$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3e00c5c-5e66-4d69-8173-b03c82880bc1/f40e0e47-941a-3211-9018-ea3a5bb33892.roa File: f40e0e47-941a-3211-9018-ea3a5bb33892.roa (raw, json) Hash identifier: VjRRhr4PJYS0zoy43QnaS3SgoaBNQOWxpklO91ao1HE= Subject key identifier: 3B:E8:BB:0C:94:5B:34:0B:BC:6E:2F:AD:2F:91:A1:9C:16:29:A3:65 Certificate issuer: /CN=a3e00c5c-5e66-4d69-8173-b03c82880bc1 Certificate serial: 010D0C9F432858488AE095C409967721C0273100 Authority key identifier: D4:74:D8:AD:B3:79:80:04:10:A4:04:FA:EC:10:CA:29:C1:49:53:E3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3e00c5c-5e66-4d69-8173-b03c82880bc1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3e00c5c-5e66-4d69-8173-b03c82880bc1/f40e0e47-941a-3211-9018-ea3a5bb33892.roa Signing time: Tue 14 Jan 2025 14:00:51 +0000 ROA not before: Tue 14 Jan 2025 14:00:51 +0000 ROA not after: Mon 14 Apr 2025 13:00:51 +0000 asID: 26661 IP address blocks: 199.96.184.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3e00c5c-5e66-4d69-8173-b03c82880bc1/a3e00c5c-5e66-4d69-8173-b03c82880bc1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3e00c5c-5e66-4d69-8173-b03c82880bc1/a3e00c5c-5e66-4d69-8173-b03c82880bc1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3e00c5c-5e66-4d69-8173-b03c82880bc1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:8a:e0:95:c4:09:96:77:21:c0:27:31:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3e00c5c-5e66-4d69-8173-b03c82880bc1 Validity Not Before: Jan 14 14:00:51 2025 GMT Not After : Apr 14 13:00:51 2025 GMT Subject: CN=ae52db97-8690-4c5d-b72d-73419f15da53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ea:68:ed:f4:cc:36:fb:a5:99:bf:9d:bf:da: 3b:05:4e:12:d4:21:60:cf:c4:af:bd:63:77:0a:4a: fb:52:31:37:d2:69:47:9e:0d:f0:b4:fc:f2:a5:e3: f9:7d:99:6a:c3:d8:cd:1d:18:23:6f:d9:97:80:41: fa:3d:25:db:1e:4f:ab:44:68:b1:4a:93:04:51:b9: ae:92:d8:10:bd:ac:4c:96:78:d9:5a:8d:f1:3e:a1: cb:09:e8:ba:b5:c4:25:50:b0:60:8e:81:ae:1d:8b: f5:e1:24:49:de:68:94:2c:d6:3d:a9:c6:2b:32:5b: 53:71:f9:b0:6c:1e:d7:18:1b:0e:81:30:69:09:9a: ca:1d:ed:bd:d0:b0:5b:56:a3:cf:1a:0a:3b:0f:bc: bc:4b:2d:4b:9d:d0:1f:8a:6e:85:40:3f:cb:5c:20: f9:99:3c:c2:66:2f:7c:4c:0d:c2:b7:ba:ac:59:99: a8:43:f8:4e:35:14:1d:22:6d:39:0d:86:ee:6e:71: 0b:9e:5a:ba:83:27:d2:27:79:6f:3e:0b:0d:f9:57: bb:9a:db:f6:12:06:56:92:2b:8f:23:e4:c9:6d:7d: c4:a1:24:68:15:fe:4b:aa:d6:ab:2a:b0:a2:4f:aa: 5d:0b:b5:35:66:8f:3b:27:75:ea:88:d3:63:39:7a: 35:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:E8:BB:0C:94:5B:34:0B:BC:6E:2F:AD:2F:91:A1:9C:16:29:A3:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3e00c5c-5e66-4d69-8173-b03c82880bc1/f40e0e47-941a-3211-9018-ea3a5bb33892.