$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/5368e9b8-712e-3eaf-a366-757c94d5124e.roa File: 5368e9b8-712e-3eaf-a366-757c94d5124e.roa (raw, json) Hash identifier: K0/cXInkfzb4AxkowbA9ODpqI6oSlPNUijjAF9vLBno= Subject key identifier: A0:EE:B9:B1:09:FC:44:AB:10:C7:E2:20:79:88:E3:29:D4:65:AE:8F Certificate issuer: /CN=73c8aa7b-fac7-4435-95df-f01200da47d9 Certificate serial: 010D0C9F43285849711431EC7272E236B3CF0500 Authority key identifier: E3:BF:70:21:DC:44:59:AF:5C:63:F9:78:44:66:37:C6:0A:5D:B3:1C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/5368e9b8-712e-3eaf-a366-757c94d5124e.roa Signing time: Mon 07 Apr 2025 01:00:47 +0000 ROA not before: Mon 07 Apr 2025 01:00:47 +0000 ROA not after: Sun 06 Jul 2025 01:00:47 +0000 asID: 14618 IP address blocks: 199.66.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:71:14:31:ec:72:72:e2:36:b3:cf:05:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73c8aa7b-fac7-4435-95df-f01200da47d9 Validity Not Before: Apr 7 01:00:47 2025 GMT Not After : Jul 6 01:00:47 2025 GMT Subject: CN=e5e21b70-068b-447d-9f1d-ecb3359865d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:3a:b5:e7:f0:0c:5b:40:b9:77:b8:8b:28:dc: 38:b8:9f:bb:71:79:17:10:f7:07:c9:26:31:33:8c: 38:15:d6:ef:cf:a5:c4:82:87:21:d7:39:08:9f:6f: b9:f2:76:78:7b:6c:cc:e4:f8:09:db:4c:93:10:bf: 2d:c9:de:d5:50:c6:d6:15:ba:0d:ff:5f:b3:c8:07: 3a:36:66:f8:91:cd:d6:ed:79:06:8d:f4:b8:4f:dc: c1:7c:79:a9:f0:a8:7f:8a:bb:38:77:88:00:0b:fc: 81:3f:91:28:0e:2e:6e:ff:f6:2a:62:4f:3f:df:52: 8d:f3:77:b8:6d:b9:e9:82:b7:96:d5:d5:0b:34:65: bd:40:09:d6:51:fd:72:7d:e3:dd:e5:6b:f8:34:3c: cf:94:9b:a0:1c:96:ed:c5:7a:b8:81:54:1f:67:19: c0:5a:7b:82:35:11:1e:ee:c7:04:5e:39:4e:fd:8b: 8f:00:fc:6c:30:f8:5c:f2:0c:f0:3b:d9:5d:28:1d: 8f:40:0a:0a:14:f1:dc:5d:9d:3c:e2:90:6e:25:88: 36:60:24:ab:ea:84:3b:d1:48:09:61:0f:5f:00:63: a9:2e:d5:e9:83:e0:e6:c5:b9:50:07:46:ad:ca:95: 5f:58:73:fe:77:19:a2:9b:84:fb:40:0d:fc:56:b8: 4f:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:EE:B9:B1:09:FC:44:AB:10:C7:E2:20:79:88:E3:29:D4:65:AE:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/5368e9b8-712e-3eaf-a366-757c94d5124e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.crl X509v3 Authority Key Identifier: keyid:E3:BF:70:21:DC:44:59:AF:5C:63:F9:78:44:66:37:C6:0A:5D:B3:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer sbgp-ipAddrBlock: critical IPv4: 199.66.