$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2aa49d03-db4a-4804-82dc-fc2c0fdb94e8/ce7a6a85-3400-3e97-a6b6-62644fe2fca4.roa File: ce7a6a85-3400-3e97-a6b6-62644fe2fca4.roa (raw, json) Hash identifier: K391GgFIqq4ggqiSxzbaucPKCqKzhDBUy0Zkc3WLUE8= Subject key identifier: 77:47:52:1C:35:08:48:40:28:50:55:B8:7D:47:6C:D2:CC:7C:61:42 Certificate issuer: /CN=2aa49d03-db4a-4804-82dc-fc2c0fdb94e8 Certificate serial: 010D0C9F4328584894A5EA315976E9A60909EB40 Authority key identifier: 2F:81:83:F2:A8:61:24:55:A8:AD:5D:BA:D3:85:A9:C6:E5:F3:28:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2aa49d03-db4a-4804-82dc-fc2c0fdb94e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2aa49d03-db4a-4804-82dc-fc2c0fdb94e8/ce7a6a85-3400-3e97-a6b6-62644fe2fca4.roa Signing time: Sat 18 Jan 2025 02:00:38 +0000 ROA not before: Sat 18 Jan 2025 02:00:38 +0000 ROA not after: Fri 18 Apr 2025 01:00:38 +0000 asID: 46110 IP address blocks: 199.101.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2aa49d03-db4a-4804-82dc-fc2c0fdb94e8/2aa49d03-db4a-4804-82dc-fc2c0fdb94e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2aa49d03-db4a-4804-82dc-fc2c0fdb94e8/2aa49d03-db4a-4804-82dc-fc2c0fdb94e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2aa49d03-db4a-4804-82dc-fc2c0fdb94e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:94:a5:ea:31:59:76:e9:a6:09:09:eb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2aa49d03-db4a-4804-82dc-fc2c0fdb94e8 Validity Not Before: Jan 18 02:00:38 2025 GMT Not After : Apr 18 01:00:38 2025 GMT Subject: CN=9106e417-cf59-48ee-9155-ea91cd3fc5da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:a3:df:c1:bd:a1:0a:b9:4e:a9:85:57:bc:13: c3:f6:88:51:e1:a5:84:2b:ad:57:fd:88:6e:64:6c: ad:04:87:67:26:a0:13:47:51:1e:06:37:d5:16:22: 26:80:4c:9b:ee:c4:60:56:f7:16:91:5d:f7:7b:a1: 31:ac:c5:b8:06:a1:7c:23:6d:17:c0:e2:40:6f:93: 4f:fe:e3:00:00:28:1a:c1:c6:f0:a4:bc:5c:c8:2e: a1:99:42:68:89:b9:b9:f2:d7:ec:15:9d:b9:4a:86: 95:06:85:72:1a:02:06:4b:5b:01:4f:2e:a9:6f:3d: 2d:5c:cf:6d:74:17:06:34:29:7e:56:2e:3e:12:0e: df:99:5f:32:65:c8:06:27:b8:ce:ee:7a:6c:f3:6a: 2c:6d:67:ac:aa:f2:63:a1:10:e7:02:e4:04:ec:11: 51:61:32:9d:ee:df:56:f3:94:af:cc:16:b5:8c:58: 64:f6:0d:17:b0:08:ce:fe:03:58:e7:13:78:d7:8e: c8:26:1e:d9:5d:ff:5b:83:8f:e6:d2:f5:03:c0:8f: 78:2f:d0:fa:cc:af:3c:30:23:ca:22:b1:9e:cb:11: d5:27:cb:47:1b:66:f2:6e:2c:b8:21:f3:a4:09:d7: 71:27:73:cd:34:bf:6f:14:34:89:af:69:20:74:ce: 97:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:47:52:1C:35:08:48:40:28:50:55:B8:7D:47:6C:D2:CC:7C:61:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2aa49d03-db4a-4804-82dc-fc2c0fdb94e8/ce7a6a85-3400-3e97-a6b6-62644fe2fca4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2aa49d03-db4a-4804-82dc-fc2c0fdb94e8/2aa49d03-db4a-4804-82dc-fc2c0fdb94e8.crl X509v3 Authority Key Identifier: keyid:2F:81:83:F2:A8:61:24:55:A8:AD:5D:BA:D3:85:A9:C6:E5:F3:28:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2aa49d03-db4a-4804-82dc-fc2c0fdb94e8.cer sbgp-ipAddrBlock: critical IPv4: 199.101.