$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc11e5dd-c2b3-493c-8534-431fa4878aa9/ddf1701b-d672-3875-b1d1-39705ddd52d5.roa File: ddf1701b-d672-3875-b1d1-39705ddd52d5.roa (raw, json) Hash identifier: xRvKetWnFeUJgYZS2iE1j8Rfya/AeSeiNTnPxHzImqs= Subject key identifier: BF:6E:B8:BB:00:96:BF:4D:0D:AB:A0:E1:C6:C7:CF:4A:43:1E:CC:6E Certificate issuer: /CN=cc11e5dd-c2b3-493c-8534-431fa4878aa9 Certificate serial: 010D0C9F432858491ED6E4CEC469F59735DB6740 Authority key identifier: 96:B0:88:5C:AB:50:1F:7A:A1:77:AD:ED:76:FF:91:57:89:9E:F5:C6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc11e5dd-c2b3-493c-8534-431fa4878aa9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc11e5dd-c2b3-493c-8534-431fa4878aa9/ddf1701b-d672-3875-b1d1-39705ddd52d5.roa Signing time: Sat 08 Mar 2025 14:00:52 +0000 ROA not before: Sat 08 Mar 2025 14:00:52 +0000 ROA not after: Fri 06 Jun 2025 13:00:52 +0000 asID: 3257 IP address blocks: 199.30.144.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc11e5dd-c2b3-493c-8534-431fa4878aa9/cc11e5dd-c2b3-493c-8534-431fa4878aa9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc11e5dd-c2b3-493c-8534-431fa4878aa9/cc11e5dd-c2b3-493c-8534-431fa4878aa9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc11e5dd-c2b3-493c-8534-431fa4878aa9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1e:d6:e4:ce:c4:69:f5:97:35:db:67:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc11e5dd-c2b3-493c-8534-431fa4878aa9 Validity Not Before: Mar 8 14:00:52 2025 GMT Not After : Jun 6 13:00:52 2025 GMT Subject: CN=202fde5e-2afa-4cec-b355-3f333b0588f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:f3:26:9f:f8:e1:a2:f2:65:df:60:bf:74:47: 80:04:ba:bc:aa:82:30:3d:1e:e4:1c:de:d8:a1:6a: 6b:11:11:38:d0:9e:5d:7c:d1:ad:96:cc:39:c1:36: 6d:0c:2c:56:7a:ce:c7:f1:db:c4:93:4b:59:31:e4: c4:88:0b:23:30:28:72:1c:af:7d:95:ad:1c:43:24: 17:c7:60:72:5e:4f:2a:c6:42:45:25:96:a7:b5:49: 5e:d2:39:a8:e3:3c:29:87:14:fa:73:f8:3f:d2:cc: 83:2b:d6:33:fe:0b:ca:9a:59:67:cf:df:8d:ec:c6: 1f:3f:de:f4:70:36:1b:d6:81:3d:5d:9c:b0:b4:7d: 42:99:db:a1:13:e7:77:89:fc:14:c0:20:b0:6e:d2: 4a:fb:fb:d6:d2:94:a9:18:db:a8:cc:27:fa:db:35: 4d:01:a5:9f:96:a2:55:6b:f7:72:c0:09:12:f6:db: 00:05:06:ff:c9:88:bb:30:8f:45:34:4b:72:39:55: b4:f3:ed:45:ab:4e:8b:9b:93:8e:28:77:87:09:f0: df:c9:ae:2c:f5:4f:7b:46:59:91:2b:38:66:ce:8f: 72:d5:79:43:84:49:e4:9c:4d:2d:d2:6c:df:5b:b6: c4:7a:f4:e6:2c:57:ff:f3:af:ea:ff:f1:f6:e3:f6: 10:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:6E:B8:BB:00:96:BF:4D:0D:AB:A0:E1:C6:C7:CF:4A:43:1E:CC:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc11e5dd-c2b3-493c-8534-431fa4878aa9/ddf1701b-d672-3875-b1d1-39705ddd52d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc11e5dd-c2b3-493c-8534-431fa4878aa9/cc11e5dd-c2b3-493c-8534-431fa4878aa9.crl X509v3 Authority Key Identifier: keyid:96:B0:88:5C:AB:50:1F:7A:A1:77:AD:ED:76:FF:91:57:89:9E:F5:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc11e5dd-c2b3-493c-8534-431fa4878aa9.cer sbgp-ipAddrBlock: critical IPv4: 199.30.