$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/161143c9-c030-4270-91a4-41e54bbb2357/337099e7-4ae6-3200-84db-2441bbde1298.roa File: 337099e7-4ae6-3200-84db-2441bbde1298.roa (raw, json) Hash identifier: QPUSqqHV00jVMEbrVnbEMGbULCv3bGZz1V9nIYPgl9g= Subject key identifier: B1:82:53:26:5A:9D:7E:16:C0:3C:9A:8E:04:55:86:F8:4B:A2:55:9E Certificate issuer: /CN=161143c9-c030-4270-91a4-41e54bbb2357 Certificate serial: 010D0C9F43285848EF6154A41FCEEC1AFBD51D00 Authority key identifier: 3F:1F:91:EE:51:47:94:04:0E:68:02:55:C7:6B:C2:2A:74:D9:CE:6C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/161143c9-c030-4270-91a4-41e54bbb2357.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/161143c9-c030-4270-91a4-41e54bbb2357/337099e7-4ae6-3200-84db-2441bbde1298.roa Signing time: Wed 19 Feb 2025 14:00:52 +0000 ROA not before: Wed 19 Feb 2025 14:00:52 +0000 ROA not after: Tue 20 May 2025 13:00:52 +0000 asID: 14630 IP address blocks: 199.230.0.0/21 maxlen: 24 199.230.8.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/161143c9-c030-4270-91a4-41e54bbb2357/161143c9-c030-4270-91a4-41e54bbb2357.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/161143c9-c030-4270-91a4-41e54bbb2357/161143c9-c030-4270-91a4-41e54bbb2357.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/161143c9-c030-4270-91a4-41e54bbb2357.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ef:61:54:a4:1f:ce:ec:1a:fb:d5:1d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=161143c9-c030-4270-91a4-41e54bbb2357 Validity Not Before: Feb 19 14:00:52 2025 GMT Not After : May 20 13:00:52 2025 GMT Subject: CN=badda0b8-8c7a-45e9-b2d8-5a119b08a2ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:de:2a:f9:1f:65:3d:13:e6:bd:b1:0b:d9:df: 7c:bb:5c:c2:55:1c:39:55:fd:8a:4c:a8:85:24:7e: a1:df:81:bc:43:93:c0:8c:c2:eb:52:fe:52:b8:46: 2a:06:2d:cd:01:3d:15:47:e2:cf:4e:c2:15:16:e9: 01:5e:fa:48:bc:af:de:b3:34:a5:bd:a5:5a:fa:51: 8a:e5:fb:b6:9e:a3:38:f9:eb:a9:2a:a3:4f:c8:62: d2:06:2c:6f:f5:a6:cd:23:04:94:6d:cf:d7:c9:7b: a4:53:08:5e:1c:b7:cb:e1:6c:a7:ef:d1:59:32:7a: b5:16:8f:d1:e2:75:df:b9:4a:20:70:2f:83:74:78: 4b:e4:fb:2a:37:5c:9b:6a:09:d7:46:b2:af:f5:50: 46:7e:30:0a:10:c4:81:af:42:6e:69:67:3f:56:14: 4c:4e:4c:e5:ac:6c:8e:6d:d2:a0:99:fb:c6:2b:10: 56:30:32:b3:bf:9b:f9:6b:fe:2b:ba:c1:bf:1a:0a: 91:8d:d8:35:02:3c:63:f7:de:53:e4:8d:44:f2:f0: c7:60:f6:6c:b9:88:67:18:ae:29:d0:32:c5:25:a3: 5f:a4:31:c1:39:5e:27:4d:b6:4c:02:15:e2:8e:ab: f4:ff:a6:93:76:f3:a4:57:85:e7:99:4d:32:fe:31: 87:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:82:53:26:5A:9D:7E:16:C0:3C:9A:8E:04:55:86:F8:4B:A2:55:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/161143c9-c030-4270-91a4-41e54bbb2357/337099e7-4ae6-3200-84db-2441bbde1298.