$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/91811ff6-75ab-441e-8325-066045fb91cd/5c0358a9-c2e9-3fb5-a524-6b0d0b45bf06.roa File: 5c0358a9-c2e9-3fb5-a524-6b0d0b45bf06.roa (raw, json) Hash identifier: l+jRrzaNjWlHeHyJcG4Jq7bdbvTzNAWKwlBHXtm97cs= Subject key identifier: 7A:03:04:50:88:B1:C8:15:47:29:4E:43:B3:97:9B:50:26:84:1B:E3 Certificate issuer: /CN=91811ff6-75ab-441e-8325-066045fb91cd Certificate serial: 010D0C9F432858492CAE808F72BD4A49C8FFB8C0 Authority key identifier: 47:58:15:A4:87:0C:93:5A:7B:CD:29:0F:B6:B2:D1:E3:A9:17:89:01 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/91811ff6-75ab-441e-8325-066045fb91cd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/91811ff6-75ab-441e-8325-066045fb91cd/5c0358a9-c2e9-3fb5-a524-6b0d0b45bf06.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 400502 IP address blocks: 199.242.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/91811ff6-75ab-441e-8325-066045fb91cd/91811ff6-75ab-441e-8325-066045fb91cd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/91811ff6-75ab-441e-8325-066045fb91cd/91811ff6-75ab-441e-8325-066045fb91cd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/91811ff6-75ab-441e-8325-066045fb91cd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:ae:80:8f:72:bd:4a:49:c8:ff:b8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91811ff6-75ab-441e-8325-066045fb91cd Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=ed014fbc-08df-404c-af57-71d1d7721f42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:66:e7:97:ad:c1:23:d7:c7:fe:4f:78:dd:21: 0b:b9:09:b7:4e:8a:e9:a8:61:ff:04:05:d5:5c:2b: 23:3c:a4:22:3d:7f:ed:8e:d6:9f:dc:b8:80:83:27: df:15:b5:97:65:cb:03:8d:cb:81:08:c2:10:af:fa: 61:53:3a:5a:52:89:de:10:50:5a:b0:78:b1:2d:15: 8d:88:aa:34:59:45:19:01:a2:e8:b1:7a:f3:e3:a3: 16:84:1e:f9:cf:72:ec:85:9e:55:2f:09:b6:04:e5: aa:8c:85:b9:28:d1:9c:47:48:a9:6e:4d:ee:53:d2: 3f:10:88:e6:bf:48:6e:e0:ba:17:5c:1b:f0:55:f6: 89:b3:25:c2:53:a9:fc:b4:02:ee:88:ee:52:62:b7: 87:2c:8a:17:fb:f1:9a:75:9d:b5:29:52:6b:5b:79: 46:b6:dc:8c:1f:20:36:96:56:38:ae:4e:c0:8f:3a: ab:e2:02:41:e3:14:20:c3:82:a5:41:ff:0f:9c:d4: 71:e4:b6:cb:e6:90:a1:d9:9c:f6:14:08:60:b8:48: fe:cf:a3:a7:74:62:75:e0:01:fd:99:05:3a:41:57: 84:46:fd:3a:70:94:21:45:e2:7a:d7:6d:8a:3b:b5: 4c:27:ae:9d:09:ce:6c:c0:c7:9f:cd:b1:f1:79:53: 5d:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:03:04:50:88:B1:C8:15:47:29:4E:43:B3:97:9B:50:26:84:1B:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/91811ff6-75ab-441e-8325-066045fb91cd/5c0358a9-c2e9-3fb5-a524-6b0d0b45bf06.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/91811ff6-75ab-441e-8325-066045fb91cd/91811ff6-75ab-441e-8325-066045fb91cd.crl X509v3 Authority Key Identifier: keyid:47:58:15:A4:87:0C:93:5A:7B:CD:29:0F:B6:B2:D1:E3:A9:17:89:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/91811ff6-75ab-441e-8325-066045fb91cd.cer sbgp-ipAddrBlock: critical IPv4: 199.242.