$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6/add640e1-3218-3150-9feb-8573100723ed.roa File: add640e1-3218-3150-9feb-8573100723ed.roa (raw, json) Hash identifier: VndGJzYQcrXUHcxmKtYgyze/N6dYJvc7srDMUJne85M= Subject key identifier: C1:0A:0B:AD:7C:2B:EB:6F:2A:12:D0:8D:48:7C:26:70:AA:D2:5C:43 Certificate issuer: /CN=17e20fae-392b-4b22-b475-c6dff7142fa6 Certificate serial: 010D0C9F43285849B149EA3C002116A528472D80 Authority key identifier: A1:92:8C:F9:58:DA:45:07:22:A0:BC:C9:76:E1:3D:EE:08:F7:66:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6/add640e1-3218-3150-9feb-8573100723ed.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 715 IP address blocks: 199.120.142.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6/17e20fae-392b-4b22-b475-c6dff7142fa6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6/17e20fae-392b-4b22-b475-c6dff7142fa6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:49:ea:3c:00:21:16:a5:28:47:2d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17e20fae-392b-4b22-b475-c6dff7142fa6 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=7f7fa444-800c-48fc-a82b-b4a9a4251c32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:f4:5b:db:54:5c:d1:4e:06:81:6e:1b:af:36: 3c:db:f0:1d:11:43:ed:62:c5:a1:20:d5:2c:be:44: 45:1a:50:4e:16:a8:6a:55:83:ff:e9:f0:2b:59:03: b9:5c:61:9f:80:4c:39:90:d4:91:ee:6a:dc:0e:0c: ed:09:e7:9d:48:19:50:28:e1:ba:79:36:6c:e6:11: 77:08:d3:4c:67:c5:15:d6:eb:e3:7d:9e:54:54:9d: 70:86:f3:e9:39:48:bb:d4:87:bc:69:48:36:1b:ba: 2a:3c:19:04:97:0a:51:90:8e:4b:ef:bb:c9:be:5a: a8:30:91:f2:bb:8a:19:97:cf:5a:53:20:e7:1d:8b: 47:fd:66:7f:31:15:c8:1a:85:a7:41:8a:07:b0:1c: 39:1d:49:56:58:c4:02:4a:25:cc:3c:1a:0a:49:24: 7f:05:22:a1:78:8d:4e:bb:93:96:5d:dd:69:60:1b: 22:f7:f4:cf:88:71:eb:54:75:4b:84:88:5a:3f:00: 03:7c:d3:9a:16:d8:a4:c0:20:10:47:84:38:e9:86: 30:5f:22:c6:b8:89:6e:55:b0:cb:2b:1f:30:63:47: 6c:13:c4:be:39:59:bb:02:31:70:31:54:c9:60:8c: 9c:5e:96:2b:c9:fc:25:d1:78:80:1d:43:ce:7d:cc: d5:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:0A:0B:AD:7C:2B:EB:6F:2A:12:D0:8D:48:7C:26:70:AA:D2:5C:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6/add640e1-3218-3150-9feb-8573100723ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6/17e20fae-392b-4b22-b475-c6dff7142fa6.crl X509v3 Authority Key Identifier: keyid:A1:92:8C:F9:58:DA:45:07:22:A0:BC:C9:76:E1:3D:EE:08:F7:66:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6.cer sbgp-ipAddrBlock: critical IPv4: 199.120.142.