$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/1b5bca19-3aed-3ecb-8006-85f1800bd993.roa File: 1b5bca19-3aed-3ecb-8006-85f1800bd993.roa (raw, json) Hash identifier: hFbpl6XDO9P1U0TStaxPsQUpujSHlbEl36YohIl+WxQ= Subject key identifier: FC:F9:04:3F:B4:45:5B:BC:AB:C0:05:32:07:25:9E:B5:D6:6A:C4:0D Certificate issuer: /CN=f4f85718-cda0-442f-9727-709a536e1e27 Certificate serial: 010D0C9F43285848EF615559B867641A42A7C440 Authority key identifier: 6B:6F:E0:BB:23:06:E8:21:A5:FF:2D:4F:6F:9F:5C:35:AF:3B:42:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/1b5bca19-3aed-3ecb-8006-85f1800bd993.roa Signing time: Wed 19 Feb 2025 14:00:52 +0000 ROA not before: Wed 19 Feb 2025 14:00:52 +0000 ROA not after: Tue 20 May 2025 13:00:52 +0000 asID: 6639 IP address blocks: 199.201.84.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/f4f85718-cda0-442f-9727-709a536e1e27.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/f4f85718-cda0-442f-9727-709a536e1e27.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 17 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ef:61:55:59:b8:67:64:1a:42:a7:c4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4f85718-cda0-442f-9727-709a536e1e27 Validity Not Before: Feb 19 14:00:52 2025 GMT Not After : May 20 13:00:52 2025 GMT Subject: CN=a1f3ee84-0571-4041-85bc-fdee69df2184 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:6c:86:9b:62:ef:28:96:41:56:df:49:d1:d9: 23:b0:71:52:e9:a5:d3:8f:51:1c:b1:e3:ad:72:18: 7c:3a:32:08:b7:5d:59:79:4c:ff:2c:d6:28:69:9b: b8:20:e1:ab:88:d6:f2:5f:e4:a8:b8:9d:9c:0d:52: 83:4c:92:b2:54:38:73:98:06:b3:2a:3c:c9:78:c5: cb:86:55:b7:a4:41:38:ac:3e:6c:26:83:29:64:98: 34:3a:cc:67:76:31:aa:37:7d:3d:e3:46:91:32:ff: 7b:2d:7b:40:0c:ac:97:33:09:0a:55:0c:53:fc:6b: ae:63:1f:25:73:6c:ce:e5:40:13:ea:37:fb:11:12: 9f:8b:67:28:f6:58:7b:1c:5c:a0:c4:68:67:ea:42: 49:7d:09:b5:82:e7:ec:f3:66:b5:15:c8:bb:64:8f: 6c:c4:6c:59:8e:86:a4:88:6a:ae:98:f6:2d:6b:32: 4d:5e:ac:ee:84:25:43:6e:68:70:ed:6e:92:e1:7f: 40:3f:9e:0c:d9:eb:45:1b:99:e2:94:6d:69:fb:eb: 2a:44:bb:3e:1d:3d:65:fa:37:b2:db:8f:03:42:b1: 77:c8:7b:fd:69:d0:d1:a4:a4:c9:ba:11:4b:4e:4e: 35:16:c7:39:8a:32:01:f5:c2:a7:a2:49:2a:0d:80: f3:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:F9:04:3F:B4:45:5B:BC:AB:C0:05:32:07:25:9E:B5:D6:6A:C4:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/1b5bca19-3aed-3ecb-8006-85f1800bd993.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/f4f85718-cda0-442f-9727-709a536e1e27.crl X509v3 Authority Key Identifier: keyid:6B:6F:E0:BB:23:06:E8:21:A5:FF:2D:4F:6F:9F:5C:35:AF:3B:42:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27.cer sbgp-ipAddrBlock: critical IPv4: 199.201.84.