$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a0e036-e4bb-4abf-8ede-8ad9a213f91a/fe655c59-f54b-337c-afb0-edb608a6ba8d.roa File: fe655c59-f54b-337c-afb0-edb608a6ba8d.roa (raw, json) Hash identifier: d965sKTwTXwSFdzx/MAgIdD75hY2UJcbhw1y+AnPphE= Subject key identifier: 85:66:4F:DF:C1:2F:0C:03:5B:12:FD:E5:74:69:3F:84:E0:A6:47:05 Certificate issuer: /CN=21a0e036-e4bb-4abf-8ede-8ad9a213f91a Certificate serial: 010D0C9F43285848E59BAFD16AAFA6D448ED4D00 Authority key identifier: 2F:DA:DD:17:BF:CA:37:D5:D7:4F:CD:E5:B1:E7:2E:BB:C2:86:87:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a0e036-e4bb-4abf-8ede-8ad9a213f91a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a0e036-e4bb-4abf-8ede-8ad9a213f91a/fe655c59-f54b-337c-afb0-edb608a6ba8d.roa Signing time: Sun 16 Feb 2025 02:00:40 +0000 ROA not before: Sun 16 Feb 2025 02:00:40 +0000 ROA not after: Sat 17 May 2025 01:00:40 +0000 asID: 19449 IP address blocks: 198.99.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a0e036-e4bb-4abf-8ede-8ad9a213f91a/21a0e036-e4bb-4abf-8ede-8ad9a213f91a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a0e036-e4bb-4abf-8ede-8ad9a213f91a/21a0e036-e4bb-4abf-8ede-8ad9a213f91a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a0e036-e4bb-4abf-8ede-8ad9a213f91a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e5:9b:af:d1:6a:af:a6:d4:48:ed:4d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21a0e036-e4bb-4abf-8ede-8ad9a213f91a Validity Not Before: Feb 16 02:00:40 2025 GMT Not After : May 17 01:00:40 2025 GMT Subject: CN=1ee7072b-7e76-455e-a6ae-ae89b7fc8ccf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:a4:34:62:26:09:32:d9:4a:a9:58:f0:0e:df: 1c:dc:ea:97:ea:c5:cb:7a:8e:dc:4f:9a:4f:53:51: c2:0f:4c:86:11:48:1c:7a:45:db:d4:b7:57:ec:be: 9a:3f:0d:74:ef:66:11:22:8c:67:94:a6:2a:ea:cc: 00:66:30:30:77:ec:e6:2e:a5:0e:df:86:8f:26:28: 2d:b5:ff:2e:da:10:af:0f:62:e6:5d:a0:7c:b6:aa: e1:f5:06:a0:48:e2:eb:d9:06:43:96:96:7c:e6:bc: 00:03:2f:f7:10:b4:f8:9e:fb:26:81:24:a6:35:4a: 2b:fd:a5:bc:77:9d:f9:57:e4:41:b2:d8:09:2b:9c: db:5a:5c:81:98:4d:8b:2f:d4:9f:2f:8d:99:96:44: 8a:87:f4:e8:85:16:5b:73:bc:1e:c2:70:b1:4e:9a: 4d:7e:f3:00:2b:fe:61:82:e3:38:b2:68:29:17:bb: 7e:0d:a8:e5:ab:f1:7b:0b:84:05:fe:a9:ec:e6:28: 92:b0:32:68:27:f4:ab:b9:97:67:8b:38:3e:77:f7: e0:b5:fa:cd:1d:c7:bd:4f:3a:c1:fc:92:e3:e0:ec: 5a:7a:35:27:4a:f2:a8:18:06:8b:da:ff:a0:80:11: 53:3f:6e:6a:aa:1d:9f:44:14:2e:b7:a7:d3:23:f8: b1:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:66:4F:DF:C1:2F:0C:03:5B:12:FD:E5:74:69:3F:84:E0:A6:47:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a0e036-e4bb-4abf-8ede-8ad9a213f91a/fe655c59-f54b-337c-afb0-edb608a6ba8d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a0e036-e4bb-4abf-8ede-8ad9a213f91a/21a0e036-e4bb-4abf-8ede-8ad9a213f91a.crl X509v3 Authority Key Identifier: keyid:2F:DA:DD:17:BF:CA:37:D5:D7:4F:CD:E5:B1:E7:2E:BB:C2:86:87:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a0e036-e4bb-4abf-8ede-8ad9a213f91a.cer sbgp-ipAddrBlock: critical IPv4: 198.99.