$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7349389a-27ec-40bc-a722-e288a622f972/4a387397-2733-3034-8b71-903426b6d408.roa File: 4a387397-2733-3034-8b71-903426b6d408.roa (raw, json) Hash identifier: 6PrVipEtxxlFIUj7w5UlsU4FtXwJ8xaaFuWBM8IwLrY= Subject key identifier: EA:FA:C6:BE:50:2E:7D:AB:13:21:BE:0D:27:20:A2:C6:DB:97:F2:9A Certificate issuer: /CN=7349389a-27ec-40bc-a722-e288a622f972 Certificate serial: 010D0C9F4328584957F417310EE80FECDA324440 Authority key identifier: 6A:06:53:26:8E:34:11:3D:D3:AE:75:1F:01:6F:47:46:73:3F:01:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7349389a-27ec-40bc-a722-e288a622f972.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7349389a-27ec-40bc-a722-e288a622f972/4a387397-2733-3034-8b71-903426b6d408.roa Signing time: Sat 29 Mar 2025 01:00:39 +0000 ROA not before: Sat 29 Mar 2025 01:00:39 +0000 ROA not after: Fri 27 Jun 2025 01:00:39 +0000 asID: 399630 IP address blocks: 199.212.143.0/24 maxlen: 24 2602:2bb::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7349389a-27ec-40bc-a722-e288a622f972/7349389a-27ec-40bc-a722-e288a622f972.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7349389a-27ec-40bc-a722-e288a622f972/7349389a-27ec-40bc-a722-e288a622f972.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7349389a-27ec-40bc-a722-e288a622f972.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:57:f4:17:31:0e:e8:0f:ec:da:32:44:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7349389a-27ec-40bc-a722-e288a622f972 Validity Not Before: Mar 29 01:00:39 2025 GMT Not After : Jun 27 01:00:39 2025 GMT Subject: CN=813fa505-e0db-4c76-ae88-393e348928ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:94:de:d3:fa:77:e1:74:59:14:bb:4e:8d:5b: de:c2:bb:60:b2:22:71:71:e8:bb:df:8c:53:4c:b0: 0b:5c:8b:f8:d4:f9:e2:63:db:88:7e:46:a3:aa:22: 90:3e:90:91:5c:91:85:37:a5:5e:9d:d2:d8:2d:18: dc:bb:17:92:9f:c4:fe:66:b5:da:7f:b1:51:85:1f: 3b:dc:96:e0:11:76:39:7a:50:87:93:40:8f:4f:af: e2:bf:56:79:6d:cc:18:6a:31:24:95:3b:05:29:c0: 41:20:c6:de:8c:18:d2:61:e6:96:42:05:dc:32:71: 15:20:b5:09:92:1f:61:f6:f2:22:7a:32:45:c5:65: 24:de:4d:ae:97:e1:64:4b:da:f8:fa:e0:19:99:ea: 96:24:66:f2:a9:7f:50:d9:88:24:0b:45:6a:bd:36: a9:fb:d7:6c:87:bb:8c:4a:05:69:0e:76:53:67:ac: 24:41:06:a9:18:72:27:ad:bf:93:a0:2b:bb:6c:df: 97:60:8b:3a:47:65:cf:9a:81:a4:39:3f:60:1e:6e: 66:49:32:2a:70:5a:62:67:ad:60:c1:a0:1b:30:3a: c3:33:01:de:82:5b:2b:54:b0:53:2c:90:4b:ed:0e: 46:8e:f2:4f:53:ac:ad:9f:24:41:bd:78:df:df:09: db:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:FA:C6:BE:50:2E:7D:AB:13:21:BE:0D:27:20:A2:C6:DB:97:F2:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7349389a-27ec-40bc-a722-e288a622f972/4a387397-2733-3034-8b71-903426b6d408.