$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/012bce04-c29f-38f8-9f97-3ab6b1af1180.roa File: 012bce04-c29f-38f8-9f97-3ab6b1af1180.roa (raw, json) Hash identifier: xcYraJyKp5PVxmEGT/7/+ayoO+e5nLaWVI2QYvwdqmM= Subject key identifier: 4B:C4:3B:57:F6:94:44:E2:1D:F4:26:FF:0D:E7:46:FD:CD:45:F1:E3 Certificate issuer: /CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Certificate serial: 010D0C9F43285848C6E62E8274C9F3AC7DB40C80 Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/012bce04-c29f-38f8-9f97-3ab6b1af1180.roa Signing time: Wed 05 Feb 2025 02:00:39 +0000 ROA not before: Wed 05 Feb 2025 02:00:39 +0000 ROA not after: Tue 06 May 2025 01:00:39 +0000 asID: 22885 IP address blocks: 199.0.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c6:e6:2e:82:74:c9:f3:ac:7d:b4:0c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Validity Not Before: Feb 5 02:00:39 2025 GMT Not After : May 6 01:00:39 2025 GMT Subject: CN=a60f1b73-9a73-465f-ac94-d0d3648ca8ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:05:d3:fc:d5:a4:2b:3c:92:ce:b0:2c:4f:d5: 00:5e:9d:ff:b2:bc:3b:af:2a:40:8b:97:c6:d9:5c: 9e:fe:e0:2e:df:5b:13:4e:f9:59:26:42:89:9e:a5: f9:d2:55:de:da:40:97:ad:a2:ce:83:ce:6c:1f:23: 91:3b:b2:cf:01:6e:7f:a8:7c:a6:f9:87:01:01:c5: 6f:19:60:59:e3:88:7d:92:8e:6e:7b:63:3d:9c:aa: cb:a2:96:d9:63:39:f5:2d:a3:53:52:c4:fe:b0:28: fc:7e:bb:6a:13:73:82:b2:84:3c:60:cb:84:ee:0a: 79:b4:1d:c8:79:98:9a:8c:41:8b:a1:bb:17:93:fe: 18:cf:c1:f8:20:28:0f:ae:f4:9a:29:c0:3f:af:1f: 4b:e8:4f:af:ec:bf:14:e6:f4:14:dd:02:3d:48:cc: 31:f1:e1:f9:78:37:ff:2f:b7:aa:f6:68:94:a7:53: 1a:c6:8f:b0:2d:34:4f:04:7a:e1:63:0c:d2:44:11: 29:ea:7f:c2:d2:1e:de:6c:30:65:8f:43:5d:d7:01: 21:02:d0:ad:91:b4:a0:f2:5f:d8:96:c2:fe:0d:66: 63:86:61:3c:84:a0:a5:65:86:cf:06:16:fe:f1:8a: 1b:7c:44:54:15:9f:23:7d:ab:cc:a4:2a:89:86:0d: 1a:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:C4:3B:57:F6:94:44:E2:1D:F4:26:FF:0D:E7:46:FD:CD:45:F1:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/012bce04-c29f-38f8-9f97-3ab6b1af1180.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl X509v3 Authority Key Identifier: keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer sbgp-ipAddrBlock: critical IPv4: 199.0.187.