$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/2f1823ea-88a6-3688-8d20-3d497228f9cc.roa File: 2f1823ea-88a6-3688-8d20-3d497228f9cc.roa (raw, json) Hash identifier: W4FNO+65wvEBFiifnqELPaODyfu5g0WX8TVzGFg+ELY= Subject key identifier: 44:38:D2:EF:32:65:30:CC:51:F4:21:83:45:57:3E:6B:F1:DA:8B:05 Certificate issuer: /CN=8f0bfcde-d958-4e91-af5d-9fd1d33a582a Certificate serial: 010D0C9F4328584894A5EAF0B7D73CCC355F0340 Authority key identifier: AA:2C:89:C4:2A:7A:B8:A4:95:51:83:C3:0C:CF:E3:B0:FC:E3:CE:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/2f1823ea-88a6-3688-8d20-3d497228f9cc.roa Signing time: Sat 18 Jan 2025 02:00:38 +0000 ROA not before: Sat 18 Jan 2025 02:00:38 +0000 ROA not after: Fri 18 Apr 2025 01:00:38 +0000 asID: 40342 IP address blocks: 199.47.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:94:a5:ea:f0:b7:d7:3c:cc:35:5f:03:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f0bfcde-d958-4e91-af5d-9fd1d33a582a Validity Not Before: Jan 18 02:00:38 2025 GMT Not After : Apr 18 01:00:38 2025 GMT Subject: CN=e84eddac-1181-445d-91c2-c6ff8a21c9ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:7d:05:7f:80:42:28:24:35:0f:fb:16:c0:74: 4d:a3:9a:2a:23:b6:dc:97:d3:17:bd:cc:0d:eb:63: 1e:57:5b:97:77:0a:c6:58:6f:cb:f4:3d:ca:d5:4c: 15:7e:b0:2e:41:c2:30:06:e0:8c:9b:84:9a:7a:74: bd:e6:dc:5c:95:7b:9b:10:24:af:6e:ca:ce:79:ae: 2d:da:6c:92:e7:88:4c:9a:e1:45:7f:51:6c:01:bf: fa:0b:94:2a:cb:e2:eb:c1:8b:5c:3a:73:19:e1:e2: f9:cf:ab:e8:b7:bb:db:69:d9:7e:00:2a:6a:0c:44: d7:b6:8f:49:e1:88:df:89:94:d2:8d:bf:8f:ae:dd: 17:8e:8f:2b:31:1c:5d:91:dd:68:b0:51:e9:2c:3e: 5e:33:c6:03:f7:7f:05:20:6d:18:5b:bd:9f:c9:81: 08:60:56:36:b6:d7:6b:9c:93:01:67:0e:65:50:fc: ad:43:37:cd:f3:b7:55:63:85:4f:0a:e8:36:e5:95: cc:60:ac:ae:dc:2c:8d:78:0d:15:a6:20:7c:ff:5a: c4:5a:00:9d:a9:2a:45:c9:f2:f1:51:3f:02:be:49: 2c:e3:50:27:13:ef:7a:f2:cd:ec:7b:0a:fc:68:f0: a8:28:9b:2a:6f:53:bb:ff:ac:ae:9c:f0:0b:4f:6f: 95:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:38:D2:EF:32:65:30:CC:51:F4:21:83:45:57:3E:6B:F1:DA:8B:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/2f1823ea-88a6-3688-8d20-3d497228f9cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.crl X509v3 Authority Key Identifier: keyid:AA:2C:89:C4:2A:7A:B8:A4:95:51:83:C3:0C:CF:E3:B0:FC:E3:CE:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer sbgp-ipAddrBlock: critical IPv4: 199.47.