$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/05ac0c03-6d66-4bc0-b9a2-c0fd7eac00b1/4647dd6b-447c-304c-a1ad-22ab8d269ac8.roa File: 4647dd6b-447c-304c-a1ad-22ab8d269ac8.roa (raw, json) Hash identifier: OHjzEsIZEfUHu82BKVt4XzjdDWC2Dw6YDgtZbWuu5yM= Subject key identifier: 1E:2B:7B:9A:1C:B4:EA:6D:0D:18:9E:F1:6C:CE:9B:7D:43:39:C1:EA Certificate issuer: /CN=05ac0c03-6d66-4bc0-b9a2-c0fd7eac00b1 Certificate serial: 010D0C9F43285848CDE117F48F579847D92E2280 Authority key identifier: 48:BC:0B:D5:56:37:94:C6:10:57:FD:81:87:A9:BA:22:15:18:D4:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/05ac0c03-6d66-4bc0-b9a2-c0fd7eac00b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/05ac0c03-6d66-4bc0-b9a2-c0fd7eac00b1/4647dd6b-447c-304c-a1ad-22ab8d269ac8.roa Signing time: Fri 07 Feb 2025 14:00:53 +0000 ROA not before: Fri 07 Feb 2025 14:00:53 +0000 ROA not after: Thu 08 May 2025 13:00:53 +0000 asID: 53690 IP address blocks: 199.116.186.0/24 maxlen: 24 199.116.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/05ac0c03-6d66-4bc0-b9a2-c0fd7eac00b1/05ac0c03-6d66-4bc0-b9a2-c0fd7eac00b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/05ac0c03-6d66-4bc0-b9a2-c0fd7eac00b1/05ac0c03-6d66-4bc0-b9a2-c0fd7eac00b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/05ac0c03-6d66-4bc0-b9a2-c0fd7eac00b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cd:e1:17:f4:8f:57:98:47:d9:2e:22:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05ac0c03-6d66-4bc0-b9a2-c0fd7eac00b1 Validity Not Before: Feb 7 14:00:53 2025 GMT Not After : May 8 13:00:53 2025 GMT Subject: CN=24c85f8b-a7ef-41a3-aa89-0bb4b723af71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:9c:d9:60:b5:72:c4:ed:22:a6:33:5e:9e:6b: 52:34:25:2c:9e:86:7c:3c:77:ee:75:7a:d3:02:c7: 58:f7:4b:f4:7e:bd:eb:41:49:83:8c:80:06:54:90: f9:1f:23:1f:7c:dd:e4:54:d1:41:e3:c1:5d:a0:c6: dd:ca:34:40:2b:bf:a8:58:2d:e0:0b:1a:2d:8e:72: d7:02:9f:09:ac:27:29:95:ab:8d:14:56:a6:2a:e0: 99:44:07:1a:f8:26:0f:58:e7:3f:b8:ea:2d:eb:82: 9c:13:1c:f4:99:3d:8e:aa:0b:e3:c6:d5:5d:92:5d: 0c:e9:bc:0a:a5:4f:a5:cb:0e:b5:5c:9c:8d:23:b6: fb:cf:02:78:8e:5a:a7:7d:45:58:8c:b6:f8:9d:40: 2f:d9:70:ce:56:30:8e:fe:ab:a0:0d:a4:b5:99:ce: 13:4c:b1:14:24:f1:e5:66:2a:25:4c:d3:5e:9b:b4: 0d:9d:b0:ec:40:11:ee:aa:5d:62:f5:f5:40:40:9c: 11:78:2c:26:01:40:26:80:67:7d:b9:ed:ca:09:a5: d6:f0:d9:08:f0:dd:dd:fc:4d:c9:46:bf:ea:c6:f6: c7:de:b4:e5:33:05:e8:6c:37:67:b2:69:19:38:46: 00:2b:15:74:64:73:1e:16:2b:24:2b:02:fe:22:1c: fd:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:2B:7B:9A:1C:B4:EA:6D:0D:18:9E:F1:6C:CE:9B:7D:43:39:C1:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/05ac0c03-6d66-4bc0-b9a2-c0fd7eac00b1/4647dd6b-447c-304c-a1ad-22ab8d269ac8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/05ac0c03-6d66-4bc0-b9a2-c0fd7eac00b1/05ac0c03-6d66-4bc0-b9a2-c0fd7eac00b1.crl X509v3 Authority Key Identifier: keyid:48:BC:0B:D5:56:37:94:C6:10:57:FD:81:87:A9:BA:22:15:18:D4:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/05ac0c03-6d66-4bc0-b9a2-c0fd7eac00b1.cer sbgp-ipAddrBlock: critical IPv4: 199.116.186.0/24 199.116.