$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4fba2fa2-fadc-4c1b-911f-6f41164e9695/114c23eb-d2f7-3a43-8266-464e81836fee.roa File: 114c23eb-d2f7-3a43-8266-464e81836fee.roa (raw, json) Hash identifier: aPlGZTQTJx09sLG19ksAznYxensHzfvFT7D9jo6YCfI= Subject key identifier: 30:89:8E:F3:D4:C2:9E:85:9F:F5:26:1C:F4:9D:3D:BD:45:B5:3A:98 Certificate issuer: /CN=4fba2fa2-fadc-4c1b-911f-6f41164e9695 Certificate serial: 010D0C9F43285848D210E5B6B7E0FE38AFDC4040 Authority key identifier: 13:0D:DE:8E:42:17:FB:20:DA:68:87:7B:22:CE:74:B9:6A:8D:F5:5F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4fba2fa2-fadc-4c1b-911f-6f41164e9695.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4fba2fa2-fadc-4c1b-911f-6f41164e9695/114c23eb-d2f7-3a43-8266-464e81836fee.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 26459 IP address blocks: 199.250.160.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4fba2fa2-fadc-4c1b-911f-6f41164e9695/4fba2fa2-fadc-4c1b-911f-6f41164e9695.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4fba2fa2-fadc-4c1b-911f-6f41164e9695/4fba2fa2-fadc-4c1b-911f-6f41164e9695.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4fba2fa2-fadc-4c1b-911f-6f41164e9695.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:10:e5:b6:b7:e0:fe:38:af:dc:40:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fba2fa2-fadc-4c1b-911f-6f41164e9695 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=45a7a3a4-7c65-4f51-a6a7-872ff494988c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:6f:95:40:de:e8:7a:6b:21:dd:2d:70:32:97: 21:e5:a3:e7:13:10:78:f7:fb:6e:74:11:2a:1b:d4: 3d:44:fa:69:8c:87:58:d0:90:0f:e4:72:70:6d:e0: 63:13:1a:0e:c0:f8:7b:56:32:a1:11:8b:13:4d:c6: 5a:12:2a:24:6b:c4:90:aa:31:b9:65:66:28:36:d8: e2:db:de:8d:dc:25:86:03:bb:13:d1:e7:1a:44:54: 7f:c2:f0:c6:3f:85:90:14:a7:f3:3a:af:71:4e:fd: 18:b9:56:f9:70:e5:38:32:e4:f6:15:c8:bd:8d:1a: 42:cf:b6:10:cb:72:b2:9b:4c:ed:66:1c:2a:5c:67: fa:40:b4:97:04:e6:f8:d6:7f:37:5c:2e:17:76:cd: c3:2f:71:c8:0e:a9:1d:5b:cd:07:67:27:bf:7c:9f: e7:ec:8a:7b:70:13:cd:ba:00:8f:26:4b:9a:12:36: ba:b4:96:26:6e:66:6f:ef:f8:17:48:67:7e:94:ae: 6b:0e:fe:95:f6:3c:a8:bb:cb:d5:64:c4:44:da:aa: da:9e:0e:4b:04:2e:1c:7b:ed:e2:30:6d:47:b8:ea: bb:96:67:92:90:c9:4f:22:7d:1e:4c:2c:74:1a:32: 1b:8f:a5:4c:57:cb:72:39:25:05:0b:81:cd:02:b9: af:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:89:8E:F3:D4:C2:9E:85:9F:F5:26:1C:F4:9D:3D:BD:45:B5:3A:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4fba2fa2-fadc-4c1b-911f-6f41164e9695/114c23eb-d2f7-3a43-8266-464e81836fee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4fba2fa2-fadc-4c1b-911f-6f41164e9695/4fba2fa2-fadc-4c1b-911f-6f41164e9695.crl X509v3 Authority Key Identifier: keyid:13:0D:DE:8E:42:17:FB:20:DA:68:87:7B:22:CE:74:B9:6A:8D:F5:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4fba2fa2-fadc-4c1b-911f-6f41164e9695.cer sbgp-ipAddrBlock: critical IPv4: 199.250.