$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/be99669b-76e7-3a62-9151-901a36da86da.roa File: be99669b-76e7-3a62-9151-901a36da86da.roa (raw, json) Hash identifier: fvHHBQRVvU+UOI6M17PUltIqZwdj0UL7B20DLaEUwrs= Subject key identifier: CA:ED:8B:E5:BE:D8:29:BE:D1:61:38:60:DA:B8:71:8C:07:EA:FD:22 Certificate issuer: /CN=994b2ed8-1a2a-4bd1-b709-7479db7c4ea9 Certificate serial: 010D0C9F43285848B1F62E52E3F8066C428B6D40 Authority key identifier: 90:7D:4E:BD:0C:A7:F5:DD:13:FF:42:95:1E:9A:F4:9B:33:E9:79:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/be99669b-76e7-3a62-9151-901a36da86da.roa Signing time: Tue 28 Jan 2025 14:00:52 +0000 ROA not before: Tue 28 Jan 2025 14:00:52 +0000 ROA not after: Mon 28 Apr 2025 13:00:52 +0000 asID: 212238 IP address blocks: 199.181.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b1:f6:2e:52:e3:f8:06:6c:42:8b:6d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=994b2ed8-1a2a-4bd1-b709-7479db7c4ea9 Validity Not Before: Jan 28 14:00:52 2025 GMT Not After : Apr 28 13:00:52 2025 GMT Subject: CN=541983dc-6f4d-4860-be00-aca7de1d81c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:be:08:89:4f:e2:d5:eb:6e:dc:de:bb:09:bc: 5c:d3:50:54:91:c9:db:4f:5f:c3:af:55:ee:94:ea: 70:a6:31:fe:c3:32:1f:08:ba:36:68:51:ce:73:81: 7d:b2:d7:e4:0a:34:6b:97:ee:02:c6:98:04:a1:4b: 08:bc:0f:92:6e:7f:41:b4:47:a2:ba:90:9e:d9:89: 42:d9:9e:f6:2c:b9:b0:67:1d:8a:ce:b4:93:a1:7a: 4a:43:58:88:73:6e:ac:da:c0:f5:50:e3:98:6c:9a: 43:52:bb:eb:2f:83:6c:bc:6a:74:d9:9f:b7:c8:53: e4:33:c9:c7:95:bc:ac:33:c4:32:0d:aa:77:79:5c: 3b:5b:5d:4b:a4:6e:21:8d:88:1e:0f:80:24:45:b8: 78:57:ca:e4:40:f1:e8:10:12:c7:09:c4:0c:4f:a8: f8:c8:c1:61:6f:f6:8e:dd:26:f4:56:9f:40:49:2f: 15:25:11:26:51:50:6d:e9:3f:97:7a:30:8b:11:86: 69:ca:fb:24:a5:ea:44:0f:75:ef:76:29:27:1f:66: e1:89:2b:03:e5:19:a7:be:c1:6d:9f:78:06:cd:3b: ae:6a:9c:e4:7a:38:ca:47:3e:3b:bd:1f:fe:6b:5c: 01:bc:52:27:58:85:b2:dc:d4:f2:61:b3:e3:49:b6: 65:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:ED:8B:E5:BE:D8:29:BE:D1:61:38:60:DA:B8:71:8C:07:EA:FD:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/be99669b-76e7-3a62-9151-901a36da86da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.crl X509v3 Authority Key Identifier: keyid:90:7D:4E:BD:0C:A7:F5:DD:13:FF:42:95:1E:9A:F4:9B:33:E9:79:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer sbgp-ipAddrBlock: critical IPv4: 199.181.