$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/23c7fd31-20a5-4b68-a62a-88cba184f1be/9bd82531-e23a-32e9-a00b-bac423c66412.roa File: 9bd82531-e23a-32e9-a00b-bac423c66412.roa (raw, json) Hash identifier: KNWRwfEiUWDhzeEc4clZX+ASoTxXWhWMJP79dGDWqK8= Subject key identifier: 4A:B1:97:FD:59:72:10:12:E6:61:9F:F9:C8:3C:20:FF:F7:D8:EC:00 Certificate issuer: /CN=23c7fd31-20a5-4b68-a62a-88cba184f1be Certificate serial: 010D0C9F4328584917DC313A18475A15F2D6BF00 Authority key identifier: EC:D4:DA:74:03:90:9F:29:73:CD:8F:80:02:71:19:0B:03:C7:9B:14 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/23c7fd31-20a5-4b68-a62a-88cba184f1be.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/23c7fd31-20a5-4b68-a62a-88cba184f1be/9bd82531-e23a-32e9-a00b-bac423c66412.roa Signing time: Thu 06 Mar 2025 02:00:39 +0000 ROA not before: Thu 06 Mar 2025 02:00:39 +0000 ROA not after: Wed 04 Jun 2025 01:00:39 +0000 asID: 29696 IP address blocks: 162.249.48.0/21 maxlen: 24 199.34.14.0/23 maxlen: 24 199.200.56.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/23c7fd31-20a5-4b68-a62a-88cba184f1be/23c7fd31-20a5-4b68-a62a-88cba184f1be.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/23c7fd31-20a5-4b68-a62a-88cba184f1be/23c7fd31-20a5-4b68-a62a-88cba184f1be.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/23c7fd31-20a5-4b68-a62a-88cba184f1be.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:17:dc:31:3a:18:47:5a:15:f2:d6:bf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23c7fd31-20a5-4b68-a62a-88cba184f1be Validity Not Before: Mar 6 02:00:39 2025 GMT Not After : Jun 4 01:00:39 2025 GMT Subject: CN=33113091-e531-4118-9e40-7822e1a0f625 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:07:83:f6:6c:15:9e:09:86:21:66:fd:8a:ed: 83:4f:01:2a:7a:dd:43:bd:82:c7:6f:42:04:a6:7d: 19:d6:e6:f3:cf:30:69:66:b9:e2:50:9e:57:f3:d2: dd:71:f5:ab:9b:7d:d0:0c:e1:6a:72:98:2f:b6:d3: 6f:66:79:69:41:67:7d:ef:9a:46:19:c9:d7:14:3d: 5b:56:ff:31:f5:86:99:ec:d1:77:78:1a:17:9c:a3: ee:67:c1:d0:12:45:10:ea:fa:20:1d:72:b5:34:4d: 19:e1:71:68:8e:a9:66:ca:db:69:86:6b:52:8d:b2: df:63:1b:eb:71:fd:a8:34:b4:7e:e2:07:79:c2:e4: fd:15:c3:3d:7b:1a:7d:e3:69:ef:a3:0c:e5:18:47: 18:63:e6:6f:1f:e8:e6:ae:b2:ca:d1:ba:9a:05:18: 98:e0:a8:4e:11:d0:a1:b3:b0:03:8d:b2:ff:db:f4: 5d:2a:8d:0b:93:9f:b7:c8:04:9c:3e:e9:ab:fb:c0: da:d8:f5:3e:10:dc:dd:5e:ec:d1:3d:be:b9:da:03: be:5d:7d:8c:a6:d9:79:5b:5d:22:38:5b:88:21:ce: fd:8c:13:a6:77:23:fb:cb:14:91:f5:58:2d:29:bb: 84:7e:e5:2b:87:75:58:8e:eb:75:0d:d5:61:ff:49: 09:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:B1:97:FD:59:72:10:12:E6:61:9F:F9:C8:3C:20:FF:F7:D8:EC:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/23c7fd31-20a5-4b68-a62a-88cba184f1be/9bd82531-e23a-32e9-a00b-bac423c66412.