$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/4f545dde-b5f0-3c58-88f5-c42965201063.roa File: 4f545dde-b5f0-3c58-88f5-c42965201063.roa (raw, json) Hash identifier: vQlfdCrEtmLUYOCyUdRWGeiWhdoCvPEn6rvs/chZkDw= Subject key identifier: 7E:40:CC:E2:43:B0:EE:CE:69:B2:05:17:DE:8D:73:79:82:29:6F:B8 Certificate issuer: /CN=e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf Certificate serial: 010D0C9F432858495ABEBC3A83762CDCD56F3580 Authority key identifier: 79:4E:35:8D:AC:45:13:27:8B:65:94:A9:E2:BA:54:F4:4C:0A:4D:C7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/4f545dde-b5f0-3c58-88f5-c42965201063.roa Signing time: Sun 30 Mar 2025 01:00:47 +0000 ROA not before: Sun 30 Mar 2025 01:00:47 +0000 ROA not after: Sat 28 Jun 2025 01:00:47 +0000 asID: 4809 IP address blocks: 199.114.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5a:be:bc:3a:83:76:2c:dc:d5:6f:35:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf Validity Not Before: Mar 30 01:00:47 2025 GMT Not After : Jun 28 01:00:47 2025 GMT Subject: CN=8d1b0ca5-f621-46a3-80ba-505ae3aa3f29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:1f:2a:76:76:41:00:36:0f:ff:b2:a2:93:17: 79:ba:62:fc:bb:09:a2:3f:2a:91:c7:20:c3:06:58: da:c0:45:45:da:b5:45:b8:30:0f:82:92:5a:37:69: d0:3c:c8:40:ea:15:49:92:e3:12:f2:fd:fb:0e:4e: 51:81:6b:a2:b4:49:4f:d1:ac:8e:06:c7:d0:c3:8f: 66:89:44:d5:51:f3:b4:c7:b0:7d:6f:7b:95:d4:d1: 66:fe:e5:da:09:8b:58:43:29:4d:00:9b:f4:2c:40: b3:2e:22:0b:3a:99:fd:bb:40:29:91:23:aa:ff:9c: e2:fb:44:a8:f5:75:f5:07:16:05:b8:6a:13:fb:67: 34:e5:26:1f:57:87:ee:1c:0c:c0:9b:ae:f1:3d:e5: 30:c7:28:43:45:9b:b9:3c:ec:a8:d7:a2:d7:3e:6f: fd:f7:fc:15:a7:30:7d:ae:02:4a:90:d7:bf:b8:56: 88:6e:35:33:89:73:b2:5d:ec:4e:85:f8:22:11:ec: 8f:b9:68:e0:d0:0d:34:10:52:f6:52:87:1d:67:7a: b2:8b:5e:f2:1a:fe:43:86:29:21:7c:4c:4e:d8:5e: 28:d7:58:de:a8:e3:d8:62:21:fa:f9:49:fa:87:44: 5f:04:30:16:29:7e:80:38:d6:c2:88:74:dc:c8:94: 6b:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:40:CC:E2:43:B0:EE:CE:69:B2:05:17:DE:8D:73:79:82:29:6F:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/4f545dde-b5f0-3c58-88f5-c42965201063.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.crl X509v3 Authority Key Identifier: keyid:79:4E:35:8D:AC:45:13:27:8B:65:94:A9:E2:BA:54:F4:4C:0A:4D:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.cer sbgp-ipAddrBlock: critical IPv4: 199.114.224.