$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/5b5be480-44ed-31ee-80f8-4d078a62e541.roa File: 5b5be480-44ed-31ee-80f8-4d078a62e541.roa (raw, json) Hash identifier: hj4aVnEtnHkTDYGaMnqusjnrn1L7JiPrSsxg3PgA1LY= Subject key identifier: 28:56:EB:CE:5E:9F:A9:13:50:18:76:AC:B4:96:D4:DA:D3:17:CD:55 Certificate issuer: /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Certificate serial: 010D0C9F432858485E359DED23CDDD8D66FA4250 Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/5b5be480-44ed-31ee-80f8-4d078a62e541.roa Signing time: Sun 29 Dec 2024 14:00:53 +0000 ROA not before: Sun 29 Dec 2024 14:00:53 +0000 ROA not after: Sat 29 Mar 2025 13:00:53 +0000 asID: 14061 IP address blocks: 199.4.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:5e:35:9d:ed:23:cd:dd:8d:66:fa:42:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Validity Not Before: Dec 29 14:00:53 2024 GMT Not After : Mar 29 13:00:53 2025 GMT Subject: CN=1ad0484b-afb8-4372-8b3b-e7aaa4a2114a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:f6:e3:52:60:62:31:e7:60:ec:bf:8a:0c:bd: f5:80:a4:c6:19:a3:fc:40:90:78:89:87:be:7d:0e: 73:e6:69:5e:ca:fd:f7:d0:11:b3:2b:ed:94:35:26: b0:16:fc:4d:4c:db:5f:2d:b2:49:7c:30:13:22:3b: 97:f9:cc:eb:5f:03:e4:a9:bb:6f:c5:42:e5:5b:49: d5:80:d1:c9:29:72:21:2e:62:48:62:a5:3a:97:4b: 37:f2:3b:f7:c4:ec:d5:3f:bc:2e:e2:ed:4d:47:19: c3:e4:f9:94:63:45:3f:7b:c0:2b:d2:6e:d1:b1:ae: 4f:0d:4f:53:27:f4:a2:41:d8:eb:6f:dd:cc:54:e1: 87:88:48:e9:cd:d0:54:87:8b:20:7b:c5:20:ff:ff: bf:16:65:4c:95:35:64:49:6d:b1:4f:d5:d3:16:5a: 81:3d:39:f7:26:6d:25:63:66:10:4f:d2:08:f1:2c: 9a:67:16:24:13:f1:8f:49:ff:a1:27:90:8b:5a:2f: a9:be:be:4e:4c:ca:0f:f2:60:ee:e0:ca:52:66:79: 78:25:87:99:b0:88:dd:d1:b4:91:ab:72:d6:cf:2e: ba:d5:1d:fb:1f:53:12:0b:69:9c:29:50:9f:2b:ed: 5e:76:11:7a:9b:db:80:ca:31:30:70:fb:78:e7:5a: fa:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:56:EB:CE:5E:9F:A9:13:50:18:76:AC:B4:96:D4:DA:D3:17:CD:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/5b5be480-44ed-31ee-80f8-4d078a62e541.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl X509v3 Authority Key Identifier: keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer sbgp-ipAddrBlock: critical IPv4: 199.4.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:60:15:d6:5f:de:ac:2b:de:3f:f1:97:0c:60:b2:75:8c:b7: 4c:44:0c:65:a4:9a:00:c0:b7:b4:cb:2a:8d:2e:1a:30:04:cc: f0:d3:a9:6b:c9:24:0b:09:59:d3:1f:da:18:e8:d7:65:77:55: 91:36:df:66:ea:bc:a7:98:98:6b:5a:6c:21:5e:e6:a7:c9:50: 71:44:2c:56:d3:14:7c:27:5a:06:46:0b:c0:4a:37:cc:ae:29: b3:34:11:49:e3:f0:76:09:ad:16:6e:42:48:4e:8e:f8:9b:f1: 0f:c3:7f:b9:bf:c9:e5:59:6b:3d:10:56:0e:42:56:58:51:45: 8f:a2:18:ce:d6:44:32:cd:f0:06:28:a2:68:79:58:60:6c:1a: 7e:39:81:3f:ff:86:27:0b:09:ba:55:1d:71:9f:5b:52:ba:7a: 54:2e:8c:a4:6f:f0:ee:64:5d:d0:99:bc:cf:de:21:2a:be:1b: 5f:45:ac:12:c7:41:18:63:62:af:87:2d:08:60:b0:54:2b:ca: 81:74:1b:17:28:48:ff:12:6d:f0:b6:58:b3:33:0d:f0:fd:03: 1a:6f:ab:17:bc:f8:be:30:69:03:54:08:25:ea:a5:cd:94:92: b6:e9:41:cb:13:cc:3a:d3:7e:17:44:30:0f:43:52:97:8c:17: f5:86:13:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEheNZ3tI83djWb6QlAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmI4OGQ0ZTUtN2FkZi00MmNlLWJhZTgtNzI2N2Y2MmUy Njk4MB4XDTI0MTIyOTE0MDA1M1oXDTI1MDMyOTEzMDA1M1owLzEtMCsGA1UEAxMk MWFkMDQ4NGItYWZiOC00MzcyLThiM2ItZTdhYWE0YTIxMTRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/bjUmBiMedg7L+KDL31gKTGGaP8QJB4iYe+ fQ5z5mleyv330BGzK+2UNSawFvxNTNtfLbJJfDATIjuX+czrXwPkqbtvxULlW0nV gNHJKXIhLmJIYqU6l0s38jv3xOzVP7wu4u1NRxnD5PmUY0U/e8Ar0m7Rsa5PDU9T J/SiQdjrb93MVOGHiEjpzdBUh4sge8Ug//+/FmVMlTVkSW2xT9XTFlqBPTn3Jm0l Y2YQT9II8SyaZxYkE/GPSf+hJ5CLWi+pvr5OTMoP8mDu4MpSZnl4JYeZsIjd0bSR q3LWzy661R37H1MSC2mcKVCfK+1edhF6m9uAyjEwcPt451r6uwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFChW685en6kTUBh2rLSW1NrTF81VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4 ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3ZjYyZTI2OTgvNWI1YmU0ODAtNDRlZC0z MWVlLTgwZjgtNGQwNzhhNjJlNTQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmI4OGQ0ZTUtN2FkZi00MmNlLWJh ZTgtNzI2N2Y2MmUyNjk4LzJiODhkNGU1LTdhZGYtNDJjZS1iYWU4LTcyNjdmNjJl MjY5OC5jcmwwHwYDVR0jBBgwFoAU5uHijCysedqw3jTrPPKu2zdBMwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3 ZjYyZTI2OTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwTfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKRgFdZf3qwr3j/xlwxgsnWMt0xEDGWkmgDAt7TLKo0uGjAEzPDTqWvJ JAsJWdMf2hjo12V3VZE232bqvKeYmGtabCFe5qfJUHFELFbTFHwnWgZGC8BKN8yu KbM0EUnj8HYJrRZuQkhOjvib8Q/Df7m/yeVZaz0QVg5CVlhRRY+iGM7WRDLN8AYo omh5WGBsGn45gT//hicLCbpVHXGfW1K6elQujKRv8O5kXdCZvM/eISq+G19FrBLH QRhjYq+HLQhgsFQryoF0GxcoSP8SbfC2WLMzDfD9Axpvqxe8+L4waQNUCCXqpc2U krbpQcsTzDrTfhdEMA9DUpeMF/WGE5o= -----END CERTIFICATE-----Generated at Fri Mar 14 10:46:11 2025 by rpki-client