$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/5c71001e-a55c-33db-bcc0-223bccba2b97.roa File: 5c71001e-a55c-33db-bcc0-223bccba2b97.roa (raw, json) Hash identifier: Fdr+lpCo5PbdUlLDFLHkqfIGRo7y95EzIavrp84WR4I= Subject key identifier: CD:32:97:03:56:8C:8E:02:47:04:C3:95:93:BC:56:D2:9E:DC:1E:C2 Certificate issuer: /CN=ad6556d7-60a4-4318-9d11-464fb8396d3e Certificate serial: 010D0C9F432858493ED3D1927DC0A2673B2FD040 Authority key identifier: 5D:C1:FD:9A:63:85:C1:8F:46:52:4A:B8:C4:62:F5:34:24:BC:AF:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/5c71001e-a55c-33db-bcc0-223bccba2b97.roa Signing time: Thu 20 Mar 2025 01:00:39 +0000 ROA not before: Thu 20 Mar 2025 01:00:39 +0000 ROA not after: Wed 18 Jun 2025 01:00:39 +0000 asID: 393220 IP address blocks: 199.71.0.0/24 maxlen: 24 2001:500:31::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/ad6556d7-60a4-4318-9d11-464fb8396d3e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/ad6556d7-60a4-4318-9d11-464fb8396d3e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3e:d3:d1:92:7d:c0:a2:67:3b:2f:d0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad6556d7-60a4-4318-9d11-464fb8396d3e Validity Not Before: Mar 20 01:00:39 2025 GMT Not After : Jun 18 01:00:39 2025 GMT Subject: CN=45663a99-7110-48f1-b191-466f79137709 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e4:61:1e:6a:d3:8b:bc:06:3a:59:3a:2e:44: 6c:1a:1d:33:f1:e3:b9:38:a9:96:34:e9:41:95:93: 3a:50:b5:54:1e:3b:66:b6:b1:5c:ba:08:3c:a7:86: c8:95:4b:71:80:9e:46:0e:c4:d9:b9:ca:a8:78:4f: 5a:43:3f:16:1b:e2:43:2d:25:43:2a:8c:70:f2:e1: dd:eb:b8:34:1c:41:d2:64:fc:33:1c:53:5e:33:62: 1f:5c:5b:b7:9c:fe:9f:de:45:d3:e5:f7:ce:a4:a6: ed:ea:c1:21:53:96:2a:4b:42:28:1e:ac:61:d6:06: b6:38:98:5b:68:25:1c:ee:44:eb:a9:a1:60:a3:8a: ad:36:f7:4a:a7:2c:81:cf:c1:5f:3d:32:a2:3c:dc: bd:cc:47:bd:2a:31:7c:06:c6:11:ce:2f:78:86:24: 9d:d8:99:d2:ff:31:f1:d0:cb:3d:49:a6:f8:74:7d: e4:7d:67:2b:80:d8:b7:fa:73:56:34:6b:56:c9:15: a2:81:a0:94:13:d9:ba:ab:c3:d4:b0:a3:83:cb:00: ae:a2:06:cf:59:ee:26:bd:ae:82:1b:63:5e:f9:46: 32:3b:18:06:ae:e3:2a:5b:75:c1:df:63:58:87:17: 8f:ab:7e:5c:e5:35:d7:f6:b5:eb:80:2b:8c:64:0c: 2e:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:32:97:03:56:8C:8E:02:47:04:C3:95:93:BC:56:D2:9E:DC:1E:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/5c71001e-a55c-33db-bcc0-223bccba2b97.