$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/198c7e87-9641-4652-a9eb-2296a876b143/d9d6f00c-eafc-3eb9-bd54-47962f1c682c.roa File: d9d6f00c-eafc-3eb9-bd54-47962f1c682c.roa (raw, json) Hash identifier: xekPv+Fd3BnTe+IhiPieQMSCCYtEETPNv+pj+w78Oj4= Subject key identifier: 4C:B1:4E:72:19:41:81:37:77:A7:FB:77:F2:D0:42:3A:46:F4:31:98 Certificate issuer: /CN=198c7e87-9641-4652-a9eb-2296a876b143 Certificate serial: 010D0C9F4328584972A29A59CCC699B112ABE220 Authority key identifier: 9E:66:B6:41:57:ED:E5:DF:56:DA:ED:F4:52:C7:A3:B1:EC:53:B2:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/198c7e87-9641-4652-a9eb-2296a876b143.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/198c7e87-9641-4652-a9eb-2296a876b143/d9d6f00c-eafc-3eb9-bd54-47962f1c682c.roa Signing time: Mon 07 Apr 2025 14:23:36 +0000 ROA not before: Mon 07 Apr 2025 14:23:36 +0000 ROA not after: Sun 06 Jul 2025 14:23:36 +0000 asID: 8075 IP address blocks: 199.34.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/198c7e87-9641-4652-a9eb-2296a876b143/198c7e87-9641-4652-a9eb-2296a876b143.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/198c7e87-9641-4652-a9eb-2296a876b143/198c7e87-9641-4652-a9eb-2296a876b143.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/198c7e87-9641-4652-a9eb-2296a876b143.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:72:a2:9a:59:cc:c6:99:b1:12:ab:e2:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=198c7e87-9641-4652-a9eb-2296a876b143 Validity Not Before: Apr 7 14:23:36 2025 GMT Not After : Jul 6 14:23:36 2025 GMT Subject: CN=961fa70d-b164-499a-aebc-1d161c4f6eeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:9f:1e:93:b0:60:55:e4:ae:5f:53:7c:fe:49: 18:ea:46:e9:04:b0:4d:54:0b:b2:64:5d:dd:16:88: 31:ad:44:0e:e8:26:8a:83:fc:84:3a:34:2d:0b:5b: 56:b3:80:24:f4:44:28:f1:de:87:ae:4f:1a:8d:f6: 7c:a0:5c:c4:97:82:7d:e7:f2:a2:a2:f7:82:10:b6: 0b:cb:b3:31:e6:e7:86:53:ad:80:37:02:e9:a3:32: e5:3a:ab:be:2a:19:45:81:3f:52:ab:81:4c:03:43: 0f:5c:53:69:0c:4f:1d:96:51:7e:b4:27:96:57:31: 5e:a6:11:a7:c4:76:ba:f6:d9:85:c2:cb:60:67:c0: 0b:57:7d:6d:35:df:13:20:72:a7:b2:89:5c:af:62: 48:14:ed:98:de:d1:c1:d6:ed:d5:6c:0f:54:97:bd: 3d:82:81:c8:0a:45:57:2f:da:8f:8b:26:7c:a0:6c: 99:22:f3:c0:66:86:12:f5:77:c7:94:d1:78:40:dd: 11:6a:00:0e:54:60:b6:4a:8b:90:7c:b0:19:2a:c7: 39:3f:d5:50:34:91:72:1f:bc:86:f5:64:7a:50:8d: a9:42:ef:ec:fe:79:26:5d:39:3e:2f:51:52:11:5c: 67:1c:52:84:cf:40:ef:c2:74:ad:7a:b8:6b:c6:ac: 1a:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:B1:4E:72:19:41:81:37:77:A7:FB:77:F2:D0:42:3A:46:F4:31:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/198c7e87-9641-4652-a9eb-2296a876b143/d9d6f00c-eafc-3eb9-bd54-47962f1c682c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/198c7e87-9641-4652-a9eb-2296a876b143/198c7e87-9641-4652-a9eb-2296a876b143.crl X509v3 Authority Key Identifier: keyid:9E:66:B6:41:57:ED:E5:DF:56:DA:ED:F4:52:C7:A3:B1:EC:53:B2:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/198c7e87-9641-4652-a9eb-2296a876b143.cer sbgp-ipAddrBlock: critical IPv4: 199.34.122.