$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a/3c08ffdc-9a80-3b8d-be87-968b95478c3e.roa File: 3c08ffdc-9a80-3b8d-be87-968b95478c3e.roa (raw, json) Hash identifier: 0eUNt2O+m7hfhEQ62vVXI3xPq5CNJ1pT/gFA8c2xZwI= Subject key identifier: 9E:8A:A1:56:5B:65:01:9E:C2:68:C4:32:AC:2E:1F:24:5D:92:C7:12 Certificate issuer: /CN=9bc88207-e7c7-453e-a4ab-77b72152c33a Certificate serial: 010D0C9F43285848F926AD1CDCCB7DF440E15B80 Authority key identifier: 49:30:1E:1C:4D:A2:59:C8:C5:65:AF:94:7B:C5:60:74:D2:96:22:FF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a/3c08ffdc-9a80-3b8d-be87-968b95478c3e.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 22379 IP address blocks: 199.73.12.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a/9bc88207-e7c7-453e-a4ab-77b72152c33a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a/9bc88207-e7c7-453e-a4ab-77b72152c33a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:ad:1c:dc:cb:7d:f4:40:e1:5b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bc88207-e7c7-453e-a4ab-77b72152c33a Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=3f683fa9-657a-4de9-8d71-fd78af55a7cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:f9:c1:27:b3:3e:06:5d:2c:67:46:8e:d0:64: d7:7e:45:c6:c8:25:fd:fc:bb:87:a1:78:f9:cf:9a: 7c:d1:50:0f:8b:00:6b:fb:a3:06:fb:af:30:fd:fd: af:f6:e6:5f:01:92:d1:d2:01:13:a6:95:3a:6e:73: 90:30:de:ce:bf:87:01:f9:6e:35:5b:50:1c:c2:80: 31:c6:ec:2e:09:64:46:6d:34:2c:ae:5b:42:6b:08: c8:42:7a:b9:25:8a:c7:65:cd:59:bb:e2:fd:86:5a: 77:30:1c:f2:0a:b2:1d:ac:ea:58:f6:07:b4:1d:a0: 1d:78:28:57:50:28:6c:84:c8:83:bb:8d:5d:48:09: 78:92:d8:55:64:2e:b4:12:df:ad:9f:ca:e3:b6:6e: 99:8f:a8:72:0d:c5:35:82:c4:0d:3f:4b:e9:34:e4: 14:05:26:33:95:68:21:d3:7f:62:d8:b7:9c:5f:57: fe:20:ff:42:55:6d:ce:74:c9:9e:ee:a0:e3:df:5b: e2:42:94:da:11:f9:fd:7c:65:af:51:a7:55:b7:20: 85:b4:c5:7f:69:3d:d6:52:f8:cb:f0:70:8b:f2:88: ef:23:a1:ef:1b:0b:50:69:2b:f9:fa:0c:69:b9:88: b4:dd:56:9b:3b:84:68:98:5c:8c:a6:94:45:f4:e5: 7e:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:8A:A1:56:5B:65:01:9E:C2:68:C4:32:AC:2E:1F:24:5D:92:C7:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a/3c08ffdc-9a80-3b8d-be87-968b95478c3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a/9bc88207-e7c7-453e-a4ab-77b72152c33a.crl X509v3 Authority Key Identifier: keyid:49:30:1E:1C:4D:A2:59:C8:C5:65:AF:94:7B:C5:60:74:D2:96:22:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a.cer sbgp-ipAddrBlock: critical IPv4: 199.73.12.