$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/685100f9-3b28-4ef4-b2c2-cf327d9839d6/4b06c7a0-15f0-3df0-8fa7-356f45e68b30.roa File: 4b06c7a0-15f0-3df0-8fa7-356f45e68b30.roa (raw, json) Hash identifier: Y90IpPgL0n6Ppt93b+xx95+6ykcrNpmu+i1pq31TM4I= Subject key identifier: FB:FA:3E:F6:F4:02:D5:67:16:13:DC:52:58:A3:B5:2E:F7:E1:D6:68 Certificate issuer: /CN=685100f9-3b28-4ef4-b2c2-cf327d9839d6 Certificate serial: 010D0C9F43285848BFEBA0F0733781188686E440 Authority key identifier: 8B:12:82:82:9C:49:72:78:65:2C:C4:42:6F:27:84:A1:58:06:0B:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/685100f9-3b28-4ef4-b2c2-cf327d9839d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/685100f9-3b28-4ef4-b2c2-cf327d9839d6/4b06c7a0-15f0-3df0-8fa7-356f45e68b30.roa Signing time: Sun 02 Feb 2025 14:00:53 +0000 ROA not before: Sun 02 Feb 2025 14:00:53 +0000 ROA not after: Sat 03 May 2025 13:00:53 +0000 asID: 13520 IP address blocks: 199.74.222.0/24 maxlen: 24 199.74.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/685100f9-3b28-4ef4-b2c2-cf327d9839d6/685100f9-3b28-4ef4-b2c2-cf327d9839d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/685100f9-3b28-4ef4-b2c2-cf327d9839d6/685100f9-3b28-4ef4-b2c2-cf327d9839d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/685100f9-3b28-4ef4-b2c2-cf327d9839d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bf:eb:a0:f0:73:37:81:18:86:86:e4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=685100f9-3b28-4ef4-b2c2-cf327d9839d6 Validity Not Before: Feb 2 14:00:53 2025 GMT Not After : May 3 13:00:53 2025 GMT Subject: CN=51ad874c-6348-4078-b531-506a68be0ddb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:87:bd:9a:b7:a6:88:df:d2:f1:48:20:eb:76: 89:aa:3f:47:85:66:49:77:45:cc:14:d5:2d:d7:ac: c7:1b:c7:40:fc:6d:fd:cb:99:8f:73:2e:e3:87:61: 9a:a0:1a:15:8f:5c:f2:a4:73:e3:13:2e:fd:dd:3b: a4:00:8a:70:c1:ba:2f:c5:67:63:f4:a3:39:cb:28: b3:65:f8:96:11:ca:8a:33:f5:ec:be:e2:bb:57:53: 7d:22:2e:28:42:99:74:85:ae:7d:e4:e6:de:5b:d5: e9:7e:23:cb:91:2f:9d:cc:08:e2:d2:03:87:9e:c1: 99:25:59:b9:6c:4e:e7:ae:8d:93:16:77:5c:5d:d8: c1:84:82:2e:d3:1b:eb:54:81:83:64:05:00:e5:38: d8:6f:6c:14:2a:6b:01:39:f2:d2:cc:b7:3e:ff:e0: da:de:0f:00:8d:76:29:a1:c0:d2:1f:65:19:e5:d0: b9:ac:ad:7e:9e:55:c8:6d:fc:fd:89:71:69:fd:ee: 95:e1:1a:e3:6c:1b:93:63:29:1f:da:3e:2e:00:d5: b0:35:e2:52:14:6f:94:cb:56:8e:09:f2:54:6a:c2: 59:65:dc:3d:ae:a8:ad:15:bb:eb:d7:29:3b:ce:54: c4:d4:2a:ed:c2:85:c5:2b:4f:52:3e:46:f7:0c:ca: 00:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:FA:3E:F6:F4:02:D5:67:16:13:DC:52:58:A3:B5:2E:F7:E1:D6:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/685100f9-3b28-4ef4-b2c2-cf327d9839d6/4b06c7a0-15f0-3df0-8fa7-356f45e68b30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/685100f9-3b28-4ef4-b2c2-cf327d9839d6/685100f9-3b28-4ef4-b2c2-cf327d9839d6.crl X509v3 Authority Key Identifier: keyid:8B:12:82:82:9C:49:72:78:65:2C:C4:42:6F:27:84:A1:58:06:0B:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/685100f9-3b28-4ef4-b2c2-cf327d9839d6.cer sbgp-ipAddrBlock: critical IPv4: 199.74.222.0/24 199.74.