$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8eaf014d-0b3e-4494-b07f-b3254fddef6a/1f5d279c-2644-363f-a153-6489368c7e8c.roa File: 1f5d279c-2644-363f-a153-6489368c7e8c.roa (raw, json) Hash identifier: 3+0gdDiGLvsoola5d79otsXbCjt9lKvyQ5I5A+9RG7g= Subject key identifier: 21:3C:E0:17:60:E1:32:D7:88:56:10:7F:5B:50:09:8C:54:0A:E6:FE Certificate issuer: /CN=8eaf014d-0b3e-4494-b07f-b3254fddef6a Certificate serial: 010D0C9F43285849393E94FF786222F6C5AA4460 Authority key identifier: AA:77:EC:D7:ED:F3:CC:EC:71:4B:19:7A:98:89:7F:7E:8F:90:76:E8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8eaf014d-0b3e-4494-b07f-b3254fddef6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8eaf014d-0b3e-4494-b07f-b3254fddef6a/1f5d279c-2644-363f-a153-6489368c7e8c.roa Signing time: Tue 18 Mar 2025 01:00:38 +0000 ROA not before: Tue 18 Mar 2025 01:00:38 +0000 ROA not after: Mon 16 Jun 2025 01:00:38 +0000 asID: 394772 IP address blocks: 199.241.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8eaf014d-0b3e-4494-b07f-b3254fddef6a/8eaf014d-0b3e-4494-b07f-b3254fddef6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8eaf014d-0b3e-4494-b07f-b3254fddef6a/8eaf014d-0b3e-4494-b07f-b3254fddef6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8eaf014d-0b3e-4494-b07f-b3254fddef6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:39:3e:94:ff:78:62:22:f6:c5:aa:44:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8eaf014d-0b3e-4494-b07f-b3254fddef6a Validity Not Before: Mar 18 01:00:38 2025 GMT Not After : Jun 16 01:00:38 2025 GMT Subject: CN=dd2fe69c-f267-4b42-a39b-4d692bcd9e8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:bd:7a:86:71:44:73:75:bb:23:5b:91:12:c1: c0:4b:6a:88:26:4b:28:73:e3:40:e0:05:a0:e3:39: 6a:0f:a4:29:d5:29:90:e1:1e:06:5b:53:4a:dc:fe: df:12:fb:8f:9a:85:18:5a:82:24:a4:6f:55:82:80: 0d:61:f7:83:fe:74:1c:56:bc:cb:70:9b:40:86:fc: a8:a9:0c:2f:37:e7:6f:ee:ec:34:f1:c1:a3:af:c5: a1:39:3e:eb:f9:90:f1:e4:2b:2a:5d:3c:0b:ff:83: 17:a1:aa:4c:94:19:c6:f1:32:78:7e:56:f6:74:c1: 02:c5:4b:a5:f4:bd:96:80:f2:d5:97:b1:c0:b8:3e: 31:09:00:5d:77:cd:6b:01:9f:6e:0d:b0:67:a3:0d: 6c:74:67:4f:62:af:e5:a0:43:3c:cf:6b:d7:ea:48: d2:a5:4f:6d:20:e4:d5:e7:e9:db:d1:72:fe:69:75: fc:4a:11:e5:ef:99:9f:d1:63:0f:8d:61:7d:00:ba: c7:bf:4d:93:8f:33:05:1b:85:27:4f:f9:f2:cd:e5: 56:a7:8c:90:bc:aa:bc:45:d5:7b:36:b0:e8:52:11: d8:68:f8:74:b9:bd:e3:8e:bd:d4:5f:b7:29:d9:ad: 56:68:2c:8d:20:e7:71:29:03:3c:cd:c9:22:f2:8b: c0:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:3C:E0:17:60:E1:32:D7:88:56:10:7F:5B:50:09:8C:54:0A:E6:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8eaf014d-0b3e-4494-b07f-b3254fddef6a/1f5d279c-2644-363f-a153-6489368c7e8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8eaf014d-0b3e-4494-b07f-b3254fddef6a/8eaf014d-0b3e-4494-b07f-b3254fddef6a.crl X509v3 Authority Key Identifier: keyid:AA:77:EC:D7:ED:F3:CC:EC:71:4B:19:7A:98:89:7F:7E:8F:90:76:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8eaf014d-0b3e-4494-b07f-b3254fddef6a.cer sbgp-ipAddrBlock: critical IPv4: 199.241.