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:70:7a:0f:fb:57:7b:db:2e:63:85:45:35:2d:2b:a6:e4:34: 1d:28:ff:93:c0:64:e5:c6:04:fd:17:c0:68:1a:81:14:b0:05: 1a:5e:ba:7e:98:e7:c0:a9:ff:57:d0:a6:be:7d:06:7e:81:b6: d8:8a:ef:d9:61:d4:8b:8b:ef:12:51:21:47:61:6c:cf:b3:e5: 68:fa:ff:fa:c7:2e:8c:2f:8f:8e:73:a3:de:82:e0:26:5b:06: b4:88:24:d0:b1:a3:f2:12:4e:f8:c3:95:4c:d3:0f:c9:d4:c7: a2:da:7d:74:84:2c:e2:bf:9b:2f:8a:27:95:77:76:b3:fb:93: 80:45:6e:71:a6:90:05:2f:a4:82:a3:97:54:12:46:4e:dd:68: 13:8e:4f:5e:49:99:cb:46:bf:c1:54:94:b7:89:07:b3:ab:46: 4c:e4:4d:5a:e2:07:e1:df:06:7f:47:44:3d:28:55:be:e4:3f: 12:f8:3e:dd:40:3f:ea:f4:ad:0f:0d:27:ea:82:f0:d1:2e:e8: d5:b2:51:25:73:49:5d:3e:27:69:47:e4:6e:95:31:c5:e7:ce: d9:e8:07:dd:a6:3d:2f:e7:b2:a3:56:85:32:c8:b2:62:17:58: 53:c5:58:10:74:f0:4c:d2:fe:c4:2f:c4:f0:df:b1:95:28:c1: 9b:51:c6:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj5Jq0c3Mt99EDhW4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWJjODgyMDctZTdjNy00NTNlLWE0YWItNzdiNzIxNTJj MzNhMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk M2Y2ODNmYTktNjU3YS00ZGU5LThkNzEtZmQ3OGFmNTVhN2NmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/nBJ7M+Bl0sZ0aO0GTXfkXGyCX9/LuHoXj5 z5p80VAPiwBr+6MG+68w/f2v9uZfAZLR0gETppU6bnOQMN7Ov4cB+W41W1AcwoAx xuwuCWRGbTQsrltCawjIQnq5JYrHZc1Zu+L9hlp3MBzyCrIdrOpY9ge0HaAdeChX UChshMiDu41dSAl4kthVZC60Et+tn8rjtm6Zj6hyDcU1gsQNP0vpNOQUBSYzlWgh 039i2LecX1f+IP9CVW3OdMme7qDj31viQpTaEfn9fGWvUadVtyCFtMV/aT3WUvjL 8HCL8ojvI6HvGwtQaSv5+gxpuYi03VabO4RomFyMppRF9OV++wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ6KoVZbZQGewmjEMqwuHyRdkscSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85YmM4 ODIwNy1lN2M3LTQ1M2UtYTRhYi03N2I3MjE1MmMzM2EvM2MwOGZmZGMtOWE4MC0z YjhkLWJlODctOTY4Yjk1NDc4YzNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOWJjODgyMDctZTdjNy00NTNlLWE0 YWItNzdiNzIxNTJjMzNhLzliYzg4MjA3LWU3YzctNDUzZS1hNGFiLTc3YjcyMTUy YzMzYS5jcmwwHwYDVR0jBBgwFoAUSTAeHE2iWcjFZa+Ue8VgdNKWIv8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85YmM4ODIwNy1lN2M3LTQ1M2UtYTRhYi03N2I3 MjE1MmMzM2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx0kMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAVweg/7V3vbLmOFRTUtK6bkNB0o/5PAZOXGBP0XwGgagRSwBRpeun6Y 58Cp/1fQpr59Bn6BttiK79lh1IuL7xJRIUdhbM+z5Wj6//rHLowvj45zo96C4CZb BrSIJNCxo/ISTvjDlUzTD8nUx6LafXSELOK/my+KJ5V3drP7k4BFbnGmkAUvpIKj l1QSRk7daBOOT15JmctGv8FUlLeJB7OrRkzkTVriB+HfBn9HRD0oVb7kPxL4Pt1A P+r0rQ8NJ+qC8NEu6NWyUSVzSV0+J2lH5G6VMcXnztnoB92mPS/nsqNWhTLIsmIX WFPFWBB08EzS/sQvxPDfsZUowZtRxn0= -----END CERTIFICATE-----Generated at Fri Mar 14 11:16:38 2025 by rpki-client