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/23c7fd31-20a5-4b68-a62a-88cba184f1be/23c7fd31-20a5-4b68-a62a-88cba184f1be.crl X509v3 Authority Key Identifier: keyid:EC:D4:DA:74:03:90:9F:29:73:CD:8F:80:02:71:19:0B:03:C7:9B:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/23c7fd31-20a5-4b68-a62a-88cba184f1be.cer sbgp-ipAddrBlock: critical IPv4: 162.249.48.0/21 199.34.14.0/23 199.200.56.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:d7:7a:1c:7f:d8:6d:3f:91:6e:83:ef:9a:6b:06:4e:98:84: d8:10:30:d0:2c:fd:c5:65:12:19:bf:3a:d5:b5:fe:7e:1a:ec: 97:23:7b:29:aa:b7:f2:12:5c:61:42:31:17:34:9f:57:ba:62: 61:fc:a6:f6:de:e9:2d:1f:89:3c:3a:39:d2:75:c3:1d:82:5f: 75:8d:3b:74:e8:80:48:5d:c6:11:59:f8:06:cd:8d:8d:5a:7a: 72:a4:c2:4a:64:5d:8a:3e:50:0c:b9:68:ab:1b:71:8a:05:04: 1c:62:06:fa:51:16:27:ae:31:9c:64:81:db:52:61:5f:49:86: 10:52:73:5e:f6:57:8b:bf:10:b1:73:6f:92:bc:f6:ba:10:dd: 16:85:85:19:c7:61:f6:46:b0:f6:63:18:c7:7c:02:d7:91:8b: 10:ff:0f:79:55:27:aa:ce:88:a6:d2:db:61:00:a6:f1:77:70: 37:eb:34:07:9c:4e:83:ad:a8:48:e4:76:be:4d:0d:68:93:6a: 62:5a:ea:19:b9:7c:58:ab:21:24:0c:2c:e2:89:59:0e:49:47: 2a:ee:23:b9:24:c3:b1:48:13:84:25:8a:f0:0f:84:28:eb:7c: 29:be:a8:6e:c7:cf:96:23:e2:72:ed:1f:79:f8:21:04:f3:5f: 23:2d:8f:ce -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEkX3DE6GEdaFfLWvwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNjN2ZkMzEtMjBhNS00YjY4LWE2MmEtODhjYmExODRm MWJlMB4XDTI1MDMwNjAyMDAzOVoXDTI1MDYwNDAxMDAzOVowLzEtMCsGA1UEAxMk MzMxMTMwOTEtZTUzMS00MTE4LTllNDAtNzgyMmUxYTBmNjI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgeD9mwVngmGIWb9iu2DTwEqet1DvYLHb0IE pn0Z1ubzzzBpZrniUJ5X89LdcfWrm33QDOFqcpgvttNvZnlpQWd975pGGcnXFD1b Vv8x9YaZ7NF3eBoXnKPuZ8HQEkUQ6vogHXK1NE0Z4XFojqlmyttphmtSjbLfYxvr cf2oNLR+4gd5wuT9FcM9exp942nvowzlGEcYY+ZvH+jmrrLK0bqaBRiY4KhOEdCh s7ADjbL/2/RdKo0Lk5+3yAScPumr+8Da2PU+ENzdXuzRPb652gO+XX2Mptl5W10i OFuIIc79jBOmdyP7yxSR9VgtKbuEfuUrh3VYjut1DdVh/0kJ/wIDAQABo4IDYTCC A10wHQYDVR0OBBYEFEqxl/1ZchAS5mGf+cg8IP/32OwAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8yM2M3 ZmQzMS0yMGE1LTRiNjgtYTYyYS04OGNiYTE4NGYxYmUvOWJkODI1MzEtZTIzYS0z MmU5LWEwMGItYmFjNDIzYzY2NDEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMjNjN2ZkMzEtMjBhNS00YjY4LWE2 MmEtODhjYmExODRmMWJlLzIzYzdmZDMxLTIwYTUtNGI2OC1hNjJhLTg4Y2JhMTg0 ZjFiZS5jcmwwHwYDVR0jBBgwFoAU7NTadAOQnylzzY+AAnEZCwPHmxQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8yM2M3ZmQzMS0yMGE1LTRiNjgtYTYyYS04OGNi YTE4NGYxYmUuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDovkwAwQB xyIOAwQDx8g4MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAC3Xehx/2G0/kW6D75prBk6YhNgQMNAs/cVlEhm/ OtW1/n4a7Jcjeymqt/ISXGFCMRc0n1e6YmH8pvbe6S0fiTw6OdJ1wx2CX3WNO3To gEhdxhFZ+AbNjY1aenKkwkpkXYo+UAy5aKsbcYoFBBxiBvpRFieuMZxkgdtSYV9J hhBSc172V4u/ELFzb5K89roQ3RaFhRnHYfZGsPZjGMd8AteRixD/D3lVJ6rOiKbS 22EApvF3cDfrNAecToOtqEjkdr5NDWiTamJa6hm5fFirISQMLOKJWQ5JRyruI7kk w7FIE4QlivAPhCjrfCm+qG7Hz5Yj4nLtH3n4IQTzXyMtj84= -----END CERTIFICATE-----Generated at Fri Apr 4 19:03:24 2025 by rpki-client