$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac/0ca9fb71-4d54-3d33-9805-4e6585f71430.roa File: 0ca9fb71-4d54-3d33-9805-4e6585f71430.roa (raw, json) Hash identifier: UF1oWva5HFBaKQpu0HfWENsKEzkwKw+Mun0NWVTiRvo= Subject key identifier: AA:95:40:0F:45:C9:82:2C:EC:22:A8:70:DB:F1:49:FF:A1:80:EA:D3 Certificate issuer: /CN=d41a3f41-d9b3-4528-8251-900156f4efac Certificate serial: 010D0C9F43285849C20A109A1998F3F32CB1D880 Authority key identifier: 39:E5:33:99:84:FC:E9:9C:F0:38:96:9B:D1:90:CA:AC:83:7E:E0:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac/0ca9fb71-4d54-3d33-9805-4e6585f71430.roa Signing time: Tue 06 May 2025 01:00:47 +0000 ROA not before: Tue 06 May 2025 01:00:47 +0000 ROA not after: Mon 04 Aug 2025 01:00:47 +0000 asID: 14525 IP address blocks: 199.34.92.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac/d41a3f41-d9b3-4528-8251-900156f4efac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac/d41a3f41-d9b3-4528-8251-900156f4efac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c2:0a:10:9a:19:98:f3:f3:2c:b1:d8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d41a3f41-d9b3-4528-8251-900156f4efac Validity Not Before: May 6 01:00:47 2025 GMT Not After : Aug 4 01:00:47 2025 GMT Subject: CN=5690aaeb-336d-40bb-b03d-b8b62033360b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ba:73:75:cb:75:30:70:8c:e1:92:d9:4f:66: da:b9:e9:93:08:b1:34:c9:8f:fd:62:28:28:57:ba: 42:5f:65:ed:59:1e:1b:c0:30:60:ac:56:07:7d:75: 3e:6c:ed:82:0f:39:a0:b0:7a:f7:52:3c:ea:cb:70: f8:15:bb:20:51:0b:6a:73:8a:e3:05:98:52:c3:e4: d8:a3:a4:51:12:95:ba:ce:c4:71:43:07:b6:fe:e0: cc:ec:ec:47:b9:55:6b:6f:21:f7:f8:bb:ce:6b:ff: 0d:b5:9e:63:0e:3b:6d:fb:11:4c:1e:99:34:19:84: e0:54:dc:67:cc:b5:c1:09:81:37:9c:d9:0c:9b:70: 15:59:3e:e6:9c:05:74:27:e0:8e:4e:0f:9f:01:1d: 72:07:d5:0a:07:48:d1:1b:53:ca:0e:c7:98:ae:b4: 2e:b5:67:5e:c7:a7:26:bc:9e:7a:4d:0e:15:81:6d: b5:84:66:de:de:7a:a9:f9:9b:07:34:1d:c6:31:92: a7:16:e5:00:96:c0:a8:69:e5:94:cd:92:ea:2f:2a: 42:0d:b2:54:24:be:5a:11:49:30:a0:43:3a:72:d0: 68:59:b2:79:f8:12:8f:8b:9c:ea:50:e4:65:8e:45: 2f:a9:3d:d8:bb:e2:60:86:99:e6:58:07:8f:6a:cc: 47:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:95:40:0F:45:C9:82:2C:EC:22:A8:70:DB:F1:49:FF:A1:80:EA:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac/0ca9fb71-4d54-3d33-9805-4e6585f71430.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac/d41a3f41-d9b3-4528-8251-900156f4efac.crl X509v3 Authority Key Identifier: keyid:39:E5:33:99:84:FC:E9:9C:F0:38:96:9B:D1:90:CA:AC:83:7E:E0:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac.cer sbgp-ipAddrBlock: critical IPv4: 199.34.92.