$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/2b0ee5da-394f-3856-9213-54a1585985fc.roa File: 2b0ee5da-394f-3856-9213-54a1585985fc.roa (raw, json) Hash identifier: Z1snvbw9PL0qnz5JeNM/PtQN2CaATVCgedfWXCkp3ak= Subject key identifier: 5B:80:55:CD:E4:E7:9C:12:56:C3:41:5F:5E:97:B3:63:E0:F6:D0:B2 Certificate issuer: /CN=afc9c4c7-de4a-4066-870e-383d770d6d47 Certificate serial: 010D0C9F432858493C091D2B8A42F41724BFEA40 Authority key identifier: 5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/2b0ee5da-394f-3856-9213-54a1585985fc.roa Signing time: Wed 19 Mar 2025 01:00:40 +0000 ROA not before: Wed 19 Mar 2025 01:00:40 +0000 ROA not after: Tue 17 Jun 2025 01:00:40 +0000 asID: 14500 IP address blocks: 199.182.116.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3c:09:1d:2b:8a:42:f4:17:24:bf:ea:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afc9c4c7-de4a-4066-870e-383d770d6d47 Validity Not Before: Mar 19 01:00:40 2025 GMT Not After : Jun 17 01:00:40 2025 GMT Subject: CN=8da17849-204b-4f21-8041-ff9454456e56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:c7:0c:89:b8:2e:e1:05:70:6b:fd:de:4b:8c: dc:4c:e0:24:ea:7b:2c:26:da:0e:02:e2:c7:18:2f: da:b1:00:eb:6d:03:e8:20:93:6a:bf:ad:dd:56:7b: 5b:d8:33:81:59:bd:a8:aa:13:23:63:9c:34:6e:8a: 61:89:1a:41:73:59:1a:a5:46:e3:92:1d:6d:4e:c8: 6d:32:97:d7:1f:81:34:9a:fe:67:0f:86:9b:11:98: c5:1d:a3:ff:e5:a9:f1:00:77:1a:f6:e3:35:12:8e: 2a:e8:d4:fe:38:f3:ae:61:75:13:f6:c0:29:55:5a: f4:77:8e:a0:33:5f:54:c6:ee:80:e3:eb:28:29:83: 8c:6e:2c:24:e3:8c:ca:c1:1a:8a:9d:d8:4f:83:55: b0:f7:8c:07:18:ef:0d:b2:94:76:b9:b1:da:c7:85: c6:ac:30:b9:07:5a:1d:bb:a8:bd:1b:b0:da:ec:48: 6f:49:fd:47:ce:a1:48:75:eb:1b:c5:cd:7f:0c:d9: 25:93:6c:25:47:d6:b6:d9:1d:26:ae:ce:39:06:11: c2:00:17:f4:dd:cd:ec:37:ec:0b:16:ce:4e:55:8a: aa:7c:29:a4:01:8c:cf:2e:bf:13:44:a2:e4:e9:99: de:95:ed:38:df:27:14:60:4f:77:e7:35:2c:1b:ed: cd:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:80:55:CD:E4:E7:9C:12:56:C3:41:5F:5E:97:B3:63:E0:F6:D0:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/2b0ee5da-394f-3856-9213-54a1585985fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.crl X509v3 Authority Key Identifier: keyid:5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer sbgp-ipAddrBlock: critical IPv4: 199.182.116.