$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1fe4e29c-f3ca-4ee5-92da-4443969e3deb/e4e9881e-159c-3652-8e1f-db181f6e764b.roa File: e4e9881e-159c-3652-8e1f-db181f6e764b.roa (raw, json) Hash identifier: e5AmAFK2gHo0Ir7u67hx+jRmIDuhXKCH7qOzvGpDmtc= Subject key identifier: C2:F1:3D:88:B6:22:F9:FD:16:A0:34:E2:BC:1F:9B:26:37:45:56:E2 Certificate issuer: /CN=1fe4e29c-f3ca-4ee5-92da-4443969e3deb Certificate serial: 010D0C9F43285849350E977E043930B06BE42B80 Authority key identifier: 09:B5:C9:F4:9A:DD:E7:D5:0E:E8:DB:6E:F5:11:49:5E:86:E6:16:5C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1fe4e29c-f3ca-4ee5-92da-4443969e3deb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1fe4e29c-f3ca-4ee5-92da-4443969e3deb/e4e9881e-159c-3652-8e1f-db181f6e764b.roa Signing time: Sun 16 Mar 2025 13:00:52 +0000 ROA not before: Sun 16 Mar 2025 13:00:52 +0000 ROA not after: Sat 14 Jun 2025 13:00:52 +0000 asID: 65224 IP address blocks: 199.212.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1fe4e29c-f3ca-4ee5-92da-4443969e3deb/1fe4e29c-f3ca-4ee5-92da-4443969e3deb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1fe4e29c-f3ca-4ee5-92da-4443969e3deb/1fe4e29c-f3ca-4ee5-92da-4443969e3deb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1fe4e29c-f3ca-4ee5-92da-4443969e3deb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:35:0e:97:7e:04:39:30:b0:6b:e4:2b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fe4e29c-f3ca-4ee5-92da-4443969e3deb Validity Not Before: Mar 16 13:00:52 2025 GMT Not After : Jun 14 13:00:52 2025 GMT Subject: CN=c8f837f7-ba6f-4e0c-be91-cb129395ae4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:46:3a:e0:47:e2:bf:d0:12:b2:25:30:a9:3e: 9d:c9:e2:ee:f3:0b:5e:e7:65:29:30:5d:ae:2c:f4: e2:36:39:11:6d:4e:7c:35:2e:fa:ed:b7:e4:a3:cd: 54:5a:ca:10:ff:2b:20:c4:7e:bf:2a:ce:2e:73:c5: 9d:8b:e4:56:16:96:c0:db:3d:5a:41:33:8b:f2:b7: ba:3e:c5:9a:c2:67:87:83:92:46:f9:97:79:e9:b7: 8d:d7:74:d1:19:b5:eb:1f:3a:1f:a4:76:cf:93:2c: 48:35:09:70:e0:7e:f3:59:95:90:28:b3:5a:ef:9e: b4:aa:55:ef:e0:8b:c9:de:1b:a8:9f:48:9e:a4:0f: 28:f6:af:68:0f:b7:7f:2c:cd:0a:c0:a7:26:4f:67: 39:2d:0f:f1:66:06:1f:68:b9:21:bb:4d:f3:83:09: b2:15:4d:de:9a:67:41:54:60:de:0c:0d:f5:59:27: 58:e7:0b:df:22:0e:a3:ec:d6:fe:49:b0:4b:f2:92: 0a:5e:62:9c:aa:b2:c7:ed:a8:8d:a4:46:e8:d0:2e: cc:53:e3:11:c3:2c:12:f5:71:d2:0b:3c:7f:41:90: c0:93:9c:74:bd:cb:01:29:7c:f5:ae:12:ce:67:2a: b1:19:9f:c0:fb:de:09:7a:6d:83:49:2d:82:99:bf: 8a:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:F1:3D:88:B6:22:F9:FD:16:A0:34:E2:BC:1F:9B:26:37:45:56:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1fe4e29c-f3ca-4ee5-92da-4443969e3deb/e4e9881e-159c-3652-8e1f-db181f6e764b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1fe4e29c-f3ca-4ee5-92da-4443969e3deb/1fe4e29c-f3ca-4ee5-92da-4443969e3deb.crl X509v3 Authority Key Identifier: keyid:09:B5:C9:F4:9A:DD:E7:D5:0E:E8:DB:6E:F5:11:49:5E:86:E6:16:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1fe4e29c-f3ca-4ee5-92da-4443969e3deb.cer sbgp-ipAddrBlock: critical IPv4: 199.212.