$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/95a90206-f9c0-3b10-8ac5-b4579d72e37a.roa File: 95a90206-f9c0-3b10-8ac5-b4579d72e37a.roa (raw, json) Hash identifier: GyvtTN9l0OSjM4++a1cKbPV8RmMFKL6tDXuVmWCtK7Q= Subject key identifier: E0:FC:D0:87:AA:6A:67:8E:65:7E:A0:55:D9:FB:6F:69:B2:DD:24:5C Certificate issuer: /CN=7aabacdc-6419-4970-8298-c7c44ff8c8d4 Certificate serial: 010D0C9F43285848E16BE471A4212A4DBC0E7480 Authority key identifier: 4A:2D:AA:1A:EB:E3:1E:42:E1:65:2A:5D:F2:0D:1B:91:03:3B:D9:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/95a90206-f9c0-3b10-8ac5-b4579d72e37a.roa Signing time: Fri 14 Feb 2025 14:00:52 +0000 ROA not before: Fri 14 Feb 2025 14:00:52 +0000 ROA not after: Thu 15 May 2025 13:00:52 +0000 asID: 53334 IP address blocks: 199.38.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/7aabacdc-6419-4970-8298-c7c44ff8c8d4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/7aabacdc-6419-4970-8298-c7c44ff8c8d4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e1:6b:e4:71:a4:21:2a:4d:bc:0e:74:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7aabacdc-6419-4970-8298-c7c44ff8c8d4 Validity Not Before: Feb 14 14:00:52 2025 GMT Not After : May 15 13:00:52 2025 GMT Subject: CN=195ad1b3-48b7-4b89-943f-d38feb4cad98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:46:b2:a5:7d:98:e6:9b:93:df:01:f2:d3:cb: cc:b5:fc:ea:eb:92:c1:6e:ef:12:82:b3:c4:64:b2: b2:0f:3b:91:03:ec:d0:1f:db:70:c3:ce:7a:97:f3: a3:b1:dd:48:1a:c5:8e:7d:70:04:6c:d8:48:cb:55: ee:c7:42:5a:e0:7c:b9:cc:3e:07:f0:41:79:11:5f: 53:de:e6:92:43:dd:07:e6:84:89:bd:17:6b:df:10: 7c:7b:13:a5:5a:03:15:ba:82:57:ba:d7:95:58:ad: 24:9e:3f:d8:60:37:94:5c:cd:b7:c1:63:01:41:92: 24:0a:81:a3:5d:c6:37:43:eb:60:ba:5d:44:72:3a: a2:06:ca:60:87:f7:dc:d9:77:1d:55:a9:cc:4d:d0: c7:1b:f7:4b:72:a7:61:ba:19:41:fe:6e:57:f2:1f: 69:ed:97:be:b4:c3:74:d7:69:64:9b:9a:2e:26:4f: a5:da:6a:ab:ac:a7:61:8a:f5:f6:c6:d5:95:21:ea: 80:c5:d8:67:3a:e4:9e:c4:9f:16:ee:5b:ae:06:a1: f2:4f:38:16:24:4f:4a:b0:8b:88:29:c6:87:c0:9d: 6b:42:83:45:76:8f:4f:60:d5:f3:16:e2:ef:2f:20: 72:be:6c:44:7c:e6:ef:e6:77:60:1a:51:1b:7a:24: 9f:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:FC:D0:87:AA:6A:67:8E:65:7E:A0:55:D9:FB:6F:69:B2:DD:24:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/95a90206-f9c0-3b10-8ac5-b4579d72e37a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/7aabacdc-6419-4970-8298-c7c44ff8c8d4.crl X509v3 Authority Key Identifier: keyid:4A:2D:AA:1A:EB:E3:1E:42:E1:65:2A:5D:F2:0D:1B:91:03:3B:D9:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4.cer sbgp-ipAddrBlock: critical IPv4: 199.38.