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:68:ea:9a:61:2c:af:f0:09:3d:3a:d7:d8:58:dc:ad:f3:d8: 64:27:e8:a1:3a:4c:69:67:fa:b7:fe:45:f6:81:ae:53:3b:35: 2b:b7:67:bb:27:bd:1e:78:91:dd:ab:87:27:c3:bd:e3:37:63: fc:6d:ae:ba:b9:a8:f9:85:59:14:29:69:0f:67:81:5b:ab:da: 42:49:4d:58:9e:0f:7a:d2:15:d5:a5:1b:0b:f9:54:16:f4:54: 0e:5f:e1:c1:0b:38:59:d9:38:3a:b2:d4:ff:d6:da:56:22:6b: 6e:c8:22:e9:2d:c6:91:53:b6:b0:10:55:51:ce:33:28:41:db: c6:8c:d3:d5:aa:be:e1:41:63:ab:a5:4c:33:22:a1:4c:23:8c: 73:18:52:df:12:ae:23:83:08:67:f3:ee:c0:d4:33:1c:01:0d: 9a:75:bf:10:0d:d2:f3:24:bc:22:01:84:ad:e6:62:e5:86:f4: c4:cd:83:fe:78:e1:48:de:71:08:b4:99:2f:4b:d2:8e:ab:40: 0c:15:0a:5c:4f:57:fa:51:34:3d:b7:f4:98:bb:a5:50:93:c5: 94:4c:37:52:e7:b1:50:f1:cd:0f:da:22:37:0d:ce:fa:7b:5b: 31:29:23:34:d4:e1:30:9c:d0:cd:ae:20:0b:56:dd:1c:cf:fb: e0:27:5c:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk8CR0rikL0FyS/6kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZjOWM0YzctZGU0YS00MDY2LTg3MGUtMzgzZDc3MGQ2 ZDQ3MB4XDTI1MDMxOTAxMDA0MFoXDTI1MDYxNzAxMDA0MFowLzEtMCsGA1UEAxMk OGRhMTc4NDktMjA0Yi00ZjIxLTgwNDEtZmY5NDU0NDU2ZTU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8cMibgu4QVwa/3eS4zcTOAk6nssJtoOAuLH GC/asQDrbQPoIJNqv63dVntb2DOBWb2oqhMjY5w0bophiRpBc1kapUbjkh1tTsht MpfXH4E0mv5nD4abEZjFHaP/5anxAHca9uM1Eo4q6NT+OPOuYXUT9sApVVr0d46g M19Uxu6A4+soKYOMbiwk44zKwRqKndhPg1Ww94wHGO8NspR2ubHax4XGrDC5B1od u6i9G7Da7EhvSf1HzqFIdesbxc1/DNklk2wlR9a22R0mrs45BhHCABf03c3sN+wL Fs5OVYqqfCmkAYzPLr8TRKLk6Znele043ycUYE935zUsG+3NiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFuAVc3k55wSVsNBX16Xs2Pg9tCyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hZmM5 YzRjNy1kZTRhLTQwNjYtODcwZS0zODNkNzcwZDZkNDcvMmIwZWU1ZGEtMzk0Zi0z ODU2LTkyMTMtNTRhMTU4NTk4NWZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWZjOWM0YzctZGU0YS00MDY2LTg3 MGUtMzgzZDc3MGQ2ZDQ3L2FmYzljNGM3LWRlNGEtNDA2Ni04NzBlLTM4M2Q3NzBk NmQ0Ny5jcmwwHwYDVR0jBBgwFoAUXX3Bvtm/pH6PXLAL1PiCUDDM2fIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hZmM5YzRjNy1kZTRhLTQwNjYtODcwZS0zODNk NzcwZDZkNDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx7Z0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ5o6pphLK/wCT0619hY3K3z2GQn6KE6TGln+rf+RfaBrlM7NSu3Z7sn vR54kd2rhyfDveM3Y/xtrrq5qPmFWRQpaQ9ngVur2kJJTVieD3rSFdWlGwv5VBb0 VA5f4cELOFnZODqy1P/W2lYia27IIuktxpFTtrAQVVHOMyhB28aM09WqvuFBY6ul TDMioUwjjHMYUt8SriODCGfz7sDUMxwBDZp1vxAN0vMkvCIBhK3mYuWG9MTNg/54 4UjecQi0mS9L0o6rQAwVClxPV/pRND239Ji7pVCTxZRMN1LnsVDxzQ/aIjcNzvp7 WzEpIzTU4TCc0M2uIAtW3RzP++AnXBM= -----END CERTIFICATE-----Generated at Sat Apr 12 15:31:58 2025 by rpki-client