$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/1362d3e1-4d5b-3d2d-9dd0-ce4610a57914.roa File: 1362d3e1-4d5b-3d2d-9dd0-ce4610a57914.roa (raw, json) Hash identifier: Jcb9hSqPwpHBokjJ5g7Rw1KJbAhCBZtfdGf9tZCfQ4Q= Subject key identifier: 86:19:7C:2F:95:C2:AF:20:92:A1:90:8B:6C:BC:79:F1:34:0B:31:D6 Certificate issuer: /CN=f88cbb0b-9e19-4ef0-9c1c-062df0729d5a Certificate serial: 010D0C9F43285848D3765C9A939FABFC0FEA0F00 Authority key identifier: BA:6B:6F:12:B8:DF:EC:57:4C:A6:E0:EB:06:1D:9C:3D:95:AA:CC:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/1362d3e1-4d5b-3d2d-9dd0-ce4610a57914.roa Signing time: Sun 09 Feb 2025 14:00:51 +0000 ROA not before: Sun 09 Feb 2025 14:00:51 +0000 ROA not after: Sat 10 May 2025 13:00:51 +0000 asID: 399291 IP address blocks: 200.5.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d3:76:5c:9a:93:9f:ab:fc:0f:ea:0f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f88cbb0b-9e19-4ef0-9c1c-062df0729d5a Validity Not Before: Feb 9 14:00:51 2025 GMT Not After : May 10 13:00:51 2025 GMT Subject: CN=229507f8-68e3-485e-9baa-64dbfb18ba38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:6c:6c:5b:11:7a:c9:2a:f0:8a:e1:d4:03:0f: 2b:22:17:8c:5d:01:0e:9b:b0:0c:71:9c:c1:e0:39: 0e:35:33:b1:e0:14:69:d7:13:8c:80:7e:d1:36:41: cb:34:e7:15:d6:9e:82:94:b0:99:cb:c0:eb:85:db: 32:0e:f8:bf:6f:82:fa:ca:49:1c:35:8f:76:68:86: af:55:d6:23:e9:69:87:d9:b8:ca:73:c7:7c:d3:08: 3d:0d:a4:04:bd:b4:7c:76:08:1c:79:c4:16:33:76: 9e:a7:a1:26:d2:dd:f4:5d:02:40:0d:25:09:4d:07: de:b7:70:47:76:63:ac:e0:f9:a3:02:6a:17:c2:1c: 06:c1:ec:18:0d:eb:ac:c1:47:89:87:2c:4c:81:54: c9:42:d7:c9:3b:62:06:bc:97:02:92:7b:5d:d8:b1: 96:87:f8:97:62:1f:c6:b1:f1:90:50:03:ba:4c:6d: df:65:31:ce:fb:9d:cf:7c:e1:77:24:13:45:37:41: 36:fa:47:bd:cf:36:8c:9f:ee:cb:87:65:f7:6c:7e: e6:91:00:1f:8e:e6:f1:5f:ed:a5:8a:f6:d1:4a:2e: a6:7d:b6:a2:29:43:26:65:0d:17:de:9e:3b:80:b1: 7c:dc:cf:3a:74:db:73:09:e8:34:c9:71:86:6a:32: 6e:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:19:7C:2F:95:C2:AF:20:92:A1:90:8B:6C:BC:79:F1:34:0B:31:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/1362d3e1-4d5b-3d2d-9dd0-ce4610a57914.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.crl X509v3 Authority Key Identifier: keyid:BA:6B:6F:12:B8:DF:EC:57:4C:A6:E0:EB:06:1D:9C:3D:95:AA:CC:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer sbgp-ipAddrBlock: critical IPv4: 200.5.31.