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:4a:05:9d:29:bc:2a:33:e2:4e:99:34:ac:ad:3d:e7:08:cc: 2d:19:c7:02:88:04:99:82:16:b0:14:26:50:9b:f8:de:4e:b4: 46:c3:df:fc:23:be:8b:36:ac:6a:cd:2b:82:29:a7:0f:38:7b: 72:99:3f:49:b6:be:b0:5e:3d:6b:b5:dd:7a:ed:df:62:5c:03: 3d:26:56:f5:ff:fd:d0:d8:a3:99:76:34:71:38:53:86:75:52: 1a:d2:1f:5b:64:ed:b6:50:57:3b:8c:30:bd:3b:38:9b:5d:6c: 77:f8:30:8d:40:e4:16:37:74:ea:6c:2c:f2:df:5e:1d:06:e8: 9c:6a:d0:56:94:b5:ce:7f:09:cd:9d:45:ca:a1:36:f7:5c:c1: 5b:2f:47:0e:3f:9a:81:f3:ab:45:56:ad:5f:89:82:d6:ad:0a: f5:82:c5:57:9b:0d:94:03:f9:2b:31:19:c1:08:51:ce:da:79: 95:95:f0:f8:54:44:10:8c:fc:fb:83:fb:78:9a:87:31:99:8a: 02:f3:c1:a7:e5:77:bf:45:05:31:cb:bd:38:c9:d9:61:e3:88: 35:09:a8:40:17:71:df:d9:d2:29:2e:a1:59:7e:bb:6a:38:0c: 80:b6:14:07:95:d7:24:84:60:8f:f3:8a:2d:6a:ed:6f:da:28: 81:ad:a1:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEix9i5S4/gGbEKLbUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk0YjJlZDgtMWEyYS00YmQxLWI3MDktNzQ3OWRiN2M0 ZWE5MB4XDTI1MDEyODE0MDA1MloXDTI1MDQyODEzMDA1MlowLzEtMCsGA1UEAxMk NTQxOTgzZGMtNmY0ZC00ODYwLWJlMDAtYWNhN2RlMWQ4MWM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmL4IiU/i1etu3N67Cbxc01BUkcnbT1/Dr1Xu lOpwpjH+wzIfCLo2aFHOc4F9stfkCjRrl+4CxpgEoUsIvA+Sbn9BtEeiupCe2YlC 2Z72LLmwZx2KzrSToXpKQ1iIc26s2sD1UOOYbJpDUrvrL4NsvGp02Z+3yFPkM8nH lbysM8QyDap3eVw7W11LpG4hjYgeD4AkRbh4V8rkQPHoEBLHCcQMT6j4yMFhb/aO 3Sb0Vp9ASS8VJREmUVBt6T+XejCLEYZpyvskpepED3XvdiknH2bhiSsD5RmnvsFt n3gGzTuuapzkejjKRz47vR/+a1wBvFInWIWy3NTyYbPjSbZlTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMrti+W+2Cm+0WE4YNq4cYwH6v0iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OTRi MmVkOC0xYTJhLTRiZDEtYjcwOS03NDc5ZGI3YzRlYTkvYmU5OTY2OWItNzZlNy0z YTYyLTkxNTEtOTAxYTM2ZGE4NmRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTk0YjJlZDgtMWEyYS00YmQxLWI3 MDktNzQ3OWRiN2M0ZWE5Lzk5NGIyZWQ4LTFhMmEtNGJkMS1iNzA5LTc0NzlkYjdj NGVhOS5jcmwwHwYDVR0jBBgwFoAUkH1OvQyn9d0T/0KVHpr0mzPpeXwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85OTRiMmVkOC0xYTJhLTRiZDEtYjcwOS03NDc5 ZGI3YzRlYTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx7XvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL9KBZ0pvCoz4k6ZNKytPecIzC0ZxwKIBJmCFrAUJlCb+N5OtEbD3/wj vos2rGrNK4Ippw84e3KZP0m2vrBePWu13Xrt32JcAz0mVvX//dDYo5l2NHE4U4Z1 UhrSH1tk7bZQVzuMML07OJtdbHf4MI1A5BY3dOpsLPLfXh0G6Jxq0FaUtc5/Cc2d RcqhNvdcwVsvRw4/moHzq0VWrV+JgtatCvWCxVebDZQD+SsxGcEIUc7aeZWV8PhU RBCM/PuD+3iahzGZigLzwafld79FBTHLvTjJ2WHjiDUJqEAXcd/Z0ikuoVl+u2o4 DIC2FAeV1ySEYI/zii1q7W/aKIGtoRM= -----END CERTIFICATE-----Generated at Sun Apr 6 14:46:54 2025 by rpki-client