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:fb:ef:65:2b:49:5e:39:02:7c:b5:ad:f9:7a:fc:e9:b1:d6: f2:95:2b:a9:85:62:52:88:7d:6e:48:71:7b:ee:79:64:bf:85: d4:22:29:e7:46:70:16:1e:0d:2a:cf:bf:ae:0e:e3:db:83:af: d0:1d:dc:27:9f:da:c1:66:6c:ab:5d:e0:39:61:9b:9e:6d:73: 4a:82:df:9a:ed:15:03:94:bf:76:7b:db:b9:a7:d5:a2:0a:67: 67:08:fa:cc:c4:b5:e2:ed:2d:82:34:69:9b:20:9e:37:c0:bd: 93:84:0f:4b:0e:cb:5e:c5:17:b5:89:63:50:c9:8f:4a:25:ef: b5:84:2e:8f:43:4e:37:28:d9:3b:53:4b:64:96:81:7b:a7:7c: 21:38:04:56:bb:88:75:51:3d:f7:29:05:67:a3:f8:7f:aa:9f: 7d:dd:b2:da:c8:89:15:79:94:e0:4f:7b:f7:da:37:5f:92:46: 05:ee:1d:d4:0b:87:b4:0b:77:f6:d0:a7:72:8f:ea:44:44:4d: f7:5b:62:99:b9:d9:f1:ac:de:7d:57:5f:62:0f:4b:0b:11:83: ce:0d:f8:c3:d1:8e:c1:14:ae:9c:60:84:fb:49:09:c9:77:fb: e8:e8:3a:fd:48:b8:cc:e6:28:98:a9:40:f3:2c:60:2a:ed:49: 31:ea:fa:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjha+RxpCEqTbwOdIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2FhYmFjZGMtNjQxOS00OTcwLTgyOTgtYzdjNDRmZjhj OGQ0MB4XDTI1MDIxNDE0MDA1MloXDTI1MDUxNTEzMDA1MlowLzEtMCsGA1UEAxMk MTk1YWQxYjMtNDhiNy00Yjg5LTk0M2YtZDM4ZmViNGNhZDk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0aypX2Y5puT3wHy08vMtfzq65LBbu8SgrPE ZLKyDzuRA+zQH9tww856l/Ojsd1IGsWOfXAEbNhIy1Xux0Ja4Hy5zD4H8EF5EV9T 3uaSQ90H5oSJvRdr3xB8exOlWgMVuoJXuteVWK0knj/YYDeUXM23wWMBQZIkCoGj XcY3Q+tgul1EcjqiBspgh/fc2XcdVanMTdDHG/dLcqdhuhlB/m5X8h9p7Ze+tMN0 12lkm5ouJk+l2mqrrKdhivX2xtWVIeqAxdhnOuSexJ8W7luuBqHyTzgWJE9KsIuI KcaHwJ1rQoNFdo9PYNXzFuLvLyByvmxEfObv5ndgGlEbeiSfYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOD80IeqameOZX6gVdn7b2my3SRcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83YWFi YWNkYy02NDE5LTQ5NzAtODI5OC1jN2M0NGZmOGM4ZDQvOTVhOTAyMDYtZjljMC0z YjEwLThhYzUtYjQ1NzlkNzJlMzdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvN2FhYmFjZGMtNjQxOS00OTcwLTgy OTgtYzdjNDRmZjhjOGQ0LzdhYWJhY2RjLTY0MTktNDk3MC04Mjk4LWM3YzQ0ZmY4 YzhkNC5jcmwwHwYDVR0jBBgwFoAUSi2qGuvjHkLhZSpd8g0bkQM72TswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi83YWFiYWNkYy02NDE5LTQ5NzAtODI5OC1jN2M0 NGZmOGM4ZDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxyaUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACv772UrSV45Any1rfl6/Omx1vKVK6mFYlKIfW5IcXvueWS/hdQiKedG cBYeDSrPv64O49uDr9Ad3Cef2sFmbKtd4Dlhm55tc0qC35rtFQOUv3Z727mn1aIK Z2cI+szEteLtLYI0aZsgnjfAvZOED0sOy17FF7WJY1DJj0ol77WELo9DTjco2TtT S2SWgXunfCE4BFa7iHVRPfcpBWej+H+qn33dstrIiRV5lOBPe/faN1+SRgXuHdQL h7QLd/bQp3KP6kRETfdbYpm52fGs3n1XX2IPSwsRg84N+MPRjsEUrpxghPtJCcl3 ++joOv1IuMzmKJipQPMsYCrtSTHq+nU= -----END CERTIFICATE-----Generated at Sun Feb 16 15:26:03 2025 by rpki-client