$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053/af0792a8-ca3b-323c-af22-eba4e83ee68d.roa File: af0792a8-ca3b-323c-af22-eba4e83ee68d.roa (raw, json) Hash identifier: HYodHz5Lf7L9O7cTqmibRuzlc65UEUwpjPoSgn0hAcs= Subject key identifier: B8:3A:40:57:A2:C8:E6:47:DB:C9:EC:CD:A2:DF:E7:4B:B3:45:0E:43 Certificate issuer: /CN=9825dda6-0df7-4c35-af65-4bb69cf71053 Certificate serial: 010D0C9F432858490B4C233304D203D08D8BBE80 Authority key identifier: 0F:56:7D:09:72:ED:0B:C9:0F:3C:0C:1F:33:01:04:38:6B:DA:DC:5C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053/af0792a8-ca3b-323c-af22-eba4e83ee68d.roa Signing time: Sat 01 Mar 2025 14:00:52 +0000 ROA not before: Sat 01 Mar 2025 14:00:52 +0000 ROA not after: Fri 30 May 2025 13:00:52 +0000 asID: 29909 IP address blocks: 199.248.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053/9825dda6-0df7-4c35-af65-4bb69cf71053.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053/9825dda6-0df7-4c35-af65-4bb69cf71053.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 17 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0b:4c:23:33:04:d2:03:d0:8d:8b:be:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9825dda6-0df7-4c35-af65-4bb69cf71053 Validity Not Before: Mar 1 14:00:52 2025 GMT Not After : May 30 13:00:52 2025 GMT Subject: CN=2787ea5f-770f-46cd-ae51-448334880fbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:74:24:a7:4c:5a:8a:e6:cf:aa:28:a0:f3:7f: 88:2c:c5:6c:85:39:17:5a:1d:17:90:5f:b4:b8:6c: 4e:93:eb:80:f1:cd:30:e2:c0:57:24:d1:ce:f9:58: 08:14:d0:0d:e8:bb:7a:7d:da:1d:21:b1:e3:a4:af: de:ef:2b:f0:b7:84:0a:bf:70:59:5a:d3:a5:77:ef: a8:43:51:08:ec:c8:d5:4b:9a:70:5a:bf:f1:a3:ba: 0d:38:a2:c5:a9:52:dd:a5:73:5e:0b:9f:d8:39:c0: d9:f0:24:2b:d0:07:55:a0:07:65:49:e0:0d:88:c8: 53:52:76:f9:c2:92:0b:9c:8c:9f:54:33:d2:0c:c9: 4f:90:a2:61:54:d5:35:d9:30:3a:14:02:69:bb:6b: 24:97:8a:6f:9e:d5:35:33:f8:62:21:83:fa:33:dc: 3d:06:9f:1d:5d:d2:bf:e4:ff:a1:45:b1:65:4e:42: fe:6f:a6:78:e6:e5:0f:e5:a2:89:28:54:f7:20:5c: e3:1b:99:62:65:0d:32:34:ab:f3:ef:26:01:c3:4a: 6b:91:fe:1a:62:b4:c9:4d:99:74:f3:7d:d7:f5:ca: 03:5c:87:37:90:90:21:15:a4:6a:5e:2a:72:de:6a: 03:60:3d:53:b4:65:46:18:95:57:70:f5:37:70:9a: 39:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:3A:40:57:A2:C8:E6:47:DB:C9:EC:CD:A2:DF:E7:4B:B3:45:0E:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053/af0792a8-ca3b-323c-af22-eba4e83ee68d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053/9825dda6-0df7-4c35-af65-4bb69cf71053.crl X509v3 Authority Key Identifier: keyid:0F:56:7D:09:72:ED:0B:C9:0F:3C:0C:1F:33:01:04:38:6B:DA:DC:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053.cer sbgp-ipAddrBlock: critical IPv4: 199.248.230.