$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ecc87e4f-7e3a-437b-9f59-2f2863b974dd/9b028df0-ef35-3987-ae87-6cfc3001a9f7.roa File: 9b028df0-ef35-3987-ae87-6cfc3001a9f7.roa (raw, json) Hash identifier: stXObhRispO88ieL8FiJivxGzU9/1KWyjls5Is4fr88= Subject key identifier: 3B:83:0A:7B:C7:97:F5:2A:54:20:C9:D1:CB:7E:51:F4:DF:F1:5C:65 Certificate issuer: /CN=ecc87e4f-7e3a-437b-9f59-2f2863b974dd Certificate serial: 010D0C9F432858494E2EACA9DDB11C958E23A480 Authority key identifier: B4:C5:18:9D:6C:7A:9B:3C:C8:5B:75:A6:6D:C3:8A:A2:F0:F1:C0:EB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ecc87e4f-7e3a-437b-9f59-2f2863b974dd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ecc87e4f-7e3a-437b-9f59-2f2863b974dd/9b028df0-ef35-3987-ae87-6cfc3001a9f7.roa Signing time: Tue 25 Mar 2025 13:00:51 +0000 ROA not before: Tue 25 Mar 2025 13:00:51 +0000 ROA not after: Mon 23 Jun 2025 13:00:51 +0000 asID: 16509 IP address blocks: 199.43.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ecc87e4f-7e3a-437b-9f59-2f2863b974dd/ecc87e4f-7e3a-437b-9f59-2f2863b974dd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ecc87e4f-7e3a-437b-9f59-2f2863b974dd/ecc87e4f-7e3a-437b-9f59-2f2863b974dd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ecc87e4f-7e3a-437b-9f59-2f2863b974dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4e:2e:ac:a9:dd:b1:1c:95:8e:23:a4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ecc87e4f-7e3a-437b-9f59-2f2863b974dd Validity Not Before: Mar 25 13:00:51 2025 GMT Not After : Jun 23 13:00:51 2025 GMT Subject: CN=8f29fc41-771e-4684-8615-d76cf62ab46f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:35:a4:3a:46:67:31:5f:2d:34:e9:0a:cf:26: ef:58:9e:37:eb:74:44:60:02:c7:8a:ba:8e:ad:77: 39:12:3b:8b:38:6e:9a:03:59:4d:79:ab:8d:9a:1b: c6:61:32:15:9b:ce:f2:d2:a6:6b:da:9e:8c:02:08: fc:f7:f8:28:2d:03:74:45:3e:63:9d:02:2a:44:47: 43:2b:7b:d1:dd:95:05:e0:57:e0:14:cb:0c:8d:35: b0:79:07:01:8d:8c:09:ef:00:24:62:74:3f:8b:a7: 8a:c2:de:30:65:38:35:59:a5:d3:31:10:25:36:29: 98:c5:04:e3:0c:62:de:0f:9a:fc:22:b2:30:c3:85: 5e:35:83:58:68:3f:9f:1b:f6:d7:13:3c:8a:d5:ef: 77:b5:c2:50:1f:f5:4e:7b:d6:10:48:ab:3f:de:35: 49:18:7a:c2:8c:80:ff:6b:79:df:68:88:ab:0d:58: 7f:42:af:0b:4c:9d:ff:e4:6b:92:4f:20:c2:17:38: b4:cd:17:5b:4c:b7:cc:75:cf:93:18:5c:16:ba:11: f0:d4:68:f4:54:d5:f4:0b:4d:72:43:b7:5c:56:20: a2:85:26:2b:cc:9c:43:e8:66:ba:8c:8c:fd:6f:0e: f7:6c:bd:b9:89:13:13:63:9e:a4:1f:cc:33:55:16: 18:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:83:0A:7B:C7:97:F5:2A:54:20:C9:D1:CB:7E:51:F4:DF:F1:5C:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ecc87e4f-7e3a-437b-9f59-2f2863b974dd/9b028df0-ef35-3987-ae87-6cfc3001a9f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ecc87e4f-7e3a-437b-9f59-2f2863b974dd/ecc87e4f-7e3a-437b-9f59-2f2863b974dd.crl X509v3 Authority Key Identifier: keyid:B4:C5:18:9D:6C:7A:9B:3C:C8:5B:75:A6:6D:C3:8A:A2:F0:F1:C0:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ecc87e4f-7e3a-437b-9f59-2f2863b974dd.cer sbgp-ipAddrBlock: critical IPv4: 199.43.186.