$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/361f5adf-465b-3b82-8ed0-6688bb9c0c10.roa File: 361f5adf-465b-3b82-8ed0-6688bb9c0c10.roa (raw, json) Hash identifier: jQh29ScHrnpYNHJAFiakbyrkzkTlvMXFtXy3jfIw1aw= Subject key identifier: 53:60:D2:66:82:B7:C4:D8:07:38:93:3A:8F:52:FE:79:15:94:69:C7 Certificate issuer: /CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4 Certificate serial: 010D0C9F43285849244E85E2B0E8A467BE83A880 Authority key identifier: 65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/361f5adf-465b-3b82-8ed0-6688bb9c0c10.roa Signing time: Mon 10 Mar 2025 13:00:52 +0000 ROA not before: Mon 10 Mar 2025 13:00:52 +0000 ROA not after: Sun 08 Jun 2025 13:00:52 +0000 asID: 16509 IP address blocks: 199.45.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:24:4e:85:e2:b0:e8:a4:67:be:83:a8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4 Validity Not Before: Mar 10 13:00:52 2025 GMT Not After : Jun 8 13:00:52 2025 GMT Subject: CN=3338e50c-8e54-4a5d-9b1c-850bf4523777 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b8:1d:49:10:cc:3f:d2:e2:76:95:73:c5:06: 27:2a:b0:04:77:bb:ac:21:a0:f3:7f:34:90:43:f5: 72:87:f1:9f:7b:08:d9:fc:b9:bf:c5:bf:f4:1e:df: 23:27:cf:77:b9:a2:f9:14:de:50:4b:07:66:61:2b: 8b:82:e1:68:3d:1b:4d:5b:0c:f8:7d:eb:f8:77:2f: 6c:09:d3:d3:ef:7c:f6:04:d5:5b:48:a9:8c:7c:4a: 64:5a:c6:27:08:6d:10:01:c8:8e:92:cd:43:d9:f9: e6:0e:6b:ac:7f:eb:6f:5c:b2:57:03:c7:54:67:41: 68:f0:83:ed:3a:52:91:36:49:1a:3a:cc:cf:f2:4c: 14:26:86:62:b6:e8:06:18:fc:da:b6:6d:eb:a8:0e: f1:cb:67:38:b1:89:34:69:a2:da:f2:42:58:b3:31: ab:76:22:5d:75:d8:2e:ec:f9:52:d6:d1:ae:ae:92: 22:6d:2f:e4:93:2c:a0:c4:22:ce:99:f3:64:59:48: d4:11:5b:50:b0:4f:31:60:bd:25:b9:82:c8:1e:e5: 3c:80:ba:04:dc:77:c4:e0:3d:34:9b:43:77:a7:00: 10:28:6a:5e:47:dc:7a:87:10:43:5c:50:cd:be:d8: 35:16:a3:5a:50:95:ed:83:25:45:09:b2:42:37:ac: c5:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:60:D2:66:82:B7:C4:D8:07:38:93:3A:8F:52:FE:79:15:94:69:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/361f5adf-465b-3b82-8ed0-6688bb9c0c10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl X509v3 Authority Key Identifier: keyid:65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer sbgp-ipAddrBlock: critical IPv4: 199.45.