$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/32d9b6a7-2ed5-448b-9bcb-8d262acc3f76/59c14deb-5794-3d55-a33a-dd50dc7e6a13.roa File: 59c14deb-5794-3d55-a33a-dd50dc7e6a13.roa (raw, json) Hash identifier: xJnlwcJVTASujHkUeG6j/3pbh/K9/LXXxe4/EfiMZ24= Subject key identifier: F0:05:FF:D4:89:B1:BE:70:6B:C1:6E:21:8A:1D:2B:59:7B:56:80:C7 Certificate issuer: /CN=32d9b6a7-2ed5-448b-9bcb-8d262acc3f76 Certificate serial: 010D0C9F432858490CB16F62DB85ECA92A34F880 Authority key identifier: 3F:7F:AA:77:BF:AF:E7:2B:2A:B3:CA:D2:1E:AC:4C:10:01:1D:A4:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/32d9b6a7-2ed5-448b-9bcb-8d262acc3f76.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/32d9b6a7-2ed5-448b-9bcb-8d262acc3f76/59c14deb-5794-3d55-a33a-dd50dc7e6a13.roa Signing time: Sun 02 Mar 2025 02:00:40 +0000 ROA not before: Sun 02 Mar 2025 02:00:40 +0000 ROA not after: Sat 31 May 2025 01:00:40 +0000 asID: 209242 IP address blocks: 199.33.230.0/24 maxlen: 24 199.33.231.0/24 maxlen: 24 199.33.232.0/24 maxlen: 24 199.33.233.0/24 maxlen: 24 2001:503:ff40::/48 maxlen: 48 2001:503:ff41::/48 maxlen: 48 2001:503:ff42::/48 maxlen: 48 2001:503:ff43::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/32d9b6a7-2ed5-448b-9bcb-8d262acc3f76/32d9b6a7-2ed5-448b-9bcb-8d262acc3f76.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/32d9b6a7-2ed5-448b-9bcb-8d262acc3f76/32d9b6a7-2ed5-448b-9bcb-8d262acc3f76.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/32d9b6a7-2ed5-448b-9bcb-8d262acc3f76.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0c:b1:6f:62:db:85:ec:a9:2a:34:f8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32d9b6a7-2ed5-448b-9bcb-8d262acc3f76 Validity Not Before: Mar 2 02:00:40 2025 GMT Not After : May 31 01:00:40 2025 GMT Subject: CN=9818e96a-771f-4e3b-95ff-2b1319e8ad7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:4e:b3:ed:9d:4e:86:8f:7f:67:f1:bf:68:77: 30:d1:44:04:e2:29:27:6d:18:ef:35:1e:3e:84:75: 2e:8f:5f:98:d5:c6:ec:f8:7d:62:58:bc:81:8e:e6: 72:cc:b4:df:29:68:8a:fc:46:16:2c:05:a7:8e:f8: 40:5b:97:c2:72:80:b4:df:a3:3f:fb:5c:0e:d5:a0: 12:80:be:3a:e2:4b:5e:fe:68:bf:a1:81:e3:13:40: 2d:fb:ee:b4:6a:80:3e:1d:a6:8e:dd:78:01:0f:2d: 2b:e7:7e:e8:87:c9:f3:f2:31:d9:2e:b9:6b:86:cb: 13:b1:2e:21:37:78:0a:c5:f7:6f:be:39:bb:17:b4: 4b:3b:1d:07:2a:f0:17:2a:bc:05:38:24:9f:6a:e3: 6b:fd:1f:e2:bf:3f:31:33:02:81:86:d3:0b:19:d1: f9:bd:42:be:29:04:4f:a7:46:7c:96:15:33:d1:8a: 61:53:e2:f8:18:4b:a9:11:76:4e:f5:a5:0c:96:5e: b1:80:0d:63:87:20:72:00:3e:96:d1:52:ec:56:c8: 0d:d4:64:75:8d:09:7c:b3:24:b0:81:30:4f:65:79: 14:25:ad:ab:f5:68:91:f4:66:6a:73:ee:ad:0d:fb: 55:34:b7:0f:94:1c:f3:08:3a:1b:19:66:12:33:c4: 4a:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:05:FF:D4:89:B1:BE:70:6B:C1:6E:21:8A:1D:2B:59:7B:56:80:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/32d9b6a7-2ed5-448b-9bcb-8d262acc3f76/59c14deb-5794-3d55-a33a-dd50dc7e6a13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/32d9b6a7-2ed5-448b-9bcb-8d262acc3f76/32d9b6a7-2ed5-448b-9bcb-8d262acc3f76.crl