$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/43d86503-0205-3354-af7e-4594223a45bf.roa File: 43d86503-0205-3354-af7e-4594223a45bf.roa (raw, json) Hash identifier: nnwHUYZTyXjnzeYbbGs5qQdEwp0hlzt1niF5GvKkg00= Subject key identifier: 30:3D:6B:58:02:CB:7C:72:0C:6E:EA:93:54:36:94:80:C0:CC:F6:6D Certificate issuer: /CN=5ddde1fe-7525-49e3-9718-412c13cd42ca Certificate serial: 010D0C9F43285848E21E0D4AF78824E51A9A68C0 Authority key identifier: 3F:21:17:F8:2F:74:2E:BB:DD:C1:C6:68:1B:A6:1C:8E:8A:81:61:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/43d86503-0205-3354-af7e-4594223a45bf.roa Signing time: Fri 14 Feb 2025 20:00:08 +0000 ROA not before: Fri 14 Feb 2025 20:00:08 +0000 ROA not after: Thu 15 May 2025 19:00:08 +0000 asID: 834 IP address blocks: 199.101.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/5ddde1fe-7525-49e3-9718-412c13cd42ca.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/5ddde1fe-7525-49e3-9718-412c13cd42ca.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e2:1e:0d:4a:f7:88:24:e5:1a:9a:68:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ddde1fe-7525-49e3-9718-412c13cd42ca Validity Not Before: Feb 14 20:00:08 2025 GMT Not After : May 15 19:00:08 2025 GMT Subject: CN=d904188d-0585-46c3-9c27-6fe21ea138bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:3f:09:42:8a:cf:72:26:af:77:ed:9d:97:6a: 7f:41:9c:f4:fa:9e:f0:21:c3:bf:7c:a5:00:c8:fa: 37:1b:ef:ca:41:23:ee:bf:db:33:bb:b8:27:63:16: 92:9e:06:35:eb:a5:fa:fe:f1:94:1a:af:82:38:83: 4d:cb:19:72:59:56:92:37:c6:67:c3:03:37:71:88: 3b:3c:c6:4c:18:d2:25:ad:1e:a9:dc:20:f2:4d:76: bd:bd:6b:7d:14:f4:ee:9b:1d:d2:42:63:62:85:4c: ce:72:e9:72:56:65:99:84:e6:de:70:b7:0d:38:7f: d3:6d:6f:db:b9:5b:d1:1b:f6:af:6d:1d:08:2a:f2: 2a:e0:66:27:58:e4:11:18:19:c9:23:6b:e9:eb:c3: 74:88:c4:7a:11:34:88:dc:a6:90:42:aa:0c:e1:19: b7:45:48:15:66:bc:e2:89:4c:7c:ff:17:e4:44:00: 86:29:ab:88:38:29:80:76:d4:dd:81:87:5e:1e:77: c8:d4:bf:79:6b:3d:5b:84:21:6f:78:80:3d:56:20: e6:e7:b8:cd:d5:36:23:c2:c0:0e:9d:4e:2c:1e:a4: 0f:f9:fa:e8:37:6c:ef:a6:de:92:65:a0:79:8f:26: 61:98:56:cf:6c:9b:9e:7d:15:96:3e:ac:ab:47:9b: fc:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:3D:6B:58:02:CB:7C:72:0C:6E:EA:93:54:36:94:80:C0:CC:F6:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/43d86503-0205-3354-af7e-4594223a45bf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/5ddde1fe-7525-49e3-9718-412c13cd42ca.crl X509v3 Authority Key Identifier: keyid:3F:21:17:F8:2F:74:2E:BB:DD:C1:C6:68:1B:A6:1C:8E:8A:81:61:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca.cer sbgp-ipAddrBlock: critical IPv4: 199.101.194.