$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a/300a5a4d-5d0d-3e22-a9a1-e2591a8e363d.roa File: 300a5a4d-5d0d-3e22-a9a1-e2591a8e363d.roa (raw, json) Hash identifier: y2ztKJUb6yicdCDU0xjw6uZRZq08akO2VWxskEH1kt4= Subject key identifier: 71:21:98:14:32:F7:D9:35:30:70:97:C9:C9:0A:E3:B9:1D:BD:17:B4 Certificate issuer: /CN=cd8deff7-6be9-4d16-8349-9f6439775b0a Certificate serial: 010D0C9F43285848DA70F8125552D585BDE06C40 Authority key identifier: CE:14:25:01:6D:C5:67:B9:24:32:56:F1:DC:CA:9A:A3:B7:DD:74:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a/300a5a4d-5d0d-3e22-a9a1-e2591a8e363d.roa Signing time: Wed 12 Feb 2025 02:00:39 +0000 ROA not before: Wed 12 Feb 2025 02:00:39 +0000 ROA not after: Tue 13 May 2025 01:00:39 +0000 asID: 2728 IP address blocks: 162.255.88.0/21 maxlen: 24 199.185.174.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a/cd8deff7-6be9-4d16-8349-9f6439775b0a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a/cd8deff7-6be9-4d16-8349-9f6439775b0a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:da:70:f8:12:55:52:d5:85:bd:e0:6c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd8deff7-6be9-4d16-8349-9f6439775b0a Validity Not Before: Feb 12 02:00:39 2025 GMT Not After : May 13 01:00:39 2025 GMT Subject: CN=f535bfd7-e0fe-44c9-94bb-b416cd77d163 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:87:44:5a:82:a9:41:21:8b:96:22:d0:89:ca: 35:8d:cf:39:3d:87:81:99:c0:6a:54:58:fa:40:bd: 2e:54:27:17:70:6c:67:c1:f1:3f:68:d8:86:55:aa: 9b:66:c7:f3:a3:19:4d:ec:d5:db:79:21:14:30:fc: 82:f0:d0:84:37:ee:bb:a1:2b:c0:55:2a:ad:06:cf: 8d:21:d8:28:d5:77:b3:77:c1:7b:36:a9:27:ed:06: 98:52:7f:b1:82:9c:ae:3d:0b:09:e6:29:aa:d1:65: 50:4c:af:f6:cd:ad:de:2a:bb:f1:77:c7:fd:5b:14: 55:99:1b:63:19:55:57:4f:3f:70:f2:c0:95:1e:c3: 5a:ed:a0:8d:f8:4e:6e:4c:0e:ca:03:ee:43:38:15: 5b:94:cb:18:87:cc:4c:1b:12:b4:87:cf:09:2a:15: 14:f6:d7:c2:71:8c:c4:77:54:74:40:0e:d3:68:48: dc:83:ed:b8:21:30:9e:48:3e:29:c5:d1:34:54:5d: d1:09:96:83:91:3e:fa:9c:62:17:1c:84:ef:99:7b: 97:ba:ba:c4:8e:f3:e6:01:84:0c:64:83:44:02:af: 52:ed:65:95:24:be:45:95:b1:59:06:ba:53:20:91: 28:6e:6c:d2:57:6d:86:cc:9d:93:fb:e2:27:07:ae: f3:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:21:98:14:32:F7:D9:35:30:70:97:C9:C9:0A:E3:B9:1D:BD:17:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a/300a5a4d-5d0d-3e22-a9a1-e2591a8e363d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a/cd8deff7-6be9-4d16-8349-9f6439775b0a.crl X509v3 Authority Key Identifier: keyid:CE:14:25:01:6D:C5:67:B9:24:32:56:F1:DC:CA:9A:A3:B7:DD:74:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a.cer sbgp-ipAddrBlock: critical IPv4: 162.255.88.0/21 199.185.174.