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:4b:6b:54:e7:89:9d:55:96:0e:91:77:5e:52:67:e2:ab:72: 79:58:95:f5:bb:02:6a:a3:be:ae:1c:2a:6c:b2:7f:9f:54:93: 54:56:11:64:66:cb:f7:bb:e0:41:5f:be:00:8a:23:f8:94:7d: 72:c0:0a:9b:d5:62:2e:66:1f:30:91:82:c4:b4:fe:e6:3b:04: 13:2d:ae:85:26:60:de:20:f4:ad:8b:fa:a3:e4:03:1e:9d:f9: 6d:9f:a0:a2:41:31:db:89:54:0d:59:92:ab:74:cc:2c:94:0c: ba:e1:50:99:11:3b:5f:b3:0b:06:ca:b0:1e:a1:8a:2a:54:9c: 53:6d:4e:0e:0b:d7:4f:4c:44:a9:74:69:68:d8:ca:12:bc:27: ee:36:72:30:a8:94:fd:ac:08:59:75:1e:18:a2:53:b6:5e:42: e3:7d:c4:71:b6:29:0e:e2:a1:e5:fa:3e:05:21:87:14:06:03: 1b:a7:da:b7:de:8d:6c:51:e0:02:02:0f:20:aa:80:d2:ed:8c: e0:bb:41:e5:b1:a3:45:f0:5a:5e:05:bc:85:e2:b9:38:8b:92: bf:6d:d1:32:60:0a:fb:b0:13:7b:e1:94:50:9c:8f:bc:d7:0a: e1:50:22:17:8b:82:41:33:69:9d:72:ad:f0:98:3b:dc:cc:53: 49:c7:bc:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjTdlyak5+r/A/qDwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjg4Y2JiMGItOWUxOS00ZWYwLTljMWMtMDYyZGYwNzI5 ZDVhMB4XDTI1MDIwOTE0MDA1MVoXDTI1MDUxMDEzMDA1MVowLzEtMCsGA1UEAxMk MjI5NTA3ZjgtNjhlMy00ODVlLTliYWEtNjRkYmZiMThiYTM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2GxsWxF6ySrwiuHUAw8rIheMXQEOm7AMcZzB 4DkONTOx4BRp1xOMgH7RNkHLNOcV1p6ClLCZy8DrhdsyDvi/b4L6ykkcNY92aIav VdYj6WmH2bjKc8d80wg9DaQEvbR8dggcecQWM3aep6Em0t30XQJADSUJTQfet3BH dmOs4PmjAmoXwhwGwewYDeuswUeJhyxMgVTJQtfJO2IGvJcCkntd2LGWh/iXYh/G sfGQUAO6TG3fZTHO+53PfOF3JBNFN0E2+ke9zzaMn+7Lh2X3bH7mkQAfjubxX+2l ivbRSi6mfbaiKUMmZQ0X3p47gLF83M86dNtzCeg0yXGGajJuxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIYZfC+Vwq8gkqGQi2y8efE0CzHWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mODhj YmIwYi05ZTE5LTRlZjAtOWMxYy0wNjJkZjA3MjlkNWEvMTM2MmQzZTEtNGQ1Yi0z ZDJkLTlkZDAtY2U0NjEwYTU3OTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZjg4Y2JiMGItOWUxOS00ZWYwLTlj MWMtMDYyZGYwNzI5ZDVhL2Y4OGNiYjBiLTllMTktNGVmMC05YzFjLTA2MmRmMDcy OWQ1YS5jcmwwHwYDVR0jBBgwFoAUumtvErjf7FdMpuDrBh2cPZWqzL4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mODhjYmIwYi05ZTE5LTRlZjAtOWMxYy0wNjJk ZjA3MjlkNWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyAUfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA5La1TniZ1Vlg6Rd15SZ+KrcnlYlfW7Amqjvq4cKmyyf59Uk1RWEWRm y/e74EFfvgCKI/iUfXLACpvVYi5mHzCRgsS0/uY7BBMtroUmYN4g9K2L+qPkAx6d +W2foKJBMduJVA1Zkqt0zCyUDLrhUJkRO1+zCwbKsB6hiipUnFNtTg4L109MRKl0 aWjYyhK8J+42cjColP2sCFl1HhiiU7ZeQuN9xHG2KQ7ioeX6PgUhhxQGAxun2rfe jWxR4AICDyCqgNLtjOC7QeWxo0XwWl4FvIXiuTiLkr9t0TJgCvuwE3vhlFCcj7zX CuFQIheLgkEzaZ1yrfCYO9zMU0nHvN0= -----END CERTIFICATE-----Generated at Sat Apr 12 13:40:18 2025 by rpki-client