$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6/4fbf2e6d-2935-36c0-8e49-fd5a8e002992.roa File: 4fbf2e6d-2935-36c0-8e49-fd5a8e002992.roa (raw, json) Hash identifier: nITnXGx1i4ajesEpVbuonC4XfIDNKJr8eK8Ro7hNwQE= Subject key identifier: EF:13:C4:1B:73:A8:90:00:35:59:28:3B:18:BE:03:71:06:FA:B7:D4 Certificate issuer: /CN=17e20fae-392b-4b22-b475-c6dff7142fa6 Certificate serial: 010D0C9F43285848EC9681FDD10CBE98A02FE700 Authority key identifier: A1:92:8C:F9:58:DA:45:07:22:A0:BC:C9:76:E1:3D:EE:08:F7:66:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6/4fbf2e6d-2935-36c0-8e49-fd5a8e002992.roa Signing time: Tue 18 Feb 2025 14:00:52 +0000 ROA not before: Tue 18 Feb 2025 14:00:52 +0000 ROA not after: Mon 19 May 2025 13:00:52 +0000 asID: 715 IP address blocks: 199.120.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6/17e20fae-392b-4b22-b475-c6dff7142fa6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6/17e20fae-392b-4b22-b475-c6dff7142fa6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ec:96:81:fd:d1:0c:be:98:a0:2f:e7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17e20fae-392b-4b22-b475-c6dff7142fa6 Validity Not Before: Feb 18 14:00:52 2025 GMT Not After : May 19 13:00:52 2025 GMT Subject: CN=27bdc626-c614-4744-9cf8-10b89a5c7d1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:05:b9:46:83:c3:a4:6e:0f:e8:7d:07:57:6c: bf:3b:af:9c:4a:f1:d2:d0:39:89:44:d7:b3:c5:48: 36:04:27:20:b2:a4:49:42:4b:ab:d8:4e:e4:b3:4c: 37:d4:b8:ef:f9:c0:83:44:9d:38:6e:b7:c1:63:e7: cd:6c:b0:38:a6:65:51:e0:4e:f5:96:d3:f9:63:92: 71:b9:e7:4e:26:60:5d:a1:96:d4:96:f0:3b:9b:90: e2:ad:36:46:7f:e6:47:ad:1b:a0:62:54:21:15:4c: cc:f8:28:15:86:17:5c:9b:06:19:60:96:4f:1a:a0: c5:d0:7e:5b:33:ee:25:77:24:95:1e:78:60:e0:aa: 5e:d0:ad:fe:34:e5:e2:1a:7d:39:8c:a8:54:5c:88: 6c:79:ba:50:1d:33:18:3f:fa:22:70:07:3a:68:7a: 7b:ae:ff:79:bb:db:4d:cc:54:5b:4c:71:4a:ad:e5: 88:b4:e0:3e:0e:2d:73:12:ba:15:16:60:d2:ef:48: 49:8e:9e:8f:20:60:60:b5:f2:dd:b7:17:bf:9a:bd: 5f:d0:85:7c:43:6f:06:b9:8d:22:d8:2c:7d:51:4b: 60:d9:a6:ce:cb:3a:63:d4:fa:54:33:57:21:87:ed: d1:0b:02:e0:dd:28:07:3f:ec:ce:be:a4:89:44:66: 96:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:13:C4:1B:73:A8:90:00:35:59:28:3B:18:BE:03:71:06:FA:B7:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6/4fbf2e6d-2935-36c0-8e49-fd5a8e002992.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6/17e20fae-392b-4b22-b475-c6dff7142fa6.crl X509v3 Authority Key Identifier: keyid:A1:92:8C:F9:58:DA:45:07:22:A0:BC:C9:76:E1:3D:EE:08:F7:66:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6.cer sbgp-ipAddrBlock: critical IPv4: 199.120.