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:5f:57:be:76:c1:91:81:e8:58:a2:aa:b6:da:cf:0f:ac:a6: 53:91:4e:2d:fe:de:62:39:24:90:bd:76:c0:be:82:1f:fc:23: 4e:a4:af:41:70:4f:63:ad:49:b7:99:6a:b4:72:13:6e:b8:7a: ff:d4:04:ae:ad:73:16:03:33:d4:3a:68:44:c0:09:6d:f2:35: 80:a5:fc:ca:7a:d0:61:99:56:3d:64:f6:a6:37:16:98:40:1f: 01:15:36:40:28:be:78:fe:26:f9:28:e9:2b:de:55:b6:73:2c: c6:3a:0c:4a:cd:c8:3c:85:7a:91:7d:dc:25:fe:78:f5:b7:af: a1:e4:08:62:fb:b4:2b:89:48:7f:bd:72:d5:57:45:27:a2:f7: 66:da:2a:03:cb:65:52:84:02:99:0c:15:da:c1:78:de:25:94: e3:96:44:f7:fc:b5:bd:b5:1b:02:9f:70:f3:81:17:23:d0:a5: 83:46:a7:f2:c3:52:9e:de:38:47:ba:b1:69:7f:60:dc:8c:be: 13:84:ad:4d:93:57:ed:e6:0a:a1:87:2b:40:4d:18:35:63:b6: 4e:5d:68:68:a1:c1:f2:b8:0c:40:ef:79:a5:1a:e4:ef:56:6a: 62:27:12:d9:76:f3:5e:49:d6:c7:04:bb:1f:9a:11:f3:42:a7: 5a:e8:03:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk5PpT/eGIi9sWqRGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGVhZjAxNGQtMGIzZS00NDk0LWIwN2YtYjMyNTRmZGRl ZjZhMB4XDTI1MDMxODAxMDAzOFoXDTI1MDYxNjAxMDAzOFowLzEtMCsGA1UEAxMk ZGQyZmU2OWMtZjI2Ny00YjQyLWEzOWItNGQ2OTJiY2Q5ZThlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAur16hnFEc3W7I1uREsHAS2qIJksoc+NA4AWg 4zlqD6Qp1SmQ4R4GW1NK3P7fEvuPmoUYWoIkpG9VgoANYfeD/nQcVrzLcJtAhvyo qQwvN+dv7uw08cGjr8WhOT7r+ZDx5CsqXTwL/4MXoapMlBnG8TJ4flb2dMECxUul 9L2WgPLVl7HAuD4xCQBdd81rAZ9uDbBnow1sdGdPYq/loEM8z2vX6kjSpU9tIOTV 5+nb0XL+aXX8ShHl75mf0WMPjWF9ALrHv02TjzMFG4UnT/nyzeVWp4yQvKq8RdV7 NrDoUhHYaPh0ub3jjr3UX7cp2a1WaCyNIOdxKQM8zcki8ovAGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCE84Bdg4TLXiFYQf1tQCYxUCub+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84ZWFm MDE0ZC0wYjNlLTQ0OTQtYjA3Zi1iMzI1NGZkZGVmNmEvMWY1ZDI3OWMtMjY0NC0z NjNmLWExNTMtNjQ4OTM2OGM3ZThjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOGVhZjAxNGQtMGIzZS00NDk0LWIw N2YtYjMyNTRmZGRlZjZhLzhlYWYwMTRkLTBiM2UtNDQ5NC1iMDdmLWIzMjU0ZmRk ZWY2YS5jcmwwHwYDVR0jBBgwFoAUqnfs1+3zzOxxSxl6mIl/fo+QdugwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi84ZWFmMDE0ZC0wYjNlLTQ0OTQtYjA3Zi1iMzI1 NGZkZGVmNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/GMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK9fV752wZGB6Fiiqrbazw+splORTi3+3mI5JJC9dsC+gh/8I06kr0Fw T2OtSbeZarRyE264ev/UBK6tcxYDM9Q6aETACW3yNYCl/Mp60GGZVj1k9qY3FphA HwEVNkAovnj+Jvko6SveVbZzLMY6DErNyDyFepF93CX+ePW3r6HkCGL7tCuJSH+9 ctVXRSei92baKgPLZVKEApkMFdrBeN4llOOWRPf8tb21GwKfcPOBFyPQpYNGp/LD Up7eOEe6sWl/YNyMvhOErU2TV+3mCqGHK0BNGDVjtk5daGihwfK4DEDveaUa5O9W amInEtl2815J1scEux+aEfNCp1roA20= -----END CERTIFICATE-----Generated at Sat Apr 12 00:06:30 2025 by rpki-client