$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a/ab1397b5-747c-31d8-926d-e9533d7dc81a.roa File: ab1397b5-747c-31d8-926d-e9533d7dc81a.roa (raw, json) Hash identifier: x0aESLcWB1RtUrsUv6ciuzyCrqSRV05Ri3y2byIzJD4= Subject key identifier: 90:CB:79:5B:5A:D7:51:74:FC:43:7E:39:04:5B:2D:03:5D:E9:EF:A4 Certificate issuer: /CN=f0830a41-5b6e-4cbd-a54b-a3350aa02e0a Certificate serial: 010D0C9F4328584960B2543829299AB7BB44A4C0 Authority key identifier: BD:52:9A:21:FD:4F:91:3E:D4:28:17:8E:BC:5B:CC:CF:35:7B:5A:E1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a/ab1397b5-747c-31d8-926d-e9533d7dc81a.roa Signing time: Tue 01 Apr 2025 04:10:44 +0000 ROA not before: Tue 01 Apr 2025 04:10:44 +0000 ROA not after: Mon 30 Jun 2025 04:10:44 +0000 asID: 8796 IP address blocks: 199.30.88.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:60:b2:54:38:29:29:9a:b7:bb:44:a4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0830a41-5b6e-4cbd-a54b-a3350aa02e0a Validity Not Before: Apr 1 04:10:44 2025 GMT Not After : Jun 30 04:10:44 2025 GMT Subject: CN=a026b49c-b8d2-41ea-8574-1a1121803998 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:67:ab:93:f9:52:a7:6c:d0:0a:c2:64:fc:11: 57:97:cb:f1:21:83:75:59:02:4f:1f:91:f0:20:39: d3:c1:73:37:df:28:67:53:9e:fc:91:df:c8:52:59: 79:16:35:e0:9c:06:93:0a:92:33:e3:96:e3:8a:37: aa:fd:a5:61:f0:81:1e:c3:8d:1a:84:69:02:3e:b8: 6f:a8:10:57:f8:cb:9f:d5:a5:59:fb:25:15:1c:68: 16:e9:78:30:77:c2:14:84:bf:2f:8d:f0:53:7e:0d: 42:24:27:74:90:52:36:53:39:e3:6b:f1:a4:7f:b4: cc:e4:a6:76:b0:4a:a7:41:5b:14:96:7e:08:3d:67: b6:20:48:da:9e:0f:ae:d3:7e:e6:2d:45:78:ba:d7: 3a:9c:2f:95:1c:3e:b5:b0:5a:91:b6:eb:94:49:37: a1:e0:4a:25:53:e1:4a:f5:64:1b:47:67:88:97:99: bd:55:d6:f1:19:5e:83:81:be:8c:01:46:b5:eb:e0: d7:12:48:b9:ee:9b:b8:a1:2b:c2:8e:a1:5b:23:bf: ee:ed:00:23:88:f6:25:a5:90:0a:43:39:88:e0:81: b7:79:44:da:e3:32:29:fe:9a:c5:26:b6:40:41:67: 3d:88:25:91:dc:f6:9c:1d:80:03:a6:08:04:08:17: d2:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:CB:79:5B:5A:D7:51:74:FC:43:7E:39:04:5B:2D:03:5D:E9:EF:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a/ab1397b5-747c-31d8-926d-e9533d7dc81a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a.crl X509v3 Authority Key Identifier: keyid:BD:52:9A:21:FD:4F:91:3E:D4:28:17:8E:BC:5B:CC:CF:35:7B:5A:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a.cer sbgp-ipAddrBlock: critical IPv4: 199.30.88.