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:d1:33:9d:72:c5:db:ab:da:ff:a5:99:45:e7:c9:cd:26:a5: 6b:5d:59:b4:3a:be:65:dd:a8:eb:4f:f1:14:2d:43:19:d0:f9: 38:bf:6e:49:b0:52:c6:c5:18:44:56:f9:41:df:ef:c7:c0:c3: c1:27:b9:62:0d:63:3b:7f:06:ef:19:cb:31:fc:ec:03:4f:71: ab:e5:07:18:07:86:a0:5b:0e:58:ba:af:45:11:35:2d:a0:97: 9f:10:59:6b:ab:54:c4:d5:06:93:34:10:73:d2:36:3e:da:05: 48:c4:7c:12:a9:89:93:70:80:f0:21:a8:10:95:a5:ca:3f:7c: b0:27:f2:35:04:dc:e9:1b:71:8f:d5:d9:cc:0b:b0:13:ea:2b: cb:66:28:5d:dd:21:34:16:77:3f:0a:21:14:3f:22:80:e6:f1: cb:88:11:98:d9:9b:71:2e:2c:4f:bb:c9:1e:cc:d9:a2:e0:9b: 8f:12:fb:f4:02:8d:23:44:1c:0c:b9:53:ab:37:2a:26:a3:85: 53:21:be:34:6b:53:0d:43:e4:72:ed:0f:7c:f8:12:0f:10:b4: bb:c0:20:38:8b:4d:ce:7a:42:86:07:93:74:e7:0a:52:93:5e: 38:fb:ea:61:a6:08:d1:e8:78:b0:c4:ce:81:ff:63:41:9e:c9: aa:a0:66:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiUperwt9c8zDVfA0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGYwYmZjZGUtZDk1OC00ZTkxLWFmNWQtOWZkMWQzM2E1 ODJhMB4XDTI1MDExODAyMDAzOFoXDTI1MDQxODAxMDAzOFowLzEtMCsGA1UEAxMk ZTg0ZWRkYWMtMTE4MS00NDVkLTkxYzItYzZmZjhhMjFjOWFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs30Ff4BCKCQ1D/sWwHRNo5oqI7bcl9MXvcwN 62MeV1uXdwrGWG/L9D3K1UwVfrAuQcIwBuCMm4SaenS95txclXubECSvbsrOea4t 2myS54hMmuFFf1FsAb/6C5Qqy+LrwYtcOnMZ4eL5z6vot7vbadl+ACpqDETXto9J 4YjfiZTSjb+Prt0Xjo8rMRxdkd1osFHpLD5eM8YD938FIG0YW72fyYEIYFY2ttdr nJMBZw5lUPytQzfN87dVY4VPCug25ZXMYKyu3CyNeA0VpiB8/1rEWgCdqSpFyfLx UT8Cvkks41AnE+968s3sewr8aPCoKJsqb1O7/6yunPALT2+VbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEQ40u8yZTDMUfQhg0VXPmvx2osFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84ZjBi ZmNkZS1kOTU4LTRlOTEtYWY1ZC05ZmQxZDMzYTU4MmEvMmYxODIzZWEtODhhNi0z Njg4LThkMjAtM2Q0OTcyMjhmOWNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGYwYmZjZGUtZDk1OC00ZTkxLWFm NWQtOWZkMWQzM2E1ODJhLzhmMGJmY2RlLWQ5NTgtNGU5MS1hZjVkLTlmZDFkMzNh NTgyYS5jcmwwHwYDVR0jBBgwFoAUqiyJxCp6uKSVUYPDDM/jsPzjzgswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84ZjBiZmNkZS1kOTU4LTRlOTEtYWY1ZC05ZmQx ZDMzYTU4MmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxy+LMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI7RM51yxdur2v+lmUXnyc0mpWtdWbQ6vmXdqOtP8RQtQxnQ+Ti/bkmw UsbFGERW+UHf78fAw8EnuWINYzt/Bu8ZyzH87ANPcavlBxgHhqBbDli6r0URNS2g l58QWWurVMTVBpM0EHPSNj7aBUjEfBKpiZNwgPAhqBCVpco/fLAn8jUE3OkbcY/V 2cwLsBPqK8tmKF3dITQWdz8KIRQ/IoDm8cuIEZjZm3EuLE+7yR7M2aLgm48S+/QC jSNEHAy5U6s3KiajhVMhvjRrUw1D5HLtD3z4Eg8QtLvAIDiLTc56QoYHk3TnClKT Xjj76mGmCNHoeLDEzoH/Y0GeyaqgZq4= -----END CERTIFICATE-----Generated at Sun Apr 6 20:44:15 2025 by rpki-client