$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085/3ff2d6f9-c66c-3621-92df-b8eb3ed0a323.roa File: 3ff2d6f9-c66c-3621-92df-b8eb3ed0a323.roa (raw, json) Hash identifier: X6G0GZvobOtJFfT4MWsqZ6wR54+zodLCz2DUvOr8jto= Subject key identifier: F1:B9:86:97:34:7B:30:B5:D8:CF:F4:B4:6B:DD:31:28:30:91:1D:B6 Certificate issuer: /CN=09c51633-340e-4eac-820c-a36b33746085 Certificate serial: 010D0C9F43285848A830B4C68BA0E600CE0940E0 Authority key identifier: 58:DB:44:5B:64:54:08:69:7A:39:63:68:B1:69:F1:A2:F8:8A:C1:34 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085/3ff2d6f9-c66c-3621-92df-b8eb3ed0a323.roa Signing time: Sat 25 Jan 2025 02:00:39 +0000 ROA not before: Sat 25 Jan 2025 02:00:39 +0000 ROA not after: Fri 25 Apr 2025 01:00:39 +0000 asID: 13928 IP address blocks: 199.21.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085/09c51633-340e-4eac-820c-a36b33746085.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085/09c51633-340e-4eac-820c-a36b33746085.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a8:30:b4:c6:8b:a0:e6:00:ce:09:40:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09c51633-340e-4eac-820c-a36b33746085 Validity Not Before: Jan 25 02:00:39 2025 GMT Not After : Apr 25 01:00:39 2025 GMT Subject: CN=6f1d6e3a-0999-4149-baea-90974b57f69a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:00:42:01:55:66:29:52:dc:c3:4b:af:3f:e0: c9:c6:75:fa:2b:b4:54:19:3e:31:fe:90:42:56:40: 66:d3:39:42:0d:33:04:9f:98:4c:29:6a:a3:2b:fb: 68:e7:af:f6:34:fb:2e:ca:c1:bc:fc:bd:f4:0a:3a: 65:8e:50:83:96:c1:8f:a6:e6:97:72:a1:31:5c:63: 31:e3:a3:6d:d5:cf:13:ee:cd:38:80:d4:d5:98:45: 28:0f:33:cf:ce:fd:d2:70:ba:fa:4f:37:3e:0a:93: 4d:74:fc:0f:2a:63:6a:0a:70:5e:26:bb:d7:a1:7e: 8d:e4:dc:82:10:fe:08:5d:9e:68:61:f6:58:3b:3c: 92:7b:5a:30:05:e1:12:31:56:eb:87:ff:b4:ac:e8: e1:d4:e8:b7:a8:00:3e:e5:4b:ce:1d:41:b5:4d:92: f5:39:99:d6:c8:00:c9:7c:b5:bd:4c:50:9a:f0:8d: ad:9c:b9:8f:9b:e8:a4:36:f2:0b:06:29:86:0e:31: 02:53:d7:8f:bb:85:92:af:ca:21:83:9a:c8:ca:b0: 0d:68:43:f1:27:3b:07:1b:93:8d:c0:80:cb:c2:9d: c8:bb:f5:a5:41:93:ec:66:f7:76:3d:0c:b2:f1:b4: 1d:ad:0d:c8:66:f9:fc:29:ab:e1:8a:11:7e:62:74: ce:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:B9:86:97:34:7B:30:B5:D8:CF:F4:B4:6B:DD:31:28:30:91:1D:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085/3ff2d6f9-c66c-3621-92df-b8eb3ed0a323.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085/09c51633-340e-4eac-820c-a36b33746085.crl X509v3 Authority Key Identifier: keyid:58:DB:44:5B:64:54:08:69:7A:39:63:68:B1:69:F1:A2:F8:8A:C1:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085.cer sbgp-ipAddrBlock: critical IPv4: 199.21.