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:df:2f:83:75:e7:86:34:e6:14:53:a8:7f:16:93:55:1a:1e: 8c:59:15:f3:62:76:ea:72:54:ab:e2:e7:d4:77:a6:86:18:14: 05:a0:e4:73:0f:0a:69:70:84:85:dc:3f:44:6e:c6:f9:78:09: a6:35:a2:c8:b0:66:8d:4c:36:19:dc:23:27:90:3b:eb:2e:14: ae:d2:a0:06:79:5c:d7:28:57:c5:43:1f:86:66:5a:eb:3c:03: 67:36:ff:a8:20:68:ca:ea:1a:b2:44:e4:82:96:aa:7e:51:23: cb:19:24:c8:c7:be:50:94:5a:02:26:42:b6:19:71:7d:8e:fe: af:7a:04:43:c3:7f:23:77:e5:62:00:98:89:ba:2b:86:25:d9: 80:65:a9:90:3f:25:e8:34:5a:88:3d:d5:31:4b:14:4d:98:f1: 71:f9:12:c2:2f:1b:c0:7b:68:2b:26:72:e8:62:6c:90:c5:3f: 03:4d:f4:59:e1:df:46:21:f9:f5:7c:fe:a4:98:88:25:c5:2e: 1b:3c:f8:b6:8a:51:8b:28:7e:fc:c0:ae:95:0c:20:06:58:86: 62:c9:80:a7:68:32:7b:e3:76:48:fa:dd:82:16:45:b3:6f:43: 7a:30:da:34:9f:ed:32:8d:39:5a:c7:8f:8a:63:4f:85:64:13: 61:a0:8d:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElavrw6g3Ys3NVvNYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTE4Y2Q4M2MtZjdhMC00YmQxLWE5NmUtZDA4NWZmNzhl Y2FmMB4XDTI1MDMzMDAxMDA0N1oXDTI1MDYyODAxMDA0N1owLzEtMCsGA1UEAxMk OGQxYjBjYTUtZjYyMS00NmEzLTgwYmEtNTA1YWUzYWEzZjI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiR8qdnZBADYP/7Kikxd5umL8uwmiPyqRxyDD BljawEVF2rVFuDAPgpJaN2nQPMhA6hVJkuMS8v37Dk5RgWuitElP0ayOBsfQw49m iUTVUfO0x7B9b3uV1NFm/uXaCYtYQylNAJv0LECzLiILOpn9u0ApkSOq/5zi+0So 9XX1BxYFuGoT+2c05SYfV4fuHAzAm67xPeUwxyhDRZu5POyo16LXPm/99/wVpzB9 rgJKkNe/uFaIbjUziXOyXexOhfgiEeyPuWjg0A00EFL2UocdZ3qyi17yGv5Dhikh fExO2F4o11jeqOPYYiH6+Un6h0RfBDAWKX6AONbCiHTcyJRrtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH5AzOJDsO7OabIFF96Nc3mCKW+4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lMThj ZDgzYy1mN2EwLTRiZDEtYTk2ZS1kMDg1ZmY3OGVjYWYvNGY1NDVkZGUtYjVmMC0z YzU4LTg4ZjUtYzQyOTY1MjAxMDYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTE4Y2Q4M2MtZjdhMC00YmQxLWE5 NmUtZDA4NWZmNzhlY2FmL2UxOGNkODNjLWY3YTAtNGJkMS1hOTZlLWQwODVmZjc4 ZWNhZi5jcmwwHwYDVR0jBBgwFoAUeU41jaxFEyeLZZSp4rpU9EwKTccwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lMThjZDgzYy1mN2EwLTRiZDEtYTk2ZS1kMDg1 ZmY3OGVjYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx3LgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAjfL4N154Y05hRTqH8Wk1UaHoxZFfNidupyVKvi59R3poYYFAWg5HMP CmlwhIXcP0Ruxvl4CaY1osiwZo1MNhncIyeQO+suFK7SoAZ5XNcoV8VDH4ZmWus8 A2c2/6ggaMrqGrJE5IKWqn5RI8sZJMjHvlCUWgImQrYZcX2O/q96BEPDfyN35WIA mIm6K4Yl2YBlqZA/Jeg0Wog91TFLFE2Y8XH5EsIvG8B7aCsmcuhibJDFPwNN9Fnh 30Yh+fV8/qSYiCXFLhs8+LaKUYsofvzArpUMIAZYhmLJgKdoMnvjdkj63YIWRbNv Q3ow2jSf7TKNOVrHj4pjT4VkE2GgjWI= -----END CERTIFICATE-----Generated at Sat Apr 12 10:08:18 2025 by rpki-client