$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/5eabecf5-9f45-376b-83d0-ccd1a3b4a5b3.roa File: 5eabecf5-9f45-376b-83d0-ccd1a3b4a5b3.roa (raw, json) Hash identifier: rdpk4y1FtFWOZrsPDW7dw07s2ScmeQCZW7m74EGa4RM= Subject key identifier: 11:B7:D7:31:03:25:B1:16:E7:DA:46:32:D4:FC:4B:09:9A:2A:44:27 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F432858494B6430DCB87FEEC370B12340 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/5eabecf5-9f45-376b-83d0-ccd1a3b4a5b3.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 54858 IP address blocks: 199.27.176.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:64:30:dc:b8:7f:ee:c3:70:b1:23:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=81b6dd80-04a6-413b-8142-f8aae1c767a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:5b:6a:b1:c6:19:94:ca:53:1e:59:06:9b:15: c3:eb:cd:c7:77:3e:a1:6d:3a:ce:5d:7b:2d:63:6f: 3e:d7:7c:fd:d1:a8:73:6d:bf:4b:de:4d:b3:80:d0: 25:19:d1:7b:74:d4:37:40:cd:2a:1e:aa:78:30:2d: e8:f9:38:8d:34:48:6e:9f:ac:c8:0b:f3:89:df:a3: 58:6b:aa:52:a2:98:26:ba:5c:09:6f:33:b2:fc:f3: 96:39:e5:b5:93:44:b2:37:90:74:cd:4b:76:16:43: da:95:83:f5:2f:ea:ee:19:81:34:4d:1f:5e:a9:62: ba:75:a6:eb:32:38:7a:64:b6:b9:54:f8:8d:b1:0d: 8a:e0:b3:8e:3e:83:5f:78:5f:0d:01:7c:14:ab:6c: 3e:8c:91:96:67:15:57:a3:3f:3f:ba:e2:1b:13:a9: 71:11:a9:8b:b3:e5:d0:6b:51:d1:d3:34:8c:df:fd: ea:ae:6c:7c:c6:bc:00:46:6a:d8:04:2c:9d:4c:49: 17:49:1f:87:0f:60:73:ab:12:29:d5:c5:76:4c:e1: d3:8a:55:db:3f:5e:2a:87:91:63:8b:9e:32:39:64: ec:d1:d0:f9:2a:6a:58:77:ca:45:30:db:32:76:32: fc:41:01:45:2e:59:65:93:d3:0d:96:63:83:45:9a: a0:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:B7:D7:31:03:25:B1:16:E7:DA:46:32:D4:FC:4B:09:9A:2A:44:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/5eabecf5-9f45-376b-83d0-ccd1a3b4a5b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 199.27.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:63:ae:84:e4:df:c9:a4:e1:3c:81:bc:34:79:39:6e:dc:22: e0:34:b3:e1:b9:89:ae:67:45:e7:61:5b:cf:46:dd:3a:dc:07: ab:13:c2:35:88:da:b0:8b:b9:bf:b9:c6:2c:bb:4f:f7:e8:37: 51:aa:9d:a2:7d:09:9c:f8:af:ab:03:44:8f:f0:7d:96:69:7c: 0c:df:5e:e2:a5:1b:b5:97:8d:9c:f6:80:d4:85:a8:f1:ba:fc: d4:84:e4:19:02:90:6d:e9:28:c1:0c:7f:c3:0d:9e:f7:c8:04: 74:a6:58:b7:67:57:62:c0:77:ed:0b:23:fe:90:a6:20:cd:4b: 46:a9:a1:ba:0d:18:50:ba:9f:61:88:41:a9:b4:79:a7:40:19: 99:38:8d:fc:bd:01:05:ac:b5:27:b7:83:71:df:1b:c5:e0:01: bc:1a:86:e1:d9:23:75:19:60:e6:83:0b:6a:15:eb:97:ce:51: 61:11:f4:3d:92:8c:af:43:92:f8:41:63:8c:70:11:65:8d:f0: 7e:e9:94:97:0e:ad:c9:66:7c:20:c4:2d:22:05:2f:51:76:69: 2c:7c:3e:52:89:3f:90:ce:69:e8:8e:1b:5a:69:87:79:96:87: ec:a4:e1:0e:40:a7:ac:e0:d1:02:00:29:86:60:e9:6e:04:a9: 99:7b:2f:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElLZDDcuH/uw3CxI0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk ODFiNmRkODAtMDRhNi00MTNiLTgxNDItZjhhYWUxYzc2N2E2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5FtqscYZlMpTHlkGmxXD683Hdz6hbTrOXXst Y28+13z90ahzbb9L3k2zgNAlGdF7dNQ3QM0qHqp4MC3o+TiNNEhun6zIC/OJ36NY a6pSopgmulwJbzOy/POWOeW1k0SyN5B0zUt2FkPalYP1L+ruGYE0TR9eqWK6dabr Mjh6ZLa5VPiNsQ2K4LOOPoNfeF8NAXwUq2w+jJGWZxVXoz8/uuIbE6lxEamLs+XQ a1HR0zSM3/3qrmx8xrwARmrYBCydTEkXSR+HD2BzqxIp1cV2TOHTilXbP14qh5Fj i54yOWTs0dD5KmpYd8pFMNsydjL8QQFFLlllk9MNlmODRZqgaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBG31zEDJbEW59pGMtT8SwmaKkQnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvNWVhYmVjZjUtOWY0NS0z NzZiLTgzZDAtY2NkMWEzYjRhNWIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxxuwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF9jroTk38mk4TyBvDR5OW7cIuA0s+G5ia5nRedhW89G3TrcB6sTwjWI 2rCLub+5xiy7T/foN1GqnaJ9CZz4r6sDRI/wfZZpfAzfXuKlG7WXjZz2gNSFqPG6 /NSE5BkCkG3pKMEMf8MNnvfIBHSmWLdnV2LAd+0LI/6QpiDNS0apoboNGFC6n2GI Qam0eadAGZk4jfy9AQWstSe3g3HfG8XgAbwahuHZI3UZYOaDC2oV65fOUWER9D2S jK9DkvhBY4xwEWWN8H7plJcOrclmfCDELSIFL1F2aSx8PlKJP5DOaeiOG1pph3mW h+yk4Q5Ap6zg0QIAKYZg6W4EqZl7L9w= -----END CERTIFICATE-----Generated at Sat Apr 12 12:20:39 2025 by rpki-client