$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/502add25-2a1e-3d32-aa97-b2f7d5d8dc9e.roa File: 502add25-2a1e-3d32-aa97-b2f7d5d8dc9e.roa (raw, json) Hash identifier: 6+uu1MyyUImmZB92Na88SOFf/Be+C/S+FfGU2+0Mir4= Subject key identifier: 13:F0:95:83:2E:21:6C:80:2F:9D:99:2A:DB:71:8E:A8:BD:20:78:5C Certificate issuer: /CN=603ec9c3-6a7f-4455-baee-5999e253e735 Certificate serial: 010D0C9F43285848E16BDB760C25A34DA909B100 Authority key identifier: 8E:2C:C0:E0:03:39:DF:F9:32:13:AA:61:21:F8:AB:2D:67:F8:BA:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/502add25-2a1e-3d32-aa97-b2f7d5d8dc9e.roa Signing time: Fri 14 Feb 2025 14:00:52 +0000 ROA not before: Fri 14 Feb 2025 14:00:52 +0000 ROA not after: Thu 15 May 2025 13:00:52 +0000 asID: 3677 IP address blocks: 199.201.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/603ec9c3-6a7f-4455-baee-5999e253e735.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/603ec9c3-6a7f-4455-baee-5999e253e735.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e1:6b:db:76:0c:25:a3:4d:a9:09:b1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=603ec9c3-6a7f-4455-baee-5999e253e735 Validity Not Before: Feb 14 14:00:52 2025 GMT Not After : May 15 13:00:52 2025 GMT Subject: CN=5418fe59-fbaa-42f6-9d7c-d02b2749b9ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:9b:77:01:0e:29:11:04:cc:fa:a5:f9:54:a3: 6e:9b:72:aa:2d:e9:43:d4:aa:29:ca:ff:59:c7:2a: 6c:c4:e3:20:22:3e:38:e5:a5:85:4f:01:5f:ad:3e: 3f:19:11:5c:f0:e8:b9:6a:45:36:10:ea:74:36:d2: 3b:09:81:80:31:74:e4:01:41:c2:98:75:9a:0e:7d: 43:ee:09:0a:67:8a:30:a8:27:98:cb:e5:88:8a:e2: 5e:52:69:e2:9e:23:7d:d4:84:dc:3c:8a:6c:90:74: 0b:02:40:ef:b3:7a:14:9e:d6:78:f9:95:b4:fb:5a: 51:22:3a:85:66:97:af:eb:a1:ca:e1:5e:dc:69:df: 29:f6:52:a8:33:c3:ee:f2:55:79:8e:9a:64:9f:b9: 31:8d:4e:26:ad:c3:5e:8e:79:37:cc:ee:16:52:cd: 05:6f:17:af:85:46:27:30:d5:6f:43:ae:64:1d:4a: 82:18:1e:8f:e1:c1:7a:3e:f3:a5:b7:c3:7f:05:a4: a7:2d:24:e1:ac:89:2d:81:f9:2e:a9:5b:f0:70:ca: ae:1c:4d:ff:5b:6b:05:5f:67:bb:87:bc:a6:cd:54: 2b:95:c5:21:4c:09:a7:66:55:3a:8d:e4:a6:9a:af: 99:86:a6:10:f7:37:5e:76:41:44:8a:c3:f9:33:89: b3:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:F0:95:83:2E:21:6C:80:2F:9D:99:2A:DB:71:8E:A8:BD:20:78:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/502add25-2a1e-3d32-aa97-b2f7d5d8dc9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/603ec9c3-6a7f-4455-baee-5999e253e735.crl X509v3 Authority Key Identifier: keyid:8E:2C:C0:E0:03:39:DF:F9:32:13:AA:61:21:F8:AB:2D:67:F8:BA:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735.cer sbgp-ipAddrBlock: critical IPv4: 199.201.205.