$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/7a42f056-4bef-3a56-8db3-4ca8c38cd6b9.roa File: 7a42f056-4bef-3a56-8db3-4ca8c38cd6b9.roa (raw, json) Hash identifier: +xe9+Xf3C2iiWJYyruvgbpxz5y3oC2FrMFr+xPd8jTc= Subject key identifier: 43:89:69:4C:6A:17:64:DE:E8:72:2A:8B:DB:24:11:EC:ED:C2:B8:C0 Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F43285848E00687D0EA63E1ECB4997800 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/7a42f056-4bef-3a56-8db3-4ca8c38cd6b9.roa Signing time: Fri 14 Feb 2025 02:00:39 +0000 ROA not before: Fri 14 Feb 2025 02:00:39 +0000 ROA not after: Thu 15 May 2025 01:00:39 +0000 asID: 17359 IP address blocks: 199.200.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e0:06:87:d0:ea:63:e1:ec:b4:99:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Feb 14 02:00:39 2025 GMT Not After : May 15 01:00:39 2025 GMT Subject: CN=b230291b-43e9-45f2-97da-5373970e72b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:5e:55:9d:67:cb:64:23:b6:43:61:bc:04:80: 8f:79:16:85:9d:84:a0:35:85:04:a0:ad:d9:ac:51: d8:10:93:ea:1f:41:db:9b:e4:e9:8d:b5:a4:f6:88: 7f:36:88:3a:c7:b2:b1:05:24:68:47:6a:17:d9:8e: d4:47:b4:ac:fb:5d:55:64:4e:c2:26:94:b0:a8:b0: 07:08:cb:be:d6:de:49:6f:bf:c5:9b:1e:fe:83:34: 2f:8f:72:1c:28:a0:72:62:7d:ae:e3:fb:9c:47:fe: ef:48:67:1b:65:9a:f9:56:40:1c:6c:d8:9a:a6:f0: 81:72:84:99:7f:47:56:e9:9d:50:54:03:e2:f4:e5: 3e:1d:71:ad:5e:29:17:1c:db:7d:82:d7:36:b0:df: 12:67:7d:5b:38:a5:73:f4:08:83:fc:0f:8c:e4:59: e6:d0:db:44:36:c6:4f:21:4b:f3:ef:5d:e0:f5:ca: 02:14:d4:1b:f8:da:87:1a:a8:22:04:3f:c3:2c:df: e0:09:2b:ee:7c:bf:09:0a:b4:a2:b9:d3:13:ba:35: 1b:43:59:4c:94:56:a1:b0:8a:78:c5:df:b0:66:c0: 24:46:2d:52:29:7a:8f:89:a1:f5:c4:6f:52:68:26: a7:83:02:66:44:57:b6:c2:38:4b:37:08:6f:c7:38: 9d:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:89:69:4C:6A:17:64:DE:E8:72:2A:8B:DB:24:11:EC:ED:C2:B8:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/7a42f056-4bef-3a56-8db3-4ca8c38cd6b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv4: 199.200.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:38:79:ea:36:5a:92:04:c4:66:b7:2c:33:33:86:14:ae:11: 55:1b:e1:25:fb:d3:d7:21:f1:e9:f5:c5:ac:1d:41:c2:b2:d8: ec:a0:4c:96:bc:1d:60:b9:88:58:94:52:5e:62:3b:9e:86:62: 9b:05:e2:bc:22:5c:3a:32:0b:35:cf:d0:da:fe:03:9b:ce:59: 01:3e:26:84:2d:14:c2:03:67:6e:51:11:6e:f4:f6:a7:23:a8: ed:35:41:8a:39:e1:11:7f:15:d2:6f:73:6c:ca:f2:cd:3d:ae: 4d:b1:62:b6:f5:a6:6c:80:d4:7e:21:dd:fc:20:41:16:75:da: 16:3f:1b:7d:1e:da:e1:08:b2:ec:e3:12:c8:69:52:42:3b:67: aa:ec:79:b1:50:0e:fd:c3:bf:e6:de:54:93:cb:7d:4d:e0:8f: 7a:4d:aa:3f:d9:8f:5a:2c:3a:6c:85:7c:04:74:c3:c1:6c:f1: c8:8f:13:ca:10:84:28:b6:1a:fc:91:8f:2d:0a:1e:b7:c3:8c: bd:14:ba:52:7f:a1:9f:54:5d:3f:a3:8c:4b:4b:25:a8:2b:45: d7:b1:37:16:f1:75:95:e4:8d:7c:4b:54:55:ac:34:6b:50:8b: 84:f7:ab:65:96:2c:37:f4:08:82:b9:17:ff:b5:84:3c:bc:a5: be:4d:10:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjgBofQ6mPh7LSZeAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI1MDIxNDAyMDAzOVoXDTI1MDUxNTAxMDAzOVowLzEtMCsGA1UEAxMk YjIzMDI5MWItNDNlOS00NWYyLTk3ZGEtNTM3Mzk3MGU3MmIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgF5VnWfLZCO2Q2G8BICPeRaFnYSgNYUEoK3Z rFHYEJPqH0Hbm+TpjbWk9oh/Nog6x7KxBSRoR2oX2Y7UR7Ss+11VZE7CJpSwqLAH CMu+1t5Jb7/Fmx7+gzQvj3IcKKByYn2u4/ucR/7vSGcbZZr5VkAcbNiapvCBcoSZ f0dW6Z1QVAPi9OU+HXGtXikXHNt9gtc2sN8SZ31bOKVz9AiD/A+M5Fnm0NtENsZP IUvz713g9coCFNQb+NqHGqgiBD/DLN/gCSvufL8JCrSiudMTujUbQ1lMlFahsIp4 xd+wZsAkRi1SKXqPiaH1xG9SaCangwJmRFe2wjhLNwhvxzidHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEOJaUxqF2Te6HIqi9skEeztwrjAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvN2E0MmYwNTYtNGJlZi0z YTU2LThkYjMtNGNhOGMzOGNkNmI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx8hgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJs4eeo2WpIExGa3LDMzhhSuEVUb4SX709ch8en1xawdQcKy2OygTJa8 HWC5iFiUUl5iO56GYpsF4rwiXDoyCzXP0Nr+A5vOWQE+JoQtFMIDZ25REW709qcj qO01QYo54RF/FdJvc2zK8s09rk2xYrb1pmyA1H4h3fwgQRZ12hY/G30e2uEIsuzj EshpUkI7Z6rsebFQDv3Dv+beVJPLfU3gj3pNqj/Zj1osOmyFfAR0w8Fs8ciPE8oQ hCi2GvyRjy0KHrfDjL0UulJ/oZ9UXT+jjEtLJagrRdexNxbxdZXkjXxLVFWsNGtQ i4T3q2WWLDf0CIK5F/+1hDy8pb5NEE0= -----END CERTIFICATE-----Generated at Sat Apr 5 03:41:26 2025 by rpki-client