$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afb3511b-f1b6-44ad-9c36-f6576a5400df/0ea62e7e-054c-31d5-bb8d-1005bcac50b2.roa File: 0ea62e7e-054c-31d5-bb8d-1005bcac50b2.roa (raw, json) Hash identifier: XmbOTOagatrLwRf2a6AzkuAdAyeDGlSGsul/F833P78= Subject key identifier: 68:CE:27:C3:58:8D:B6:FF:64:91:B1:B0:F6:2F:49:25:20:CA:AF:BB Certificate issuer: /CN=afb3511b-f1b6-44ad-9c36-f6576a5400df Certificate serial: 010D0C9F43285848C41B7A076C1101D3AFCABCE0 Authority key identifier: 9E:6E:F4:05:1C:0B:C6:DB:08:47:57:A8:A3:7A:7D:59:29:AE:D0:33 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afb3511b-f1b6-44ad-9c36-f6576a5400df.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afb3511b-f1b6-44ad-9c36-f6576a5400df/0ea62e7e-054c-31d5-bb8d-1005bcac50b2.roa Signing time: Tue 04 Feb 2025 02:00:40 +0000 ROA not before: Tue 04 Feb 2025 02:00:40 +0000 ROA not after: Mon 05 May 2025 01:00:40 +0000 asID: 395839 IP address blocks: 199.5.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afb3511b-f1b6-44ad-9c36-f6576a5400df/afb3511b-f1b6-44ad-9c36-f6576a5400df.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afb3511b-f1b6-44ad-9c36-f6576a5400df/afb3511b-f1b6-44ad-9c36-f6576a5400df.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afb3511b-f1b6-44ad-9c36-f6576a5400df.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c4:1b:7a:07:6c:11:01:d3:af:ca:bc:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afb3511b-f1b6-44ad-9c36-f6576a5400df Validity Not Before: Feb 4 02:00:40 2025 GMT Not After : May 5 01:00:40 2025 GMT Subject: CN=e8009c66-70bc-45eb-87ee-a78c3e38011d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:02:8d:b8:3f:e0:53:f8:fe:44:c3:88:bc:2b: ef:66:d7:fd:25:c4:92:39:7c:72:6f:3e:5c:12:ec: ca:dd:71:c6:fe:83:e9:de:92:7d:01:42:ae:e8:6b: 86:bb:31:ee:39:33:a5:4d:ea:bf:2e:8b:ad:85:3d: 3e:68:db:da:de:44:70:38:b8:0b:6c:9a:6b:d3:3e: 57:1a:a2:93:c2:b4:ce:bd:9c:39:87:19:b4:1b:db: ca:e8:d9:f0:92:29:84:e1:d5:ee:90:a4:82:1b:93: 2c:06:70:73:ac:b4:65:ba:c5:84:87:22:f2:09:76: a7:7f:b4:7d:a7:c6:34:18:f8:e2:0e:52:bc:52:1b: 4e:e1:4e:fc:ac:5c:3a:10:2c:d5:0b:62:22:8f:1a: df:65:59:d8:57:2a:80:cd:1d:0a:8b:31:b3:43:23: 63:a9:00:e1:36:52:05:8d:fb:24:96:c8:a3:50:7a: f0:00:02:96:74:d3:a7:d4:ec:0d:17:c7:57:9a:ac: f8:e7:2b:8a:14:da:b2:6a:24:2e:51:97:c5:e4:74: ab:5b:ac:70:57:39:72:37:42:3d:ef:45:f1:8a:04: a0:ce:0f:61:c9:69:25:20:df:16:1f:1c:9e:3f:ec: b9:5e:37:d8:a2:92:fc:82:9e:47:74:08:94:35:72: 94:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:CE:27:C3:58:8D:B6:FF:64:91:B1:B0:F6:2F:49:25:20:CA:AF:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afb3511b-f1b6-44ad-9c36-f6576a5400df/0ea62e7e-054c-31d5-bb8d-1005bcac50b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afb3511b-f1b6-44ad-9c36-f6576a5400df/afb3511b-f1b6-44ad-9c36-f6576a5400df.crl X509v3 Authority Key Identifier: keyid:9E:6E:F4:05:1C:0B:C6:DB:08:47:57:A8:A3:7A:7D:59:29:AE:D0:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afb3511b-f1b6-44ad-9c36-f6576a5400df.cer sbgp-ipAddrBlock: critical IPv4: 199.5.163.