$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1b022ab9-d430-450e-a80d-1a7148a7dbbc/b2bdc569-7ee9-3178-acac-30837a20d2da.roa File: b2bdc569-7ee9-3178-acac-30837a20d2da.roa (raw, json) Hash identifier: oL4LQMrsPf5IIOpz/bi6T4gNZ3XeI62IJL9tGK38ddI= Subject key identifier: 6E:61:46:F0:10:1E:C9:00:84:7D:99:7F:19:32:69:C6:81:2D:D0:C2 Certificate issuer: /CN=1b022ab9-d430-450e-a80d-1a7148a7dbbc Certificate serial: 010D0C9F4328584906B04B7B40C35E98BF804980 Authority key identifier: A3:C3:38:88:82:20:9C:99:F7:EB:37:EB:E0:57:4E:52:76:87:A8:15 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1b022ab9-d430-450e-a80d-1a7148a7dbbc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1b022ab9-d430-450e-a80d-1a7148a7dbbc/b2bdc569-7ee9-3178-acac-30837a20d2da.roa Signing time: Thu 27 Feb 2025 22:23:53 +0000 ROA not before: Thu 27 Feb 2025 22:23:53 +0000 ROA not after: Wed 28 May 2025 21:23:53 +0000 asID: 396982 IP address blocks: 199.47.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1b022ab9-d430-450e-a80d-1a7148a7dbbc/1b022ab9-d430-450e-a80d-1a7148a7dbbc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1b022ab9-d430-450e-a80d-1a7148a7dbbc/1b022ab9-d430-450e-a80d-1a7148a7dbbc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1b022ab9-d430-450e-a80d-1a7148a7dbbc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:06:b0:4b:7b:40:c3:5e:98:bf:80:49:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b022ab9-d430-450e-a80d-1a7148a7dbbc Validity Not Before: Feb 27 22:23:53 2025 GMT Not After : May 28 21:23:53 2025 GMT Subject: CN=2202c9ab-4dd4-4215-8e67-173135e09d68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:da:dc:d0:54:ad:7c:b4:1e:42:d2:e6:da:75: c0:3c:4b:31:10:2c:e7:77:29:af:6d:e3:f5:e7:45: d2:a6:21:95:d6:92:1e:fa:4b:cd:ef:17:fa:f8:c3: 2a:06:98:ee:6f:05:4b:97:63:f3:cc:b5:ca:1b:b1: f1:0d:52:33:f9:ee:9d:28:ca:d8:45:4a:19:e4:bf: e3:9d:4b:82:9a:02:c9:30:b9:b7:7e:e2:4d:a3:71: f8:3f:42:00:84:03:9e:f8:67:20:55:65:cc:4d:13: 77:b4:33:e7:a0:db:4e:da:7b:e1:49:f5:55:cd:d8: 92:96:18:ef:8a:18:39:49:8f:ef:8c:e5:a9:46:9f: ea:2b:74:73:85:bc:ad:c1:f7:f3:53:16:9f:03:0a: 97:8b:fd:6d:a6:d6:0c:96:80:1e:78:c3:61:b7:fd: a2:85:36:91:86:c2:4d:5d:5b:b9:c2:01:9e:42:91: 61:c0:57:d4:72:df:0a:f5:56:a6:3b:b7:1a:0c:65: 98:b1:60:0c:3b:82:06:8a:69:d6:37:75:31:f4:c2: fc:29:05:13:fc:8f:fb:c4:71:3e:b3:7b:63:8c:92: 96:23:ec:0f:14:c0:b0:4d:4a:2b:81:9d:7a:3a:9b: db:64:2a:85:22:1f:f3:e1:e0:6c:f3:40:c7:5c:9d: a6:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:61:46:F0:10:1E:C9:00:84:7D:99:7F:19:32:69:C6:81:2D:D0:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1b022ab9-d430-450e-a80d-1a7148a7dbbc/b2bdc569-7ee9-3178-acac-30837a20d2da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1b022ab9-d430-450e-a80d-1a7148a7dbbc/1b022ab9-d430-450e-a80d-1a7148a7dbbc.crl X509v3 Authority Key Identifier: keyid:A3:C3:38:88:82:20:9C:99:F7:EB:37:EB:E0:57:4E:52:76:87:A8:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1b022ab9-d430-450e-a80d-1a7148a7dbbc.cer sbgp-ipAddrBlock: critical IPv4: 199.47.185.