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:15:ad:22:ff:eb:38:e3:70:6b:6b:e0:eb:6a:35:04:dd:2c: 6a:db:24:1b:af:2a:31:c7:ae:d8:d7:f3:59:da:1f:d2:c5:3a: fe:30:0f:27:c8:ed:fe:7a:20:82:a7:82:eb:d2:dc:fc:cf:8f: 38:3b:3d:e0:cb:db:36:ef:58:8d:e7:ce:40:50:12:d0:67:92: 8b:96:ae:66:31:ed:af:5b:f0:59:dc:e9:b4:00:dc:9f:5d:6b: 3a:fa:ab:7b:b2:86:31:7a:a1:c3:45:b2:18:b1:a9:87:80:fb: 39:84:f2:d5:9e:cf:5c:1b:37:ef:2a:43:56:67:6f:11:4e:62: 78:a9:f1:e8:a4:ee:dd:c2:aa:03:d4:b1:61:50:c1:1e:3c:d7: e1:d0:15:ea:cd:51:55:87:fd:83:66:ac:51:9f:62:4a:a0:86: a1:e1:ef:d4:b6:c9:42:68:af:19:69:f7:1f:93:1f:52:a1:33: 45:f8:f0:04:de:d1:ae:6d:0d:33:56:2c:ff:28:58:ca:7e:50: 0a:b1:e0:01:02:92:4d:40:85:9a:c5:25:5c:3c:18:43:a1:70: ca:e5:0e:09:68:57:c5:78:4a:29:f6:38:7c:fa:b2:00:fc:59: 26:55:70:82:7f:05:0b:1a:5d:b3:50:b0:11:53:b2:40:64:c4: 71:79:a0:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSEOW2t+D+OK/cQEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGZiYTJmYTItZmFkYy00YzFiLTkxMWYtNmY0MTE2NGU5 Njk1MB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk NDVhN2EzYTQtN2M2NS00ZjUxLWE2YTctODcyZmY0OTQ5ODhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3W+VQN7oemsh3S1wMpch5aPnExB49/tudBEq G9Q9RPppjIdY0JAP5HJwbeBjExoOwPh7VjKhEYsTTcZaEioka8SQqjG5ZWYoNtji 296N3CWGA7sT0ecaRFR/wvDGP4WQFKfzOq9xTv0YuVb5cOU4MuT2Fci9jRpCz7YQ y3Kym0ztZhwqXGf6QLSXBOb41n83XC4Xds3DL3HIDqkdW80HZye/fJ/n7Ip7cBPN ugCPJkuaEja6tJYmbmZv7/gXSGd+lK5rDv6V9jyou8vVZMRE2qrang5LBC4ce+3i MG1HuOq7lmeSkMlPIn0eTCx0GjIbj6VMV8tyOSUFC4HNArmvzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDCJjvPUwp6Fn/UmHPSdPb1FtTqYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80ZmJh MmZhMi1mYWRjLTRjMWItOTExZi02ZjQxMTY0ZTk2OTUvMTE0YzIzZWItZDJmNy0z YTQzLTgyNjYtNDY0ZTgxODM2ZmVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNGZiYTJmYTItZmFkYy00YzFiLTkx MWYtNmY0MTE2NGU5Njk1LzRmYmEyZmEyLWZhZGMtNGMxYi05MTFmLTZmNDExNjRl OTY5NS5jcmwwHwYDVR0jBBgwFoAUEw3ejkIX+yDaaId7Is50uWqN9V8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80ZmJhMmZhMi1mYWRjLTRjMWItOTExZi02ZjQx MTY0ZTk2OTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEx/qgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHcVrSL/6zjjcGtr4OtqNQTdLGrbJBuvKjHHrtjX81naH9LFOv4wDyfI 7f56IIKnguvS3PzPjzg7PeDL2zbvWI3nzkBQEtBnkouWrmYx7a9b8Fnc6bQA3J9d azr6q3uyhjF6ocNFshixqYeA+zmE8tWez1wbN+8qQ1ZnbxFOYnip8eik7t3CqgPU sWFQwR481+HQFerNUVWH/YNmrFGfYkqghqHh79S2yUJorxlp9x+TH1KhM0X48ATe 0a5tDTNWLP8oWMp+UAqx4AECkk1AhZrFJVw8GEOhcMrlDgloV8V4Sin2OHz6sgD8 WSZVcIJ/BQsaXbNQsBFTskBkxHF5oJ8= -----END CERTIFICATE-----Generated at Sat Apr 12 11:20:46 2025 by rpki-client