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:bd:bf:33:0d:2d:3b:89:42:7c:63:25:17:d2:39:27:03:53: a2:fa:52:0d:68:52:6c:f2:da:56:27:ed:dc:8d:40:e7:c6:cb: bb:ff:5c:0e:09:4b:3e:24:c8:03:18:a2:99:85:21:f9:44:35: 47:96:ed:fc:c1:45:18:c7:64:54:41:79:9c:53:8d:a4:9b:83: 56:0a:5b:86:b5:ad:61:5f:dd:67:7b:3d:a4:d9:ef:42:9d:0b: bf:59:55:93:b0:a5:59:05:f5:42:2b:dd:07:2a:ff:09:84:b5: 6a:11:31:3d:2f:44:f2:86:d3:a8:88:de:b3:87:d3:7e:54:1c: ba:49:0b:3d:e9:64:88:fc:77:4b:4c:34:0b:e3:2c:b5:14:84: f4:fc:34:c0:05:e2:db:af:79:2e:10:54:77:96:56:86:96:e8: 05:51:6f:c7:ce:4a:44:6f:be:d5:25:e4:c5:bc:60:d9:e3:60: 48:bf:6f:2a:b1:33:3a:b2:f1:5f:d4:61:f8:b1:f1:bb:f3:ea: ca:cc:e6:77:04:0e:7b:08:58:52:2c:e8:8c:64:c7:40:d3:50: 72:6d:f6:d6:69:a0:a3:cd:e9:a2:63:83:02:54:37:27:50:bf: b0:9b:92:60:0c:48:da:70:ea:43:94:be:59:23:63:c9:8f:a4: 81:47:d1:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjsloH90Qy+mKAv5wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTdlMjBmYWUtMzkyYi00YjIyLWI0NzUtYzZkZmY3MTQy ZmE2MB4XDTI1MDIxODE0MDA1MloXDTI1MDUxOTEzMDA1MlowLzEtMCsGA1UEAxMk MjdiZGM2MjYtYzYxNC00NzQ0LTljZjgtMTBiODlhNWM3ZDFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4QW5RoPDpG4P6H0HV2y/O6+cSvHS0DmJRNez xUg2BCcgsqRJQkur2E7ks0w31Ljv+cCDRJ04brfBY+fNbLA4pmVR4E71ltP5Y5Jx uedOJmBdoZbUlvA7m5DirTZGf+ZHrRugYlQhFUzM+CgVhhdcmwYZYJZPGqDF0H5b M+4ldySVHnhg4Kpe0K3+NOXiGn05jKhUXIhsebpQHTMYP/oicAc6aHp7rv95u9tN zFRbTHFKreWItOA+Di1zEroVFmDS70hJjp6PIGBgtfLdtxe/mr1f0IV8Q28GuY0i 2Cx9UUtg2abOyzpj1PpUM1chh+3RCwLg3SgHP+zOvqSJRGaWywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO8TxBtzqJAANVkoOxi+A3EG+rfUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xN2Uy MGZhZS0zOTJiLTRiMjItYjQ3NS1jNmRmZjcxNDJmYTYvNGZiZjJlNmQtMjkzNS0z NmMwLThlNDktZmQ1YThlMDAyOTkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMTdlMjBmYWUtMzkyYi00YjIyLWI0 NzUtYzZkZmY3MTQyZmE2LzE3ZTIwZmFlLTM5MmItNGIyMi1iNDc1LWM2ZGZmNzE0 MmZhNi5jcmwwHwYDVR0jBBgwFoAUoZKM+VjaRQcioLzJduE97gj3ZmswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8xN2UyMGZhZS0zOTJiLTRiMjItYjQ3NS1jNmRm ZjcxNDJmYTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx3iQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFS9vzMNLTuJQnxjJRfSOScDU6L6Ug1oUmzy2lYn7dyNQOfGy7v/XA4J Sz4kyAMYopmFIflENUeW7fzBRRjHZFRBeZxTjaSbg1YKW4a1rWFf3Wd7PaTZ70Kd C79ZVZOwpVkF9UIr3Qcq/wmEtWoRMT0vRPKG06iI3rOH035UHLpJCz3pZIj8d0tM NAvjLLUUhPT8NMAF4tuveS4QVHeWVoaW6AVRb8fOSkRvvtUl5MW8YNnjYEi/byqx Mzqy8V/UYfix8bvz6srM5ncEDnsIWFIs6Ixkx0DTUHJt9tZpoKPN6aJjgwJUNydQ v7CbkmAMSNpw6kOUvlkjY8mPpIFH0RU= -----END CERTIFICATE-----Generated at Sun Apr 6 08:37:44 2025 by rpki-client