz2E9rR uumXt27L5g/ULLpL7F0i5/o7hKGRcDNL9X2YfIlUHEhPbDeFhvZ5VCwzUO8s95CY t+cAAiryFtsaeBW3uNx1lAJX0eRnvC0Nt9lIRFrSxlojz9IPx4XUFX032ddqOJeI Hw/gdWu7eQljMQPsIylxqeD2dvVkWEE= -----END CERTIFICATE-----Generated at Sun Jun 29 13:40:13 2025 by rpki-client