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:25:58:66:2c:7e:79:e2:24:17:9f:c7:32:55:b4:af:8e:a3: 41:37:65:0a:81:6f:c2:f1:c0:3a:92:dc:d4:a0:96:d1:2f:3e: 66:c4:e2:c1:ae:fc:cb:0c:d8:33:a5:83:13:4c:80:77:70:70: 38:67:07:cc:14:b5:3f:e0:22:35:26:a0:e8:88:f4:77:e2:c3: c3:61:6b:3e:73:60:c6:53:1a:87:dd:16:e0:bb:d8:e2:70:87: 75:27:ac:bb:18:74:98:f5:70:76:5c:fb:23:4f:b9:93:24:db: bc:e7:a3:5c:a7:fd:dc:d4:f3:37:54:87:39:b8:9f:3e:da:4f: 4a:1e:67:16:3f:f0:67:13:0d:f6:ec:80:a6:f0:54:da:e9:c4: 69:62:2b:1d:80:f5:03:72:48:87:e8:d8:f3:91:4b:6b:9f:67: bd:e2:cc:63:f7:56:f5:e1:6e:fc:98:ed:a7:b5:79:75:0a:8a: c4:e3:e9:08:59:22:bb:c7:05:9f:44:4a:e5:70:78:fb:25:17: 2a:02:4c:f8:62:9f:11:a9:d1:8d:66:6e:7a:5c:44:68:ff:21: ca:75:08:7a:02:8b:b0:26:d4:31:eb:3d:1f:4e:61:06:23:02: c0:b2:9c:a0:42:60:a8:f6:dd:cb:14:c5:79:4d:07:29:91:16: 2b:c2:59:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjvYVVZuGdkGkKnxEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjRmODU3MTgtY2RhMC00NDJmLTk3MjctNzA5YTUzNmUx ZTI3MB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk YTFmM2VlODQtMDU3MS00MDQxLTg1YmMtZmRlZTY5ZGYyMTg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjWyGm2LvKJZBVt9J0dkjsHFS6aXTj1EcseOt chh8OjIIt11ZeUz/LNYoaZu4IOGriNbyX+SouJ2cDVKDTJKyVDhzmAazKjzJeMXL hlW3pEE4rD5sJoMpZJg0OsxndjGqN30940aRMv97LXtADKyXMwkKVQxT/GuuYx8l c2zO5UAT6jf7ERKfi2co9lh7HFygxGhn6kJJfQm1gufs82a1Fci7ZI9sxGxZjoak iGqumPYtazJNXqzuhCVDbmhw7W6S4X9AP54M2etFG5nilG1p++sqRLs+HT1l+jey 248DQrF3yHv9adDRpKTJuhFLTk41Fsc5ijIB9cKnokkqDYDzMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPz5BD+0RVu8q8AFMgclnrXWasQNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNGY4 NTcxOC1jZGEwLTQ0MmYtOTcyNy03MDlhNTM2ZTFlMjcvMWI1YmNhMTktM2FlZC0z ZWNiLTgwMDYtODVmMTgwMGJkOTkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjRmODU3MTgtY2RhMC00NDJmLTk3 MjctNzA5YTUzNmUxZTI3L2Y0Zjg1NzE4LWNkYTAtNDQyZi05NzI3LTcwOWE1MzZl MWUyNy5jcmwwHwYDVR0jBBgwFoAUa2/guyMG6CGl/y1Pb59cNa87Qn8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mNGY4NTcxOC1jZGEwLTQ0MmYtOTcyNy03MDlh NTM2ZTFlMjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx8lUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACklWGYsfnniJBefxzJVtK+Oo0E3ZQqBb8LxwDqS3NSgltEvPmbE4sGu /MsM2DOlgxNMgHdwcDhnB8wUtT/gIjUmoOiI9Hfiw8Nhaz5zYMZTGofdFuC72OJw h3UnrLsYdJj1cHZc+yNPuZMk27zno1yn/dzU8zdUhzm4nz7aT0oeZxY/8GcTDfbs gKbwVNrpxGliKx2A9QNySIfo2PORS2ufZ73izGP3VvXhbvyY7ae1eXUKisTj6QhZ IrvHBZ9ESuVwePslFyoCTPhinxGp0Y1mbnpcRGj/Icp1CHoCi7Am1DHrPR9OYQYj AsCynKBCYKj23csUxXlNBymRFivCWew= -----END CERTIFICATE-----Generated at Wed Apr 16 14:06:57 2025 by rpki-client