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:b2:0a:b3:09:2b:bb:c4:b8:12:02:ff:d5:b0:cf:06:2e:f8: 5e:45:a0:b2:c3:4a:1d:fd:8d:60:5b:e9:95:b3:51:0e:f3:60: 58:c1:ff:87:80:a5:39:ac:a3:f6:a1:e7:5f:6a:9a:5d:c2:ff: a2:d0:15:31:1d:5d:6f:88:d3:1c:f2:f2:82:2d:1a:1f:75:63: b7:44:75:4b:5d:77:46:96:b4:7e:6a:17:ee:94:f7:35:cb:93: 83:55:2b:78:49:a3:b2:94:72:d3:82:cb:17:04:8c:ec:3b:76: df:11:ae:d2:df:de:d4:5c:2e:23:bc:4f:a3:8a:3f:d9:be:19: ac:7a:d4:c9:7b:ea:87:ba:fb:2a:9f:93:9c:5f:72:b2:25:cb: 6b:52:82:6c:5b:10:c9:2f:12:74:31:61:b3:b7:1b:b0:a6:51: 81:73:38:f2:b9:e2:1e:54:09:c2:7a:5f:3e:0d:1a:2b:2a:3c: c1:a8:5b:9d:e4:68:c8:fe:b4:0b:b6:09:05:f1:b0:9b:dd:9f: 10:92:62:0a:04:70:08:7b:aa:a0:3e:13:22:db:79:d4:d7:03: 48:0d:a8:92:03:57:1d:61:1b:75:b5:db:fa:78:0d:e6:4c:3b: b5:9b:7f:f6:04:53:40:a5:ea:e7:f0:93:a2:35:0d:92:97:e3: 30:1e:5e:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjG5i6CdMnzrH20DIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDM3MGM0OWUtZjcwYy00NmZiLWEzMGYtZGYyNDc1ODUy Y2MyMB4XDTI1MDIwNTAyMDAzOVoXDTI1MDUwNjAxMDAzOVowLzEtMCsGA1UEAxMk YTYwZjFiNzMtOWE3My00NjVmLWFjOTQtZDBkMzY0OGNhOGVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQXT/NWkKzySzrAsT9UAXp3/srw7rypAi5fG 2Vye/uAu31sTTvlZJkKJnqX50lXe2kCXraLOg85sHyORO7LPAW5/qHym+YcBAcVv GWBZ44h9ko5ue2M9nKrLopbZYzn1LaNTUsT+sCj8frtqE3OCsoQ8YMuE7gp5tB3I eZiajEGLobsXk/4Yz8H4ICgPrvSaKcA/rx9L6E+v7L8U5vQU3QI9SMwx8eH5eDf/ L7eq9miUp1Maxo+wLTRPBHrhYwzSRBEp6n/C0h7ebDBlj0Nd1wEhAtCtkbSg8l/Y lsL+DWZjhmE8hKClZYbPBhb+8YobfERUFZ8jfavMpCqJhg0acwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEvEO1f2lETiHfQm/w3nRv3NRfHjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcw YzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0NzU4NTJjYzIvMDEyYmNlMDQtYzI5Zi0z OGY4LTlmOTctM2FiNmIxYWYxMTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDM3MGM0OWUtZjcwYy00NmZiLWEz MGYtZGYyNDc1ODUyY2MyL2QzNzBjNDllLWY3MGMtNDZmYi1hMzBmLWRmMjQ3NTg1 MmNjMi5jcmwwHwYDVR0jBBgwFoAUooa1EEFiDY7Lz82x8x6qqiVcZ5EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcwYzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0 NzU4NTJjYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwC7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKSyCrMJK7vEuBIC/9WwzwYu+F5FoLLDSh39jWBb6ZWzUQ7zYFjB/4eA pTmso/ah519qml3C/6LQFTEdXW+I0xzy8oItGh91Y7dEdUtdd0aWtH5qF+6U9zXL k4NVK3hJo7KUctOCyxcEjOw7dt8RrtLf3tRcLiO8T6OKP9m+Gax61Ml76oe6+yqf k5xfcrIly2tSgmxbEMkvEnQxYbO3G7CmUYFzOPK54h5UCcJ6Xz4NGisqPMGoW53k aMj+tAu2CQXxsJvdnxCSYgoEcAh7qqA+EyLbedTXA0gNqJIDVx1hG3W12/p4DeZM O7Wbf/YEU0Cl6ufwk6I1DZKX4zAeXoM= -----END CERTIFICATE-----Generated at Sun Apr 6 05:50:35 2025 by rpki-client