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:c5:5e:e7:88:6d:fe:90:64:9b:ec:ad:49:02:e0:fa:f0:c6: 7a:08:4f:ad:ff:cf:f9:e7:ea:af:ab:b0:16:f8:1b:42:e2:8f: e0:73:81:f1:ac:7a:e4:b3:c9:f6:57:9a:88:a0:4b:1c:4a:bf: 95:93:e8:bb:15:54:7b:42:4d:53:85:78:92:73:f7:f7:b2:a3: 00:00:65:97:94:8d:32:5a:5d:b8:8c:93:83:e0:84:ca:8e:c8: 3d:63:b2:b5:af:c9:3e:ae:31:a6:48:d0:c2:aa:8a:be:3a:69: dd:d9:1f:4b:03:1c:1b:48:63:c8:9f:f9:57:44:80:0d:eb:a5: 59:6d:b9:48:c9:2a:7b:f7:3d:64:14:c6:ba:b1:2a:98:d2:df: 95:44:d6:0f:76:94:30:cd:53:ca:22:bc:b3:0b:97:74:95:42: 17:20:e2:6d:b4:3d:55:58:81:b1:84:22:e4:d9:30:d6:81:6d: a2:07:26:a1:50:7d:51:59:0f:0f:91:08:7a:78:ef:cd:60:b2: 29:0b:11:b7:a0:12:e2:d0:92:c4:f0:bf:04:27:40:4f:9c:d7: 51:9e:ed:df:42:3e:18:26:46:89:46:3d:e2:be:6e:df:00:18: 7b:9d:96:92:3b:85:f8:f4:70:b8:12:2d:8f:50:11:5b:fa:c2: 0a:73:01:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkLTCMzBNID0I2LvoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTgyNWRkYTYtMGRmNy00YzM1LWFmNjUtNGJiNjljZjcx MDUzMB4XDTI1MDMwMTE0MDA1MloXDTI1MDUzMDEzMDA1MlowLzEtMCsGA1UEAxMk Mjc4N2VhNWYtNzcwZi00NmNkLWFlNTEtNDQ4MzM0ODgwZmJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgHQkp0xaiubPqiig83+ILMVshTkXWh0XkF+0 uGxOk+uA8c0w4sBXJNHO+VgIFNAN6Lt6fdodIbHjpK/e7yvwt4QKv3BZWtOld++o Q1EI7MjVS5pwWr/xo7oNOKLFqVLdpXNeC5/YOcDZ8CQr0AdVoAdlSeANiMhTUnb5 wpILnIyfVDPSDMlPkKJhVNU12TA6FAJpu2skl4pvntU1M/hiIYP6M9w9Bp8dXdK/ 5P+hRbFlTkL+b6Z45uUP5aKJKFT3IFzjG5liZQ0yNKvz7yYBw0prkf4aYrTJTZl0 833X9coDXIc3kJAhFaRqXipy3moDYD1TtGVGGJVXcPU3cJo5HwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLg6QFeiyOZH28nszaLf50uzRQ5DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85ODI1 ZGRhNi0wZGY3LTRjMzUtYWY2NS00YmI2OWNmNzEwNTMvYWYwNzkyYTgtY2EzYi0z MjNjLWFmMjItZWJhNGU4M2VlNjhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTgyNWRkYTYtMGRmNy00YzM1LWFm NjUtNGJiNjljZjcxMDUzLzk4MjVkZGE2LTBkZjctNGMzNS1hZjY1LTRiYjY5Y2Y3 MTA1My5jcmwwHwYDVR0jBBgwFoAUD1Z9CXLtC8kPPAwfMwEEOGva3FwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85ODI1ZGRhNi0wZGY3LTRjMzUtYWY2NS00YmI2 OWNmNzEwNTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/jmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHvFXueIbf6QZJvsrUkC4PrwxnoIT63/z/nn6q+rsBb4G0Lij+BzgfGs euSzyfZXmoigSxxKv5WT6LsVVHtCTVOFeJJz9/eyowAAZZeUjTJaXbiMk4PghMqO yD1jsrWvyT6uMaZI0MKqir46ad3ZH0sDHBtIY8if+VdEgA3rpVltuUjJKnv3PWQU xrqxKpjS35VE1g92lDDNU8oivLMLl3SVQhcg4m20PVVYgbGEIuTZMNaBbaIHJqFQ fVFZDw+RCHp4781gsikLEbegEuLQksTwvwQnQE+c11Ge7d9CPhgmRolGPeK+bt8A GHudlpI7hfj0cLgSLY9QEVv6wgpzAcs= -----END CERTIFICATE-----Generated at Tue Apr 15 22:21:42 2025 by rpki-client