$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/9e5ebf40-c830-3982-802c-6fb0581c00a8.roa File: 9e5ebf40-c830-3982-802c-6fb0581c00a8.roa (raw, json) Hash identifier: rnRWClPper0y195/qVScqkzmbh9GGzKObeqrtOq5aqo= Subject key identifier: 0A:69:BA:14:80:5B:02:0E:84:0D:08:1E:36:74:47:EC:3B:14:D8:A9 Certificate issuer: /CN=5c19a246-d9fa-481a-a4d7-010af8c132b3 Certificate serial: 010D0C9F43285848E20807E7C19ACF78A0229840 Authority key identifier: 18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/9e5ebf40-c830-3982-802c-6fb0581c00a8.roa Signing time: Fri 14 Feb 2025 19:15:45 +0000 ROA not before: Fri 14 Feb 2025 19:15:45 +0000 ROA not after: Thu 15 May 2025 18:15:45 +0000 asID: 398395 IP address blocks: 172.99.132.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e2:08:07:e7:c1:9a:cf:78:a0:22:98:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c19a246-d9fa-481a-a4d7-010af8c132b3 Validity Not Before: Feb 14 19:15:45 2025 GMT Not After : May 15 18:15:45 2025 GMT Subject: CN=ab39a418-b1b3-4e01-ac3e-bac3e39c381f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:8b:9b:cb:a3:42:aa:c4:78:3b:fe:43:36:8d: 31:30:4a:5e:12:b9:3f:b6:52:f9:47:dd:9f:1b:ec: 81:2a:b0:99:1f:e8:49:7c:8f:43:17:b0:4d:97:f0: 84:4d:3a:3c:46:f9:bf:15:3d:d0:c3:08:b8:4e:ec: 97:3b:a0:2e:f9:93:bb:5b:4f:c0:69:2c:2f:d6:6f: 47:2a:4c:fa:29:96:2c:ed:7b:f3:81:72:3a:5f:35: 21:50:0d:4f:cf:54:f7:31:c0:78:4b:32:ed:ba:49: fe:f7:89:25:ab:65:fc:f7:af:4c:fc:3c:09:59:fc: 1e:cc:8c:98:9a:83:5b:9f:00:d1:ec:08:fc:a6:64: c2:43:1f:8c:a5:94:f3:19:85:9a:3a:1f:8f:93:94: 07:b9:36:33:0e:f1:ad:56:8e:8e:0d:0c:2a:29:d2: 8a:76:0f:e2:2b:a4:db:5e:b4:78:26:ae:8a:b8:e9: 38:6a:f6:57:a1:17:b3:2d:bf:a0:cb:e9:cc:bf:96: ac:c5:e8:cc:13:6d:87:33:33:03:20:ea:f6:af:e3: 4c:fa:18:fa:63:c2:2a:c8:9a:92:20:40:e5:40:64: 01:4e:77:93:78:10:03:d0:35:f9:17:61:b3:bc:4f: 45:6e:7d:ba:e1:07:a4:c0:7d:8f:d3:be:40:0a:34: 4b:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:69:BA:14:80:5B:02:0E:84:0D:08:1E:36:74:47:EC:3B:14:D8:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/9e5ebf40-c830-3982-802c-6fb0581c00a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl X509v3 Authority Key Identifier: keyid:18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer sbgp-ipAddrBlock: critical IPv4: 172.99.132.