$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/dff15429-e42a-3405-bd1a-050a2f301bd0.roa File: dff15429-e42a-3405-bd1a-050a2f301bd0.roa (raw, json) Hash identifier: uT7Yfi3g1Ch9f5Qfu9ux8TW2DY7WoqAdCCqcOEP+HVw= Subject key identifier: A8:FE:2E:72:A9:30:8B:44:BF:87:3F:22:11:4F:E9:7D:B2:4D:B9:AD Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F4328584953C44C65CC52B52C33F478E0 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/dff15429-e42a-3405-bd1a-050a2f301bd0.roa Signing time: Thu 27 Mar 2025 13:00:52 +0000 ROA not before: Thu 27 Mar 2025 13:00:52 +0000 ROA not after: Wed 25 Jun 2025 13:00:52 +0000 asID: 11290 IP address blocks: 199.193.168.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:53:c4:4c:65:cc:52:b5:2c:33:f4:78:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: Mar 27 13:00:52 2025 GMT Not After : Jun 25 13:00:52 2025 GMT Subject: CN=02e71bd5-deec-4418-baf8-4863feb0ce64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e7:6e:7f:a2:68:1c:af:54:f3:89:3b:a8:b8: 97:67:1b:24:ce:a0:21:96:59:7a:40:2d:76:87:25: 65:a4:3a:5b:6e:56:4f:d6:42:4d:c2:08:de:5e:22: 65:b9:24:e7:25:77:f0:77:9f:51:01:5d:56:06:3b: 11:b2:6b:94:aa:96:58:7f:62:70:f0:e9:da:87:ed: 9c:78:51:fe:bc:18:d4:81:50:64:1b:46:57:43:e0: 42:70:6f:7b:97:e0:1b:e7:89:81:82:33:72:40:e3: f2:1f:ea:9e:6c:1e:03:06:f9:19:da:76:93:e1:ee: 12:96:33:7d:eb:c5:a3:5c:c3:a2:41:f5:fe:f1:eb: 49:77:5e:33:8c:05:dc:16:76:7f:86:2e:c7:6d:79: 9b:7b:83:11:49:64:be:fb:7e:30:ba:53:5e:74:c6: 14:9b:75:82:d8:14:99:4c:1d:71:2c:09:9d:6e:52: ac:01:8a:14:99:15:4a:1e:bf:ce:e4:92:5c:73:32: 40:24:41:39:36:7d:7c:02:73:85:f5:73:4b:47:b4: 1f:1f:91:85:cc:29:bd:83:28:95:f6:dd:12:09:80: f1:48:20:0e:d1:cc:bb:a9:0d:50:bb:08:49:10:c6: 36:ef:06:4b:56:3a:61:30:6c:fc:aa:4d:bb:44:a9: c4:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:FE:2E:72:A9:30:8B:44:BF:87:3F:22:11:4F:E9:7D:B2:4D:B9:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/dff15429-e42a-3405-bd1a-050a2f301bd0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv4: 199.193.168.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:54:2d:af:35:90:1b:c1:91:4e:bf:c8:4c:ab:fa:25:98:42: b7:5d:93:fd:e9:4b:c1:5a:a1:55:1e:8c:16:57:31:83:5b:13: 86:73:74:37:b0:4a:7d:79:69:c2:d4:25:c2:9e:d6:c3:54:54: 19:31:a1:00:bc:78:33:fb:e6:81:a1:0d:52:43:c0:27:ec:06: 1c:88:22:8e:b9:69:74:47:2e:d4:e1:12:96:0b:a7:3f:0a:9a: d8:42:e3:c7:3b:00:4a:fe:8b:e0:c0:22:78:b6:99:eb:74:ba: 6a:f4:2b:40:e0:e9:a4:b3:c4:0e:bb:9a:81:88:f4:75:2e:96: ef:e5:85:70:07:03:bd:91:1d:ae:72:b6:0b:98:46:be:7d:31: 13:31:f9:1f:90:d4:09:42:fe:a2:cb:79:80:75:14:7d:a3:0f: 7f:bc:21:79:7b:a8:13:80:11:46:77:91:11:c5:df:1a:ad:14: d8:8a:4f:52:5b:b9:7f:1e:46:fe:1e:71:ca:6b:fa:ef:45:1d: cd:95:42:1d:c5:43:24:60:b2:55:38:0e:f8:eb:93:e5:86:36: 50:85:ba:3a:56:a5:b2:85:8b:26:44:00:d9:3f:bd:29:83:23: d7:b8:99:6b:28:fd:d4:f7:07:7b:7b:33:79:43:a1:15:6a:02: 5c:fe:ab:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElTxExlzFK1LDP0eOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI1MDMyNzEzMDA1MloXDTI1MDYyNTEzMDA1MlowLzEtMCsGA1UEAxMk MDJlNzFiZDUtZGVlYy00NDE4LWJhZjgtNDg2M2ZlYjBjZTY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+duf6JoHK9U84k7qLiXZxskzqAhlll6QC12 hyVlpDpbblZP1kJNwgjeXiJluSTnJXfwd59RAV1WBjsRsmuUqpZYf2Jw8Onah+2c eFH+vBjUgVBkG0ZXQ+BCcG97l+Ab54mBgjNyQOPyH+qebB4DBvkZ2naT4e4SljN9 68WjXMOiQfX+8etJd14zjAXcFnZ/hi7HbXmbe4MRSWS++34wulNedMYUm3WC2BSZ TB1xLAmdblKsAYoUmRVKHr/O5JJcczJAJEE5Nn18AnOF9XNLR7QfH5GFzCm9gyiV 9t0SCYDxSCAO0cy7qQ1QuwhJEMY27wZLVjphMGz8qk27RKnESQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKj+LnKpMItEv4c/IhFP6X2yTbmtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvZGZmMTU0MjktZTQyYS0z NDA1LWJkMWEtMDUwYTJmMzAxYmQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx8GoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG1ULa81kBvBkU6/yEyr+iWYQrddk/3pS8FaoVUejBZXMYNbE4ZzdDew Sn15acLUJcKe1sNUVBkxoQC8eDP75oGhDVJDwCfsBhyIIo65aXRHLtThEpYLpz8K mthC48c7AEr+i+DAIni2met0umr0K0Dg6aSzxA67moGI9HUulu/lhXAHA72RHa5y tguYRr59MRMx+R+Q1AlC/qLLeYB1FH2jD3+8IXl7qBOAEUZ3kRHF3xqtFNiKT1Jb uX8eRv4eccpr+u9FHc2VQh3FQyRgslU4Dvjrk+WGNlCFujpWpbKFiyZEANk/vSmD I9e4mWso/dT3B3t7M3lDoRVqAlz+q5M= -----END CERTIFICATE-----Generated at Sun Apr 6 05:55:01 2025 by rpki-client