$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4dfb879f-7966-496a-b35e-d766981846ee/e4b829a7-1824-38b5-9c7d-3155a26aaa4b.roa File: e4b829a7-1824-38b5-9c7d-3155a26aaa4b.roa (raw, json) Hash identifier: /TtOikwByKMbAFHlc7mSiUn2T2qyp3hE4629HtHlB5A= Subject key identifier: D2:13:D2:F5:3C:23:E8:FE:99:BA:E0:23:F1:6D:EF:80:A2:1A:53:DF Certificate issuer: /CN=4dfb879f-7966-496a-b35e-d766981846ee Certificate serial: 010D0C9F432858489075F99315F27653F57A41B0 Authority key identifier: 47:A0:89:91:6C:7F:47:53:FB:B8:28:FF:43:4D:96:C5:0F:02:A5:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4dfb879f-7966-496a-b35e-d766981846ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4dfb879f-7966-496a-b35e-d766981846ee/e4b829a7-1824-38b5-9c7d-3155a26aaa4b.roa Signing time: Thu 16 Jan 2025 14:00:50 +0000 ROA not before: Thu 16 Jan 2025 14:00:50 +0000 ROA not after: Wed 16 Apr 2025 13:00:50 +0000 asID: 271 IP address blocks: 199.60.226.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4dfb879f-7966-496a-b35e-d766981846ee/4dfb879f-7966-496a-b35e-d766981846ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4dfb879f-7966-496a-b35e-d766981846ee/4dfb879f-7966-496a-b35e-d766981846ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4dfb879f-7966-496a-b35e-d766981846ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:90:75:f9:93:15:f2:76:53:f5:7a:41:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4dfb879f-7966-496a-b35e-d766981846ee Validity Not Before: Jan 16 14:00:50 2025 GMT Not After : Apr 16 13:00:50 2025 GMT Subject: CN=7606f18a-a648-470e-86e6-dfb06a0195e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:85:2d:e3:70:61:a9:1f:ca:a6:57:25:00:4d: e0:50:64:a0:06:7f:54:0d:d6:dc:c7:9c:16:60:a0: 12:49:f1:49:c2:7d:4d:e7:4e:be:ba:f9:3a:f1:ec: 29:0d:cc:a0:c8:02:36:11:92:23:cc:e6:a6:aa:53: 5b:c1:ba:9f:53:18:ed:86:41:cc:12:85:ed:39:65: 10:68:40:98:fe:1a:70:80:18:7b:26:be:5c:e4:97: 67:e4:dc:ae:f7:db:39:91:a9:e0:13:27:22:c3:c8: 58:a0:76:83:fa:5b:25:10:f5:1b:0d:1f:dc:ae:eb: 11:6f:a7:12:85:6a:1b:a3:95:db:63:e5:77:e1:9f: 7b:1e:f3:24:3c:01:2d:fd:86:0a:78:e9:43:f0:c9: f3:6d:9b:9d:4d:3a:61:bc:c1:8a:93:34:3e:8b:6d: 4a:58:f9:78:11:df:d4:c7:e4:6b:ef:9f:91:7f:ee: e8:34:ff:77:8d:a0:ae:9e:ec:f7:da:ae:eb:45:bd: bf:17:13:d3:35:19:2e:35:57:b2:3b:ca:d0:c8:32: 20:d1:56:0e:8c:39:e5:c3:bc:6f:d8:f6:93:71:55: af:55:3b:76:bc:ef:52:52:05:26:2e:cb:f8:19:cc: a0:a2:1c:b6:2c:ec:15:f5:19:1a:7f:20:21:db:14: 6b:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:13:D2:F5:3C:23:E8:FE:99:BA:E0:23:F1:6D:EF:80:A2:1A:53:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4dfb879f-7966-496a-b35e-d766981846ee/e4b829a7-1824-38b5-9c7d-3155a26aaa4b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4dfb879f-7966-496a-b35e-d766981846ee/4dfb879f-7966-496a-b35e-d766981846ee.crl X509v3 Authority Key Identifier: keyid:47:A0:89:91:6C:7F:47:53:FB:B8:28:FF:43:4D:96:C5:0F:02:A5:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4dfb879f-7966-496a-b35e-d766981846ee.cer sbgp-ipAddrBlock: critical IPv4: 199.60.226.