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:0e:67:b2:12:d9:fb:22:6a:e6:7d:61:3b:96:fb:5e:49:7a: 04:ca:99:dc:a1:de:63:f2:0b:9a:b9:e5:59:a4:a7:06:5b:50: a3:a0:14:d0:d6:c8:cd:85:0c:7a:07:cd:aa:d0:b6:42:a8:31: 5d:ee:36:bb:7e:45:af:2e:7f:5c:bc:c2:16:fc:b4:45:78:05: 47:db:82:ea:1e:22:88:9a:6b:f6:0a:ab:d0:5f:45:97:55:be: d3:51:e4:b3:80:cd:78:76:06:42:d7:98:27:b3:0e:b1:46:30: f5:55:a3:ea:06:fd:51:1d:a2:d7:54:8c:cd:31:b2:c1:43:77: df:4d:8f:20:02:89:8c:f5:25:6a:18:cb:39:20:81:f8:46:48: d5:11:a4:77:f5:9a:03:f6:6f:47:66:d9:73:b3:12:a3:9a:75: 52:9d:d2:31:83:bb:7d:20:32:35:ab:d8:6b:1d:a1:b8:0f:6a: 61:72:26:9d:4c:f2:a0:da:7b:a2:96:0b:24:1e:39:37:6d:ce: b8:cc:a4:06:c7:75:e6:61:25:31:41:87:02:55:30:55:ca:80: ef:17:bc:1d:1d:d3:9b:d1:1b:03:93:a9:81:88:83:f6:06:a7: c3:a3:76:3f:c6:43:91:4d:92:9c:73:0b:9e:53:7c:e9:57:5a: cd:f3:50:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkkToXisOikZ76DqIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTlmYjZjOWEtY2UyOS00MWVlLWE0YWQtM2RlZTNmNzk3 MGE0MB4XDTI1MDMxMDEzMDA1MloXDTI1MDYwODEzMDA1MlowLzEtMCsGA1UEAxMk MzMzOGU1MGMtOGU1NC00YTVkLTliMWMtODUwYmY0NTIzNzc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubgdSRDMP9LidpVzxQYnKrAEd7usIaDzfzSQ Q/Vyh/GfewjZ/Lm/xb/0Ht8jJ893uaL5FN5QSwdmYSuLguFoPRtNWwz4fev4dy9s CdPT73z2BNVbSKmMfEpkWsYnCG0QAciOks1D2fnmDmusf+tvXLJXA8dUZ0Fo8IPt OlKRNkkaOszP8kwUJoZitugGGPzatm3rqA7xy2c4sYk0aaLa8kJYszGrdiJdddgu 7PlS1tGurpIibS/kkyygxCLOmfNkWUjUEVtQsE8xYL0luYLIHuU8gLoE3HfE4D00 m0N3pwAQKGpeR9x6hxBDXFDNvtg1FqNaUJXtgyVFCbJCN6zFSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFNg0maCt8TYBziTOo9S/nkVlGnHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85OWZi NmM5YS1jZTI5LTQxZWUtYTRhZC0zZGVlM2Y3OTcwYTQvMzYxZjVhZGYtNDY1Yi0z YjgyLThlZDAtNjY4OGJiOWMwYzEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOTlmYjZjOWEtY2UyOS00MWVlLWE0 YWQtM2RlZTNmNzk3MGE0Lzk5ZmI2YzlhLWNlMjktNDFlZS1hNGFkLTNkZWUzZjc5 NzBhNC5jcmwwHwYDVR0jBBgwFoAUZSJlk/hhOWSY4nrlbMI1s/Z+WzUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85OWZiNmM5YS1jZTI5LTQxZWUtYTRhZC0zZGVl M2Y3OTcwYTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxy3yMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFUOZ7IS2fsiauZ9YTuW+15JegTKmdyh3mPyC5q55VmkpwZbUKOgFNDW yM2FDHoHzarQtkKoMV3uNrt+Ra8uf1y8whb8tEV4BUfbguoeIoiaa/YKq9BfRZdV vtNR5LOAzXh2BkLXmCezDrFGMPVVo+oG/VEdotdUjM0xssFDd99NjyACiYz1JWoY yzkggfhGSNURpHf1mgP2b0dm2XOzEqOadVKd0jGDu30gMjWr2GsdobgPamFyJp1M 8qDae6KWCyQeOTdtzrjMpAbHdeZhJTFBhwJVMFXKgO8XvB0d05vRGwOTqYGIg/YG p8Ojdj/GQ5FNkpxzC55TfOlXWs3zUBM= -----END CERTIFICATE-----Generated at Fri Mar 14 11:04:02 2025 by rpki-client