$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/8a920efd-ab5d-35cb-9eba-1a26e89d7014.roa File: 8a920efd-ab5d-35cb-9eba-1a26e89d7014.roa (raw, json) Hash identifier: gfD9on2I8Xck0oNs8JyZljVB64NUSpBrFbPx7k4Sbng= Subject key identifier: 23:C2:49:3C:52:37:04:66:E0:85:34:CE:F7:7D:9A:95:3A:88:95:4B Certificate issuer: /CN=5c19a246-d9fa-481a-a4d7-010af8c132b3 Certificate serial: 010D0C9F43285848E2025CCE7B2E402BAB3FDD40 Authority key identifier: 18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/8a920efd-ab5d-35cb-9eba-1a26e89d7014.roa Signing time: Fri 14 Feb 2025 19:04:20 +0000 ROA not before: Fri 14 Feb 2025 19:04:20 +0000 ROA not after: Thu 15 May 2025 18:04:20 +0000 asID: 26548 IP address blocks: 172.111.48.0/24 maxlen: 24 199.253.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e2:02:5c:ce:7b:2e:40:2b:ab:3f:dd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c19a246-d9fa-481a-a4d7-010af8c132b3 Validity Not Before: Feb 14 19:04:20 2025 GMT Not After : May 15 18:04:20 2025 GMT Subject: CN=4fb40f6b-2072-42cb-aad5-957bf9572499 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:bd:5b:da:b0:ed:aa:70:10:40:cb:96:00:61: f4:f4:4c:7b:d0:0b:ee:45:b9:ef:1a:24:64:91:c4: 42:c0:3f:45:f4:b2:c5:54:75:24:3d:4d:62:8a:db: 55:ce:81:2b:89:b1:2b:52:e6:75:09:cf:74:45:7e: 1f:01:39:7f:f1:0c:aa:0a:17:55:d6:52:cf:ca:6f: b8:ae:67:fe:7e:d6:f7:86:0e:1e:03:5a:82:b7:17: fe:1e:95:0f:cc:37:ab:98:6b:0b:f0:76:6c:c7:d1: 0b:79:8a:6d:24:62:9a:6a:27:cd:5e:ef:2c:e7:65: 73:6c:c0:15:e8:eb:2b:6e:fb:90:b5:a0:fc:0f:20: 25:b3:03:6a:a8:54:1c:56:26:fa:5a:d7:7b:09:0d: 13:22:6b:cc:5c:56:58:8b:14:a7:3b:68:fb:04:a3: 0b:24:4c:c3:e8:b1:f7:f3:9f:67:0c:4f:d6:ab:c4: a1:f3:17:4b:8a:a9:0d:3d:39:13:de:b7:e6:fb:34: 9c:f8:9b:47:47:db:80:72:30:56:fb:dc:3f:63:82: 6e:ad:75:20:f3:d6:5f:78:7e:8c:d5:fe:dd:9d:a0: 3c:fd:b3:9e:b0:bf:2b:ff:bb:40:de:a4:79:28:46: b5:a7:68:67:04:01:4c:42:e2:10:37:01:e6:fc:0e: 66:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:C2:49:3C:52:37:04:66:E0:85:34:CE:F7:7D:9A:95:3A:88:95:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/8a920efd-ab5d-35cb-9eba-1a26e89d7014.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl X509v3 Authority Key Identifier: keyid:18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer sbgp-ipAddrBlock: critical IPv4: 172.111.48.0/24 199.253.30.