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/ad6556d7-60a4-4318-9d11-464fb8396d3e.crl X509v3 Authority Key Identifier: keyid:5D:C1:FD:9A:63:85:C1:8F:46:52:4A:B8:C4:62:F5:34:24:BC:AF:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e.cer sbgp-ipAddrBlock: critical IPv4: 199.71.0.0/24 IPv6: 2001:500:31::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c1:ec:8c:be:0c:75:69:9f:b1:53:98:0c:aa:90:25:79:e1:d3: 63:93:9a:2b:28:db:64:e4:fc:6b:37:25:61:00:26:10:22:d8: b3:ce:9d:9b:a0:48:84:c6:08:26:15:9e:41:f3:8d:18:e7:82: ce:95:e2:d2:7a:8c:42:e9:b4:99:11:68:b8:20:e8:d0:f0:6e: 2d:06:4d:c1:30:fe:65:05:f7:ec:8d:ed:40:f2:74:77:16:ff: dc:37:82:62:12:10:e5:55:63:a1:5b:0c:c6:13:b7:b5:0d:23: e9:b5:8c:86:7e:b0:e2:ae:29:73:38:66:43:c3:68:31:4b:fc: 12:e1:60:ff:a6:02:d7:a0:b8:5d:fe:15:bc:93:32:c5:3d:3d: 30:3a:59:ef:9b:3c:17:72:aa:1b:97:d2:0b:01:5a:9f:e9:8c: 7d:fe:f8:d0:a6:b7:66:b0:1a:f8:d0:7c:4d:23:7e:99:65:e6: 11:38:4d:03:62:a6:4f:41:10:29:eb:7b:b8:9f:ff:dc:b3:37: 1d:05:1c:ef:13:cd:99:e1:5d:56:2a:41:c2:a2:d9:fd:2d:9d: e4:02:36:c5:f4:6d:2e:e3:47:68:90:3b:23:4f:76:fd:3e:61: 3f:ce:ee:71:a3:75:e5:a2:eb:a0:4a:c9:2f:3c:ab:c5:43:3b: 2b:17:4b:a2 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEk+09GSfcCiZzsv0EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWQ2NTU2ZDctNjBhNC00MzE4LTlkMTEtNDY0ZmI4Mzk2 ZDNlMB4XDTI1MDMyMDAxMDAzOVoXDTI1MDYxODAxMDAzOVowLzEtMCsGA1UEAxMk NDU2NjNhOTktNzExMC00OGYxLWIxOTEtNDY2Zjc5MTM3NzA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtORhHmrTi7wGOlk6LkRsGh0z8eO5OKmWNOlB lZM6ULVUHjtmtrFcugg8p4bIlUtxgJ5GDsTZucqoeE9aQz8WG+JDLSVDKoxw8uHd 67g0HEHSZPwzHFNeM2IfXFu3nP6f3kXT5ffOpKbt6sEhU5YqS0IoHqxh1ga2OJhb aCUc7kTrqaFgo4qtNvdKpyyBz8FfPTKiPNy9zEe9KjF8BsYRzi94hiSd2JnS/zHx 0Ms9Sab4dH3kfWcrgNi3+nNWNGtWyRWigaCUE9m6q8PUsKODywCuogbPWe4mva6C G2Ne+UYyOxgGruMqW3XB32NYhxePq35c5TXX9rXrgCuMZAwu/wIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFM0ylwNWjI4CRwTDlZO8VtKe3B7CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9hZDY1 NTZkNy02MGE0LTQzMTgtOWQxMS00NjRmYjgzOTZkM2UvNWM3MTAwMWUtYTU1Yy0z M2RiLWJjYzAtMjIzYmNjYmEyYjk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYWQ2NTU2ZDctNjBhNC00MzE4LTlk MTEtNDY0ZmI4Mzk2ZDNlL2FkNjU1NmQ3LTYwYTQtNDMxOC05ZDExLTQ2NGZiODM5 NmQzZS5jcmwwHwYDVR0jBBgwFoAUXcH9mmOFwY9GUkq4xGL1NCS8r44wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9hZDY1NTZkNy02MGE0LTQzMTgtOWQxMS00NjRm YjgzOTZkM2UuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAx0cAMA8E AgACMAkDBwAgAQUAADEwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAweyMvgx1aZ+xU5gMqpAleeHTY5OaKyjb ZOT8azclYQAmECLYs86dm6BIhMYIJhWeQfONGOeCzpXi0nqMQum0mRFouCDo0PBu LQZNwTD+ZQX37I3tQPJ0dxb/3DeCYhIQ5VVjoVsMxhO3tQ0j6bWMhn6w4q4pczhm Q8NoMUv8EuFg/6YC16C4Xf4VvJMyxT09MDpZ75s8F3KqG5fSCwFan+mMff740Ka3 ZrAa+NB8TSN+mWXmEThNA2KmT0EQKet7uJ//3LM3HQUc7xPNmeFdVipBwqLZ/S2d 5AI2xfRtLuNHaJA7I092/T5hP87ucaN15aLroErJLzyrxUM7KxdLog== -----END CERTIFICATE-----Generated at Sat Apr 12 02:06:39 2025 by rpki-client