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:41:0f:04:fa:b7:e6:9b:4c:9b:4b:7e:94:90:a9:af:68:3f: fe:3f:dd:c0:09:c8:9d:6f:20:81:55:a4:f1:db:a6:8e:62:aa: 84:82:a3:91:60:53:44:c9:b3:8e:3f:07:c4:ac:a4:51:a6:ea: f3:6e:2f:fc:42:fb:3a:08:f4:ca:f4:74:6d:b1:98:ec:72:ad: ab:4b:bd:77:b9:5e:ae:08:36:3b:20:3a:f1:c3:84:1f:15:0f: df:33:3c:25:a8:a6:56:c1:9b:9c:e3:10:8b:e6:a5:59:21:80: b6:40:c4:88:bc:79:d3:16:0e:c6:cf:c9:3b:79:93:0c:2d:86: 3a:3d:ff:26:20:71:66:73:e2:ba:c0:65:5d:01:8d:f7:39:21: 24:d7:d3:fc:59:42:d6:8a:be:78:95:81:48:c3:a8:02:f9:5b: df:49:a6:3a:52:c4:b8:69:f2:fc:0c:59:ff:f9:91:0a:98:c7: 62:b5:aa:42:11:ae:31:cf:f5:8b:75:3e:4d:85:4a:ee:78:bb: 9f:80:4f:6b:25:77:93:ff:66:b5:92:f0:68:27:be:97:0a:f6: 74:f4:77:9f:ee:89:dc:75:66:6c:5c:74:32:14:47:f7:08:5e: cf:f9:87:ca:c7:bd:c0:22:c0:d1:24:d2:ba:9b:51:99:03:53: 82:dc:51:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiUpeoxWXbppgkJ60AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmFhNDlkMDMtZGI0YS00ODA0LTgyZGMtZmMyYzBmZGI5 NGU4MB4XDTI1MDExODAyMDAzOFoXDTI1MDQxODAxMDAzOFowLzEtMCsGA1UEAxMk OTEwNmU0MTctY2Y1OS00OGVlLTkxNTUtZWE5MWNkM2ZjNWRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgKPfwb2hCrlOqYVXvBPD9ohR4aWEK61X/Yhu ZGytBIdnJqATR1EeBjfVFiImgEyb7sRgVvcWkV33e6ExrMW4BqF8I20XwOJAb5NP /uMAACgawcbwpLxcyC6hmUJoibm58tfsFZ25SoaVBoVyGgIGS1sBTy6pbz0tXM9t dBcGNCl+Vi4+Eg7fmV8yZcgGJ7jO7nps82osbWesqvJjoRDnAuQE7BFRYTKd7t9W 85SvzBa1jFhk9g0XsAjO/gNY5xN4147IJh7ZXf9bg4/m0vUDwI94L9D6zK88MCPK IrGeyxHVJ8tHG2bybiy4IfOkCddxJ3PNNL9vFDSJr2kgdM6X6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHdHUhw1CEhAKFBVuH1HbNLMfGFCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8yYWE0 OWQwMy1kYjRhLTQ4MDQtODJkYy1mYzJjMGZkYjk0ZTgvY2U3YTZhODUtMzQwMC0z ZTk3LWE2YjYtNjI2NDRmZTJmY2E0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMmFhNDlkMDMtZGI0YS00ODA0LTgy ZGMtZmMyYzBmZGI5NGU4LzJhYTQ5ZDAzLWRiNGEtNDgwNC04MmRjLWZjMmMwZmRi OTRlOC5jcmwwHwYDVR0jBBgwFoAUL4GD8qhhJFWorV2604WpxuXzKEwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8yYWE0OWQwMy1kYjRhLTQ4MDQtODJkYy1mYzJj MGZkYjk0ZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx2UIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFFBDwT6t+abTJtLfpSQqa9oP/4/3cAJyJ1vIIFVpPHbpo5iqoSCo5Fg U0TJs44/B8SspFGm6vNuL/xC+zoI9Mr0dG2xmOxyratLvXe5Xq4INjsgOvHDhB8V D98zPCWoplbBm5zjEIvmpVkhgLZAxIi8edMWDsbPyTt5kwwthjo9/yYgcWZz4rrA ZV0Bjfc5ISTX0/xZQtaKvniVgUjDqAL5W99JpjpSxLhp8vwMWf/5kQqYx2K1qkIR rjHP9Yt1Pk2FSu54u5+AT2sld5P/ZrWS8GgnvpcK9nT0d5/uidx1ZmxcdDIUR/cI Xs/5h8rHvcAiwNEk0rqbUZkDU4LcUaM= -----END CERTIFICATE-----Generated at Fri Apr 4 18:58:23 2025 by rpki-client