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:0e:58:ec:9a:f5:f9:87:cb:d8:d8:05:b9:e1:c5:db:5b:34: 55:c7:c1:c5:04:44:25:0f:c9:6f:5c:63:ee:85:ad:3b:bc:17: c3:d8:29:11:c2:0d:2b:63:a8:ea:6b:27:d3:13:0d:3a:0a:06: e0:9b:8d:d8:a4:fe:cd:cf:93:2b:1a:a6:57:73:53:3b:a5:44: 38:e3:b9:54:45:e1:6e:5b:54:c1:8c:41:4c:29:29:23:8f:d6: 28:e8:37:2a:8e:fd:4e:cb:ff:b1:f2:9a:7a:de:0f:36:f3:a8: e1:1e:be:6a:7e:b6:93:14:a2:44:ea:4e:24:38:1e:e0:82:92: 1b:d6:39:12:ea:e6:95:d2:10:82:94:54:16:70:46:37:e3:0d: ae:db:c9:75:21:4f:b1:f4:89:4e:5a:8d:28:31:93:90:9d:bd: cc:b2:80:25:f7:00:92:04:55:7e:a7:d9:76:9b:12:56:93:8d: 90:50:07:39:20:6a:c7:e4:7b:41:bf:83:01:c2:82:eb:c8:e0: 1a:f3:65:37:31:c3:0b:b5:87:d3:a4:7e:c2:83:dc:8e:b2:0c: 34:98:4a:2b:a3:07:54:d9:3e:74:bf:7c:21:2d:f8:20:ca:ec: be:2d:6f:2d:7c:30:44:b0:ba:f0:12:28:53:bf:96:55:a2:20: 9a:b2:5e:c3 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEjiAlzOey5AK6s/3UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWMxOWEyNDYtZDlmYS00ODFhLWE0ZDctMDEwYWY4YzEz MmIzMB4XDTI1MDIxNDE5MDQyMFoXDTI1MDUxNTE4MDQyMFowLzEtMCsGA1UEAxMk NGZiNDBmNmItMjA3Mi00MmNiLWFhZDUtOTU3YmY5NTcyNDk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt71b2rDtqnAQQMuWAGH09Ex70AvuRbnvGiRk kcRCwD9F9LLFVHUkPU1iittVzoEribErUuZ1Cc90RX4fATl/8QyqChdV1lLPym+4 rmf+ftb3hg4eA1qCtxf+HpUPzDermGsL8HZsx9ELeYptJGKaaifNXu8s52VzbMAV 6OsrbvuQtaD8DyAlswNqqFQcVib6Wtd7CQ0TImvMXFZYixSnO2j7BKMLJEzD6LH3 859nDE/Wq8Sh8xdLiqkNPTkT3rfm+zSc+JtHR9uAcjBW+9w/Y4JurXUg89ZfeH6M 1f7dnaA8/bOesL8r/7tA3qR5KEa1p2hnBAFMQuIQNwHm/A5mLwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFCPCSTxSNwRm4IU0zvd9mpU6iJVLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81YzE5 YTI0Ni1kOWZhLTQ4MWEtYTRkNy0wMTBhZjhjMTMyYjMvOGE5MjBlZmQtYWI1ZC0z NWNiLTllYmEtMWEyNmU4OWQ3MDE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNWMxOWEyNDYtZDlmYS00ODFhLWE0 ZDctMDEwYWY4YzEzMmIzLzVjMTlhMjQ2LWQ5ZmEtNDgxYS1hNGQ3LTAxMGFmOGMx MzJiMy5jcmwwHwYDVR0jBBgwFoAUGBmr0BGL/MK+/l1zc0BDuuWTrnAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81YzE5YTI0Ni1kOWZhLTQ4MWEtYTRkNy0wMTBh ZjhjMTMyYjMuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQArG8wAwQA x/0eMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBACQOWOya9fmHy9jYBbnhxdtbNFXHwcUERCUPyW9cY+6FrTu8 F8PYKRHCDStjqOprJ9MTDToKBuCbjdik/s3PkysapldzUzulRDjjuVRF4W5bVMGM QUwpKSOP1ijoNyqO/U7L/7HymnreDzbzqOEevmp+tpMUokTqTiQ4HuCCkhvWORLq 5pXSEIKUVBZwRjfjDa7byXUhT7H0iU5ajSgxk5CdvcyygCX3AJIEVX6n2XabElaT jZBQBzkgasfke0G/gwHCguvI4BrzZTcxwwu1h9OkfsKD3I6yDDSYSiujB1TZPnS/ fCEt+CDK7L4tby18MESwuvASKFO/llWiIJqyXsM= -----END CERTIFICATE-----Generated at Sat Apr 5 03:45:12 2025 by rpki-client