$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9/7b468ffc-7e24-3f4e-aae4-e8762b3587a1.roa File: 7b468ffc-7e24-3f4e-aae4-e8762b3587a1.roa (raw, json) Hash identifier: lKsxFErT8B5OZpmM7EIq1ulyo+CzcQHjyni81ZMaCzY= Subject key identifier: E8:A0:E4:1D:E8:63:A9:56:3C:BF:1E:D5:E3:02:4B:A1:C0:17:1F:A9 Certificate issuer: /CN=58fcef31-bc61-4217-a648-2d5bb00c93a9 Certificate serial: 010D0C9F43285848DA70FAD2842220A43F1572C0 Authority key identifier: 54:B3:F9:45:79:D3:B8:73:D6:52:7F:58:F3:60:23:04:04:50:4B:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9/7b468ffc-7e24-3f4e-aae4-e8762b3587a1.roa Signing time: Wed 12 Feb 2025 02:00:39 +0000 ROA not before: Wed 12 Feb 2025 02:00:39 +0000 ROA not after: Tue 13 May 2025 01:00:39 +0000 asID: 19281 IP address blocks: 199.249.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9/58fcef31-bc61-4217-a648-2d5bb00c93a9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9/58fcef31-bc61-4217-a648-2d5bb00c93a9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:da:70:fa:d2:84:22:20:a4:3f:15:72:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58fcef31-bc61-4217-a648-2d5bb00c93a9 Validity Not Before: Feb 12 02:00:39 2025 GMT Not After : May 13 01:00:39 2025 GMT Subject: CN=2976cbd9-1d19-430f-a582-81651d2e448e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:62:58:69:47:bf:d8:a3:9d:69:2c:2f:da:1c: ec:53:c1:2d:19:0e:73:5a:f5:ce:e3:aa:a4:62:9e: d3:7e:cc:7b:de:61:4e:4a:d1:e3:60:e7:5e:a3:2f: 2b:23:72:c8:70:5d:53:46:58:77:fa:47:bb:d9:46: e3:ba:20:07:af:0d:b6:32:b4:f1:22:32:00:dd:f0: 3c:05:b8:7d:4c:2b:00:a3:ac:f9:07:73:ee:07:e2: 18:76:04:9f:ed:84:d6:c1:df:f6:06:77:81:c8:f9: e1:b4:91:7d:a7:77:4a:9c:63:e3:2d:3e:28:70:48: 83:47:a4:30:8a:23:e1:2d:2c:51:57:c6:08:7f:96: 4a:0d:3c:16:82:ed:9f:dd:d4:66:d3:2b:9b:04:87: a6:fb:9c:f4:89:5f:e9:85:f2:59:29:b3:71:05:75: 90:3e:e4:7d:76:bb:8f:c4:56:50:d8:43:c9:ba:3b: d9:a9:11:bb:65:93:33:6f:69:b9:2f:6d:3d:c4:ed: 8b:86:f4:21:21:26:07:28:c1:b5:35:e9:6d:69:a6: 45:35:ce:22:bc:5e:18:5a:60:20:fa:90:f8:38:2a: ab:9c:71:c7:96:e8:ad:93:db:e4:41:ec:44:1d:a1: ab:b9:fb:9c:85:8c:f3:4e:52:cd:c6:b5:33:05:16: 33:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:A0:E4:1D:E8:63:A9:56:3C:BF:1E:D5:E3:02:4B:A1:C0:17:1F:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9/7b468ffc-7e24-3f4e-aae4-e8762b3587a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9/58fcef31-bc61-4217-a648-2d5bb00c93a9.crl X509v3 Authority Key Identifier: keyid:54:B3:F9:45:79:D3:B8:73:D6:52:7F:58:F3:60:23:04:04:50:4B:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9.cer sbgp-ipAddrBlock: critical IPv4: 199.249.