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7349389a-27ec-40bc-a722-e288a622f972/7349389a-27ec-40bc-a722-e288a622f972.crl X509v3 Authority Key Identifier: keyid:6A:06:53:26:8E:34:11:3D:D3:AE:75:1F:01:6F:47:46:73:3F:01:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7349389a-27ec-40bc-a722-e288a622f972.cer sbgp-ipAddrBlock: critical IPv4: 199.212.143.0/24 IPv6: 2602:2bb::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:8e:e0:0b:f9:00:76:28:ab:a6:df:2e:3c:2d:1a:fe:8a:48: c4:0f:5c:72:c5:96:79:56:d8:ae:c2:be:1b:9a:c8:38:4c:dc: 63:09:6a:5a:d5:2e:ff:55:4f:f0:3c:84:74:a1:b0:e4:94:2d: 69:29:86:40:38:11:71:7c:af:da:c3:24:c0:16:a0:99:a1:67: 96:d5:2a:d7:16:6e:4b:ec:15:c2:2b:a3:de:11:f1:2e:2f:99: 36:80:4e:42:03:f7:e6:d7:06:bb:54:ee:3a:29:4a:37:16:25: d0:34:19:92:1a:01:11:01:f7:f7:e9:64:a0:4f:b7:5f:b3:98: 71:c0:6d:c3:32:76:f2:c0:30:0e:24:63:ff:ca:31:60:50:b2: 9a:7d:bc:8b:0b:6a:a6:2b:c7:27:46:38:ec:a4:32:c1:40:ed: 68:8c:33:69:ab:8c:2c:ff:9a:28:23:3d:55:f6:fa:9a:ae:a1: d5:c8:40:8a:0b:11:57:65:21:00:ca:9d:b3:11:2b:1e:22:f3: 9c:29:4b:7b:a7:69:a2:22:86:88:fa:7e:76:56:f3:62:da:54: cf:91:60:02:76:b8:f3:08:c4:a2:67:c8:8c:3e:d2:05:18:57: ac:58:06:11:ec:ad:04:67:b6:06:39:c9:45:a9:5d:54:20:c7: 85:ea:db:d4 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWElX9BcxDugP7NoyREAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzM0OTM4OWEtMjdlYy00MGJjLWE3MjItZTI4OGE2MjJm OTcyMB4XDTI1MDMyOTAxMDAzOVoXDTI1MDYyNzAxMDAzOVowLzEtMCsGA1UEAxMk ODEzZmE1MDUtZTBkYi00Yzc2LWFlODgtMzkzZTM0ODkyOGNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ZTe0/p34XRZFLtOjVvewrtgsiJxcei734xT TLALXIv41PniY9uIfkajqiKQPpCRXJGFN6VendLYLRjcuxeSn8T+ZrXaf7FRhR87 3JbgEXY5elCHk0CPT6/iv1Z5bcwYajEklTsFKcBBIMbejBjSYeaWQgXcMnEVILUJ kh9h9vIiejJFxWUk3k2ul+FkS9r4+uAZmeqWJGbyqX9Q2YgkC0VqvTap+9dsh7uM SgVpDnZTZ6wkQQapGHInrb+ToCu7bN+XYIs6R2XPmoGkOT9gHm5mSTIqcFpiZ61g waAbMDrDMwHeglsrVLBTLJBL7Q5GjvJPU6ytnyRBvXjf3wnbEwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFOr6xr5QLn2rEyG+DScgosbbl/KaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS83MzQ5 Mzg5YS0yN2VjLTQwYmMtYTcyMi1lMjg4YTYyMmY5NzIvNGEzODczOTctMjczMy0z MDM0LThiNzEtOTAzNDI2YjZkNDA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNzM0OTM4OWEtMjdlYy00MGJjLWE3 MjItZTI4OGE2MjJmOTcyLzczNDkzODlhLTI3ZWMtNDBiYy1hNzIyLWUyODhhNjIy Zjk3Mi5jcmwwHwYDVR0jBBgwFoAUagZTJo40ET3TrnUfAW9HRnM/AXwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS83MzQ5Mzg5YS0yN2VjLTQwYmMtYTcyMi1lMjg4 YTYyMmY5NzIuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAx9SPMA4E AgACMAgDBgAmAgK7ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB6juAL+QB2KKum3y48LRr+ikjED1xyxZZ5 Vtiuwr4bmsg4TNxjCWpa1S7/VU/wPIR0obDklC1pKYZAOBFxfK/awyTAFqCZoWeW 1SrXFm5L7BXCK6PeEfEuL5k2gE5CA/fm1wa7VO46KUo3FiXQNBmSGgERAff36WSg T7dfs5hxwG3DMnbywDAOJGP/yjFgULKafbyLC2qmK8cnRjjspDLBQO1ojDNpq4ws /5ooIz1V9vqarqHVyECKCxFXZSEAyp2zESseIvOcKUt7p2miIoaI+n52VvNi2lTP kWACdrjzCMSiZ8iMPtIFGFesWAYR7K0EZ7YGOclFqV1UIMeF6tvU -----END CERTIFICATE-----Generated at Fri Apr 11 21:54:27 2025 by rpki-client