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:61:d2:a9:1b:7e:31:df:bf:19:8c:bf:ac:e6:11:f7:99:69: f5:4d:82:e4:f8:e1:94:82:ea:15:8b:b7:46:89:21:08:3a:1c: 50:f7:b7:f1:68:de:08:03:6c:19:db:e2:96:b8:6d:35:4e:a8: 23:01:22:19:5e:ee:2d:7b:9c:76:38:31:fc:f3:d0:92:a9:03: 2c:ec:30:e3:3f:48:89:50:9b:83:31:bd:bc:f4:23:49:5f:94: f0:af:e7:4b:0b:36:ae:14:6b:40:66:23:bd:f3:be:c5:d4:28: 13:70:58:05:b0:f5:d7:15:3a:cb:87:0e:aa:22:04:ef:3f:f1: b3:2d:95:29:f4:4b:2f:10:c9:e6:34:ee:16:98:86:c9:44:b4: c7:24:90:91:62:f1:04:e2:fe:62:e5:51:46:38:1a:1c:7b:27: b8:30:0e:78:9f:86:3f:f7:90:b4:cb:09:26:c0:da:13:3d:f7: d0:56:b2:95:9c:00:56:f0:4b:e2:41:d6:19:d8:99:c8:bb:a2: 07:f5:9d:50:0e:a5:fd:e0:6d:ed:51:ea:91:0b:92:79:4b:60: 02:64:7e:95:c6:a1:fc:3e:10:03:27:cd:86:67:8f:29:f1:4b: de:bd:15:6d:d9:97:35:15:8a:41:36:a0:01:67:ea:81:7e:17: 78:00:08:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksroCPcr1KScj/uMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE4MTFmZjYtNzVhYi00NDFlLTgzMjUtMDY2MDQ1ZmI5 MWNkMB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk ZWQwMTRmYmMtMDhkZi00MDRjLWFmNTctNzFkMWQ3NzIxZjQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Wbnl63BI9fH/k943SELuQm3TorpqGH/BAXV XCsjPKQiPX/tjtaf3LiAgyffFbWXZcsDjcuBCMIQr/phUzpaUoneEFBasHixLRWN iKo0WUUZAaLosXrz46MWhB75z3LshZ5VLwm2BOWqjIW5KNGcR0ipbk3uU9I/EIjm v0hu4LoXXBvwVfaJsyXCU6n8tALuiO5SYreHLIoX+/GadZ21KVJrW3lGttyMHyA2 llY4rk7Ajzqr4gJB4xQgw4KlQf8PnNRx5LbL5pCh2Zz2FAhguEj+z6OndGJ14AH9 mQU6QVeERv06cJQhReJ6122KO7VMJ66dCc5swMefzbHxeVNdrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHoDBFCIscgVRylOQ7OXm1AmhBvjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MTgx MWZmNi03NWFiLTQ0MWUtODMyNS0wNjYwNDVmYjkxY2QvNWMwMzU4YTktYzJlOS0z ZmI1LWE1MjQtNmIwZDBiNDViZjA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTE4MTFmZjYtNzVhYi00NDFlLTgz MjUtMDY2MDQ1ZmI5MWNkLzkxODExZmY2LTc1YWItNDQxZS04MzI1LTA2NjA0NWZi OTFjZC5jcmwwHwYDVR0jBBgwFoAUR1gVpIcMk1p7zSkPtrLR46kXiQEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MTgxMWZmNi03NWFiLTQ0MWUtODMyNS0wNjYw NDVmYjkxY2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/KMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD9h0qkbfjHfvxmMv6zmEfeZafVNguT44ZSC6hWLt0aJIQg6HFD3t/Fo 3ggDbBnb4pa4bTVOqCMBIhle7i17nHY4Mfzz0JKpAyzsMOM/SIlQm4Mxvbz0I0lf lPCv50sLNq4Ua0BmI73zvsXUKBNwWAWw9dcVOsuHDqoiBO8/8bMtlSn0Sy8QyeY0 7haYhslEtMckkJFi8QTi/mLlUUY4Ghx7J7gwDnifhj/3kLTLCSbA2hM999BWspWc AFbwS+JB1hnYmci7ogf1nVAOpf3gbe1R6pELknlLYAJkfpXGofw+EAMnzYZnjynx S969FW3ZlzUVikE2oAFn6oF+F3gACI8= -----END CERTIFICATE-----Generated at Fri Apr 11 22:34:50 2025 by rpki-client