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:90:af:f5:f5:e0:e0:0a:72:7f:69:86:5a:75:c7:ec:01:a1: 60:f2:47:c2:91:48:0b:14:62:76:b0:37:a4:37:d6:7c:e4:3d: 39:9e:e7:9b:28:d5:ae:ae:e6:19:8e:33:b3:eb:a7:81:4a:d6: b7:aa:40:74:8e:0b:df:02:77:a2:00:a6:4a:1f:b8:a9:f8:e5: 6b:56:76:87:bb:53:b2:ed:03:c8:42:5e:60:44:22:52:f9:51: 5e:19:43:8c:43:8d:09:8b:35:b1:9f:86:8c:3d:45:c5:52:21: a8:8c:7c:d0:c9:05:85:78:f8:1d:41:86:c5:f5:bd:3b:26:85: 5a:83:09:66:eb:0d:84:2a:63:3a:ab:3b:11:a7:2a:06:82:31: 8d:f6:d2:6b:5c:5e:e3:6d:9a:6f:3f:a6:a1:70:2b:5f:47:3e: d1:5c:6c:3c:8c:4d:62:72:4f:ed:53:14:26:7a:ce:5a:20:9e: 0e:6a:1c:93:36:a2:3b:98:7f:fb:db:e3:bf:3b:c4:cc:74:2b: e4:f9:39:b0:11:87:99:d0:fa:1e:50:6d:e7:d3:48:e8:35:4d: a9:f6:72:12:2d:59:52:06:e5:3c:30:5c:45:9f:2b:a5:0c:01: f3:da:72:f8:05:0a:0a:3e:57:39:e3:23:08:b6:05:bf:14:17: 80:29:02:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjha9t2DCWjTakJsQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAzZWM5YzMtNmE3Zi00NDU1LWJhZWUtNTk5OWUyNTNl NzM1MB4XDTI1MDIxNDE0MDA1MloXDTI1MDUxNTEzMDA1MlowLzEtMCsGA1UEAxMk NTQxOGZlNTktZmJhYS00MmY2LTlkN2MtZDAyYjI3NDliOWZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5t3AQ4pEQTM+qX5VKNum3KqLelD1Kopyv9Z xypsxOMgIj445aWFTwFfrT4/GRFc8Oi5akU2EOp0NtI7CYGAMXTkAUHCmHWaDn1D 7gkKZ4owqCeYy+WIiuJeUmniniN91ITcPIpskHQLAkDvs3oUntZ4+ZW0+1pRIjqF Zpev66HK4V7cad8p9lKoM8Pu8lV5jppkn7kxjU4mrcNejnk3zO4WUs0FbxevhUYn MNVvQ65kHUqCGB6P4cF6PvOlt8N/BaSnLSThrIktgfkuqVvwcMquHE3/W2sFX2e7 h7ymzVQrlcUhTAmnZlU6jeSmmq+ZhqYQ9zdedkFEisP5M4mzbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBPwlYMuIWyAL52ZKttxjqi9IHhcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82MDNl YzljMy02YTdmLTQ0NTUtYmFlZS01OTk5ZTI1M2U3MzUvNTAyYWRkMjUtMmExZS0z ZDMyLWFhOTctYjJmN2Q1ZDhkYzllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjAzZWM5YzMtNmE3Zi00NDU1LWJh ZWUtNTk5OWUyNTNlNzM1LzYwM2VjOWMzLTZhN2YtNDQ1NS1iYWVlLTU5OTllMjUz ZTczNS5jcmwwHwYDVR0jBBgwFoAUjizA4AM53/kyE6phIfirLWf4uvEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82MDNlYzljMy02YTdmLTQ0NTUtYmFlZS01OTk5 ZTI1M2U3MzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx8nNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALCQr/X14OAKcn9phlp1x+wBoWDyR8KRSAsUYnawN6Q31nzkPTme55so 1a6u5hmOM7Prp4FK1reqQHSOC98Cd6IApkofuKn45WtWdoe7U7LtA8hCXmBEIlL5 UV4ZQ4xDjQmLNbGfhow9RcVSIaiMfNDJBYV4+B1BhsX1vTsmhVqDCWbrDYQqYzqr OxGnKgaCMY320mtcXuNtmm8/pqFwK19HPtFcbDyMTWJyT+1TFCZ6zlogng5qHJM2 ojuYf/vb4787xMx0K+T5ObARh5nQ+h5QbefTSOg1Tan2chItWVIG5TwwXEWfK6UM AfPacvgFCgo+VznjIwi2Bb8UF4ApAuI= -----END CERTIFICATE-----Generated at Sun Feb 16 15:38:34 2025 by rpki-client