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:17:2d:13:19:03:70:9d:45:82:e1:ac:c8:2b:ac:58:d3:cb: 5f:1b:57:61:88:4e:1b:19:99:40:68:96:b5:e0:fe:fb:f6:0f: e0:ea:6b:11:86:09:55:74:33:34:79:85:0f:5a:18:a6:90:59: 9d:e6:ab:34:82:87:67:b5:a9:e8:f3:97:1a:74:a8:9d:d4:8f: 69:e1:7d:9d:cb:62:86:f5:29:c3:3b:a3:28:88:c5:bd:52:8c: 68:cb:83:b2:72:d3:99:59:79:64:4a:ab:3a:c9:a5:73:5a:f4: 3c:43:b6:15:44:fc:b2:13:c6:d0:f0:35:32:6c:6f:2c:91:8b: 12:c7:ed:fd:14:a2:38:b8:8a:01:f5:3c:b5:c8:6f:91:b1:f9: 27:7a:68:8e:34:f0:0c:4c:14:60:b4:95:5e:bf:a1:6c:d6:5c: 59:85:d3:d3:2d:13:67:59:7e:e0:43:1b:e2:a0:70:c3:aa:99: bb:c1:b4:76:d6:52:c4:fb:45:0b:42:bb:68:da:50:81:e5:b3: d5:f3:d6:fc:0f:f1:89:46:3a:7e:24:53:4e:b5:eb:fb:18:f4: ca:a4:f4:0e:20:2e:5d:f1:a8:fb:41:48:fe:82:0c:12:29:fd: 43:d8:91:69:b9:18:c5:eb:a2:ab:9f:1c:59:0b:f3:99:68:eb: 21:32:6b:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnCChCaGZjz8yyx2IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQxYTNmNDEtZDliMy00NTI4LTgyNTEtOTAwMTU2ZjRl ZmFjMB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk NTY5MGFhZWItMzM2ZC00MGJiLWIwM2QtYjhiNjIwMzMzNjBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbpzdct1MHCM4ZLZT2bauemTCLE0yY/9Yigo V7pCX2XtWR4bwDBgrFYHfXU+bO2CDzmgsHr3Ujzqy3D4FbsgUQtqc4rjBZhSw+TY o6RREpW6zsRxQwe2/uDM7OxHuVVrbyH3+LvOa/8NtZ5jDjtt+xFMHpk0GYTgVNxn zLXBCYE3nNkMm3AVWT7mnAV0J+COTg+fAR1yB9UKB0jRG1PKDseYrrQutWdex6cm vJ56TQ4VgW21hGbe3nqp+ZsHNB3GMZKnFuUAlsCoaeWUzZLqLypCDbJUJL5aEUkw oEM6ctBoWbJ5+BKPi5zqUORljkUvqT3Yu+JghpnmWAePasxHgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKqVQA9FyYIs7CKocNvxSf+hgOrTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kNDFh M2Y0MS1kOWIzLTQ1MjgtODI1MS05MDAxNTZmNGVmYWMvMGNhOWZiNzEtNGQ1NC0z ZDMzLTk4MDUtNGU2NTg1ZjcxNDMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDQxYTNmNDEtZDliMy00NTI4LTgy NTEtOTAwMTU2ZjRlZmFjL2Q0MWEzZjQxLWQ5YjMtNDUyOC04MjUxLTkwMDE1NmY0 ZWZhYy5jcmwwHwYDVR0jBBgwFoAUOeUzmYT86ZzwOJab0ZDKrIN+4IIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kNDFhM2Y0MS1kOWIzLTQ1MjgtODI1MS05MDAx NTZmNGVmYWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxyJcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHQXLRMZA3CdRYLhrMgrrFjTy18bV2GIThsZmUBolrXg/vv2D+DqaxGG CVV0MzR5hQ9aGKaQWZ3mqzSCh2e1qejzlxp0qJ3Uj2nhfZ3LYob1KcM7oyiIxb1S jGjLg7Jy05lZeWRKqzrJpXNa9DxDthVE/LITxtDwNTJsbyyRixLH7f0Uoji4igH1 PLXIb5Gx+Sd6aI408AxMFGC0lV6/oWzWXFmF09MtE2dZfuBDG+KgcMOqmbvBtHbW UsT7RQtCu2jaUIHls9Xz1vwP8YlGOn4kU0616/sY9Mqk9A4gLl3xqPtBSP6CDBIp /UPYkWm5GMXroqufHFkL85lo6yEya08= -----END CERTIFICATE-----Generated at Mon May 12 21:29:43 2025 by rpki-client