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:e9:d2:16:d7:f4:b6:08:9f:f0:68:0c:57:6a:48:97:a2:32: e4:24:d2:ef:05:77:10:19:96:c9:8d:a6:60:20:67:05:a4:16: a3:cc:00:86:01:39:4f:0c:22:a1:74:24:3c:98:21:49:38:13: 86:51:c6:3a:aa:9d:5d:9d:83:38:f8:21:a9:bc:27:26:9c:2d: e1:e1:78:c0:46:06:84:08:7c:6d:8c:69:d0:0e:b2:18:0b:09: 18:75:8f:0d:07:ef:d9:0b:8b:a5:6a:37:22:70:7e:88:73:95: ee:e5:fb:80:a8:59:90:cc:ef:d8:f5:6e:1f:44:55:ab:56:d9: 93:dc:b7:1b:2e:51:11:ab:e2:26:bd:c6:89:5a:f4:d5:0c:87: 39:5e:91:6e:aa:c2:d5:43:94:c7:5b:d2:2d:08:39:6e:dc:10: 38:da:d4:b6:3a:42:d5:88:17:4d:72:23:cf:10:14:29:dc:5a: a4:39:81:e9:4a:f6:fe:80:77:22:9f:00:3d:54:31:91:86:e0: 95:f5:8f:8f:43:bf:0c:af:cc:4f:46:f4:8b:7a:80:b4:a7:a7: 40:90:d4:f3:9b:b2:60:7f:ff:f3:26:9d:ef:08:74:5e:e5:b0: 3b:ad:7a:fb:76:34:97:24:47:80:2e:2d:8f:73:cc:db:28:d2: 55:4f:29:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjiCAfnwZrPeKAimEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWMxOWEyNDYtZDlmYS00ODFhLWE0ZDctMDEwYWY4YzEz MmIzMB4XDTI1MDIxNDE5MTU0NVoXDTI1MDUxNTE4MTU0NVowLzEtMCsGA1UEAxMk YWIzOWE0MTgtYjFiMy00ZTAxLWFjM2UtYmFjM2UzOWMzODFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgIuby6NCqsR4O/5DNo0xMEpeErk/tlL5R92f G+yBKrCZH+hJfI9DF7BNl/CETTo8Rvm/FT3Qwwi4TuyXO6Au+ZO7W0/AaSwv1m9H Kkz6KZYs7XvzgXI6XzUhUA1Pz1T3McB4SzLtukn+94klq2X8969M/DwJWfwezIyY moNbnwDR7Aj8pmTCQx+MpZTzGYWaOh+Pk5QHuTYzDvGtVo6ODQwqKdKKdg/iK6Tb XrR4Jq6KuOk4avZXoRezLb+gy+nMv5asxejME22HMzMDIOr2r+NM+hj6Y8IqyJqS IEDlQGQBTneTeBAD0DX5F2GzvE9Fbn264QekwH2P075ACjRLDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAppuhSAWwIOhA0IHjZ0R+w7FNipMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81YzE5 YTI0Ni1kOWZhLTQ4MWEtYTRkNy0wMTBhZjhjMTMyYjMvOWU1ZWJmNDAtYzgzMC0z OTgyLTgwMmMtNmZiMDU4MWMwMGE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNWMxOWEyNDYtZDlmYS00ODFhLWE0 ZDctMDEwYWY4YzEzMmIzLzVjMTlhMjQ2LWQ5ZmEtNDgxYS1hNGQ3LTAxMGFmOGMx MzJiMy5jcmwwHwYDVR0jBBgwFoAUGBmr0BGL/MK+/l1zc0BDuuWTrnAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81YzE5YTI0Ni1kOWZhLTQ4MWEtYTRkNy0wMTBh ZjhjMTMyYjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrGOEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKzp0hbX9LYIn/BoDFdqSJeiMuQk0u8FdxAZlsmNpmAgZwWkFqPMAIYB OU8MIqF0JDyYIUk4E4ZRxjqqnV2dgzj4Iam8JyacLeHheMBGBoQIfG2MadAOshgL CRh1jw0H79kLi6VqNyJwfohzle7l+4CoWZDM79j1bh9EVatW2ZPctxsuURGr4ia9 xola9NUMhzlekW6qwtVDlMdb0i0IOW7cEDja1LY6QtWIF01yI88QFCncWqQ5gelK 9v6AdyKfAD1UMZGG4JX1j49DvwyvzE9G9It6gLSnp0CQ1PObsmB///Mmne8IdF7l sDutevt2NJckR4AuLY9zzNso0lVPKao= -----END CERTIFICATE-----Generated at Sat Apr 5 16:39:31 2025 by rpki-client