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:4d:51:93:fe:9c:4b:50:fa:28:c7:1e:38:a2:87:c8:7f:66: 69:7b:30:e9:91:c5:1f:f3:1d:42:45:19:3c:0a:56:25:80:b1: 4b:51:60:40:44:20:dc:5a:16:76:bc:bc:33:81:87:f6:51:7b: d2:af:59:2c:91:92:30:37:c6:4e:03:d2:92:32:35:e3:32:ea: 4f:dd:79:38:b9:5b:fe:23:51:dc:ff:c7:a6:19:c1:38:91:cf: 43:6d:86:f4:6c:3a:b6:30:45:8d:8c:bc:8f:3a:5e:8f:ce:b8: 85:ce:4e:41:d9:a1:9d:bb:4d:0c:55:5c:87:71:b3:6d:4f:ae: b4:c4:0d:26:e1:c0:d3:f8:56:d6:82:78:c6:83:88:37:6f:40: a6:c8:50:18:64:d5:ce:b6:8e:4a:59:27:c2:6e:d6:67:96:7d: e1:12:96:aa:8b:a1:ba:78:31:38:64:7c:c8:d4:77:0e:7f:dc: 89:14:a1:07:f3:6a:b1:77:12:bd:ed:d2:b1:ff:9b:8c:8d:f0: b8:21:fc:92:43:06:d1:ac:59:24:f8:3e:bc:a0:cc:e7:e6:b3: fa:6f:e9:45:e3:f7:5b:9e:de:db:8a:1c:b4:4a:a3:f9:37:69: 84:8d:7f:0b:71:d7:ce:3a:56:75:0e:e4:15:78:b2:c3:6f:ca: 71:af:48:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiQdfmTFfJ2U/V6QbAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGRmYjg3OWYtNzk2Ni00OTZhLWIzNWUtZDc2Njk4MTg0 NmVlMB4XDTI1MDExNjE0MDA1MFoXDTI1MDQxNjEzMDA1MFowLzEtMCsGA1UEAxMk NzYwNmYxOGEtYTY0OC00NzBlLTg2ZTYtZGZiMDZhMDE5NWU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj4Ut43BhqR/KplclAE3gUGSgBn9UDdbcx5wW YKASSfFJwn1N506+uvk68ewpDcygyAI2EZIjzOamqlNbwbqfUxjthkHMEoXtOWUQ aECY/hpwgBh7Jr5c5Jdn5Nyu99s5kangEyciw8hYoHaD+lslEPUbDR/crusRb6cS hWobo5XbY+V34Z97HvMkPAEt/YYKeOlD8MnzbZudTTphvMGKkzQ+i21KWPl4Ed/U x+Rr75+Rf+7oNP93jaCunuz32q7rRb2/FxPTNRkuNVeyO8rQyDIg0VYOjDnlw7xv 2PaTcVWvVTt2vO9SUgUmLsv4Gcygohy2LOwV9RkafyAh2xRrawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNIT0vU8I+j+mbrgI/Ft74CiGlPfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80ZGZi ODc5Zi03OTY2LTQ5NmEtYjM1ZS1kNzY2OTgxODQ2ZWUvZTRiODI5YTctMTgyNC0z OGI1LTljN2QtMzE1NWEyNmFhYTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNGRmYjg3OWYtNzk2Ni00OTZhLWIz NWUtZDc2Njk4MTg0NmVlLzRkZmI4NzlmLTc5NjYtNDk2YS1iMzVlLWQ3NjY5ODE4 NDZlZS5jcmwwHwYDVR0jBBgwFoAUR6CJkWx/R1P7uCj/Q02WxQ8CpR0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80ZGZiODc5Zi03OTY2LTQ5NmEtYjM1ZS1kNzY2 OTgxODQ2ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxzziMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA5NUZP+nEtQ+ijHHjiih8h/Zml7MOmRxR/zHUJFGTwKViWAsUtRYEBE INxaFna8vDOBh/ZRe9KvWSyRkjA3xk4D0pIyNeMy6k/deTi5W/4jUdz/x6YZwTiR z0NthvRsOrYwRY2MvI86Xo/OuIXOTkHZoZ27TQxVXIdxs21PrrTEDSbhwNP4VtaC eMaDiDdvQKbIUBhk1c62jkpZJ8Ju1meWfeESlqqLobp4MThkfMjUdw5/3IkUoQfz arF3Er3t0rH/m4yN8Lgh/JJDBtGsWST4PrygzOfms/pv6UXj91ue3tuKHLRKo/k3 aYSNfwtx1846VnUO5BV4ssNvynGvSIk= -----END CERTIFICATE-----Generated at Sun Feb 16 15:41:07 2025 by rpki-client