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:b4:dc:28:a4:32:b7:4f:20:fb:91:29:39:3a:24:4d:e8:b4: cf:80:60:4c:3d:b7:24:d1:06:d1:26:59:95:a3:21:7c:c8:ba: 80:db:af:4b:48:78:89:d1:4e:99:15:a6:d2:c9:3e:62:58:64: 0b:ed:f6:57:67:43:4e:09:8e:0e:46:79:2d:ae:da:8f:31:6d: 1d:57:87:48:40:a8:70:da:2d:67:e8:7f:80:5d:11:6b:b0:9f: 35:36:33:68:1d:32:fd:78:ab:d8:c2:6f:32:cc:74:38:cc:bd: 12:cc:65:01:b3:47:ec:de:45:9b:8c:e4:f3:2a:37:a5:0c:5c: 8a:0f:b6:48:3b:49:7e:8d:e4:e7:2c:d7:91:69:0c:c7:f5:9f: a3:77:3d:9f:bd:6e:f6:76:16:2b:81:cb:ae:b1:4a:2d:e1:84: d2:7b:8f:b8:d4:1c:e7:d0:df:57:81:d9:b8:31:32:51:b8:1f: 2f:50:44:2e:25:92:52:b4:dd:dd:b5:d5:28:6f:d6:d7:b1:46: 94:d7:3d:aa:58:5a:49:69:79:04:b1:af:20:01:a4:f7:1e:bf: 55:84:d1:15:9e:e6:1f:6d:7b:2d:a1:6a:c4:d2:07:79:55:16: 17:66:af:0b:35:d5:57:23:f9:94:12:1a:91:14:08:0a:43:9c: 68:89:69:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk1Dpd+BDkwsGvkK4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZlNGUyOWMtZjNjYS00ZWU1LTkyZGEtNDQ0Mzk2OWUz ZGViMB4XDTI1MDMxNjEzMDA1MloXDTI1MDYxNDEzMDA1MlowLzEtMCsGA1UEAxMk YzhmODM3ZjctYmE2Zi00ZTBjLWJlOTEtY2IxMjkzOTVhZTRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzkY64Efiv9ASsiUwqT6dyeLu8wte52UpMF2u LPTiNjkRbU58NS767bfko81UWsoQ/ysgxH6/Ks4uc8Wdi+RWFpbA2z1aQTOL8re6 PsWawmeHg5JG+Zd56beN13TRGbXrHzofpHbPkyxINQlw4H7zWZWQKLNa7560qlXv 4IvJ3huon0iepA8o9q9oD7d/LM0KwKcmT2c5LQ/xZgYfaLkhu03zgwmyFU3emmdB VGDeDA31WSdY5wvfIg6j7Nb+SbBL8pIKXmKcqrLH7aiNpEbo0C7MU+MRwywS9XHS Czx/QZDAk5x0vcsBKXz1rhLOZyqxGZ/A+94Jem2DSS2Cmb+KFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMLxPYi2Ivn9FqA04rwfmyY3RVbiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xZmU0 ZTI5Yy1mM2NhLTRlZTUtOTJkYS00NDQzOTY5ZTNkZWIvZTRlOTg4MWUtMTU5Yy0z NjUyLThlMWYtZGIxODFmNmU3NjRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMWZlNGUyOWMtZjNjYS00ZWU1LTky ZGEtNDQ0Mzk2OWUzZGViLzFmZTRlMjljLWYzY2EtNGVlNS05MmRhLTQ0NDM5Njll M2RlYi5jcmwwHwYDVR0jBBgwFoAUCbXJ9Jrd59UO6Ntu9RFJXobmFlwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8xZmU0ZTI5Yy1mM2NhLTRlZTUtOTJkYS00NDQz OTY5ZTNkZWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx9T+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGK03CikMrdPIPuRKTk6JE3otM+AYEw9tyTRBtEmWZWjIXzIuoDbr0tI eInRTpkVptLJPmJYZAvt9ldnQ04Jjg5GeS2u2o8xbR1Xh0hAqHDaLWfof4BdEWuw nzU2M2gdMv14q9jCbzLMdDjMvRLMZQGzR+zeRZuM5PMqN6UMXIoPtkg7SX6N5Ocs 15FpDMf1n6N3PZ+9bvZ2FiuBy66xSi3hhNJ7j7jUHOfQ31eB2bgxMlG4Hy9QRC4l klK03d211Shv1texRpTXPapYWklpeQSxryABpPcev1WE0RWe5h9tey2hasTSB3lV Fhdmrws11Vcj+ZQSGpEUCApDnGiJaSc= -----END CERTIFICATE-----Generated at Sat Apr 12 13:32:42 2025 by rpki-client