$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/00fe9e44-b441-4de4-9fd1-9f3b6f975c86/159530e8-5548-336c-9151-21eddab60990.roa File: 159530e8-5548-336c-9151-21eddab60990.roa (raw, json) Hash identifier: 2SMPSuTs0mSStRXEAWS4j4DqGiLY8xKoU/U9d6oGwaw= Subject key identifier: 60:90:3F:1C:69:33:22:3A:9D:36:8B:CA:30:56:DF:97:37:9A:77:45 Certificate issuer: /CN=00fe9e44-b441-4de4-9fd1-9f3b6f975c86 Certificate serial: 010D0C9F432858492FA540293D31F93AA3B6FB00 Authority key identifier: AD:4B:7B:7F:A6:40:BF:D5:F8:32:FD:6E:21:C0:81:42:34:3D:72:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/00fe9e44-b441-4de4-9fd1-9f3b6f975c86.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/00fe9e44-b441-4de4-9fd1-9f3b6f975c86/159530e8-5548-336c-9151-21eddab60990.roa Signing time: Fri 14 Mar 2025 14:29:47 +0000 ROA not before: Fri 14 Mar 2025 14:29:47 +0000 ROA not after: Thu 12 Jun 2025 14:29:47 +0000 asID: 21512 IP address blocks: 199.248.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/00fe9e44-b441-4de4-9fd1-9f3b6f975c86/00fe9e44-b441-4de4-9fd1-9f3b6f975c86.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/00fe9e44-b441-4de4-9fd1-9f3b6f975c86/00fe9e44-b441-4de4-9fd1-9f3b6f975c86.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/00fe9e44-b441-4de4-9fd1-9f3b6f975c86.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2f:a5:40:29:3d:31:f9:3a:a3:b6:fb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00fe9e44-b441-4de4-9fd1-9f3b6f975c86 Validity Not Before: Mar 14 14:29:47 2025 GMT Not After : Jun 12 14:29:47 2025 GMT Subject: CN=01f72513-e60b-4c85-9975-35f1bb7a4b5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:92:50:65:98:78:54:3c:69:1e:d9:06:6e:7a: d0:53:94:c7:44:31:12:d9:0d:b1:08:80:90:c8:13: 11:1c:0c:02:4e:ec:37:5c:93:03:cb:25:8e:6b:db: b1:c7:b5:55:7e:88:16:78:14:fe:11:f9:dd:eb:03: a6:c5:76:68:4e:7a:d4:70:1c:27:68:5e:fc:b1:1c: e5:f9:54:b4:e5:d1:62:31:ec:b3:cd:4a:e3:ad:6d: d0:e0:e7:aa:91:7e:32:62:ed:24:83:b3:91:9a:93: e6:85:45:59:55:1b:f6:8c:3c:98:a7:ff:9e:cb:44: 1a:6d:ea:3c:80:c6:ef:ca:79:6e:23:df:91:a8:0e: d5:ef:eb:4a:e1:7e:c2:b8:d3:97:2d:57:d3:80:39: 4c:d8:da:62:d4:56:e5:cf:a5:1d:80:fc:66:eb:67: a5:63:34:8d:40:03:19:2c:f3:12:a5:ce:09:02:c3: c5:58:48:f6:9b:2f:2c:bb:46:5f:eb:5a:21:6a:3f: e1:f2:e0:cb:31:a9:4b:af:07:1d:56:52:59:20:4b: d7:0b:37:1f:6d:9d:01:7c:75:5c:a0:dc:a7:62:e7: a7:b0:15:12:be:f8:5a:85:ca:e5:56:9f:97:5b:06: 33:f8:73:f5:35:d4:95:a7:1e:86:dc:ab:5f:19:7c: 83:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:90:3F:1C:69:33:22:3A:9D:36:8B:CA:30:56:DF:97:37:9A:77:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/00fe9e44-b441-4de4-9fd1-9f3b6f975c86/159530e8-5548-336c-9151-21eddab60990.