$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/67efe0c1-1e58-3a26-99d2-98576c1a96d4.roa File: 67efe0c1-1e58-3a26-99d2-98576c1a96d4.roa (raw, json) Hash identifier: HXtJFT3ouSotdol7kOhpzuxrTjR0cfGnrsXcQqCcigc= Subject key identifier: A0:7B:B4:47:FA:A9:8B:4C:3E:38:B1:16:44:77:D2:4F:4D:0B:B5:74 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F432858494B6430E9BD337E2F4365DD40 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/67efe0c1-1e58-3a26-99d2-98576c1a96d4.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 54858 IP address blocks: 199.59.104.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:64:30:e9:bd:33:7e:2f:43:65:dd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=07aa3723-2ae9-4457-89a2-f9041ed40912 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:2f:05:3b:b7:81:f9:d8:e6:fe:cd:8e:cf:06: 12:b4:f5:a5:e3:4c:f9:ec:55:15:14:eb:34:83:ee: 8b:b8:b6:bb:cf:e2:56:fe:b3:ca:51:3a:ab:23:de: 7f:6c:eb:93:a6:15:6b:82:e2:f5:cf:1c:6d:a6:97: f7:03:eb:35:2a:8c:94:b8:80:e2:8d:57:a1:68:fb: 03:f5:73:80:a2:a6:8b:99:d6:5e:02:b4:e7:94:d0: bf:96:7e:77:73:b3:f8:45:54:47:59:31:fc:69:c1: 64:90:c7:d5:3d:71:16:c6:b5:f1:f9:ea:f3:59:70: 0a:16:c3:d3:ed:bc:72:2e:31:a1:76:c5:b7:a1:2f: ff:99:65:49:e0:3c:8b:f8:76:48:6b:b3:a8:ca:2a: 4e:08:c5:58:45:06:1c:c4:b0:33:22:db:83:7d:70: d1:84:00:a7:7a:4f:b0:4e:ce:46:18:0e:07:b5:bb: 64:69:9c:2f:da:ad:41:88:9c:89:1f:ae:3a:41:0f: 3d:04:e8:6f:4d:09:dd:6a:86:9e:dd:41:80:6b:01: 78:95:a9:b1:72:3d:d4:d2:d5:8c:42:d5:e4:41:fc: 0e:d8:c6:c6:e2:42:45:4a:a5:7d:d4:45:80:d7:46: 22:7c:6d:2e:c0:76:8f:ea:25:1f:4a:00:75:3b:ab: ff:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:7B:B4:47:FA:A9:8B:4C:3E:38:B1:16:44:77:D2:4F:4D:0B:B5:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/67efe0c1-1e58-3a26-99d2-98576c1a96d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 199.59.104.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:73:bd:41:03:5a:04:98:ba:c5:37:32:db:ab:ce:5d:8f:90: 77:75:ca:ea:11:75:ca:9d:34:3c:01:e9:d2:c4:6a:64:fa:79: c5:98:56:20:38:3e:19:2f:7c:f1:62:0d:f3:c4:af:f5:b9:97: a7:fb:13:45:42:58:53:e6:c7:c4:d3:72:c5:3d:5a:dc:25:62: 1d:ff:6b:6b:25:18:0a:ea:b5:b7:f8:d1:1e:6b:04:a3:3b:cd: cb:0d:28:d7:65:cd:50:df:54:aa:68:6a:83:ba:10:fa:ce:c8: e2:ad:91:16:c2:62:89:a1:31:bb:79:7a:bb:50:10:88:18:35: ba:5a:2d:cf:7d:87:72:63:88:11:62:03:14:83:11:2c:00:b1: aa:ae:a6:82:f0:00:5b:8f:e9:4f:0b:10:14:13:63:f1:34:c5: 1d:dc:a7:07:4f:91:63:03:60:fe:54:0e:82:1e:d6:9e:dd:6f: 75:02:1e:5f:00:bd:d9:4a:78:a2:5c:70:c9:00:27:0d:b1:17: 99:8b:12:6f:3d:fb:8a:46:72:2e:96:ce:52:26:54:05:25:ad: 1c:5b:c6:eb:0b:aa:c0:e4:99:3e:5f:b3:b3:7b:65:d9:4e:1d: 38:13:8a:ef:b9:c6:7a:0d:d8:a5:af:15:4d:bb:f9:f3:80:03: 48:a5:8e:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElLZDDpvTN+L0Nl3UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk MDdhYTM3MjMtMmFlOS00NDU3LTg5YTItZjkwNDFlZDQwOTEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjy8FO7eB+djm/s2OzwYStPWl40z57FUVFOs0 g+6LuLa7z+JW/rPKUTqrI95/bOuTphVrguL1zxxtppf3A+s1KoyUuIDijVehaPsD 9XOAoqaLmdZeArTnlNC/ln53c7P4RVRHWTH8acFkkMfVPXEWxrXx+erzWXAKFsPT 7bxyLjGhdsW3oS//mWVJ4DyL+HZIa7OoyipOCMVYRQYcxLAzItuDfXDRhACnek+w Ts5GGA4HtbtkaZwv2q1BiJyJH646QQ89BOhvTQndaoae3UGAawF4lamxcj3U0tWM QtXkQfwO2MbG4kJFSqV91EWA10YifG0uwHaP6iUfSgB1O6v/sQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKB7tEf6qYtMPjixFkR30k9NC7V0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvNjdlZmUwYzEtMWU1OC0z YTI2LTk5ZDItOTg1NzZjMWE5NmQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxztoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG9zvUEDWgSYusU3Mturzl2PkHd1yuoRdcqdNDwB6dLEamT6ecWYViA4 PhkvfPFiDfPEr/W5l6f7E0VCWFPmx8TTcsU9WtwlYh3/a2slGArqtbf40R5rBKM7 zcsNKNdlzVDfVKpoaoO6EPrOyOKtkRbCYomhMbt5ertQEIgYNbpaLc99h3JjiBFi AxSDESwAsaqupoLwAFuP6U8LEBQTY/E0xR3cpwdPkWMDYP5UDoIe1p7db3UCHl8A vdlKeKJccMkAJw2xF5mLEm89+4pGci6WzlImVAUlrRxbxusLqsDkmT5fs7N7ZdlO HTgTiu+5xnoN2KWvFU27+fOAA0iljn4= -----END CERTIFICATE-----Generated at Sat Apr 12 14:56:17 2025 by rpki-client