$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/412a0313-4cdd-3471-814c-6ed5f8341669.roa File: 412a0313-4cdd-3471-814c-6ed5f8341669.roa (raw, json) Hash identifier: RxTBa5r4FdmcwHlLIvD80AF9JmccwLzhQfSyJBkgZ50= Subject key identifier: F3:3C:64:4C:0D:46:33:95:BD:9B:B6:50:B5:EF:80:93:D7:32:C1:8A Certificate issuer: /CN=22f3c152-12b6-441e-b4d6-66feab870c4d Certificate serial: 010D0C9F432858494B640BF4FD1CDC69C383DA80 Authority key identifier: 91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/412a0313-4cdd-3471-814c-6ed5f8341669.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 8100 IP address blocks: 199.180.254.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 09 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:64:0b:f4:fd:1c:dc:69:c3:83:da:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22f3c152-12b6-441e-b4d6-66feab870c4d Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=73a8f8b4-5622-47e0-9c58-5df68b99e091 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:07:a0:ec:52:02:6b:8d:d1:85:f9:58:4e:72: 81:5b:92:0f:48:93:cf:47:96:a2:2b:fe:b3:41:6d: 9f:74:7e:d6:65:6c:c2:9e:17:9f:41:7f:31:b3:7c: c8:30:ea:3c:59:85:46:42:d4:e4:c8:97:00:2c:5b: 8d:b0:4e:3f:a2:70:bd:f9:80:57:18:63:79:66:f1: 92:18:4a:90:7e:cc:4f:51:d4:2a:73:b1:99:70:56: 63:1f:0d:46:f7:74:03:d1:6f:8b:b8:dd:7f:b7:05: d1:a0:dd:82:fc:4b:76:3f:3a:0e:64:8e:a1:71:0f: 17:6b:26:48:df:01:48:86:f8:11:3f:5c:81:c2:24: 3e:38:7c:8b:49:ff:23:0e:95:ab:bc:95:a8:9b:75: 46:a4:94:6e:d4:52:d5:6f:9d:7f:09:7c:84:ba:ba: e4:97:d2:b8:a7:63:ab:04:bc:69:93:99:2c:ce:71: 32:93:ff:ff:ca:cb:d7:07:e7:59:27:e4:c7:22:41: 61:76:37:7b:e4:16:69:61:e0:ab:f6:26:75:97:21: 32:c1:3a:ef:26:32:f8:1e:c7:f4:02:00:d2:bd:c4: ea:1c:92:10:41:58:7d:81:a7:55:a5:2e:52:53:e1: 60:c3:ca:73:14:f6:d5:86:61:d8:7e:33:5f:6d:7c: 14:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:3C:64:4C:0D:46:33:95:BD:9B:B6:50:B5:EF:80:93:D7:32:C1:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/412a0313-4cdd-3471-814c-6ed5f8341669.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.crl X509v3 Authority Key Identifier: keyid:91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer sbgp-ipAddrBlock: critical IPv4: 199.180.254.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:ab:28:d7:c0:47:a7:4e:cf:ab:94:c8:32:4c:33:6f:3b:53: ce:f7:8e:8e:3a:1d:1c:a9:88:c3:be:d6:46:50:b8:de:35:fe: 5d:4a:0b:02:18:dc:55:f8:9d:2e:f2:93:70:a7:7c:d3:a6:05: ee:cc:13:a3:7c:84:90:6e:ae:c0:36:c0:0b:14:7a:e7:df:92: 3a:b2:79:8a:45:2d:4e:d3:a0:23:c2:c3:c3:73:5c:af:14:81: ad:6d:4b:45:a1:a9:ad:45:9d:5f:ab:70:44:9b:66:3c:0c:f6: 1d:74:90:14:df:38:97:1f:dd:5d:5c:a4:8d:e5:c1:fa:cb:49: e7:c3:c0:45:54:b2:82:9b:74:22:a2:b5:d0:a6:94:9d:da:fa: 01:04:7e:d4:c2:9c:27:1e:d1:02:13:d9:e0:ea:3a:b3:d9:e8: f6:1c:5b:31:d7:7f:96:6d:aa:8d:fb:77:52:d7:1f:2d:2a:ee: 01:e8:fe:5b:6e:e8:34:2e:42:8f:1c:c0:40:fa:f8:d4:c2:5c: 60:dd:96:44:d1:71:f6:da:4a:7a:29:c2:b6:c7:e6:3d:ec:dd: ba:f7:1e:ff:d8:cc:8e:22:9f:97:ec:5a:e4:0a:cb:de:e4:86: b4:85:33:d4:0f:01:83:97:a1:e5:32:ae:0e:08:51:9b:53:74: 20:fa:64:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElLZAv0/RzcacOD2oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjJmM2MxNTItMTJiNi00NDFlLWI0ZDYtNjZmZWFiODcw YzRkMB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk NzNhOGY4YjQtNTYyMi00N2UwLTljNTgtNWRmNjhiOTllMDkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Aeg7FICa43RhflYTnKBW5IPSJPPR5aiK/6z QW2fdH7WZWzCnhefQX8xs3zIMOo8WYVGQtTkyJcALFuNsE4/onC9+YBXGGN5ZvGS GEqQfsxPUdQqc7GZcFZjHw1G93QD0W+LuN1/twXRoN2C/Et2PzoOZI6hcQ8XayZI 3wFIhvgRP1yBwiQ+OHyLSf8jDpWrvJWom3VGpJRu1FLVb51/CXyEurrkl9K4p2Or BLxpk5ksznEyk///ysvXB+dZJ+THIkFhdjd75BZpYeCr9iZ1lyEywTrvJjL4Hsf0 AgDSvcTqHJIQQVh9gadVpS5SU+Fgw8pzFPbVhmHYfjNfbXwUzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPM8ZEwNRjOVvZu2ULXvgJPXMsGKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yMmYz YzE1Mi0xMmI2LTQ0MWUtYjRkNi02NmZlYWI4NzBjNGQvNDEyYTAzMTMtNGNkZC0z NDcxLTgxNGMtNmVkNWY4MzQxNjY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjJmM2MxNTItMTJiNi00NDFlLWI0 ZDYtNjZmZWFiODcwYzRkLzIyZjNjMTUyLTEyYjYtNDQxZS1iNGQ2LTY2ZmVhYjg3 MGM0ZC5jcmwwHwYDVR0jBBgwFoAUkeRCH5hh7EAysvnCVlRvINOvvS8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yMmYzYzE1Mi0xMmI2LTQ0MWUtYjRkNi02NmZl YWI4NzBjNGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx7T+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHirKNfAR6dOz6uUyDJMM287U873jo46HRypiMO+1kZQuN41/l1KCwIY 3FX4nS7yk3CnfNOmBe7ME6N8hJBursA2wAsUeuffkjqyeYpFLU7ToCPCw8NzXK8U ga1tS0Whqa1FnV+rcESbZjwM9h10kBTfOJcf3V1cpI3lwfrLSefDwEVUsoKbdCKi tdCmlJ3a+gEEftTCnCce0QIT2eDqOrPZ6PYcWzHXf5Ztqo37d1LXHy0q7gHo/ltu 6DQuQo8cwED6+NTCXGDdlkTRcfbaSnopwrbH5j3s3br3Hv/YzI4in5fsWuQKy97k hrSFM9QPAYOXoeUyrg4IUZtTdCD6ZD8= -----END CERTIFICATE-----Generated at Mon Apr 7 16:22:45 2025 by rpki-client