$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4c7af685-9e64-44e4-ac36-719ad5b8bf68/1156cf07-7f12-3349-96aa-049c4d61b428.roa File: 1156cf07-7f12-3349-96aa-049c4d61b428.roa (raw, json) Hash identifier: tEvAEfFDfvNW75Y+3gy4fFgSbqoyNS2cr6FymUA/A4c= Subject key identifier: 5D:97:C5:41:86:ED:50:AE:91:0B:A1:78:49:65:CB:53:1B:CC:93:E8 Certificate issuer: /CN=4c7af685-9e64-44e4-ac36-719ad5b8bf68 Certificate serial: 010D0C9F43285848A400B73BE0A9DACB70F76580 Authority key identifier: 83:1F:FA:45:E1:13:40:75:27:2F:26:DD:18:21:09:AD:FC:C8:9A:5F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4c7af685-9e64-44e4-ac36-719ad5b8bf68.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4c7af685-9e64-44e4-ac36-719ad5b8bf68/1156cf07-7f12-3349-96aa-049c4d61b428.roa Signing time: Thu 23 Jan 2025 14:00:52 +0000 ROA not before: Thu 23 Jan 2025 14:00:52 +0000 ROA not after: Wed 23 Apr 2025 13:00:52 +0000 asID: 14618 IP address blocks: 199.59.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4c7af685-9e64-44e4-ac36-719ad5b8bf68/4c7af685-9e64-44e4-ac36-719ad5b8bf68.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4c7af685-9e64-44e4-ac36-719ad5b8bf68/4c7af685-9e64-44e4-ac36-719ad5b8bf68.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4c7af685-9e64-44e4-ac36-719ad5b8bf68.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a4:00:b7:3b:e0:a9:da:cb:70:f7:65:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c7af685-9e64-44e4-ac36-719ad5b8bf68 Validity Not Before: Jan 23 14:00:52 2025 GMT Not After : Apr 23 13:00:52 2025 GMT Subject: CN=50334106-8682-41fb-a77a-8c4dc9c6b670 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:f7:ce:9a:f4:7c:29:84:ff:06:34:ff:22:7f: 90:d5:67:4a:86:2c:de:9c:a9:23:2b:2b:43:89:e6: ac:e9:9d:f1:da:c1:01:79:37:4b:f0:bc:fb:bf:d6: 6b:93:d3:eb:92:1d:63:dd:25:3a:42:13:e0:62:ef: d8:51:a2:28:05:2c:88:4e:cb:17:d6:1f:d4:07:7c: 7e:f2:b0:ff:f6:9f:56:dd:d6:43:93:e0:91:53:7e: 05:29:ca:ad:70:f2:f3:75:09:e1:59:ff:ff:1d:cd: 6b:a6:3b:5e:46:2d:26:33:4c:d1:06:ef:8e:43:21: 88:bd:30:1c:49:7b:76:a0:75:ac:dc:e4:16:c3:cf: 1c:48:01:e9:5d:57:66:c0:b8:f0:b2:42:54:9a:30: 49:91:b9:54:8a:9a:fc:78:e5:56:00:98:84:ac:82: 3e:68:c9:c5:7e:04:00:d1:d5:a6:95:cc:08:6a:cf: 43:6a:2c:15:31:59:03:34:70:66:d1:1c:f5:67:0f: 51:c4:dd:e3:b0:a0:aa:7c:c8:e5:60:23:cf:68:cb: 26:30:b5:82:e0:e6:36:e8:cb:ad:3f:94:d4:3d:2a: af:24:f3:9f:da:ac:24:07:9f:ae:34:1e:94:29:0f: 11:a0:9b:c5:1b:c1:6f:cf:79:38:7d:f4:c4:15:5b: f1:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:97:C5:41:86:ED:50:AE:91:0B:A1:78:49:65:CB:53:1B:CC:93:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4c7af685-9e64-44e4-ac36-719ad5b8bf68/1156cf07-7f12-3349-96aa-049c4d61b428.