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:40:5d:9f:4c:3f:86:a0:c1:1f:dc:c1:a4:85:62:e7:cd:8b: 27:0f:8f:cd:c7:03:55:cf:79:f6:b5:48:75:dc:56:92:a3:66: 8d:2d:52:cc:5f:0c:30:2d:e3:91:1f:e0:16:d1:65:68:88:cc: ac:4e:98:f5:a2:c8:aa:5f:3c:5c:c1:33:8b:77:40:64:8d:4d: aa:3e:59:0d:bc:2e:b4:02:1b:4f:88:c4:cf:10:72:1c:cb:ed: 85:b0:0e:6d:c0:fb:98:44:83:8a:3b:99:3f:82:32:d5:da:1a: a1:b0:cf:71:7a:ae:26:a3:89:70:60:c5:82:b3:be:83:25:5e: 11:a3:8d:ba:eb:f4:53:0f:00:30:47:dd:77:81:eb:fb:bb:3d: 25:14:e9:ad:25:96:f2:47:4e:6e:ee:64:50:39:e6:42:62:ae: 06:e6:6e:77:80:57:ab:fe:da:5a:a7:26:df:0e:3d:6b:88:42: 80:04:15:2d:6b:56:1c:df:89:7c:e7:db:d0:14:0c:d6:6b:58: 87:85:fc:e2:7b:8c:31:68:8a:0b:88:39:b6:0a:24:26:9b:52: 0b:3d:f4:aa:47:01:1d:df:d1:03:04:b7:0e:b1:85:92:05:5f: cd:07:c5:ca:aa:5b:07:01:77:46:d6:5d:3c:de:99:4e:a6:48: 00:3e:5e:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElyoppZzMaZsRKr4iAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTk4YzdlODctOTY0MS00NjUyLWE5ZWItMjI5NmE4NzZi MTQzMB4XDTI1MDQwNzE0MjMzNloXDTI1MDcwNjE0MjMzNlowLzEtMCsGA1UEAxMk OTYxZmE3MGQtYjE2NC00OTlhLWFlYmMtMWQxNjFjNGY2ZWViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZ8ek7BgVeSuX1N8/kkY6kbpBLBNVAuyZF3d FogxrUQO6CaKg/yEOjQtC1tWs4Ak9EQo8d6Hrk8ajfZ8oFzEl4J95/KioveCELYL y7Mx5ueGU62ANwLpozLlOqu+KhlFgT9Sq4FMA0MPXFNpDE8dllF+tCeWVzFephGn xHa69tmFwstgZ8ALV31tNd8TIHKnsolcr2JIFO2Y3tHB1u3VbA9Ul709goHICkVX L9qPiyZ8oGyZIvPAZoYS9XfHlNF4QN0RagAOVGC2SouQfLAZKsc5P9VQNJFyH7yG 9WR6UI2pQu/s/nkmXTk+L1FSEVxnHFKEz0DvwnSterhrxqwatQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEyxTnIZQYE3d6f7d/LQQjpG9DGYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8xOThj N2U4Ny05NjQxLTQ2NTItYTllYi0yMjk2YTg3NmIxNDMvZDlkNmYwMGMtZWFmYy0z ZWI5LWJkNTQtNDc5NjJmMWM2ODJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMTk4YzdlODctOTY0MS00NjUyLWE5 ZWItMjI5NmE4NzZiMTQzLzE5OGM3ZTg3LTk2NDEtNDY1Mi1hOWViLTIyOTZhODc2 YjE0My5jcmwwHwYDVR0jBBgwFoAUnma2QVft5d9W2u30UsejsexTsm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8xOThjN2U4Ny05NjQxLTQ2NTItYTllYi0yMjk2 YTg3NmIxNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxyJ6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFBAXZ9MP4agwR/cwaSFYufNiycPj83HA1XPefa1SHXcVpKjZo0tUsxf DDAt45Ef4BbRZWiIzKxOmPWiyKpfPFzBM4t3QGSNTao+WQ28LrQCG0+IxM8QchzL 7YWwDm3A+5hEg4o7mT+CMtXaGqGwz3F6riajiXBgxYKzvoMlXhGjjbrr9FMPADBH 3XeB6/u7PSUU6a0llvJHTm7uZFA55kJirgbmbneAV6v+2lqnJt8OPWuIQoAEFS1r VhzfiXzn29AUDNZrWIeF/OJ7jDFoiguIObYKJCabUgs99KpHAR3f0QMEtw6xhZIF X80HxcqqWwcBd0bWXTzemU6mSAA+XoM= -----END CERTIFICATE-----Generated at Mon Apr 21 06:46:32 2025 by rpki-client