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:ae:03:82:d2:0e:50:26:15:2e:8f:3d:56:4f:39:4b:bc:40: 2a:b0:8d:8f:ab:fd:e0:bd:6d:fb:5e:4c:6f:32:28:0e:07:41: 7b:8c:46:9b:2d:ca:41:0c:ba:e0:4f:b3:34:4a:d0:2e:4c:1e: 7f:70:95:c9:7d:01:97:da:68:fe:cb:42:41:40:03:1f:23:fc: 39:f5:77:a5:e1:a5:cd:3e:69:9d:c9:a1:5e:ba:c7:d5:a3:f5: 70:31:15:b1:a4:f7:11:52:26:d6:d5:99:da:09:ba:70:63:86: 0c:24:45:99:32:b8:5f:b7:22:d1:b4:f4:2e:e9:3f:60:15:4e: 41:c5:e0:45:37:55:81:84:52:b8:19:f0:b4:5d:1e:22:34:13: cd:57:e7:c8:ea:c7:46:fd:0a:2e:b3:4c:d9:42:83:77:75:d0: d7:e0:c8:51:f7:4b:4b:77:37:ee:fc:9a:b2:35:7b:28:9e:f0: 3b:71:f7:b3:f6:0f:c0:da:55:8d:0c:a5:5e:a6:7b:82:e2:67: ae:38:cd:f7:63:ef:c4:c5:40:b3:7a:0e:e5:2e:2d:f0:3d:c4: 91:0e:1a:d8:15:ea:26:4d:ad:3b:db:ce:8e:5f:58:d4:ab:9d: 42:1b:ac:1d:77:0a:d1:54:93:ed:60:69:cb:62:41:23:a7:33: 74:db:f7:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkGsEt7QMNemL+ASYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWIwMjJhYjktZDQzMC00NTBlLWE4MGQtMWE3MTQ4YTdk YmJjMB4XDTI1MDIyNzIyMjM1M1oXDTI1MDUyODIxMjM1M1owLzEtMCsGA1UEAxMk MjIwMmM5YWItNGRkNC00MjE1LThlNjctMTczMTM1ZTA5ZDY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgtrc0FStfLQeQtLm2nXAPEsxECzndymvbeP1 50XSpiGV1pIe+kvN7xf6+MMqBpjubwVLl2PzzLXKG7HxDVIz+e6dKMrYRUoZ5L/j nUuCmgLJMLm3fuJNo3H4P0IAhAOe+GcgVWXMTRN3tDPnoNtO2nvhSfVVzdiSlhjv ihg5SY/vjOWpRp/qK3RzhbytwffzUxafAwqXi/1tptYMloAeeMNht/2ihTaRhsJN XVu5wgGeQpFhwFfUct8K9VamO7caDGWYsWAMO4IGimnWN3Ux9ML8KQUT/I/7xHE+ s3tjjJKWI+wPFMCwTUorgZ16OpvbZCqFIh/z4eBs80DHXJ2mDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG5hRvAQHskAhH2ZfxkyacaBLdDCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xYjAy MmFiOS1kNDMwLTQ1MGUtYTgwZC0xYTcxNDhhN2RiYmMvYjJiZGM1NjktN2VlOS0z MTc4LWFjYWMtMzA4MzdhMjBkMmRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMWIwMjJhYjktZDQzMC00NTBlLWE4 MGQtMWE3MTQ4YTdkYmJjLzFiMDIyYWI5LWQ0MzAtNDUwZS1hODBkLTFhNzE0OGE3 ZGJiYy5jcmwwHwYDVR0jBBgwFoAUo8M4iIIgnJn36zfr4FdOUnaHqBUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xYjAyMmFiOS1kNDMwLTQ1MGUtYTgwZC0xYTcx NDhhN2RiYmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxy+5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACauA4LSDlAmFS6PPVZPOUu8QCqwjY+r/eC9bfteTG8yKA4HQXuMRpst ykEMuuBPszRK0C5MHn9wlcl9AZfaaP7LQkFAAx8j/Dn1d6Xhpc0+aZ3JoV66x9Wj 9XAxFbGk9xFSJtbVmdoJunBjhgwkRZkyuF+3ItG09C7pP2AVTkHF4EU3VYGEUrgZ 8LRdHiI0E81X58jqx0b9Ci6zTNlCg3d10NfgyFH3S0t3N+78mrI1eyie8Dtx97P2 D8DaVY0MpV6me4LiZ644zfdj78TFQLN6DuUuLfA9xJEOGtgV6iZNrTvbzo5fWNSr nUIbrB13CtFUk+1gactiQSOnM3Tb9zo= -----END CERTIFICATE-----Generated at Fri Apr 4 21:00:01 2025 by rpki-client