$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/17c62883-899d-4b86-8800-e9715d10a482/3d794377-a5a2-32e1-b1fb-0d12aac703ac.roa File: 3d794377-a5a2-32e1-b1fb-0d12aac703ac.roa (raw, json) Hash identifier: 8ulxP9vLfIFs8hDmVFZXRyYDisNdZ3epYHdgIiLPTCU= Subject key identifier: 58:37:A0:2A:14:4D:25:73:D1:B6:B7:F7:85:54:48:FC:EF:B0:FF:64 Certificate issuer: /CN=17c62883-899d-4b86-8800-e9715d10a482 Certificate serial: 010D0C9F432858490B4C222959DB62FC7B5335C0 Authority key identifier: DD:14:89:9C:02:BD:D8:49:D4:24:A5:7B:68:88:74:B7:61:DD:13:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/17c62883-899d-4b86-8800-e9715d10a482.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/17c62883-899d-4b86-8800-e9715d10a482/3d794377-a5a2-32e1-b1fb-0d12aac703ac.roa Signing time: Sat 01 Mar 2025 14:00:52 +0000 ROA not before: Sat 01 Mar 2025 14:00:52 +0000 ROA not after: Fri 30 May 2025 13:00:52 +0000 asID: 31874 IP address blocks: 199.175.184.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/17c62883-899d-4b86-8800-e9715d10a482/17c62883-899d-4b86-8800-e9715d10a482.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/17c62883-899d-4b86-8800-e9715d10a482/17c62883-899d-4b86-8800-e9715d10a482.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/17c62883-899d-4b86-8800-e9715d10a482.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0b:4c:22:29:59:db:62:fc:7b:53:35:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17c62883-899d-4b86-8800-e9715d10a482 Validity Not Before: Mar 1 14:00:52 2025 GMT Not After : May 30 13:00:52 2025 GMT Subject: CN=921b44bb-c4ed-413d-bdb8-e2077679dd5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:25:0b:c4:6a:11:b5:31:01:06:37:ae:4e:c8: 5c:c8:f1:cf:60:1a:16:f4:b0:5d:30:b3:19:92:65: e6:0f:ae:b8:de:80:5b:12:66:08:de:15:6f:91:17: 7b:49:cb:a3:ac:64:c9:52:41:ab:59:b1:4f:10:68: 17:96:59:9d:95:68:bc:5d:42:4d:15:4e:bc:69:99: 48:a1:98:63:45:ce:5c:5d:d8:ab:61:2a:28:d6:22: ce:73:79:58:30:d1:b3:10:ff:75:29:5d:e9:c2:83: 57:e8:fe:8f:d6:1a:e3:23:ae:90:73:01:11:32:a8: 3b:86:32:29:ba:9a:04:31:dd:42:2f:19:35:a7:d7: 8e:71:31:7c:2b:f8:f8:9b:3a:88:89:7f:3f:b0:c9: 35:78:ef:45:cc:f1:0f:b6:c2:de:4e:cf:54:30:91: 77:af:69:4c:5d:4b:76:15:a6:cc:49:bc:8d:d1:21: 6a:e9:80:cb:7c:56:46:c6:a7:80:98:1d:6b:d5:01: 06:a4:18:86:60:86:11:64:72:b4:87:52:57:55:c7: 2d:75:40:2f:0d:9a:8b:a4:6c:e3:a0:8b:35:3c:f3: 9b:53:ca:ea:1f:9a:8a:30:c3:bd:80:05:29:2f:20: 44:ee:bc:c9:ee:8c:33:f0:96:cb:5b:61:b6:51:3d: 92:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:37:A0:2A:14:4D:25:73:D1:B6:B7:F7:85:54:48:FC:EF:B0:FF:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/17c62883-899d-4b86-8800-e9715d10a482/3d794377-a5a2-32e1-b1fb-0d12aac703ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/17c62883-899d-4b86-8800-e9715d10a482/17c62883-899d-4b86-8800-e9715d10a482.crl X509v3 Authority Key Identifier: keyid:DD:14:89:9C:02:BD:D8:49:D4:24:A5:7B:68:88:74:B7:61:DD:13:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/17c62883-899d-4b86-8800-e9715d10a482.cer sbgp-ipAddrBlock: critical IPv4: 199.175.184.