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:dc:01:d0:aa:a9:c5:f9:93:1c:d0:09:90:cc:8b:61:f7:36: 13:09:b0:dc:bb:2c:7d:b4:99:d5:49:53:5d:e8:9e:22:29:dd: 89:c2:d8:8b:29:27:5a:73:5a:91:35:10:ce:3f:dd:dc:39:d0: b5:a3:89:2e:e3:e0:d1:1a:29:92:71:67:1c:ea:87:a6:f7:ff: 9e:29:e0:07:5d:0a:42:90:b7:63:c0:7a:f2:f2:7d:9d:88:8e: c4:c0:46:73:88:e0:d7:e0:b1:f5:66:de:14:b7:bd:f6:3a:a0: 45:d7:86:a1:ce:10:df:94:47:51:c1:b3:fc:1c:76:42:9e:68: 9f:4a:6e:b6:1d:5b:32:44:14:64:15:32:db:f8:84:40:f3:92: db:f2:9b:cb:bd:3f:da:0b:6f:38:a1:05:31:0f:8e:31:4a:b7: ed:74:e6:df:c3:98:e0:75:a4:dc:6f:8b:75:ba:76:c4:7d:43: 78:06:5e:03:c2:74:44:13:e9:0d:f8:ab:46:07:b7:a9:18:6d: 3a:68:87:fa:26:a7:52:0e:72:66:3d:5b:fd:bf:67:da:ce:7d: d7:da:8a:5f:90:43:a0:11:56:e0:d6:f8:9e:3d:bb:05:b4:69: d5:ab:e6:47:12:13:16:4d:30:a4:6a:6c:96:ae:6c:c8:b6:5e: 0f:32:e3:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElOLqyp3bEclY4jpIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWNjODdlNGYtN2UzYS00MzdiLTlmNTktMmYyODYzYjk3 NGRkMB4XDTI1MDMyNTEzMDA1MVoXDTI1MDYyMzEzMDA1MVowLzEtMCsGA1UEAxMk OGYyOWZjNDEtNzcxZS00Njg0LTg2MTUtZDc2Y2Y2MmFiNDZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDWkOkZnMV8tNOkKzybvWJ4363REYALHirqO rXc5EjuLOG6aA1lNeauNmhvGYTIVm87y0qZr2p6MAgj89/goLQN0RT5jnQIqREdD K3vR3ZUF4FfgFMsMjTWweQcBjYwJ7wAkYnQ/i6eKwt4wZTg1WaXTMRAlNimYxQTj DGLeD5r8IrIww4VeNYNYaD+fG/bXEzyK1e93tcJQH/VOe9YQSKs/3jVJGHrCjID/ a3nfaIirDVh/Qq8LTJ3/5GuSTyDCFzi0zRdbTLfMdc+TGFwWuhHw1Gj0VNX0C01y Q7dcViCihSYrzJxD6Ga6jIz9bw73bL25iRMTY56kH8wzVRYYtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDuDCnvHl/UqVCDJ0ct+UfTf8VxlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9lY2M4 N2U0Zi03ZTNhLTQzN2ItOWY1OS0yZjI4NjNiOTc0ZGQvOWIwMjhkZjAtZWYzNS0z OTg3LWFlODctNmNmYzMwMDFhOWY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZWNjODdlNGYtN2UzYS00MzdiLTlm NTktMmYyODYzYjk3NGRkL2VjYzg3ZTRmLTdlM2EtNDM3Yi05ZjU5LTJmMjg2M2I5 NzRkZC5jcmwwHwYDVR0jBBgwFoAUtMUYnWx6mzzIW3WmbcOKovDxwOswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9lY2M4N2U0Zi03ZTNhLTQzN2ItOWY1OS0yZjI4 NjNiOTc0ZGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxyu6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKHcAdCqqcX5kxzQCZDMi2H3NhMJsNy7LH20mdVJU13oniIp3YnC2Isp J1pzWpE1EM4/3dw50LWjiS7j4NEaKZJxZxzqh6b3/54p4AddCkKQt2PAevLyfZ2I jsTARnOI4NfgsfVm3hS3vfY6oEXXhqHOEN+UR1HBs/wcdkKeaJ9KbrYdWzJEFGQV Mtv4hEDzktvym8u9P9oLbzihBTEPjjFKt+105t/DmOB1pNxvi3W6dsR9Q3gGXgPC dEQT6Q34q0YHt6kYbTpoh/omp1IOcmY9W/2/Z9rOfdfail+QQ6ARVuDW+J49uwW0 adWr5kcSExZNMKRqbJaubMi2Xg8y42k= -----END CERTIFICATE-----Generated at Sat Apr 5 16:50:39 2025 by rpki-client