$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/4adad03b-afb7-37aa-b32f-c3fc097b8abe.roa File: 4adad03b-afb7-37aa-b32f-c3fc097b8abe.roa (raw, json) Hash identifier: sVkWDiY0ON6pbkwevIZ8gFdchuZZM2Mej5vM4jefGEs= Subject key identifier: 03:24:7F:F2:F4:F4:5A:ED:E8:3B:2F:B8:DC:12:14:96:7F:C0:C5:0D Certificate issuer: /CN=688a78fa-2d94-478e-900a-a1fec661b769 Certificate serial: 010D0C9F4328584919417825B59755E62A843210 Authority key identifier: 90:5B:E8:2C:10:72:9B:04:06:F5:CA:5A:16:4C:22:B2:DF:64:86:B9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/4adad03b-afb7-37aa-b32f-c3fc097b8abe.roa Signing time: Thu 06 Mar 2025 14:00:52 +0000 ROA not before: Thu 06 Mar 2025 14:00:52 +0000 ROA not after: Wed 04 Jun 2025 13:00:52 +0000 asID: 13649 IP address blocks: 199.101.110.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/688a78fa-2d94-478e-900a-a1fec661b769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/688a78fa-2d94-478e-900a-a1fec661b769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:19:41:78:25:b5:97:55:e6:2a:84:32:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=688a78fa-2d94-478e-900a-a1fec661b769 Validity Not Before: Mar 6 14:00:52 2025 GMT Not After : Jun 4 13:00:52 2025 GMT Subject: CN=a0241c89-cef0-446d-aded-933d8537c55e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:25:d8:e4:2a:40:dd:f0:0c:15:f2:15:fb:33: 6e:83:e9:a7:c9:ce:1b:2a:c4:7d:ff:e3:bb:9e:64: 9a:ee:96:5c:8c:5d:66:6f:12:21:e1:07:67:7f:74: 66:06:9b:ef:01:79:9a:a4:31:dd:62:1c:da:b7:de: f4:f7:ed:70:93:a8:7a:20:1b:3a:45:84:1a:b4:11: 50:93:8a:7b:df:a3:e4:6a:0b:93:bc:2b:36:03:4e: 84:bb:99:9c:8d:c3:bf:7b:e4:d2:08:5a:ac:df:d7: 88:10:02:13:ac:bc:6d:63:f9:96:73:07:4e:7b:1d: 52:2e:20:58:58:3c:12:7d:d0:a3:59:4a:fb:41:fb: 79:20:69:ea:69:42:3b:df:5d:fa:77:1f:9a:f9:d0: 17:71:c4:06:5e:7f:4a:22:b0:e5:84:8d:9b:14:15: 4d:34:00:97:60:1f:d8:20:49:23:18:fa:b7:20:42: f4:29:7d:96:f1:d5:a4:2c:34:51:cd:94:35:0b:ce: 85:40:ff:4b:2a:c6:26:14:bc:f7:84:48:1b:bc:87: f0:0f:4e:80:5c:4a:39:20:b2:c0:4b:d4:ed:ea:a3: 0b:8e:80:d9:2a:ad:76:62:8b:c4:54:f5:e1:8e:c4: ee:51:55:26:92:e3:4d:fb:a0:c7:9e:23:00:81:3d: 62:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:24:7F:F2:F4:F4:5A:ED:E8:3B:2F:B8:DC:12:14:96:7F:C0:C5:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/4adad03b-afb7-37aa-b32f-c3fc097b8abe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/688a78fa-2d94-478e-900a-a1fec661b769.crl X509v3 Authority Key Identifier: keyid:90:5B:E8:2C:10:72:9B:04:06:F5:CA:5A:16:4C:22:B2:DF:64:86:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769.cer sbgp-ipAddrBlock: critical IPv4: 199.101.110.