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/00fe9e44-b441-4de4-9fd1-9f3b6f975c86/00fe9e44-b441-4de4-9fd1-9f3b6f975c86.crl X509v3 Authority Key Identifier: keyid:AD:4B:7B:7F:A6:40:BF:D5:F8:32:FD:6E:21:C0:81:42:34:3D:72:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/00fe9e44-b441-4de4-9fd1-9f3b6f975c86.cer sbgp-ipAddrBlock: critical IPv4: 199.248.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:2c:d6:f4:71:53:f0:5c:6a:6e:27:66:55:4c:2f:53:8d:2a: 14:76:45:cb:22:c8:b3:50:25:f4:ca:6e:33:85:5b:b0:a3:61: 78:1e:c8:d5:89:69:dd:7f:7c:18:c8:49:6f:b6:d6:19:e1:a3: cd:33:96:48:23:a5:24:aa:a0:13:60:d9:47:57:e1:b8:dd:0a: 19:84:82:7c:c5:f5:49:12:bf:c4:71:20:d8:5e:c1:4c:c1:ab: 4e:b3:73:21:ac:c9:5a:07:85:5c:20:e5:07:8e:74:d2:51:1c: 31:8e:d6:62:69:14:5f:ac:a5:b3:13:e6:50:f5:c8:0a:42:1e: 44:12:11:1a:5b:75:a6:d2:2c:15:b9:81:54:b7:4f:65:63:2a: 77:39:de:95:b3:e0:50:96:a2:78:68:f3:52:29:8e:a1:f9:05: 61:0f:27:00:10:0e:6f:54:76:39:95:e7:32:16:96:ec:80:1b: d0:4e:e9:f5:eb:37:e2:54:98:21:42:9c:8a:4c:26:32:9f:a0: 33:fa:f3:01:1b:96:c7:24:30:6d:b0:75:2f:94:95:9c:6e:bd: 2b:e5:9b:ac:9f:60:65:82:e7:75:9e:65:bd:34:a3:d0:b5:73: a6:bf:b8:c5:19:70:17:87:36:eb:c3:8e:f2:c4:92:2f:ff:b8: 5e:80:e8:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkvpUApPTH5OqO2+wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDBmZTllNDQtYjQ0MS00ZGU0LTlmZDEtOWYzYjZmOTc1 Yzg2MB4XDTI1MDMxNDE0Mjk0N1oXDTI1MDYxMjE0Mjk0N1owLzEtMCsGA1UEAxMk MDFmNzI1MTMtZTYwYi00Yzg1LTk5NzUtMzVmMWJiN2E0YjVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZJQZZh4VDxpHtkGbnrQU5THRDES2Q2xCICQ yBMRHAwCTuw3XJMDyyWOa9uxx7VVfogWeBT+Efnd6wOmxXZoTnrUcBwnaF78sRzl +VS05dFiMeyzzUrjrW3Q4OeqkX4yYu0kg7ORmpPmhUVZVRv2jDyYp/+ey0Qabeo8 gMbvynluI9+RqA7V7+tK4X7CuNOXLVfTgDlM2Npi1Fblz6UdgPxm62elYzSNQAMZ LPMSpc4JAsPFWEj2my8su0Zf61ohaj/h8uDLMalLrwcdVlJZIEvXCzcfbZ0BfHVc oNynYuensBUSvvhahcrlVp+XWwYz+HP1NdSVpx6G3KtfGXyDwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGCQPxxpMyI6nTaLyjBW35c3mndFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8wMGZl OWU0NC1iNDQxLTRkZTQtOWZkMS05ZjNiNmY5NzVjODYvMTU5NTMwZTgtNTU0OC0z MzZjLTkxNTEtMjFlZGRhYjYwOTkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMDBmZTllNDQtYjQ0MS00ZGU0LTlm ZDEtOWYzYjZmOTc1Yzg2LzAwZmU5ZTQ0LWI0NDEtNGRlNC05ZmQxLTlmM2I2Zjk3 NWM4Ni5jcmwwHwYDVR0jBBgwFoAUrUt7f6ZAv9X4Mv1uIcCBQjQ9chAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8wMGZlOWU0NC1iNDQxLTRkZTQtOWZkMS05ZjNi NmY5NzVjODYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/j1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABcs1vRxU/Bcam4nZlVML1ONKhR2RcsiyLNQJfTKbjOFW7CjYXgeyNWJ ad1/fBjISW+21hnho80zlkgjpSSqoBNg2UdX4bjdChmEgnzF9UkSv8RxINhewUzB q06zcyGsyVoHhVwg5QeOdNJRHDGO1mJpFF+spbMT5lD1yApCHkQSERpbdabSLBW5 gVS3T2VjKnc53pWz4FCWonho81IpjqH5BWEPJwAQDm9UdjmV5zIWluyAG9BO6fXr N+JUmCFCnIpMJjKfoDP68wEblsckMG2wdS+UlZxuvSvlm6yfYGWC53WeZb00o9C1 c6a/uMUZcBeHNuvDjvLEki//uF6A6MQ= -----END CERTIFICATE-----Generated at Sat Apr 12 00:25:51 2025 by rpki-client