$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/bf849ed2-fab8-38cb-b44f-85cdfd0ab483.roa File: bf849ed2-fab8-38cb-b44f-85cdfd0ab483.roa (raw, json) Hash identifier: LcoMJ8SwMiccczCVMmzFxdOWJGOo8y+lHcZBAzz2jkM= Subject key identifier: 6D:E2:F6:3A:EF:34:23:C3:03:B3:E4:58:BE:81:CF:78:CB:6F:20:B7 Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Certificate serial: 010D0C9F432858491ED6DF356FEE8D26027E5CE0 Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/bf849ed2-fab8-38cb-b44f-85cdfd0ab483.roa Signing time: Sat 08 Mar 2025 14:00:52 +0000 ROA not before: Sat 08 Mar 2025 14:00:52 +0000 ROA not after: Fri 06 Jun 2025 13:00:52 +0000 asID: 13414 IP address blocks: 199.59.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1e:d6:df:35:6f:ee:8d:26:02:7e:5c:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Validity Not Before: Mar 8 14:00:52 2025 GMT Not After : Jun 6 13:00:52 2025 GMT Subject: CN=2fb75f06-58c6-4b18-9eaf-2e70230087b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:7a:dd:ea:d4:9b:54:34:66:73:0d:12:f8:dc: 40:5f:f6:54:6d:59:d6:26:0c:ba:31:a4:95:a6:cc: a5:cd:25:86:18:bd:1c:c8:8f:5e:07:0d:34:16:f4: 7b:70:ac:77:7e:d8:09:41:f0:b7:8d:5d:31:ff:8a: 30:22:fb:97:4c:a4:a1:13:3d:fa:4b:8f:81:5f:0a: d3:4a:a1:0e:3c:02:71:00:2d:ce:3f:6e:c5:8a:78: 76:0a:89:94:76:49:5c:30:39:27:e0:ab:36:61:d4: ad:8a:27:ad:2b:84:16:c2:44:d6:27:85:32:08:59: 1e:8a:44:87:09:9c:6b:3f:d2:c2:e9:30:cd:31:d8: cb:78:99:5f:24:81:41:82:16:5f:69:39:86:12:6d: 5a:bc:e4:45:9e:e5:45:6e:76:d5:db:1e:56:c9:50: 7a:3e:27:90:9f:aa:56:a2:e3:10:1c:41:d5:d3:ce: 9c:62:27:c8:e1:b2:22:36:37:c3:e1:9d:92:d5:65: 23:80:4d:84:b6:92:05:a6:fb:d0:9b:56:c3:a0:60: 47:5d:98:62:7e:4f:29:87:c2:62:1d:6f:f9:2d:80: 4f:86:6d:27:43:80:3a:d6:9f:3f:96:53:b0:8f:87: 89:aa:65:96:35:f2:3a:e9:af:78:4b:e5:80:cf:65: 74:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:E2:F6:3A:EF:34:23:C3:03:B3:E4:58:BE:81:CF:78:CB:6F:20:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/bf849ed2-fab8-38cb-b44f-85cdfd0ab483.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl X509v3 Authority Key Identifier: keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer sbgp-ipAddrBlock: critical IPv4: 199.59.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:43:7f:d2:32:57:4b:84:30:4b:28:d8:ac:27:8e:c5:bf:30: 1c:5e:aa:08:f8:fc:b3:ad:07:cc:3f:3e:81:6e:83:4e:ce:30: 51:04:53:2d:20:e8:b0:3f:64:ea:f6:d9:06:26:ba:8c:09:c5: b7:00:f6:52:09:05:d5:47:f2:d3:00:82:2f:96:81:24:83:c1: 09:aa:4f:11:9e:a4:40:3f:37:da:e0:39:98:1e:17:85:94:22: 08:33:b0:ab:18:12:83:93:d2:45:44:64:7a:59:1a:37:30:8d: c0:69:ff:fa:45:a1:c8:f8:32:3d:3d:b3:da:7d:27:d7:64:03: 55:7e:87:28:47:4d:4e:5c:d4:1e:0b:20:4e:15:c6:fb:ec:af: 8c:7c:1c:ae:bf:46:5e:28:08:95:9c:69:52:b4:7a:07:87:1d: c3:b1:97:12:3c:5d:8a:35:f7:ab:b0:1d:c2:ab:4b:92:ef:67: 21:07:c0:9d:6b:a2:9f:25:3c:bf:16:05:88:2c:9f:ab:ac:d7: 9e:56:60:24:ce:f0:e0:03:84:70:9d:ff:75:8b:6a:40:32:36: cf:8b:1e:5e:ba:9e:bb:74:e7:36:8f:dd:af:9f:c0:f2:71:bb: ab:de:54:5b:1b:78:52:22:e2:7c:f1:91:7e:02:76:c1:85:8f: 63:3b:e1:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEke1t81b+6NJgJ+XOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy NTc2MB4XDTI1MDMwODE0MDA1MloXDTI1MDYwNjEzMDA1MlowLzEtMCsGA1UEAxMk MmZiNzVmMDYtNThjNi00YjE4LTllYWYtMmU3MDIzMDA4N2IzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3rd6tSbVDRmcw0S+NxAX/ZUbVnWJgy6MaSV psylzSWGGL0cyI9eBw00FvR7cKx3ftgJQfC3jV0x/4owIvuXTKShEz36S4+BXwrT SqEOPAJxAC3OP27Finh2ComUdklcMDkn4Ks2YdStiietK4QWwkTWJ4UyCFkeikSH CZxrP9LC6TDNMdjLeJlfJIFBghZfaTmGEm1avORFnuVFbnbV2x5WyVB6PieQn6pW ouMQHEHV086cYifI4bIiNjfD4Z2S1WUjgE2EtpIFpvvQm1bDoGBHXZhifk8ph8Ji HW/5LYBPhm0nQ4A61p8/llOwj4eJqmWWNfI66a94S+WAz2V0WwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG3i9jrvNCPDA7PkWL6Bz3jLbyC3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3 YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvYmY4NDllZDItZmFiOC0z OGNiLWI0NGYtODVjZGZkMGFiNDgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3 YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxzuUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHRDf9IyV0uEMEso2KwnjsW/MBxeqgj4/LOtB8w/PoFug07OMFEEUy0g 6LA/ZOr22QYmuowJxbcA9lIJBdVH8tMAgi+WgSSDwQmqTxGepEA/N9rgOZgeF4WU IggzsKsYEoOT0kVEZHpZGjcwjcBp//pFocj4Mj09s9p9J9dkA1V+hyhHTU5c1B4L IE4Vxvvsr4x8HK6/Rl4oCJWcaVK0egeHHcOxlxI8XYo196uwHcKrS5LvZyEHwJ1r op8lPL8WBYgsn6us155WYCTO8OADhHCd/3WLakAyNs+LHl66nrt05zaP3a+fwPJx u6veVFsbeFIi4nzxkX4CdsGFj2M74Tg= -----END CERTIFICATE-----Generated at Sat Apr 5 05:29:51 2025 by rpki-client