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:9d:4e:b8:ec:2b:4c:42:20:51:60:a1:4c:67:41:92:ee:36: 1f:ac:bb:b1:dd:3b:1f:cf:86:0f:56:32:79:a0:63:c6:91:11: b8:f6:3f:15:b6:97:b8:75:35:84:29:f0:6c:0a:98:18:04:0a: 5c:22:e2:94:f9:0b:0f:37:be:33:99:a4:ce:7c:c9:2e:4e:79: f5:8e:fb:20:1c:34:6c:85:aa:b1:ab:e6:6e:5a:23:4c:33:0a: 3d:e9:67:00:ff:08:c1:0d:ae:5d:b4:f5:02:b8:7f:89:1e:b8: 19:d8:7d:d9:1c:90:6f:6f:71:30:6a:7a:72:56:b4:15:7a:6b: cd:8e:2b:08:85:31:a9:b8:e6:9b:e7:7b:9d:ed:47:6f:75:ef: 8f:ee:8d:8b:d1:48:ea:6a:b7:b9:2b:47:35:fb:07:48:8f:4e: c1:95:a1:17:59:65:5b:5c:17:39:49:01:6c:e9:08:27:aa:e4: f9:ff:30:5c:d3:c2:14:81:3a:36:d4:5f:bd:f6:ed:6f:1c:45: 7a:d0:e6:18:e4:dd:7e:59:19:54:1d:f9:f1:1b:de:1b:c7:36: a8:75:6a:7d:3b:31:f0:59:12:4c:71:4d:5c:11:1f:9a:e6:7a: 45:e8:bb:95:b7:dd:60:7c:dc:06:1c:a0:a9:6d:c0:a1:34:e7: e9:20:9e:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjEG3oHbBEB06/KvOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZiMzUxMWItZjFiNi00NGFkLTljMzYtZjY1NzZhNTQw MGRmMB4XDTI1MDIwNDAyMDA0MFoXDTI1MDUwNTAxMDA0MFowLzEtMCsGA1UEAxMk ZTgwMDljNjYtNzBiYy00NWViLTg3ZWUtYTc4YzNlMzgwMTFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgAKNuD/gU/j+RMOIvCvvZtf9JcSSOXxybz5c EuzK3XHG/oPp3pJ9AUKu6GuGuzHuOTOlTeq/LouthT0+aNva3kRwOLgLbJpr0z5X GqKTwrTOvZw5hxm0G9vK6NnwkimE4dXukKSCG5MsBnBzrLRlusWEhyLyCXanf7R9 p8Y0GPjiDlK8UhtO4U78rFw6ECzVC2IijxrfZVnYVyqAzR0KizGzQyNjqQDhNlIF jfsklsijUHrwAAKWdNOn1OwNF8dXmqz45yuKFNqyaiQuUZfF5HSrW6xwVzlyN0I9 70XxigSgzg9hyWklIN8WHxyeP+y5XjfYopL8gp5HdAiUNXKU4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGjOJ8NYjbb/ZJGxsPYvSSUgyq+7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hZmIz NTExYi1mMWI2LTQ0YWQtOWMzNi1mNjU3NmE1NDAwZGYvMGVhNjJlN2UtMDU0Yy0z MWQ1LWJiOGQtMTAwNWJjYWM1MGIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYWZiMzUxMWItZjFiNi00NGFkLTlj MzYtZjY1NzZhNTQwMGRmL2FmYjM1MTFiLWYxYjYtNDRhZC05YzM2LWY2NTc2YTU0 MDBkZi5jcmwwHwYDVR0jBBgwFoAUnm70BRwLxtsIR1eoo3p9WSmu0DMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hZmIzNTExYi1mMWI2LTQ0YWQtOWMzNi1mNjU3 NmE1NDAwZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwWjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABOdTrjsK0xCIFFgoUxnQZLuNh+su7HdOx/Phg9WMnmgY8aREbj2PxW2 l7h1NYQp8GwKmBgEClwi4pT5Cw83vjOZpM58yS5OefWO+yAcNGyFqrGr5m5aI0wz Cj3pZwD/CMENrl209QK4f4keuBnYfdkckG9vcTBqenJWtBV6a82OKwiFMam45pvn e53tR29174/ujYvRSOpqt7krRzX7B0iPTsGVoRdZZVtcFzlJAWzpCCeq5Pn/MFzT whSBOjbUX7327W8cRXrQ5hjk3X5ZGVQd+fEb3hvHNqh1an07MfBZEkxxTVwRH5rm ekXou5W33WB83AYcoKltwKE05+kgntM= -----END CERTIFICATE-----Generated at Sun Feb 16 15:05:47 2025 by rpki-client