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4c7af685-9e64-44e4-ac36-719ad5b8bf68/4c7af685-9e64-44e4-ac36-719ad5b8bf68.crl X509v3 Authority Key Identifier: keyid:83:1F:FA:45:E1:13:40:75:27:2F:26:DD:18:21:09:AD:FC:C8:9A:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4c7af685-9e64-44e4-ac36-719ad5b8bf68.cer sbgp-ipAddrBlock: critical IPv4: 199.59.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:47:f0:8b:a5:af:f9:80:24:d5:07:b6:d3:f3:94:6f:99:37: 37:33:d5:69:9e:07:c4:cf:5a:c0:b0:06:59:25:fe:dc:39:6e: 33:18:74:92:44:39:05:cb:6c:f3:45:c8:c1:da:a2:92:dc:19: 3c:b3:3c:24:5f:d9:f0:7e:a0:a7:b9:31:a7:d6:65:a8:8d:99: 6b:41:e2:b5:20:fd:2f:a6:5c:01:ac:06:fa:7a:75:04:5f:04: f0:1e:34:fe:9c:4d:3f:b5:69:f6:75:04:e9:dd:06:f4:72:5a: 3e:85:27:f1:c6:fa:7e:84:e8:16:7e:10:41:39:26:bb:b4:19: 24:3d:34:80:62:ee:13:08:fa:c1:76:e2:f6:18:e5:cc:19:fa: 69:e2:f6:c7:2a:6a:b8:fd:7d:7f:85:98:1d:cf:b5:f4:b6:0b: 0d:cf:2e:b1:00:eb:bd:1f:92:25:98:55:e3:6c:95:1b:60:82: 97:16:44:f7:7d:7e:8a:06:87:ad:f1:2b:1c:4d:0a:38:9d:87: 51:09:2d:f8:ca:85:84:0e:94:a0:2f:ee:f1:7e:31:0b:db:c3: 4d:45:1d:d3:b2:df:9b:ac:27:44:0d:24:87:cd:e5:9c:21:1e: 40:b7:7e:e7:90:69:5c:ca:57:54:7b:e4:8b:19:56:93:87:7e: 6c:4b:65:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEikALc74Knay3D3ZYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGM3YWY2ODUtOWU2NC00NGU0LWFjMzYtNzE5YWQ1Yjhi ZjY4MB4XDTI1MDEyMzE0MDA1MloXDTI1MDQyMzEzMDA1MlowLzEtMCsGA1UEAxMk NTAzMzQxMDYtODY4Mi00MWZiLWE3N2EtOGM0ZGM5YzZiNjcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmffOmvR8KYT/BjT/In+Q1WdKhizenKkjKytD ieas6Z3x2sEBeTdL8Lz7v9Zrk9Prkh1j3SU6QhPgYu/YUaIoBSyITssX1h/UB3x+ 8rD/9p9W3dZDk+CRU34FKcqtcPLzdQnhWf//Hc1rpjteRi0mM0zRBu+OQyGIvTAc SXt2oHWs3OQWw88cSAHpXVdmwLjwskJUmjBJkblUipr8eOVWAJiErII+aMnFfgQA 0dWmlcwIas9DaiwVMVkDNHBm0Rz1Zw9RxN3jsKCqfMjlYCPPaMsmMLWC4OY26Mut P5TUPSqvJPOf2qwkB5+uNB6UKQ8RoJvFG8Fvz3k4ffTEFVvxowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF2XxUGG7VCukQuheElly1MbzJPoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80Yzdh ZjY4NS05ZTY0LTQ0ZTQtYWMzNi03MTlhZDViOGJmNjgvMTE1NmNmMDctN2YxMi0z MzQ5LTk2YWEtMDQ5YzRkNjFiNDI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGM3YWY2ODUtOWU2NC00NGU0LWFj MzYtNzE5YWQ1YjhiZjY4LzRjN2FmNjg1LTllNjQtNDRlNC1hYzM2LTcxOWFkNWI4 YmY2OC5jcmwwHwYDVR0jBBgwFoAUgx/6ReETQHUnLybdGCEJrfzIml8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC80YzdhZjY4NS05ZTY0LTQ0ZTQtYWMzNi03MTlh ZDViOGJmNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxzvzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJRH8Iulr/mAJNUHttPzlG+ZNzcz1WmeB8TPWsCwBlkl/tw5bjMYdJJE OQXLbPNFyMHaopLcGTyzPCRf2fB+oKe5MafWZaiNmWtB4rUg/S+mXAGsBvp6dQRf BPAeNP6cTT+1afZ1BOndBvRyWj6FJ/HG+n6E6BZ+EEE5Jru0GSQ9NIBi7hMI+sF2 4vYY5cwZ+mni9scqarj9fX+FmB3PtfS2Cw3PLrEA670fkiWYVeNslRtggpcWRPd9 fooGh63xKxxNCjidh1EJLfjKhYQOlKAv7vF+MQvbw01FHdOy35usJ0QNJIfN5Zwh HkC3fueQaVzKV1R75IsZVpOHfmxLZbs= -----END CERTIFICATE-----Generated at Fri Apr 4 23:50:14 2025 by rpki-client