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:70:88:e3:12:a5:07:64:12:30:a4:61:46:83:27:12:37:9a: 2a:35:51:84:99:7b:84:17:d2:b7:3e:fc:bc:58:ee:7c:90:97: a7:3f:a3:0b:13:48:50:f5:ae:f1:d7:80:95:1b:12:d7:96:2a: 97:85:7a:b2:b9:ec:2c:85:31:31:a0:e5:f5:59:b3:f3:37:52: 28:c1:86:78:9d:c0:1f:a5:13:3b:32:7f:b2:77:1e:7b:32:e3: e0:dc:46:da:7c:cc:8d:8a:4f:a6:83:40:de:13:24:88:f2:fa: cc:e8:a4:23:93:b4:fb:db:1b:26:50:cd:01:a9:b1:e7:20:27: 38:b7:bc:d8:05:7f:80:e5:9f:f9:62:35:83:bb:e7:cf:9d:c3: 86:8f:b7:8c:84:16:74:e6:ca:30:72:62:6e:f0:95:76:ca:9d: 52:28:ef:75:c9:89:0d:54:47:6d:74:96:36:77:e9:75:d7:a9: 0c:ca:53:35:0a:6a:78:9b:a1:04:ec:e7:0a:77:b8:70:e0:b9: 75:d6:e0:35:c5:8a:2d:22:cf:0f:9f:a2:3c:f0:73:da:73:13: fd:15:33:53:ee:99:78:fb:9e:81:a2:b4:ce:f4:01:d5:79:e1: 16:3a:b1:99:b8:f0:1c:d5:a5:5a:a6:99:3f:29:7b:e0:a7:1a: 9f:4f:eb:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEioMLTGi6DmAM4JQOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDljNTE2MzMtMzQwZS00ZWFjLTgyMGMtYTM2YjMzNzQ2 MDg1MB4XDTI1MDEyNTAyMDAzOVoXDTI1MDQyNTAxMDAzOVowLzEtMCsGA1UEAxMk NmYxZDZlM2EtMDk5OS00MTQ5LWJhZWEtOTA5NzRiNTdmNjlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjgBCAVVmKVLcw0uvP+DJxnX6K7RUGT4x/pBC VkBm0zlCDTMEn5hMKWqjK/to56/2NPsuysG8/L30CjpljlCDlsGPpuaXcqExXGMx 46Nt1c8T7s04gNTVmEUoDzPPzv3ScLr6Tzc+CpNNdPwPKmNqCnBeJrvXoX6N5NyC EP4IXZ5oYfZYOzySe1owBeESMVbrh/+0rOjh1Oi3qAA+5UvOHUG1TZL1OZnWyADJ fLW9TFCa8I2tnLmPm+ikNvILBimGDjECU9ePu4WSr8ohg5rIyrANaEPxJzsHG5ON wIDLwp3Iu/WlQZPsZvd2PQyy8bQdrQ3IZvn8KavhihF+YnTOFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPG5hpc0ezC12M/0tGvdMSgwkR22MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8wOWM1 MTYzMy0zNDBlLTRlYWMtODIwYy1hMzZiMzM3NDYwODUvM2ZmMmQ2ZjktYzY2Yy0z NjIxLTkyZGYtYjhlYjNlZDBhMzIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMDljNTE2MzMtMzQwZS00ZWFjLTgy MGMtYTM2YjMzNzQ2MDg1LzA5YzUxNjMzLTM0MGUtNGVhYy04MjBjLWEzNmIzMzc0 NjA4NS5jcmwwHwYDVR0jBBgwFoAUWNtEW2RUCGl6OWNosWnxoviKwTQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8wOWM1MTYzMy0zNDBlLTRlYWMtODIwYy1hMzZi MzM3NDYwODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxxWDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFNwiOMSpQdkEjCkYUaDJxI3mio1UYSZe4QX0rc+/LxY7nyQl6c/owsT SFD1rvHXgJUbEteWKpeFerK57CyFMTGg5fVZs/M3UijBhnidwB+lEzsyf7J3Hnsy 4+DcRtp8zI2KT6aDQN4TJIjy+szopCOTtPvbGyZQzQGpsecgJzi3vNgFf4Dln/li NYO758+dw4aPt4yEFnTmyjByYm7wlXbKnVIo73XJiQ1UR210ljZ36XXXqQzKUzUK aniboQTs5wp3uHDguXXW4DXFii0izw+fojzwc9pzE/0VM1PumXj7noGitM70AdV5 4RY6sZm48BzVpVqmmT8pe+CnGp9P6wI= -----END CERTIFICATE-----Generated at Sun Feb 16 15:24:23 2025 by rpki-client