$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/0c921e76-6576-3175-8c68-8b8667dfc669.roa File: 0c921e76-6576-3175-8c68-8b8667dfc669.roa (raw, json) Hash identifier: vw2Qau9/rGpSR2azqdIXTR0YrpGNii8zfoGTYBZZfKE= Subject key identifier: 14:CF:87:31:FF:E9:57:5E:2A:A5:07:F5:F9:4A:E4:0D:FE:78:5D:A3 Certificate issuer: /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Certificate serial: 010D0C9F43285848DA70F54B9F5FDE664F46D9E0 Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/0c921e76-6576-3175-8c68-8b8667dfc669.roa Signing time: Wed 12 Feb 2025 02:00:39 +0000 ROA not before: Wed 12 Feb 2025 02:00:39 +0000 ROA not after: Tue 13 May 2025 01:00:39 +0000 asID: 397422 IP address blocks: 199.193.232.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:da:70:f5:4b:9f:5f:de:66:4f:46:d9:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Validity Not Before: Feb 12 02:00:39 2025 GMT Not After : May 13 01:00:39 2025 GMT Subject: CN=add42bbf-e982-413f-a16a-bde0e31f9062 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:38:f7:42:e4:39:f3:62:28:de:3b:bc:45:7d: dc:17:dd:c6:1f:14:77:cc:6e:22:d3:3c:53:73:4d: 73:0e:2d:c1:59:13:cb:9e:a3:cd:38:78:38:91:b8: 32:4a:0c:60:76:48:18:4b:a9:14:de:e7:87:a6:49: da:15:e9:a8:69:60:c2:77:b9:8b:7b:75:ec:1e:02: ef:a7:9e:31:c2:64:5d:97:d0:f4:6c:c7:ee:cc:3c: be:6d:19:7d:89:53:82:42:8c:9d:8c:9f:ca:ea:a8: 98:a4:ab:35:ae:61:10:ed:cd:14:cd:0a:82:17:34: cc:1f:f1:8d:18:3c:36:6d:fa:0b:24:99:00:ab:10: 6c:e0:1f:af:49:08:d8:08:49:3f:0c:3a:cf:01:25: 68:4d:a5:f7:b2:29:dc:46:c2:b9:e4:65:0f:19:17: bd:25:c2:a4:89:2f:14:a1:1b:8f:24:7b:44:62:85: c2:2e:08:68:29:b9:ce:e1:8d:c7:83:9a:44:23:2d: 51:62:96:0c:93:b2:cc:0f:09:2e:4a:2b:ae:e9:12: b3:3c:0f:c1:57:0b:16:f2:60:8f:57:e8:fb:cd:ac: d0:c4:ca:32:fe:4d:6c:5a:85:a6:f3:94:8a:58:8b: 51:03:74:ad:87:08:70:ff:dd:8d:31:84:a4:72:ab: f7:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:CF:87:31:FF:E9:57:5E:2A:A5:07:F5:F9:4A:E4:0D:FE:78:5D:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/0c921e76-6576-3175-8c68-8b8667dfc669.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl X509v3 Authority Key Identifier: keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer sbgp-ipAddrBlock: critical IPv4: 199.193.232.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:a6:5e:6d:df:d2:7e:6e:fd:be:75:d9:64:c1:9d:6c:03:fe: 33:7e:cb:18:0a:e3:2e:34:82:92:ce:84:a4:8f:2e:2c:4e:6c: 67:35:44:58:70:ee:ae:15:50:fb:47:3a:53:4d:38:ed:98:c1: 53:b7:13:71:a7:0b:b3:67:4e:be:7b:8d:6f:58:ef:3f:8f:ee: 79:c4:cd:fd:32:41:e4:ac:d4:67:de:8c:fa:c6:97:a3:ba:9c: b3:ee:87:b6:e3:02:ae:0c:16:68:40:9f:5c:ff:11:74:c1:df: cb:80:7a:91:6c:8a:2c:1f:b3:a0:12:b5:46:60:10:36:ab:32: 79:2e:6e:96:66:ab:75:53:d5:f1:5d:11:8b:bd:d7:f7:32:20: be:3d:b3:52:7c:aa:c6:60:ec:e2:a1:8c:bf:56:64:a6:43:c0: 5b:71:0b:e1:ca:9f:85:42:16:9c:92:67:23:01:ad:e9:64:d7: 89:c6:92:fd:94:b4:ad:06:5f:b6:05:10:60:13:a4:70:00:f3: e6:76:6d:f4:b0:e5:00:b0:86:2b:cb:c1:1b:b8:71:25:c6:a5: b4:a4:df:8a:2a:70:3f:21:5a:6a:99:32:cf:c4:8c:4f:9c:f0: 5c:aa:a3:65:ff:7f:59:be:fa:f0:3e:6f:31:c7:7d:5f:5f:56: 24:05:d7:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjacPVLn1/eZk9G2eAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0 MGFmMB4XDTI1MDIxMjAyMDAzOVoXDTI1MDUxMzAxMDAzOVowLzEtMCsGA1UEAxMk YWRkNDJiYmYtZTk4Mi00MTNmLWExNmEtYmRlMGUzMWY5MDYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDj3QuQ582Io3ju8RX3cF93GHxR3zG4i0zxT c01zDi3BWRPLnqPNOHg4kbgySgxgdkgYS6kU3ueHpknaFemoaWDCd7mLe3XsHgLv p54xwmRdl9D0bMfuzDy+bRl9iVOCQoydjJ/K6qiYpKs1rmEQ7c0UzQqCFzTMH/GN GDw2bfoLJJkAqxBs4B+vSQjYCEk/DDrPASVoTaX3sincRsK55GUPGRe9JcKkiS8U oRuPJHtEYoXCLghoKbnO4Y3Hg5pEIy1RYpYMk7LMDwkuSiuu6RKzPA/BVwsW8mCP V+j7zazQxMoy/k1sWoWm85SKWItRA3Sthwhw/92NMYSkcqv3aQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBTPhzH/6VdeKqUH9flK5A3+eF2jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1 Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvMGM5MjFlNzYtNjU3Ni0z MTc1LThjNjgtOGI4NjY3ZGZjNjY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx8HoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE+mXm3f0n5u/b512WTBnWwD/jN+yxgK4y40gpLOhKSPLixObGc1RFhw 7q4VUPtHOlNNOO2YwVO3E3GnC7NnTr57jW9Y7z+P7nnEzf0yQeSs1GfejPrGl6O6 nLPuh7bjAq4MFmhAn1z/EXTB38uAepFsiiwfs6AStUZgEDarMnkubpZmq3VT1fFd EYu91/cyIL49s1J8qsZg7OKhjL9WZKZDwFtxC+HKn4VCFpySZyMBrelk14nGkv2U tK0GX7YFEGATpHAA8+Z2bfSw5QCwhivLwRu4cSXGpbSk34oqcD8hWmqZMs/EjE+c 8Fyqo2X/f1m++vA+bzHHfV9fViQF11o= -----END CERTIFICATE-----Generated at Sun Feb 16 15:16:46 2025 by rpki-client