X509v3 Authority Key Identifier: keyid:3F:7F:AA:77:BF:AF:E7:2B:2A:B3:CA:D2:1E:AC:4C:10:01:1D:A4:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/32d9b6a7-2ed5-448b-9bcb-8d262acc3f76.cer sbgp-ipAddrBlock: critical IPv4: 199.33.230.0-199.33.233.255 IPv6: 2001:503:ff40::/46 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:63:1f:46:31:65:70:a4:0d:f9:9e:16:ac:5c:28:dd:ae:7c: e9:c0:6a:42:6d:3d:88:b1:8d:b9:a3:80:fc:b5:b4:c6:46:db: 16:e4:d5:ea:9f:f4:ea:69:db:3a:0f:46:45:0c:77:ed:8b:28: eb:52:a9:3e:44:2f:5a:2e:b1:87:bf:a6:e0:60:35:93:ba:57: ea:b9:9c:30:47:aa:79:37:27:ce:ce:e2:8b:56:df:cb:f0:21: 14:fd:91:70:42:0b:ac:9d:58:c8:10:c4:4b:e8:27:cc:cd:c5: f5:6e:da:24:97:1b:bb:43:09:04:73:d0:46:32:7a:32:5a:a2: a7:21:05:c7:dc:96:be:ae:57:b3:b6:b9:25:2e:4a:97:fc:f5: 5b:1f:2d:22:0d:db:64:38:d8:8e:cf:b4:7b:6c:8a:2b:a2:8c: e2:43:d1:de:91:85:1c:43:8b:59:f1:5c:c7:60:08:7a:83:a4: c2:55:aa:cf:a8:6f:ba:a2:5e:09:65:b6:3f:22:43:33:08:7e: df:32:63:70:71:2a:4a:33:a7:5e:6c:c3:68:aa:1c:f7:bf:c6: 62:de:c8:65:42:f5:3c:f4:71:64:2e:ec:be:fc:40:45:a0:6c: 79:02:29:d8:22:b2:7d:93:6e:3a:f4:09:23:c3:74:0d:51:1a: ce:98:d0:47 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEkMsW9i24XsqSo0+IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJkOWI2YTctMmVkNS00NDhiLTliY2ItOGQyNjJhY2Mz Zjc2MB4XDTI1MDMwMjAyMDA0MFoXDTI1MDUzMTAxMDA0MFowLzEtMCsGA1UEAxMk OTgxOGU5NmEtNzcxZi00ZTNiLTk1ZmYtMmIxMzE5ZThhZDdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkE6z7Z1Oho9/Z/G/aHcw0UQE4iknbRjvNR4+ hHUuj1+Y1cbs+H1iWLyBjuZyzLTfKWiK/EYWLAWnjvhAW5fCcoC036M/+1wO1aAS gL464kte/mi/oYHjE0At++60aoA+HaaO3XgBDy0r537oh8nz8jHZLrlrhssTsS4h N3gKxfdvvjm7F7RLOx0HKvAXKrwFOCSfauNr/R/ivz8xMwKBhtMLGdH5vUK+KQRP p0Z8lhUz0YphU+L4GEupEXZO9aUMll6xgA1jhyByAD6W0VLsVsgN1GR1jQl8sySw gTBPZXkUJa2r9WiR9GZqc+6tDftVNLcPlBzzCDobGWYSM8RKBQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPAF/9SJsb5wa8FuIYodK1l7VoDHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zMmQ5 YjZhNy0yZWQ1LTQ0OGItOWJjYi04ZDI2MmFjYzNmNzYvNTljMTRkZWItNTc5NC0z ZDU1LWEzM2EtZGQ1MGRjN2U2YTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMzJkOWI2YTctMmVkNS00NDhiLTli Y2ItOGQyNjJhY2MzZjc2LzMyZDliNmE3LTJlZDUtNDQ4Yi05YmNiLThkMjYyYWNj M2Y3Ni5jcmwwHwYDVR0jBBgwFoAUP3+qd7+v5ysqs8rSHqxMEAEdpCowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zMmQ5YjZhNy0yZWQ1LTQ0OGItOWJjYi04ZDI2 MmFjYzNmNzYuY2VyMDgGCCsGAQUFBwEHAQH/BCkwJzAUBAIAATAOMAwDBAHHIeYD BAHHIegwDwQCAAIwCQMHAiABBQP/QDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBZYx9GMWVwpA35nhasXCjd rnzpwGpCbT2IsY25o4D8tbTGRtsW5NXqn/Tqads6D0ZFDHftiyjrUqk+RC9aLrGH v6bgYDWTulfquZwwR6p5NyfOzuKLVt/L8CEU/ZFwQgusnVjIEMRL6CfMzcX1btok lxu7QwkEc9BGMnoyWqKnIQXH3Ja+rleztrklLkqX/PVbHy0iDdtkONiOz7R7bIor ooziQ9HekYUcQ4tZ8VzHYAh6g6TCVarPqG+6ol4JZbY/IkMzCH7fMmNwcSpKM6de bMNoqhz3v8Zi3shlQvU89HFkLuy+/EBFoGx5AinYIrJ9k2469Akjw3QNURrOmNBH -----END CERTIFICATE-----Generated at Sat Apr 12 07:54:27 2025 by rpki-client