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:06:40:00:73:54:10:72:8c:0a:e8:e1:36:99:52:bf:f9:9f: 9b:2c:b2:d6:8a:b7:c4:17:63:61:16:1d:02:e5:ed:81:67:56: 04:64:95:af:a5:a9:89:e6:31:ae:41:c4:ad:d4:6a:47:17:0b: de:ca:86:b1:17:8e:87:0b:3a:56:23:fd:ad:4d:03:8b:5a:97: 8d:b9:81:31:7b:0a:31:d1:6a:81:99:97:e1:67:ad:c7:8a:ce: 3d:8c:55:d5:47:3d:55:1b:a1:1d:a4:db:69:06:46:89:a1:8b: ff:99:87:a8:78:bf:57:9a:26:5c:73:c9:5c:2e:27:68:14:da: ab:fa:97:4c:50:c9:97:ba:17:05:4c:cd:5c:d0:3b:55:9a:ab: c7:a9:b3:8a:82:1d:f6:72:53:22:36:d6:0c:f2:62:0b:3a:76: b0:86:6f:d2:cc:b4:7e:e8:02:9a:d3:51:6d:6e:0a:da:66:be: bd:78:a6:5f:a5:83:67:7a:1f:13:0a:83:85:79:2c:e0:75:b9: 17:6a:bf:ad:5a:09:ae:dc:da:0a:b3:b6:82:1b:b1:37:4c:0d: 6c:66:3e:09:6e:51:17:0a:f5:7b:25:48:00:45:74:ce:08:81: 9c:cb:d0:f8:96:c1:a1:b5:fb:31:e1:b0:61:d7:5f:27:ec:38: 3d:7b:24:c1 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEjN4Rf0j1eYR9kuIoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDVhYzBjMDMtNmQ2Ni00YmMwLWI5YTItYzBmZDdlYWMw MGIxMB4XDTI1MDIwNzE0MDA1M1oXDTI1MDUwODEzMDA1M1owLzEtMCsGA1UEAxMk MjRjODVmOGItYTdlZi00MWEzLWFhODktMGJiNGI3MjNhZjcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhpzZYLVyxO0ipjNenmtSNCUsnoZ8PHfudXrT AsdY90v0fr3rQUmDjIAGVJD5HyMffN3kVNFB48FdoMbdyjRAK7+oWC3gCxotjnLX Ap8JrCcplauNFFamKuCZRAca+CYPWOc/uOot64KcExz0mT2OqgvjxtVdkl0M6bwK pU+lyw61XJyNI7b7zwJ4jlqnfUVYjLb4nUAv2XDOVjCO/qugDaS1mc4TTLEUJPHl ZiolTNNem7QNnbDsQBHuql1i9fVAQJwReCwmAUAmgGd9ue3KCaXW8NkI8N3d/E3J Rr/qxvbH3rTlMwXobDdnsmkZOEYAKxV0ZHMeFiskKwL+Ihz9aQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFB4re5octOptDRie8WzOm31DOcHqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wNWFj MGMwMy02ZDY2LTRiYzAtYjlhMi1jMGZkN2VhYzAwYjEvNDY0N2RkNmItNDQ3Yy0z MDRjLWExYWQtMjJhYjhkMjY5YWM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMDVhYzBjMDMtNmQ2Ni00YmMwLWI5 YTItYzBmZDdlYWMwMGIxLzA1YWMwYzAzLTZkNjYtNGJjMC1iOWEyLWMwZmQ3ZWFj MDBiMS5jcmwwHwYDVR0jBBgwFoAUSLwL1VY3lMYQV/2Bh6m6IhUY1LowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8wNWFjMGMwMy02ZDY2LTRiYzAtYjlhMi1jMGZk N2VhYzAwYjEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAx3S6AwQA x3S9MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBADQGQABzVBByjAro4TaZUr/5n5ssstaKt8QXY2EWHQLl7YFn VgRkla+lqYnmMa5BxK3UakcXC97KhrEXjocLOlYj/a1NA4tal425gTF7CjHRaoGZ l+FnrceKzj2MVdVHPVUboR2k22kGRomhi/+Zh6h4v1eaJlxzyVwuJ2gU2qv6l0xQ yZe6FwVMzVzQO1Waq8eps4qCHfZyUyI21gzyYgs6drCGb9LMtH7oAprTUW1uCtpm vr14pl+lg2d6HxMKg4V5LOB1uRdqv61aCa7c2gqztoIbsTdMDWxmPgluURcK9Xsl SABFdM4IgZzL0PiWwaG1+zHhsGHXXyfsOD17JME= -----END CERTIFICATE-----Generated at Sun Feb 16 15:47:01 2025 by rpki-client