$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f0b45f79-612d-4c7e-8c24-5f64ac75c113/affcab7d-6094-3982-8b34-38221efc1254.roa File: affcab7d-6094-3982-8b34-38221efc1254.roa (raw, json) Hash identifier: y2Q4kf7zQBFmStiXCsPQ2OpZIrIdb/SldfiA0Z3zbL4= Subject key identifier: E4:ED:32:5D:02:82:31:25:69:22:5A:A5:F0:B0:E6:0C:B6:2B:45:45 Certificate issuer: /CN=f0b45f79-612d-4c7e-8c24-5f64ac75c113 Certificate serial: 010D0C9F432858491246BE2A466D98C90FF42AC0 Authority key identifier: C2:00:C2:3A:7C:C9:49:2C:CE:F7:9C:29:EC:5E:9D:60:97:58:62:77 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f0b45f79-612d-4c7e-8c24-5f64ac75c113.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f0b45f79-612d-4c7e-8c24-5f64ac75c113/affcab7d-6094-3982-8b34-38221efc1254.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 8075 IP address blocks: 199.255.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f0b45f79-612d-4c7e-8c24-5f64ac75c113/f0b45f79-612d-4c7e-8c24-5f64ac75c113.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f0b45f79-612d-4c7e-8c24-5f64ac75c113/f0b45f79-612d-4c7e-8c24-5f64ac75c113.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f0b45f79-612d-4c7e-8c24-5f64ac75c113.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:be:2a:46:6d:98:c9:0f:f4:2a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0b45f79-612d-4c7e-8c24-5f64ac75c113 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=224023c7-53f2-4260-b602-f464e271895f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:ae:4a:67:14:d7:eb:86:1c:51:87:20:5d:08: c7:04:b3:28:80:26:e0:34:1e:00:bf:99:17:ca:95: c4:39:08:f2:cd:32:c9:d7:21:ff:d5:96:42:c9:bc: 14:56:0b:88:77:9a:fe:98:c3:31:09:52:fc:7a:92: 41:bf:51:6f:97:a1:1e:06:52:91:f6:29:19:44:b7: ae:b0:ed:3b:9f:8d:9d:87:93:d8:4a:a8:fc:d8:99: c4:76:f6:37:dc:7f:4a:db:96:47:78:63:c7:5a:6a: f1:aa:63:40:0a:b2:7a:b3:01:82:a0:10:90:fd:8b: 00:0a:a1:f5:60:97:7b:69:47:71:99:00:48:c5:ab: c3:b7:08:d0:ff:71:2c:ce:81:cc:e2:34:1b:16:d9: 4e:70:b7:02:89:c0:b3:e3:82:5d:f5:8d:ae:c1:6d: 7a:c3:17:5d:86:de:e0:c5:29:7f:2b:7c:3a:d7:31: ba:6d:c4:cf:f8:04:d9:8b:e0:bc:4a:08:5d:32:58: 27:44:17:8e:9f:10:fc:98:84:8d:69:ff:3f:fe:04: f2:40:49:69:24:7f:a7:40:33:b0:fd:72:d0:f8:8b: bf:d5:c4:cc:ce:1a:1c:e3:75:cf:3b:98:78:10:cc: 84:a9:4f:c7:5f:ac:fa:5d:3d:ac:03:3c:22:ef:d4: 68:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:ED:32:5D:02:82:31:25:69:22:5A:A5:F0:B0:E6:0C:B6:2B:45:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f0b45f79-612d-4c7e-8c24-5f64ac75c113/affcab7d-6094-3982-8b34-38221efc1254.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f0b45f79-612d-4c7e-8c24-5f64ac75c113/f0b45f79-612d-4c7e-8c24-5f64ac75c113.crl X509v3 Authority Key Identifier: keyid:C2:00:C2:3A:7C:C9:49:2C:CE:F7:9C:29:EC:5E:9D:60:97:58:62:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f0b45f79-612d-4c7e-8c24-5f64ac75c113.cer sbgp-ipAddrBlock: critical IPv4: 199.255.