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:bf:78:c5:98:55:67:ce:e1:c7:40:6b:57:90:8a:ee:dc:6d: c8:fc:01:a1:a4:5a:1f:e9:b3:56:58:4b:53:16:20:76:48:ad: cb:fa:20:09:92:2b:74:f6:c8:70:45:17:79:b2:6d:7c:58:01: ab:e0:a2:1e:7c:06:58:90:c8:4d:84:e2:aa:9a:b3:f8:c5:ac: 9b:80:a7:e5:dc:fa:44:89:d0:52:19:ac:fb:d1:be:e4:15:de: c7:9f:8c:3b:af:87:47:a3:c2:90:86:d5:e1:44:44:12:9f:30: 84:e7:f0:68:91:d1:f9:0e:ab:bf:2d:4c:48:00:48:06:05:10: 7b:d1:64:9a:b0:59:b8:c6:19:b7:df:be:33:ad:b6:b7:ac:80: 1e:f8:81:0c:16:c6:00:71:87:19:1a:22:c7:49:1e:1f:cd:e2: c0:2c:79:99:1f:5b:fc:d3:2a:f1:bd:8b:e9:fa:d9:63:92:eb: ff:c3:e1:86:81:32:66:05:d9:fa:45:d2:57:fd:c8:61:4b:3f: e9:60:56:1d:aa:6b:1d:5e:95:1f:1c:a2:d8:f9:9d:db:3b:47: 50:e6:cb:47:8f:e9:d6:98:cf:80:aa:0f:56:88:02:68:5b:f3: 4c:ea:e7:74:30:9b:42:a3:7e:08:ee:7c:65:a3:78:c4:37:6f: b7:19:fd:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkZQXgltZdV5iqEMhAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjg4YTc4ZmEtMmQ5NC00NzhlLTkwMGEtYTFmZWM2NjFi NzY5MB4XDTI1MDMwNjE0MDA1MloXDTI1MDYwNDEzMDA1MlowLzEtMCsGA1UEAxMk YTAyNDFjODktY2VmMC00NDZkLWFkZWQtOTMzZDg1MzdjNTVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSXY5CpA3fAMFfIV+zNug+mnyc4bKsR9/+O7 nmSa7pZcjF1mbxIh4Qdnf3RmBpvvAXmapDHdYhzat9709+1wk6h6IBs6RYQatBFQ k4p736PkaguTvCs2A06Eu5mcjcO/e+TSCFqs39eIEAITrLxtY/mWcwdOex1SLiBY WDwSfdCjWUr7Qft5IGnqaUI73136dx+a+dAXccQGXn9KIrDlhI2bFBVNNACXYB/Y IEkjGPq3IEL0KX2W8dWkLDRRzZQ1C86FQP9LKsYmFLz3hEgbvIfwD06AXEo5ILLA S9Tt6qMLjoDZKq12YovEVPXhjsTuUVUmkuNN+6DHniMAgT1iLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAMkf/L09Frt6DsvuNwSFJZ/wMUNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ODhh NzhmYS0yZDk0LTQ3OGUtOTAwYS1hMWZlYzY2MWI3NjkvNGFkYWQwM2ItYWZiNy0z N2FhLWIzMmYtYzNmYzA5N2I4YWJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNjg4YTc4ZmEtMmQ5NC00NzhlLTkw MGEtYTFmZWM2NjFiNzY5LzY4OGE3OGZhLTJkOTQtNDc4ZS05MDBhLWExZmVjNjYx Yjc2OS5jcmwwHwYDVR0jBBgwFoAUkFvoLBBymwQG9cpaFkwist9khrkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ODhhNzhmYS0yZDk0LTQ3OGUtOTAwYS1hMWZl YzY2MWI3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx2VuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEq/eMWYVWfO4cdAa1eQiu7cbcj8AaGkWh/ps1ZYS1MWIHZIrcv6IAmS K3T2yHBFF3mybXxYAavgoh58BliQyE2E4qqas/jFrJuAp+Xc+kSJ0FIZrPvRvuQV 3sefjDuvh0ejwpCG1eFERBKfMITn8GiR0fkOq78tTEgASAYFEHvRZJqwWbjGGbff vjOttresgB74gQwWxgBxhxkaIsdJHh/N4sAseZkfW/zTKvG9i+n62WOS6//D4YaB MmYF2fpF0lf9yGFLP+lgVh2qax1elR8cotj5nds7R1Dmy0eP6daYz4CqD1aIAmhb 80zq53Qwm0KjfgjufGWjeMQ3b7cZ/Rs= -----END CERTIFICATE-----Generated at Sat Apr 12 00:02:02 2025 by rpki-client