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:41:b2:c3:49:0b:75:84:bf:cc:99:f0:08:89:cd:d5:03:30: 4f:dc:77:f1:a5:f3:4d:eb:4b:4a:ed:25:df:66:fc:05:91:2d: d6:53:af:8a:27:65:e6:2a:d4:80:4a:e5:b6:c9:35:a6:e5:36: fa:74:83:2f:72:58:2c:a8:b8:a8:a3:19:b5:d0:35:b9:21:3a: 51:64:0f:6d:01:ab:75:4e:e5:9d:5b:e0:d8:7d:fa:c9:00:cd: 9d:a0:21:0b:2d:f6:36:62:1b:a6:a5:81:94:5a:87:76:a4:14: f1:42:0a:95:d9:0f:e7:1a:24:d6:e6:c2:f9:b5:97:0b:e4:9f: de:1f:2b:a5:6a:20:8c:92:80:56:93:ee:65:81:fe:ed:4f:86: 27:bc:dc:bc:41:28:04:6f:06:65:7a:c0:35:1a:ca:9e:1b:e7: 50:dd:12:26:96:26:c4:e8:75:fc:fa:a6:81:77:0c:33:3d:87: 3b:7a:a3:44:d2:ee:55:32:76:39:74:1b:1d:7e:d2:7c:ba:7e: 8d:bd:d7:b6:25:7f:71:30:5a:8a:7c:07:52:3f:2d:c9:85:5b: 73:4c:dc:09:05:7b:c2:5b:c7:57:4a:cd:ca:4f:ed:25:68:5f: c1:52:c3:db:c6:e6:03:5c:03:ef:26:15:3a:37:e6:df:dc:f0: d3:12:45:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkLTCIpWdti/HtTNcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTdjNjI4ODMtODk5ZC00Yjg2LTg4MDAtZTk3MTVkMTBh NDgyMB4XDTI1MDMwMTE0MDA1MloXDTI1MDUzMDEzMDA1MlowLzEtMCsGA1UEAxMk OTIxYjQ0YmItYzRlZC00MTNkLWJkYjgtZTIwNzc2NzlkZDVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgiULxGoRtTEBBjeuTshcyPHPYBoW9LBdMLMZ kmXmD6643oBbEmYI3hVvkRd7ScujrGTJUkGrWbFPEGgXllmdlWi8XUJNFU68aZlI oZhjRc5cXdirYSoo1iLOc3lYMNGzEP91KV3pwoNX6P6P1hrjI66QcwERMqg7hjIp upoEMd1CLxk1p9eOcTF8K/j4mzqIiX8/sMk1eO9FzPEPtsLeTs9UMJF3r2lMXUt2 FabMSbyN0SFq6YDLfFZGxqeAmB1r1QEGpBiGYIYRZHK0h1JXVcctdUAvDZqLpGzj oIs1PPObU8rqH5qKMMO9gAUpLyBE7rzJ7owz8JbLW2G2UT2SQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFg3oCoUTSVz0ba394VUSPzvsP9kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xN2M2 Mjg4My04OTlkLTRiODYtODgwMC1lOTcxNWQxMGE0ODIvM2Q3OTQzNzctYTVhMi0z MmUxLWIxZmItMGQxMmFhYzcwM2FjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMTdjNjI4ODMtODk5ZC00Yjg2LTg4 MDAtZTk3MTVkMTBhNDgyLzE3YzYyODgzLTg5OWQtNGI4Ni04ODAwLWU5NzE1ZDEw YTQ4Mi5jcmwwHwYDVR0jBBgwFoAU3RSJnAK92EnUJKV7aIh0t2HdE4IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xN2M2Mjg4My04OTlkLTRiODYtODgwMC1lOTcx NWQxMGE0ODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx6+4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEtBssNJC3WEv8yZ8AiJzdUDME/cd/Gl803rS0rtJd9m/AWRLdZTr4on ZeYq1IBK5bbJNablNvp0gy9yWCyouKijGbXQNbkhOlFkD20Bq3VO5Z1b4Nh9+skA zZ2gIQst9jZiG6algZRah3akFPFCCpXZD+caJNbmwvm1lwvkn94fK6VqIIySgFaT 7mWB/u1Phie83LxBKARvBmV6wDUayp4b51DdEiaWJsTodfz6poF3DDM9hzt6o0TS 7lUydjl0Gx1+0ny6fo2917Ylf3EwWop8B1I/LcmFW3NM3AkFe8Jbx1dKzcpP7SVo X8FSw9vG5gNcA+8mFTo35t/c8NMSRYU= -----END CERTIFICATE-----Generated at Fri Mar 14 08:01:09 2025 by rpki-client