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:a8:33:1c:a5:e9:8c:8c:de:b2:d8:7d:f7:53:c7:23:8b:d6: 3f:a9:c4:c1:57:d5:24:4e:40:0e:36:3a:e5:b7:b4:c2:ac:10: a9:e0:a3:5f:0d:5d:fa:cc:bf:e4:84:5b:df:52:c0:31:1f:de: 95:c2:7a:47:dc:e7:45:0f:cf:d0:b4:2f:ef:6f:f6:08:d1:8f: bc:b1:5f:50:7d:45:8c:b7:ef:51:01:2a:66:23:3e:74:e9:cc: 88:83:18:14:1c:ab:b4:85:51:6a:24:95:0a:16:39:82:1d:dd: d3:4f:83:14:aa:40:e2:f0:14:b7:55:bc:a8:a4:5d:bc:a0:ee: 85:a0:f3:c5:9e:26:b8:d9:6f:96:ff:85:37:ff:83:50:56:d9: 34:de:ab:c5:b3:bc:c4:08:a1:b2:59:78:c1:e4:a1:1c:eb:bc: 47:ac:db:43:cc:a8:47:8e:da:ea:ca:47:ba:d5:d9:7c:15:a7: 7e:4f:09:cd:63:5f:ba:23:03:f5:26:5f:61:c9:e3:77:b9:b7: b8:b1:d4:8f:46:b8:42:71:d2:b6:e7:c9:5d:47:de:39:f7:e6: 9f:85:36:d1:5a:05:f8:0a:62:3c:36:9b:3d:3f:fd:76:22:e9: 09:2e:2d:dc:b6:a2:c0:fc:a5:7a:59:27:2e:f9:d0:f4:cf:5f: 57:e7:e2:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjlm6/Raq+m1EjtTQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFhMGUwMzYtZTRiYi00YWJmLThlZGUtOGFkOWEyMTNm OTFhMB4XDTI1MDIxNjAyMDA0MFoXDTI1MDUxNzAxMDA0MFowLzEtMCsGA1UEAxMk MWVlNzA3MmItN2U3Ni00NTVlLWE2YWUtYWU4OWI3ZmM4Y2NmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6Q0YiYJMtlKqVjwDt8c3OqX6sXLeo7cT5pP U1HCD0yGEUgcekXb1LdX7L6aPw1072YRIoxnlKYq6swAZjAwd+zmLqUO34aPJigt tf8u2hCvD2LmXaB8tqrh9QagSOLr2QZDlpZ85rwAAy/3ELT4nvsmgSSmNUor/aW8 d535V+RBstgJK5zbWlyBmE2LL9SfL42ZlkSKh/TohRZbc7wewnCxTppNfvMAK/5h guM4smgpF7t+Dajlq/F7C4QF/qns5iiSsDJoJ/SruZdnizg+d/fgtfrNHce9TzrB /JLj4OxaejUnSvKoGAaL2v+ggBFTP25qqh2fRBQut6fTI/ix2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIVmT9/BLwwDWxL95XRpP4TgpkcFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8yMWEw ZTAzNi1lNGJiLTRhYmYtOGVkZS04YWQ5YTIxM2Y5MWEvZmU2NTVjNTktZjU0Yi0z MzdjLWFmYjAtZWRiNjA4YTZiYThkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMjFhMGUwMzYtZTRiYi00YWJmLThl ZGUtOGFkOWEyMTNmOTFhLzIxYTBlMDM2LWU0YmItNGFiZi04ZWRlLThhZDlhMjEz ZjkxYS5jcmwwHwYDVR0jBBgwFoAUL9rdF7/KN9XXT83lsecuu8KGhxMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8yMWEwZTAzNi1lNGJiLTRhYmYtOGVkZS04YWQ5 YTIxM2Y5MWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxmNrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHWoMxyl6YyM3rLYffdTxyOL1j+pxMFX1SROQA42OuW3tMKsEKngo18N XfrMv+SEW99SwDEf3pXCekfc50UPz9C0L+9v9gjRj7yxX1B9RYy371EBKmYjPnTp zIiDGBQcq7SFUWoklQoWOYId3dNPgxSqQOLwFLdVvKikXbyg7oWg88WeJrjZb5b/ hTf/g1BW2TTeq8WzvMQIobJZeMHkoRzrvEes20PMqEeO2urKR7rV2XwVp35PCc1j X7ojA/UmX2HJ43e5t7ix1I9GuEJx0rbnyV1H3jn35p+FNtFaBfgKYjw2mz0//XYi 6QkuLdy2osD8pXpZJy750PTPX1fn4lM= -----END CERTIFICATE-----Generated at Fri Apr 4 19:16:12 2025 by rpki-client