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:ea:00:94:b5:58:45:ba:2b:3d:ab:37:84:ff:8a:6d:aa:95: 01:0d:38:83:a2:73:8a:f0:03:18:85:99:0a:ec:dd:b9:01:cd: 74:45:3d:ee:2b:1d:9b:fd:bd:e8:d9:fa:b8:a1:8f:0c:6e:8d: 8d:24:c7:89:4d:1a:54:ed:9d:c9:9c:6f:a4:00:5d:f9:e5:7d: f7:f8:3f:0d:87:66:c9:0c:fa:b2:1b:29:4b:10:2d:63:65:c5: 37:09:97:6d:7c:66:00:cf:13:d1:4d:05:df:ac:d0:a6:66:70: 26:97:d8:f3:53:e8:1f:53:7f:77:a4:29:4a:e6:1b:a9:fc:92: eb:8d:c7:53:af:cf:7a:5c:39:c5:21:8a:77:6a:54:b1:d3:a9: fe:c2:f1:25:ca:bf:08:a1:9e:e5:fd:cf:d2:08:85:9d:72:09: 70:d9:fe:a9:63:aa:2b:bd:60:a2:23:f6:c0:77:92:79:52:b2: 29:e3:6b:5f:f3:66:28:df:fb:e6:d8:e9:b6:9d:5a:cc:6b:cf: a3:1c:b9:b5:4b:89:de:29:7b:ed:6f:8b:48:d2:07:8a:5a:c2: 64:e4:53:9b:e2:b7:07:6b:83:28:d1:e5:35:cf:07:6b:05:3d: 19:6a:c7:20:0e:43:43:6f:26:4d:29:ae:27:72:06:8c:9d:00: 85:62:e2:61 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEi/66DwczeBGIaG5EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjg1MTAwZjktM2IyOC00ZWY0LWIyYzItY2YzMjdkOTgz OWQ2MB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk NTFhZDg3NGMtNjM0OC00MDc4LWI1MzEtNTA2YTY4YmUwZGRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4e9mremiN/S8Ugg63aJqj9HhWZJd0XMFNUt 16zHG8dA/G39y5mPcy7jh2GaoBoVj1zypHPjEy793TukAIpwwbovxWdj9KM5yyiz ZfiWEcqKM/XsvuK7V1N9Ii4oQpl0ha595ObeW9XpfiPLkS+dzAji0gOHnsGZJVm5 bE7nro2TFndcXdjBhIIu0xvrVIGDZAUA5TjYb2wUKmsBOfLSzLc+/+Da3g8AjXYp ocDSH2UZ5dC5rK1+nlXIbfz9iXFp/e6V4RrjbBuTYykf2j4uANWwNeJSFG+Uy1aO CfJUasJZZdw9rqitFbvr1yk7zlTE1CrtwoXFK09SPkb3DMoAmwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFPv6Pvb0AtVnFhPcUlijtS734dZoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82ODUx MDBmOS0zYjI4LTRlZjQtYjJjMi1jZjMyN2Q5ODM5ZDYvNGIwNmM3YTAtMTVmMC0z ZGYwLThmYTctMzU2ZjQ1ZTY4YjMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNjg1MTAwZjktM2IyOC00ZWY0LWIy YzItY2YzMjdkOTgzOWQ2LzY4NTEwMGY5LTNiMjgtNGVmNC1iMmMyLWNmMzI3ZDk4 MzlkNi5jcmwwHwYDVR0jBBgwFoAUixKCgpxJcnhlLMRCbyeEoVgGCw0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC82ODUxMDBmOS0zYjI4LTRlZjQtYjJjMi1jZjMy N2Q5ODM5ZDYuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAx0reAwQA x0r5MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAJDqAJS1WEW6Kz2rN4T/im2qlQENOIOic4rwAxiFmQrs3bkB zXRFPe4rHZv9vejZ+rihjwxujY0kx4lNGlTtncmcb6QAXfnlfff4Pw2HZskM+rIb KUsQLWNlxTcJl218ZgDPE9FNBd+s0KZmcCaX2PNT6B9Tf3ekKUrmG6n8kuuNx1Ov z3pcOcUhindqVLHTqf7C8SXKvwihnuX9z9IIhZ1yCXDZ/qljqiu9YKIj9sB3knlS sinja1/zZijf++bY6badWsxrz6McubVLid4pe+1vi0jSB4pawmTkU5vitwdrgyjR 5TXPB2sFPRlqxyAOQ0NvJk0pridyBoydAIVi4mE= -----END CERTIFICATE-----Generated at Sun Apr 6 22:45:01 2025 by rpki-client