$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ec408f03-fb6b-3354-8f30-2496e2c33f3f.roa File: ec408f03-fb6b-3354-8f30-2496e2c33f3f.roa (raw, json) Hash identifier: FfqXcaqgDYMuWsrMKdXwkAcHUYPPUrTESxqC+xWCy9Q= Subject key identifier: 5D:31:5D:81:3B:20:30:93:F9:78:72:A1:1F:CB:AA:9B:1E:C1:D0:6D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858493ED3E4AF8057EF06231331C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ec408f03-fb6b-3354-8f30-2496e2c33f3f.roa Signing time: Thu 20 Mar 2025 01:00:39 +0000 ROA not before: Thu 20 Mar 2025 01:00:39 +0000 ROA not after: Wed 18 Jun 2025 01:00:39 +0000 asID: 26008 IP address blocks: 199.101.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3e:d3:e4:af:80:57:ef:06:23:13:31:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 20 01:00:39 2025 GMT Not After : Jun 18 01:00:39 2025 GMT Subject: CN=b1780a88-9800-443c-8e19-58f78cbe6335 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:5c:0e:d7:0e:de:da:e8:cb:29:b6:4a:5a:0f: 30:e7:d4:77:51:12:08:20:4f:26:48:0a:a1:08:b5: 90:06:26:88:fe:ba:13:85:89:2c:1b:6f:c9:03:16: 2c:bf:bd:e2:61:68:48:bf:89:49:4a:b2:82:69:0b: 82:6f:c2:57:d3:15:c8:f2:4e:fe:bf:bc:9b:f4:0c: ff:06:cf:4a:ed:67:54:f9:11:2c:44:72:2f:22:d7: 0a:6b:49:a5:65:04:84:8d:b5:56:85:c0:d4:97:4b: b3:fc:03:39:28:8c:32:9c:b7:4a:5a:ea:3d:56:e4: fc:74:c7:61:ed:e8:05:74:fc:d6:81:ed:81:57:7d: 64:ab:b5:74:81:e9:6e:b5:8a:bb:f1:cd:09:b8:c6: c3:8c:59:36:cc:d1:b3:65:f7:c7:d7:5f:e0:31:b5: 6f:66:30:f6:2a:6a:5d:fc:c3:a8:3a:cb:da:01:6b: d1:63:db:5f:4d:bf:ce:50:4d:54:0f:89:fd:ad:10: 61:fd:05:42:85:44:bd:22:32:d4:e6:54:4b:73:17: 85:76:de:d7:cc:03:91:f0:d1:90:3e:e4:56:f2:55: b6:cb:79:65:eb:38:ab:86:a8:66:9a:ba:79:a5:63: 85:66:1a:a4:fa:dd:c3:2f:11:54:cd:53:be:43:7c: 4e:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:31:5D:81:3B:20:30:93:F9:78:72:A1:1F:CB:AA:9B:1E:C1:D0:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ec408f03-fb6b-3354-8f30-2496e2c33f3f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 199.101.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:90:46:84:6a:9c:82:7c:a5:bf:9c:50:b1:5e:70:65:39:d2: 7e:58:7e:72:58:43:2e:29:e1:d6:ee:61:9f:f7:4b:3f:cc:b1: 0f:06:1a:80:71:e5:e9:5d:ba:23:b3:51:54:68:0b:db:a4:be: 0d:e9:41:3c:67:aa:86:a8:18:0b:62:e9:1d:57:35:73:bd:85: 2d:ef:f2:c8:c5:25:f0:2f:36:30:6d:e5:7b:f2:26:5d:c3:fd: db:11:6d:52:da:60:3a:a6:27:fb:81:3a:0d:df:18:68:eb:27: 04:66:5f:a4:77:f4:b8:65:3c:d5:6a:88:f5:4b:67:43:b4:6d: d1:aa:f7:07:64:44:5d:27:2e:d3:f4:6c:fa:d3:c4:0f:48:1f: c3:89:2b:56:30:87:dc:ec:ae:f4:56:38:53:20:aa:39:c2:57: ef:c2:36:15:8f:f5:33:bb:fa:ac:22:72:7d:7b:01:d1:7b:67: b2:5d:15:5d:fa:83:31:41:79:2c:b2:ea:bd:b8:c6:bb:f4:04: 0a:cb:d9:64:6e:72:90:c2:cd:2e:f5:30:d3:49:00:8f:33:00: 06:c0:aa:5c:b7:c1:0f:db:e3:71:60:36:6a:18:53:23:35:91: d8:4c:59:f9:33:30:44:a7:7a:e4:8e:53:20:9b:c2:32:20:17: 35:a6:35:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk+0+SvgFfvBiMTMcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMyMDAxMDAzOVoXDTI1MDYxODAxMDAzOVowLzEtMCsGA1UEAxMk YjE3ODBhODgtOTgwMC00NDNjLThlMTktNThmNzhjYmU2MzM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1wO1w7e2ujLKbZKWg8w59R3URIIIE8mSAqh CLWQBiaI/roThYksG2/JAxYsv73iYWhIv4lJSrKCaQuCb8JX0xXI8k7+v7yb9Az/ Bs9K7WdU+REsRHIvItcKa0mlZQSEjbVWhcDUl0uz/AM5KIwynLdKWuo9VuT8dMdh 7egFdPzWge2BV31kq7V0gelutYq78c0JuMbDjFk2zNGzZffH11/gMbVvZjD2Kmpd /MOoOsvaAWvRY9tfTb/OUE1UD4n9rRBh/QVChUS9IjLU5lRLcxeFdt7XzAOR8NGQ PuRW8lW2y3ll6zirhqhmmrp5pWOFZhqk+t3DLxFUzVO+Q3xOgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF0xXYE7IDCT+XhyoR/LqpsewdBtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZWM0MDhmMDMtZmI2Yi0z MzU0LThmMzAtMjQ5NmUyYzMzZjNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx2UcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHSQRoRqnIJ8pb+cULFecGU50n5YfnJYQy4p4dbuYZ/3Sz/MsQ8GGoBx 5elduiOzUVRoC9ukvg3pQTxnqoaoGAti6R1XNXO9hS3v8sjFJfAvNjBt5XvyJl3D /dsRbVLaYDqmJ/uBOg3fGGjrJwRmX6R39LhlPNVqiPVLZ0O0bdGq9wdkRF0nLtP0 bPrTxA9IH8OJK1Ywh9zsrvRWOFMgqjnCV+/CNhWP9TO7+qwicn17AdF7Z7JdFV36 gzFBeSyy6r24xrv0BArL2WRucpDCzS71MNNJAI8zAAbAqly3wQ/b43FgNmoYUyM1 kdhMWfkzMESneuSOUyCbwjIgFzWmNQs= -----END CERTIFICATE-----Generated at Wed Apr 9 01:47:01 2025 by rpki-client