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/161143c9-c030-4270-91a4-41e54bbb2357/161143c9-c030-4270-91a4-41e54bbb2357.crl X509v3 Authority Key Identifier: keyid:3F:1F:91:EE:51:47:94:04:0E:68:02:55:C7:6B:C2:2A:74:D9:CE:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/161143c9-c030-4270-91a4-41e54bbb2357.cer sbgp-ipAddrBlock: critical IPv4: 199.230.0.0-199.230.9.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:10:1a:f6:7e:ce:b9:47:25:58:6f:05:d5:75:e5:e1:ab:39: bb:89:ad:87:f1:39:20:62:8a:c6:92:83:98:fa:9c:27:cf:66: 27:11:07:56:cf:fb:01:ae:27:be:c8:25:29:e8:0b:18:22:ef: d5:4d:18:b4:e9:61:10:e4:f8:1e:a1:5a:25:81:9b:a2:62:2d: 76:ea:fe:dd:4b:cf:2b:3f:26:52:94:3c:0e:be:13:e6:7b:40: 6b:a7:3c:b5:d3:b2:43:3a:d8:72:e5:ac:39:39:a7:73:72:c5: bb:bc:4b:a9:07:62:03:01:52:63:95:94:01:9d:65:33:0a:fe: 11:8a:59:9a:66:8b:ed:85:f5:55:54:d8:b2:95:37:10:24:2e: d4:40:b3:18:21:ea:84:68:9f:09:46:0c:36:74:96:5f:f2:66: 80:4f:8d:b8:0e:71:71:58:51:dd:11:4e:ed:ae:93:25:eb:a2: d9:65:25:a9:08:bc:de:37:6c:95:bd:2b:d2:14:ba:3f:6e:2a: 54:0b:7e:42:7f:6e:1c:c0:9c:4a:44:49:1c:90:81:af:45:da: ba:ee:1b:48:b7:ee:ea:7a:c6:2d:77:a7:c0:48:02:6b:88:04: ea:f5:a4:81:29:b2:1e:1e:94:aa:87:94:29:0e:91:9c:f5:ff: 30:ee:64:8c -----BEGIN CERTIFICATE----- MIIGSjCCBTKgAwIBAgIUAQ0Mn0MoWEjvYVSkH87sGvvVHQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTYxMTQzYzktYzAzMC00MjcwLTkxYTQtNDFlNTRiYmIy MzU3MB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk YmFkZGEwYjgtOGM3YS00NWU5LWIyZDgtNWExMTliMDhhMmNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp94q+R9lPRPmvbEL2d98u1zCVRw5Vf2KTKiF JH6h34G8Q5PAjMLrUv5SuEYqBi3NAT0VR+LPTsIVFukBXvpIvK/eszSlvaVa+lGK 5fu2nqM4+eupKqNPyGLSBixv9abNIwSUbc/XyXukUwheHLfL4Wyn79FZMnq1Fo/R 4nXfuUogcC+DdHhL5PsqN1ybagnXRrKv9VBGfjAKEMSBr0JuaWc/VhRMTkzlrGyO bdKgmfvGKxBWMDKzv5v5a/4rusG/GgqRjdg1Ajxj995T5I1E8vDHYPZsuYhnGK4p 0DLFJaNfpDHBOV4nTbZMAhXijqv0/6aTdvOkV4XnmU0y/jGHkwIDAQABo4IDXDCC A1gwHQYDVR0OBBYEFLGCUyZanX4WwDyajgRVhvhLolWeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xNjEx NDNjOS1jMDMwLTQyNzAtOTFhNC00MWU1NGJiYjIzNTcvMzM3MDk5ZTctNGFlNi0z MjAwLTg0ZGItMjQ0MWJiZGUxMjk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMTYxMTQzYzktYzAzMC00MjcwLTkx YTQtNDFlNTRiYmIyMzU3LzE2MTE0M2M5LWMwMzAtNDI3MC05MWE0LTQxZTU0YmJi MjM1Ny5jcmwwHwYDVR0jBBgwFoAUPx+R7lFHlAQOaAJVx2vCKnTZzmwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xNjExNDNjOS1jMDMwLTQyNzAtOTFhNC00MWU1 NGJiYjIzNTcuY2VyMCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAATANMAsDAwHH5gME AcfmCDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQCTEBr2fs65RyVYbwXVdeXhqzm7ia2H8TkgYorGkoOY+pwn z2YnEQdWz/sBrie+yCUp6AsYIu/VTRi06WEQ5PgeoVolgZuiYi126v7dS88rPyZS lDwOvhPme0Brpzy107JDOthy5aw5OadzcsW7vEupB2IDAVJjlZQBnWUzCv4Rilma ZovthfVVVNiylTcQJC7UQLMYIeqEaJ8JRgw2dJZf8maAT424DnFxWFHdEU7trpMl 66LZZSWpCLzeN2yVvSvSFLo/bipUC35Cf24cwJxKREkckIGvRdq67htIt+7qesYt d6fASAJriATq9aSBKbIeHpSqh5QpDpGc9f8w7mSM -----END CERTIFICATE-----Generated at Mon Apr 7 10:36:57 2025 by rpki-client