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:77:be:bf:08:bc:ce:0c:b7:e1:69:03:1d:e9:dd:f3:c7:1f: 79:74:7b:da:ad:45:5b:0b:f3:28:b2:aa:1e:f0:ed:f5:bb:e5: bb:eb:ec:6e:95:e2:cb:ee:1a:fc:17:2c:83:74:aa:77:18:20: df:1e:7b:fc:de:59:c1:39:99:a6:ef:50:49:16:b3:db:bd:90: e9:90:90:57:7b:53:ae:8f:7f:01:c6:2b:13:88:a2:a5:13:e4: 1a:5e:e1:f3:9b:5a:2e:ed:77:f8:b2:29:1a:51:67:14:2d:00: ff:d3:af:7d:46:49:60:4f:56:69:72:ce:e7:00:5c:5c:f8:2a: 79:70:b4:2d:3c:1f:45:ec:ec:a8:57:a9:da:f0:25:b9:ba:1a: 50:44:84:f2:26:8b:bc:61:1d:84:ed:cc:1e:93:4a:03:00:99: 8d:58:1e:99:1b:e8:48:e8:f1:6e:d2:2f:c5:c6:03:70:b3:b7: df:0e:5c:37:ea:de:4c:6f:b9:0e:0c:69:3a:c6:b7:6a:9f:19: 65:ef:bc:81:72:d8:eb:05:95:9c:40:e5:23:33:61:f6:4c:83: 27:8a:5c:ea:0d:b7:0a:59:78:7c:ac:2f:42:ef:06:77:86:53: fe:0b:a2:4a:98:f9:68:0a:65:b9:da:57:e7:6c:d2:26:72:b7: d2:c9:62:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjiHg1K94gk5RqaaMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRkZGUxZmUtNzUyNS00OWUzLTk3MTgtNDEyYzEzY2Q0 MmNhMB4XDTI1MDIxNDIwMDAwOFoXDTI1MDUxNTE5MDAwOFowLzEtMCsGA1UEAxMk ZDkwNDE4OGQtMDU4NS00NmMzLTljMjctNmZlMjFlYTEzOGJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnj8JQorPciavd+2dl2p/QZz0+p7wIcO/fKUA yPo3G+/KQSPuv9szu7gnYxaSngY166X6/vGUGq+COINNyxlyWVaSN8ZnwwM3cYg7 PMZMGNIlrR6p3CDyTXa9vWt9FPTumx3SQmNihUzOculyVmWZhObecLcNOH/TbW/b uVvRG/avbR0IKvIq4GYnWOQRGBnJI2vp68N0iMR6ETSI3KaQQqoM4Rm3RUgVZrzi iUx8/xfkRACGKauIOCmAdtTdgYdeHnfI1L95az1bhCFveIA9ViDm57jN1TYjwsAO nU4sHqQP+froN2zvpt6SZaB5jyZhmFbPbJuefRWWPqyrR5v8dQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDA9a1gCy3xyDG7qk1Q2lIDAzPZtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81ZGRk ZTFmZS03NTI1LTQ5ZTMtOTcxOC00MTJjMTNjZDQyY2EvNDNkODY1MDMtMDIwNS0z MzU0LWFmN2UtNDU5NDIyM2E0NWJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNWRkZGUxZmUtNzUyNS00OWUzLTk3 MTgtNDEyYzEzY2Q0MmNhLzVkZGRlMWZlLTc1MjUtNDllMy05NzE4LTQxMmMxM2Nk NDJjYS5jcmwwHwYDVR0jBBgwFoAUPyEX+C90LrvdwcZoG6YcjoqBYSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC81ZGRkZTFmZS03NTI1LTQ5ZTMtOTcxOC00MTJj MTNjZDQyY2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx2XCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH13vr8IvM4Mt+FpAx3p3fPHH3l0e9qtRVsL8yiyqh7w7fW75bvr7G6V 4svuGvwXLIN0qncYIN8ee/zeWcE5mabvUEkWs9u9kOmQkFd7U66PfwHGKxOIoqUT 5Bpe4fObWi7td/iyKRpRZxQtAP/Tr31GSWBPVmlyzucAXFz4KnlwtC08H0Xs7KhX qdrwJbm6GlBEhPImi7xhHYTtzB6TSgMAmY1YHpkb6Ejo8W7SL8XGA3Czt98OXDfq 3kxvuQ4MaTrGt2qfGWXvvIFy2OsFlZxA5SMzYfZMgyeKXOoNtwpZeHysL0LvBneG U/4LokqY+WgKZbnaV+ds0iZyt9LJYvA= -----END CERTIFICATE-----Generated at Fri Apr 11 07:41:17 2025 by rpki-client