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:65:65:43:82:b7:d8:e9:e7:41:1f:8b:ba:d0:0c:b7:96:3c: e9:73:15:83:f2:d6:15:2d:5e:cd:f9:6b:fd:8a:c0:84:ec:f2: b9:59:f7:70:62:f5:db:f6:64:20:2f:f8:80:35:af:5d:c9:fa: 2c:5b:a5:f1:cc:42:0e:e2:52:f9:71:f8:b8:45:90:44:29:3f: 05:9f:a1:47:b4:f3:54:b9:ad:4a:a3:8a:fd:b0:19:2a:a1:84: 15:99:2e:b0:17:51:3e:56:59:7b:6e:ef:44:02:77:c7:d3:48: 0f:3a:3b:62:49:59:c6:82:b0:bd:6b:71:69:57:49:9e:25:1a: 95:f3:56:56:7d:9e:08:42:c9:21:31:0f:cb:c3:0e:18:5e:0e: 5f:1e:51:79:7d:93:ff:4b:75:78:a2:df:dc:f1:40:cb:42:d3: f8:1c:2c:ce:77:81:38:43:26:93:3c:79:11:9e:41:da:ea:ee: e2:11:79:e8:35:e5:3b:32:e9:ae:c7:9c:cc:78:d9:fe:4e:22: 95:f8:a0:63:48:91:cd:4a:b2:cd:19:ca:3b:53:ec:0b:37:36: 22:86:b6:8a:60:52:d3:9a:2b:20:c5:18:97:79:20:e9:3c:e7: cb:e8:5e:f2:bb:49:a7:48:e3:d3:f4:80:f3:ff:74:94:20:dd: 11:9c:88:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSeo8ACEWpShHLYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTdlMjBmYWUtMzkyYi00YjIyLWI0NzUtYzZkZmY3MTQy ZmE2MB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk N2Y3ZmE0NDQtODAwYy00OGZjLWE4MmItYjRhOWE0MjUxYzMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzfRb21Rc0U4GgW4brzY82/AdEUPtYsWhINUs vkRFGlBOFqhqVYP/6fArWQO5XGGfgEw5kNSR7mrcDgztCeedSBlQKOG6eTZs5hF3 CNNMZ8UV1uvjfZ5UVJ1whvPpOUi71Ie8aUg2G7oqPBkElwpRkI5L77vJvlqoMJHy u4oZl89aUyDnHYtH/WZ/MRXIGoWnQYoHsBw5HUlWWMQCSiXMPBoKSSR/BSKheI1O u5OWXd1pYBsi9/TPiHHrVHVLhIhaPwADfNOaFtikwCAQR4Q46YYwXyLGuIluVbDL Kx8wY0dsE8S+OVm7AjFwMVTJYIycXpYryfwl0XiAHUPOfczVUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMEKC618K+tvKhLQjUh8JnCq0lxDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xN2Uy MGZhZS0zOTJiLTRiMjItYjQ3NS1jNmRmZjcxNDJmYTYvYWRkNjQwZTEtMzIxOC0z MTUwLTlmZWItODU3MzEwMDcyM2VkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMTdlMjBmYWUtMzkyYi00YjIyLWI0 NzUtYzZkZmY3MTQyZmE2LzE3ZTIwZmFlLTM5MmItNGIyMi1iNDc1LWM2ZGZmNzE0 MmZhNi5jcmwwHwYDVR0jBBgwFoAUoZKM+VjaRQcioLzJduE97gj3ZmswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8xN2UyMGZhZS0zOTJiLTRiMjItYjQ3NS1jNmRm ZjcxNDJmYTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx3iOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF5lZUOCt9jp50Efi7rQDLeWPOlzFYPy1hUtXs35a/2KwITs8rlZ93Bi 9dv2ZCAv+IA1r13J+ixbpfHMQg7iUvlx+LhFkEQpPwWfoUe081S5rUqjiv2wGSqh hBWZLrAXUT5WWXtu70QCd8fTSA86O2JJWcaCsL1rcWlXSZ4lGpXzVlZ9nghCySEx D8vDDhheDl8eUXl9k/9LdXii39zxQMtC0/gcLM53gThDJpM8eRGeQdrq7uIReeg1 5Tsy6a7HnMx42f5OIpX4oGNIkc1Kss0ZyjtT7As3NiKGtopgUtOaKyDFGJd5IOk8 58voXvK7SadI49P0gPP/dJQg3RGciLk= -----END CERTIFICATE-----Generated at Sun May 11 00:52:59 2025 by rpki-client