$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/37d7038c-57b5-3c54-ad4c-e8c16b376796.roa File: 37d7038c-57b5-3c54-ad4c-e8c16b376796.roa (raw, json) Hash identifier: q6y63aF04hBYgQzfLQTtRp/5RrZ+cqnABJBjoSbAfRQ= Subject key identifier: 3A:F2:69:11:CC:46:4C:37:30:10:3C:DE:8E:22:35:15:07:1E:4C:22 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F432858491ED6ECAD3C5EFD59677D6B80 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/37d7038c-57b5-3c54-ad4c-e8c16b376796.roa Signing time: Sat 08 Mar 2025 14:00:52 +0000 ROA not before: Sat 08 Mar 2025 14:00:52 +0000 ROA not after: Fri 06 Jun 2025 13:00:52 +0000 asID: 16839 IP address blocks: 199.91.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1e:d6:ec:ad:3c:5e:fd:59:67:7d:6b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Mar 8 14:00:52 2025 GMT Not After : Jun 6 13:00:52 2025 GMT Subject: CN=115e368a-60b7-41d6-80c8-7f571d693626 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:94:68:d1:9b:e2:1a:93:78:c8:10:3a:1c:81: 78:65:95:28:2b:93:e2:48:38:95:54:03:35:f4:c9: fb:b3:b7:20:d1:d6:e6:ed:31:e8:07:85:28:20:e5: a6:35:72:53:c4:dd:03:c3:4f:9b:d4:87:67:8a:4f: 8a:d0:b1:26:88:99:bb:36:68:f6:6d:57:97:97:06: f9:b5:6f:d7:b4:8d:5e:7d:b6:31:d9:35:c3:21:7f: d9:df:17:53:65:fc:9c:d9:4f:2e:50:a0:3b:3d:42: fb:e4:30:3b:f0:75:2b:19:97:1d:41:19:a0:84:af: bc:5d:21:dd:2e:b1:28:ba:60:90:57:4c:4a:5b:a4: 60:c1:02:de:26:2a:70:71:ca:dd:84:93:b1:07:46: 30:6a:82:cb:b1:15:05:c4:94:78:1e:3b:e9:87:4e: 55:f7:a7:35:1a:89:b8:b9:a9:a4:14:c7:9d:56:cd: 9f:03:49:b8:25:4d:96:00:6f:c5:40:98:ba:c7:67: 74:a3:23:9e:41:05:d6:f0:72:50:df:e8:8c:f2:4b: 34:8c:b0:98:fc:9e:8a:3d:36:dd:5b:50:eb:df:f4: 97:c6:33:1e:25:8a:34:c0:31:a0:30:ad:1a:89:03: ae:ca:b8:8c:79:8b:88:8b:ca:9d:3b:1c:9e:df:25: 51:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:F2:69:11:CC:46:4C:37:30:10:3C:DE:8E:22:35:15:07:1E:4C:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/37d7038c-57b5-3c54-ad4c-e8c16b376796.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 199.91.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:69:79:b7:2b:4c:bb:7c:ba:01:e0:a2:36:0c:3f:4a:58:a2: f6:8f:30:13:c0:fd:d3:c5:e1:a2:1e:bc:17:98:d2:5f:4c:8a: 64:2d:52:4e:fe:10:a1:8a:6a:ff:49:45:58:e5:67:59:1b:68: df:36:90:29:ff:75:7c:0e:ea:00:c3:97:94:7b:38:5e:b5:db: a0:cb:91:50:4e:02:12:de:01:17:df:84:6e:d3:3f:00:aa:a4: 3b:15:7b:d5:93:23:81:b2:d4:91:f0:ab:09:a2:0e:07:39:88: 33:1f:34:c8:ae:a4:59:77:43:42:69:8a:c7:f0:40:15:83:a1: 0c:87:cf:bd:91:4f:27:4c:02:18:b2:3c:39:45:3b:07:a8:5f: 70:21:01:22:6b:5d:81:32:e1:bd:8f:72:7f:35:ea:df:2f:e4: 64:30:f3:62:56:96:23:2a:6b:b7:e6:99:11:45:5b:60:73:1f: 69:8a:48:58:ef:dc:e0:b8:58:5b:b9:3e:b4:dc:6c:d0:91:d1: 7e:1b:7d:1f:3b:17:22:3b:9e:52:5c:74:64:bf:28:92:f1:4e: 8f:8e:80:87:0b:b3:77:a1:a7:17:40:f3:c9:44:62:53:ab:ec: 7d:b5:22:bc:82:ac:95:35:6e:ad:a7:c8:cf:88:69:19:51:92: 1a:94:23:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEke1uytPF79WWd9a4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MDMwODE0MDA1MloXDTI1MDYwNjEzMDA1MlowLzEtMCsGA1UEAxMk MTE1ZTM2OGEtNjBiNy00MWQ2LTgwYzgtN2Y1NzFkNjkzNjI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg5Ro0ZviGpN4yBA6HIF4ZZUoK5PiSDiVVAM1 9Mn7s7cg0dbm7THoB4UoIOWmNXJTxN0Dw0+b1Idnik+K0LEmiJm7Nmj2bVeXlwb5 tW/XtI1efbYx2TXDIX/Z3xdTZfyc2U8uUKA7PUL75DA78HUrGZcdQRmghK+8XSHd LrEoumCQV0xKW6RgwQLeJipwccrdhJOxB0YwaoLLsRUFxJR4Hjvph05V96c1Gom4 uamkFMedVs2fA0m4JU2WAG/FQJi6x2d0oyOeQQXW8HJQ3+iM8ks0jLCY/J6KPTbd W1Dr3/SXxjMeJYo0wDGgMK0aiQOuyriMeYuIi8qdOxye3yVRmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDryaRHMRkw3MBA83o4iNRUHHkwiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvMzdkNzAzOGMtNTdiNS0z YzU0LWFkNGMtZThjMTZiMzc2Nzk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx1uIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAABpebcrTLt8ugHgojYMP0pYovaPMBPA/dPF4aIevBeY0l9MimQtUk7+ EKGKav9JRVjlZ1kbaN82kCn/dXwO6gDDl5R7OF6126DLkVBOAhLeARffhG7TPwCq pDsVe9WTI4Gy1JHwqwmiDgc5iDMfNMiupFl3Q0JpisfwQBWDoQyHz72RTydMAhiy PDlFOweoX3AhASJrXYEy4b2Pcn816t8v5GQw82JWliMqa7fmmRFFW2BzH2mKSFjv 3OC4WFu5PrTcbNCR0X4bfR87FyI7nlJcdGS/KJLxTo+OgIcLs3ehpxdA88lEYlOr 7H21IryCrJU1bq2nyM+IaRlRkhqUIzk= -----END CERTIFICATE-----Generated at Mon Apr 7 14:11:57 2025 by rpki-client