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:43:2d:c0:32:b1:d7:7f:5a:d6:c0:00:96:5b:6b:bf:30:41: e9:33:69:83:5b:b2:4b:6a:14:2a:45:e5:f2:d3:d0:27:20:27: 09:5a:a0:fe:dc:b7:95:ee:4c:a9:e4:46:5c:e6:63:0d:9f:92: 36:b5:09:bd:f4:25:58:43:e1:8d:ff:b7:68:4a:8f:17:e8:b4: 8b:1b:2a:38:b5:98:2b:84:59:ed:c8:26:ea:72:51:d5:48:2f: 22:f4:b2:0c:e5:23:67:9c:9d:ba:4c:2d:45:76:fd:8c:e4:6a: c6:07:0f:cc:50:5a:c3:e8:de:20:16:f5:63:01:df:ce:72:c8: 44:e2:db:18:fc:53:d7:12:ca:41:65:ee:63:af:0d:4a:31:d6: ff:a2:43:61:17:84:4a:c4:d7:99:a0:66:17:5f:27:48:16:bb: 3e:13:85:41:56:14:b0:6b:d0:ca:1e:5a:6a:9d:f6:d9:8c:7f: fd:e0:7c:be:a8:52:58:52:ec:f0:eb:35:33:7d:63:8b:7d:22: 5f:4d:9f:67:da:b9:84:1d:3b:52:99:5c:9b:2e:a6:0d:ec:ac: 1e:bc:b9:4b:c0:1b:26:9f:c6:b3:f4:e7:d4:76:ac:66:55:24: 01:99:c1:3a:83:4d:80:68:b3:01:00:89:a2:b6:a8:0c:c6:be: fe:6f:f2:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjacPrShCIgpD8VcsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNThmY2VmMzEtYmM2MS00MjE3LWE2NDgtMmQ1YmIwMGM5 M2E5MB4XDTI1MDIxMjAyMDAzOVoXDTI1MDUxMzAxMDAzOVowLzEtMCsGA1UEAxMk Mjk3NmNiZDktMWQxOS00MzBmLWE1ODItODE2NTFkMmU0NDhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWJYaUe/2KOdaSwv2hzsU8EtGQ5zWvXO46qk Yp7Tfsx73mFOStHjYOdeoy8rI3LIcF1TRlh3+ke72UbjuiAHrw22MrTxIjIA3fA8 Bbh9TCsAo6z5B3PuB+IYdgSf7YTWwd/2BneByPnhtJF9p3dKnGPjLT4ocEiDR6Qw iiPhLSxRV8YIf5ZKDTwWgu2f3dRm0yubBIem+5z0iV/phfJZKbNxBXWQPuR9druP xFZQ2EPJujvZqRG7ZZMzb2m5L209xO2LhvQhISYHKMG1NeltaaZFNc4ivF4YWmAg +pD4OCqrnHHHluitk9vkQexEHaGrufuchYzzTlLNxrUzBRYzWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOig5B3oY6lWPL8e1eMCS6HAFx+pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81OGZj ZWYzMS1iYzYxLTQyMTctYTY0OC0yZDViYjAwYzkzYTkvN2I0NjhmZmMtN2UyNC0z ZjRlLWFhZTQtZTg3NjJiMzU4N2ExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNThmY2VmMzEtYmM2MS00MjE3LWE2 NDgtMmQ1YmIwMGM5M2E5LzU4ZmNlZjMxLWJjNjEtNDIxNy1hNjQ4LTJkNWJiMDBj OTNhOS5jcmwwHwYDVR0jBBgwFoAUVLP5RXnTuHPWUn9Y82AjBARQS2YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81OGZjZWYzMS1iYzYxLTQyMTctYTY0OC0yZDVi YjAwYzkzYTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/n/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJxDLcAysdd/WtbAAJZba78wQekzaYNbsktqFCpF5fLT0CcgJwlaoP7c t5XuTKnkRlzmYw2fkja1Cb30JVhD4Y3/t2hKjxfotIsbKji1mCuEWe3IJupyUdVI LyL0sgzlI2ecnbpMLUV2/YzkasYHD8xQWsPo3iAW9WMB385yyETi2xj8U9cSykFl 7mOvDUox1v+iQ2EXhErE15mgZhdfJ0gWuz4ThUFWFLBr0MoeWmqd9tmMf/3gfL6o UlhS7PDrNTN9Y4t9Il9Nn2fauYQdO1KZXJsupg3srB68uUvAGyafxrP059R2rGZV JAGZwTqDTYBoswEAiaK2qAzGvv5v8i4= -----END CERTIFICATE-----Generated at Sun Feb 16 15:43:29 2025 by rpki-client