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:08:c5:ff:77:d3:94:a0:25:07:1d:a6:a1:55:39:61:13:81: 34:9f:ef:c1:b0:9d:bc:6c:49:70:ca:48:ae:f8:58:e2:a6:a4: 88:d5:7a:c7:1c:2c:37:49:5b:70:6b:5f:47:47:88:dd:c0:d4: 24:9e:07:01:9f:cf:44:6e:35:64:30:01:9d:69:e4:7f:78:ab: 90:4f:c4:1f:76:88:95:d6:ad:31:89:2a:a9:ab:da:b8:b6:1b: 6f:6d:69:0c:25:76:5b:f4:33:47:1e:24:6b:d5:cc:ed:3a:9e: 2a:a4:53:ff:d6:e2:ae:8d:5d:8a:2d:72:7a:5a:ce:9c:78:81: 04:02:d4:8f:b1:df:7b:d3:42:01:ba:42:f4:17:0b:a6:e8:bb: 65:9f:ba:32:61:ad:28:52:40:e7:ec:a1:9c:07:b3:de:14:18: 46:16:cd:6d:78:ed:2f:83:81:f5:c8:d5:3e:c2:95:c4:1b:fa: 75:64:09:2b:1e:cd:74:8e:3e:66:2d:11:52:06:6e:4a:76:63: 8b:7b:91:bd:fc:d3:0f:47:56:35:76:95:73:34:05:59:6a:39: 77:cf:5a:43:b7:bc:50:25:db:6e:6e:7b:94:0e:83:4d:65:7b: 9c:26:41:6c:76:51:1c:23:f7:71:01:03:34:9d:6d:69:0b:ce: fc:f9:c6:6f -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEjacPgSVVLVhb3gbEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2Q4ZGVmZjctNmJlOS00ZDE2LTgzNDktOWY2NDM5Nzc1 YjBhMB4XDTI1MDIxMjAyMDAzOVoXDTI1MDUxMzAxMDAzOVowLzEtMCsGA1UEAxMk ZjUzNWJmZDctZTBmZS00NGM5LTk0YmItYjQxNmNkNzdkMTYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkodEWoKpQSGLliLQico1jc85PYeBmcBqVFj6 QL0uVCcXcGxnwfE/aNiGVaqbZsfzoxlN7NXbeSEUMPyC8NCEN+67oSvAVSqtBs+N Idgo1Xezd8F7Nqkn7QaYUn+xgpyuPQsJ5imq0WVQTK/2za3eKrvxd8f9WxRVmRtj GVVXTz9w8sCVHsNa7aCN+E5uTA7KA+5DOBVblMsYh8xMGxK0h88JKhUU9tfCcYzE d1R0QA7TaEjcg+24ITCeSD4pxdE0VF3RCZaDkT76nGIXHITvmXuXurrEjvPmAYQM ZINEAq9S7WWVJL5FlbFZBrpTIJEobmzSV22GzJ2T++InB67z5QIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFHEhmBQy99k1MHCXyckK47kdvRe0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jZDhk ZWZmNy02YmU5LTRkMTYtODM0OS05ZjY0Mzk3NzViMGEvMzAwYTVhNGQtNWQwZC0z ZTIyLWE5YTEtZTI1OTFhOGUzNjNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvY2Q4ZGVmZjctNmJlOS00ZDE2LTgz NDktOWY2NDM5Nzc1YjBhL2NkOGRlZmY3LTZiZTktNGQxNi04MzQ5LTlmNjQzOTc3 NWIwYS5jcmwwHwYDVR0jBBgwFoAUzhQlAW3FZ7kkMlbx3Mqao7fddM0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jZDhkZWZmNy02YmU5LTRkMTYtODM0OS05ZjY0 Mzk3NzViMGEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDov9YAwQB x7muMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAFcIxf9305SgJQcdpqFVOWETgTSf78GwnbxsSXDKSK74WOKm pIjVesccLDdJW3BrX0dHiN3A1CSeBwGfz0RuNWQwAZ1p5H94q5BPxB92iJXWrTGJ Kqmr2ri2G29taQwldlv0M0ceJGvVzO06niqkU//W4q6NXYotcnpazpx4gQQC1I+x 33vTQgG6QvQXC6bou2WfujJhrShSQOfsoZwHs94UGEYWzW147S+DgfXI1T7ClcQb +nVkCSsezXSOPmYtEVIGbkp2Y4t7kb380w9HVjV2lXM0BVlqOXfPWkO3vFAl225u e5QOg01le5wmQWx2URwj93EBAzSdbWkLzvz5xm8= -----END CERTIFICATE-----Generated at Fri Apr 4 16:03:38 2025 by rpki-client