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:d3:0d:65:fb:2b:64:49:38:cc:f1:58:37:c1:a0:55:9c:cc: af:4e:6e:d6:20:eb:22:22:58:3c:65:9d:57:11:2d:7d:27:c1: 53:42:f1:84:5f:84:b6:ca:79:d1:c8:cb:04:a2:e4:99:1a:90: 16:85:42:ff:48:a9:11:b8:57:d3:3f:70:e4:c3:09:77:ec:1b: 28:80:8a:10:7a:8d:a8:4d:07:d3:9f:09:e3:92:9b:a3:e9:5a: c6:2e:5e:ee:8e:b2:94:e8:48:59:e5:50:05:4c:8d:4e:48:ee: d1:ff:56:ec:54:50:7f:96:a4:fe:39:13:89:22:40:03:ec:04: ad:fe:85:d7:fa:af:d5:9e:c8:2a:c0:a6:0d:9b:b7:b5:76:83: 8e:b1:f8:eb:39:9a:3f:3a:ef:99:52:da:1a:00:a0:5f:ce:b8: d1:ee:3d:7e:f6:03:f9:fe:03:b7:e4:3c:08:e0:18:90:70:0b: 2b:0a:ca:3d:6a:0e:2c:34:8b:3e:84:f6:4e:27:4f:29:03:d3: 65:30:ea:3f:a6:67:03:90:60:fc:db:db:ad:1d:11:98:fe:66: 77:87:40:c2:8f:b1:d1:42:aa:14:56:42:59:37:6b:2b:36:42: a1:fc:32:70:8a:a5:b4:44:b4:7a:5b:b0:c6:1b:d8:52:a1:a8: 0b:e7:ab:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEke1uTOxGn1lzXbZ0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2MxMWU1ZGQtYzJiMy00OTNjLTg1MzQtNDMxZmE0ODc4 YWE5MB4XDTI1MDMwODE0MDA1MloXDTI1MDYwNjEzMDA1MlowLzEtMCsGA1UEAxMk MjAyZmRlNWUtMmFmYS00Y2VjLWIzNTUtM2YzMzNiMDU4OGY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivMmn/jhovJl32C/dEeABLq8qoIwPR7kHN7Y oWprERE40J5dfNGtlsw5wTZtDCxWes7H8dvEk0tZMeTEiAsjMChyHK99la0cQyQX x2ByXk8qxkJFJZantUle0jmo4zwphxT6c/g/0syDK9Yz/gvKmllnz9+N7MYfP970 cDYb1oE9XZywtH1CmduhE+d3ifwUwCCwbtJK+/vW0pSpGNuozCf62zVNAaWflqJV a/dywAkS9tsABQb/yYi7MI9FNEtyOVW08+1Fq06Lm5OOKHeHCfDfya4s9U97RlmR Kzhmzo9y1XlDhEnknE0t0mzfW7bEevTmLFf/86/q//H24/YQaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL9uuLsAlr9NDaug4cbHz0pDHsxuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jYzEx ZTVkZC1jMmIzLTQ5M2MtODUzNC00MzFmYTQ4NzhhYTkvZGRmMTcwMWItZDY3Mi0z ODc1LWIxZDEtMzk3MDVkZGQ1MmQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvY2MxMWU1ZGQtYzJiMy00OTNjLTg1 MzQtNDMxZmE0ODc4YWE5L2NjMTFlNWRkLWMyYjMtNDkzYy04NTM0LTQzMWZhNDg3 OGFhOS5jcmwwHwYDVR0jBBgwFoAUlrCIXKtQH3qhd63tdv+RV4me9cYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9jYzExZTVkZC1jMmIzLTQ5M2MtODUzNC00MzFm YTQ4NzhhYTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxx6QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHDTDWX7K2RJOMzxWDfBoFWczK9ObtYg6yIiWDxlnVcRLX0nwVNC8YRf hLbKedHIywSi5JkakBaFQv9IqRG4V9M/cOTDCXfsGyiAihB6jahNB9OfCeOSm6Pp WsYuXu6OspToSFnlUAVMjU5I7tH/VuxUUH+WpP45E4kiQAPsBK3+hdf6r9WeyCrA pg2bt7V2g46x+Os5mj8675lS2hoAoF/OuNHuPX72A/n+A7fkPAjgGJBwCysKyj1q Diw0iz6E9k4nTykD02Uw6j+mZwOQYPzb260dEZj+ZneHQMKPsdFCqhRWQlk3ays2 QqH8MnCKpbREtHpbsMYb2FKhqAvnq+c= -----END CERTIFICATE-----Generated at Sat Apr 5 12:33:21 2025 by rpki-client