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:71:f2:97:48:17:86:e9:93:67:42:8d:8b:4d:ad:f3:53:20: 02:48:c5:80:8a:ff:85:2e:35:ce:49:6e:d1:98:ce:0c:31:29: db:86:3c:e1:24:a8:f5:97:05:47:08:d3:79:08:89:4b:81:68: f9:1c:9a:67:02:bd:ed:85:eb:ce:7f:cd:51:14:42:b7:8c:56: 80:d6:27:81:f4:be:af:97:b4:f1:ab:b2:1d:11:33:40:c7:b6: 21:4e:8f:1d:2c:04:aa:23:38:84:bb:da:c4:4b:c5:12:e6:42: 9c:b0:94:d4:ee:64:18:c1:c1:72:71:e6:f5:a6:44:eb:35:27: fb:46:fc:3e:f4:a8:f4:f0:24:b3:39:7d:3e:db:23:92:a3:e2: 9e:ee:20:92:53:2f:f8:71:46:bc:8e:57:7e:af:38:4e:c1:a4: 91:49:a3:b4:8f:85:d2:3a:ad:3d:60:60:d2:6e:83:12:00:31: 16:66:ed:88:fd:e5:5c:fe:0c:13:6c:df:00:74:4d:61:c0:43: 75:54:c4:cd:1f:d0:82:06:3d:3b:cf:d2:14:60:fc:a6:28:7c: ea:76:61:28:c1:d9:1b:c2:09:10:a6:f7:23:28:b7:42:50:02: a9:f8:f1:9a:22:d6:1f:47:d6:15:2e:21:5d:a5:f0:00:c1:e8: eb:53:97:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRr4qRm2YyQ/0KsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjBiNDVmNzktNjEyZC00YzdlLThjMjQtNWY2NGFjNzVj MTEzMB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk MjI0MDIzYzctNTNmMi00MjYwLWI2MDItZjQ2NGUyNzE4OTVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAma5KZxTX64YcUYcgXQjHBLMogCbgNB4Av5kX ypXEOQjyzTLJ1yH/1ZZCybwUVguId5r+mMMxCVL8epJBv1Fvl6EeBlKR9ikZRLeu sO07n42dh5PYSqj82JnEdvY33H9K25ZHeGPHWmrxqmNACrJ6swGCoBCQ/YsACqH1 YJd7aUdxmQBIxavDtwjQ/3EszoHM4jQbFtlOcLcCicCz44Jd9Y2uwW16wxddht7g xSl/K3w61zG6bcTP+ATZi+C8SghdMlgnRBeOnxD8mISNaf8//gTyQElpJH+nQDOw /XLQ+Iu/1cTMzhoc43XPO5h4EMyEqU/HX6z6XT2sAzwi79RogQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOTtMl0CgjElaSJapfCw5gy2K0VFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mMGI0 NWY3OS02MTJkLTRjN2UtOGMyNC01ZjY0YWM3NWMxMTMvYWZmY2FiN2QtNjA5NC0z OTgyLThiMzQtMzgyMjFlZmMxMjU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjBiNDVmNzktNjEyZC00YzdlLThj MjQtNWY2NGFjNzVjMTEzL2YwYjQ1Zjc5LTYxMmQtNGM3ZS04YzI0LTVmNjRhYzc1 YzExMy5jcmwwHwYDVR0jBBgwFoAUwgDCOnzJSSzO95wp7F6dYJdYYncwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mMGI0NWY3OS02MTJkLTRjN2UtOGMyNC01ZjY0 YWM3NWMxMTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx//9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG1x8pdIF4bpk2dCjYtNrfNTIAJIxYCK/4UuNc5JbtGYzgwxKduGPOEk qPWXBUcI03kIiUuBaPkcmmcCve2F685/zVEUQreMVoDWJ4H0vq+XtPGrsh0RM0DH tiFOjx0sBKojOIS72sRLxRLmQpywlNTuZBjBwXJx5vWmROs1J/tG/D70qPTwJLM5 fT7bI5Kj4p7uIJJTL/hxRryOV36vOE7BpJFJo7SPhdI6rT1gYNJugxIAMRZm7Yj9 5Vz+DBNs3wB0TWHAQ3VUxM0f0IIGPTvP0hRg/KYofOp2YSjB2RvCCRCm9yMot0JQ Aqn48Zoi1h9H1hUuIV2l8ADB6OtTl3Q= -----END CERTIFICATE-----Generated at Sat Apr 5 07:49:02 2025 by rpki-client