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:1e:06:53:85:53:6e:58:3e:76:50:c7:e9:42:d1:17:70:de: c5:a2:c1:b3:79:dc:6c:27:09:e7:bd:38:c8:c3:be:b4:64:38: ee:19:37:10:0d:7c:d7:cd:7b:ce:44:f6:d8:f6:0e:c6:14:36: fc:4f:49:14:44:4f:07:0c:36:e2:00:32:a3:9d:d5:57:94:ad: 7e:60:62:b8:f1:f8:fd:96:ba:64:de:c8:e2:cd:7a:de:aa:63: dd:f0:75:87:e6:de:7b:ea:fb:5e:49:a0:43:7d:0f:91:9d:c3: b5:35:07:7c:71:d7:dd:36:d6:01:da:06:b4:72:0b:7c:2f:09: 67:94:2e:80:50:8b:6d:e5:3a:1d:fa:11:f7:8d:35:05:a5:59: f8:21:8b:62:7d:6e:80:a9:d9:f3:ce:21:9a:4b:2d:13:ef:be: 2d:35:58:d8:f4:28:ac:8e:c4:4c:fc:bd:70:ff:dd:61:f6:96: 44:a8:eb:bc:46:2c:dc:64:89:6d:3c:6d:b7:24:27:3f:33:f2: fd:ae:76:ac:8d:83:41:18:4b:51:0e:75:64:1b:77:ae:cf:1b: 4e:79:8b:4b:88:51:0b:04:4f:4b:54:d7:a8:9d:68:92:8a:0c: f3:49:d6:a9:99:01:c5:56:e1:4a:c5:f8:b3:60:e6:18:a3:ae: 44:26:74:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElgslQ4KSmat7tEpMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjA4MzBhNDEtNWI2ZS00Y2JkLWE1NGItYTMzNTBhYTAy ZTBhMB4XDTI1MDQwMTA0MTA0NFoXDTI1MDYzMDA0MTA0NFowLzEtMCsGA1UEAxMk YTAyNmI0OWMtYjhkMi00MWVhLTg1NzQtMWExMTIxODAzOTk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg2erk/lSp2zQCsJk/BFXl8vxIYN1WQJPH5Hw IDnTwXM33yhnU578kd/IUll5FjXgnAaTCpIz45bjijeq/aVh8IEew40ahGkCPrhv qBBX+Muf1aVZ+yUVHGgW6Xgwd8IUhL8vjfBTfg1CJCd0kFI2Uznja/Gkf7TM5KZ2 sEqnQVsUln4IPWe2IEjang+u037mLUV4utc6nC+VHD61sFqRtuuUSTeh4EolU+FK 9WQbR2eIl5m9VdbxGV6Dgb6MAUa16+DXEki57pu4oSvCjqFbI7/u7QAjiPYlpZAK QzmI4IG3eUTa4zIp/prFJrZAQWc9iCWR3PacHYADpggECBfSYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJDLeVta11F0/EN+OQRbLQNd6e+kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mMDgz MGE0MS01YjZlLTRjYmQtYTU0Yi1hMzM1MGFhMDJlMGEvYWIxMzk3YjUtNzQ3Yy0z MWQ4LTkyNmQtZTk1MzNkN2RjODFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZjA4MzBhNDEtNWI2ZS00Y2JkLWE1 NGItYTMzNTBhYTAyZTBhL2YwODMwYTQxLTViNmUtNGNiZC1hNTRiLWEzMzUwYWEw MmUwYS5jcmwwHwYDVR0jBBgwFoAUvVKaIf1PkT7UKBeOvFvMzzV7WuEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mMDgzMGE0MS01YjZlLTRjYmQtYTU0Yi1hMzM1 MGFhMDJlMGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxx5YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAkeBlOFU25YPnZQx+lC0Rdw3sWiwbN53GwnCee9OMjDvrRkOO4ZNxAN fNfNe85E9tj2DsYUNvxPSRRETwcMNuIAMqOd1VeUrX5gYrjx+P2WumTeyOLNet6q Y93wdYfm3nvq+15JoEN9D5Gdw7U1B3xx19021gHaBrRyC3wvCWeULoBQi23lOh36 EfeNNQWlWfghi2J9boCp2fPOIZpLLRPvvi01WNj0KKyOxEz8vXD/3WH2lkSo67xG LNxkiW08bbckJz8z8v2udqyNg0EYS1EOdWQbd67PG055i0uIUQsET0tU16idaJKK DPNJ1qmZAcVW4UrF+LNg5hijrkQmdPg= -----END CERTIFICATE-----Generated at Sat Apr 5 12:57:52 2025 by rpki-client