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3e00c5c-5e66-4d69-8173-b03c82880bc1/a3e00c5c-5e66-4d69-8173-b03c82880bc1.crl X509v3 Authority Key Identifier: keyid:D4:74:D8:AD:B3:79:80:04:10:A4:04:FA:EC:10:CA:29:C1:49:53:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3e00c5c-5e66-4d69-8173-b03c82880bc1.cer sbgp-ipAddrBlock: critical IPv4: 199.96.184.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:d2:51:87:02:b7:21:8c:41:a4:2e:fd:39:4b:1b:5f:a2:5f: 92:fc:91:aa:3c:9a:9c:3d:82:45:0b:50:5f:f7:64:52:0d:70: b5:4a:dc:21:38:1c:59:8e:d5:40:54:f6:81:c1:80:76:ff:da: 4a:0f:a6:f2:71:0e:32:1e:12:9b:e5:34:b8:64:2f:43:69:ec: 81:da:e7:e9:db:b7:44:64:be:ed:ef:49:99:b3:ae:75:f9:1f: 50:4f:2c:29:e4:cf:29:db:36:f8:7e:b5:5e:ab:78:71:7d:84: 90:07:af:41:d2:a7:cc:c5:33:84:24:b1:20:46:99:f8:eb:e6: 97:27:ef:29:6b:c3:5a:6e:c5:59:9f:19:29:cc:6c:d5:c4:55: 3b:0d:d3:22:d9:61:c8:70:a6:b3:68:3f:00:a8:b4:9b:7c:e0: 1d:17:cc:6d:87:45:ec:1c:9f:2b:b8:51:a8:29:72:95:88:37: 17:b1:a5:2d:37:21:6d:f1:54:41:4e:93:8c:5f:c5:f4:a9:65: b4:4c:a3:bb:c9:2e:37:1e:9d:65:64:61:f3:82:1c:ac:d5:72: 3b:00:e9:5e:cc:ab:e6:1b:a9:fd:7e:b3:fd:89:15:3a:1b:22: 76:20:03:0f:b8:77:43:a5:51:d1:d7:ba:54:85:84:6e:1d:37: 42:2c:48:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiK4JXECZZ3IcAnMQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTNlMDBjNWMtNWU2Ni00ZDY5LTgxNzMtYjAzYzgyODgw YmMxMB4XDTI1MDExNDE0MDA1MVoXDTI1MDQxNDEzMDA1MVowLzEtMCsGA1UEAxMk YWU1MmRiOTctODY5MC00YzVkLWI3MmQtNzM0MTlmMTVkYTUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoupo7fTMNvulmb+dv9o7BU4S1CFgz8SvvWN3 Ckr7UjE30mlHng3wtPzypeP5fZlqw9jNHRgjb9mXgEH6PSXbHk+rRGixSpMEUbmu ktgQvaxMlnjZWo3xPqHLCei6tcQlULBgjoGuHYv14SRJ3miULNY9qcYrMltTcfmw bB7XGBsOgTBpCZrKHe290LBbVqPPGgo7D7y8Sy1LndAfim6FQD/LXCD5mTzCZi98 TA3Ct7qsWZmoQ/hONRQdIm05DYbubnELnlq6gyfSJ3lvPgsN+Ve7mtv2EgZWkiuP I+TJbX3EoSRoFf5LqtarKrCiT6pdC7U1Zo87J3XqiNNjOXo1iQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDvouwyUWzQLvG4vrS+RoZwWKaNlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hM2Uw MGM1Yy01ZTY2LTRkNjktODE3My1iMDNjODI4ODBiYzEvZjQwZTBlNDctOTQxYS0z MjExLTkwMTgtZWEzYTViYjMzODkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYTNlMDBjNWMtNWU2Ni00ZDY5LTgx NzMtYjAzYzgyODgwYmMxL2EzZTAwYzVjLTVlNjYtNGQ2OS04MTczLWIwM2M4Mjg4 MGJjMS5jcmwwHwYDVR0jBBgwFoAU1HTYrbN5gAQQpAT67BDKKcFJU+MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hM2UwMGM1Yy01ZTY2LTRkNjktODE3My1iMDNj ODI4ODBiYzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx2C4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEbSUYcCtyGMQaQu/TlLG1+iX5L8kao8mpw9gkULUF/3ZFINcLVK3CE4 HFmO1UBU9oHBgHb/2koPpvJxDjIeEpvlNLhkL0Np7IHa5+nbt0Rkvu3vSZmzrnX5 H1BPLCnkzynbNvh+tV6reHF9hJAHr0HSp8zFM4QksSBGmfjr5pcn7ylrw1puxVmf GSnMbNXEVTsN0yLZYchwprNoPwCotJt84B0XzG2HRewcnyu4UagpcpWINxexpS03 IW3xVEFOk4xfxfSpZbRMo7vJLjcenWVkYfOCHKzVcjsA6V7Mq+Ybqf1+s/2JFTob InYgAw+4d0OlUdHXulSFhG4dN0IsSBc= -----END CERTIFICATE-----Generated at Fri Mar 14 11:12:26 2025 by rpki-client