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:7d:cd:b4:f0:cc:d6:e3:3a:0f:45:ae:ef:02:98:97:a7:a9: 98:51:4a:cc:d8:05:a4:95:7f:7b:47:ff:d3:40:79:1d:7d:23: 33:fa:6e:cb:f9:d5:42:ad:e4:8e:53:34:48:bc:f7:0e:12:8b: 31:2a:9e:7e:31:7f:0b:e4:af:d7:d8:f2:26:dc:8a:90:5c:c7: d3:59:1c:8d:1b:7d:37:de:06:68:43:fa:8c:85:af:26:b8:a3: 79:d6:92:31:52:12:99:51:21:44:ce:af:93:42:f0:3d:aa:06: 88:59:ed:27:81:91:c6:4d:21:d7:8a:21:7e:1d:72:ea:ba:7d: 48:b3:a2:45:07:27:bc:8b:fb:59:be:d1:96:91:1b:1c:a4:69: 45:41:80:0f:44:2c:a4:b1:eb:47:23:f8:9f:9f:48:be:e0:a5: 90:86:a2:92:6e:9a:56:d5:ce:06:26:0d:a6:44:60:e2:a3:1b: 7d:d8:cb:d5:ef:3f:e4:9b:94:69:6e:82:13:63:b3:fb:2e:f3: c9:8b:f2:30:0a:42:df:8c:e0:2d:ce:6e:eb:fc:e1:a0:09:77: cd:15:d0:e2:af:e4:d4:f9:02:88:ac:33:24:71:9f:13:1a:3b: c6:9f:c1:46:f4:3e:f0:6d:d2:3d:4e:71:d2:03:6f:79:66:62: af:b0:e9:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElxFDHscnLiNrPPBQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzNjOGFhN2ItZmFjNy00NDM1LTk1ZGYtZjAxMjAwZGE0 N2Q5MB4XDTI1MDQwNzAxMDA0N1oXDTI1MDcwNjAxMDA0N1owLzEtMCsGA1UEAxMk ZTVlMjFiNzAtMDY4Yi00NDdkLTlmMWQtZWNiMzM1OTg2NWQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTq15/AMW0C5d7iLKNw4uJ+7cXkXEPcHySYx M4w4Fdbvz6XEgoch1zkIn2+58nZ4e2zM5PgJ20yTEL8tyd7VUMbWFboN/1+zyAc6 Nmb4kc3W7XkGjfS4T9zBfHmp8Kh/irs4d4gAC/yBP5EoDi5u//YqYk8/31KN83e4 bbnpgreW1dULNGW9QAnWUf1yfePd5Wv4NDzPlJugHJbtxXq4gVQfZxnAWnuCNREe 7scEXjlO/YuPAPxsMPhc8gzwO9ldKB2PQAoKFPHcXZ084pBuJYg2YCSr6oQ70UgJ YQ9fAGOpLtXpg+DmxblQB0atypVfWHP+dxmim4T7QA38VrhPLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKDuubEJ/ESrEMfiIHmI4ynUZa6PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83M2M4 YWE3Yi1mYWM3LTQ0MzUtOTVkZi1mMDEyMDBkYTQ3ZDkvNTM2OGU5YjgtNzEyZS0z ZWFmLWEzNjYtNzU3Yzk0ZDUxMjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzNjOGFhN2ItZmFjNy00NDM1LTk1 ZGYtZjAxMjAwZGE0N2Q5LzczYzhhYTdiLWZhYzctNDQzNS05NWRmLWYwMTIwMGRh NDdkOS5jcmwwHwYDVR0jBBgwFoAU479wIdxEWa9cY/l4RGY3xgpdsxwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83M2M4YWE3Yi1mYWM3LTQ0MzUtOTVkZi1mMDEy MDBkYTQ3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx0K8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADx9zbTwzNbjOg9Fru8CmJenqZhRSszYBaSVf3tH/9NAeR19IzP6bsv5 1UKt5I5TNEi89w4SizEqnn4xfwvkr9fY8ibcipBcx9NZHI0bfTfeBmhD+oyFrya4 o3nWkjFSEplRIUTOr5NC8D2qBohZ7SeBkcZNIdeKIX4dcuq6fUizokUHJ7yL+1m+ 0ZaRGxykaUVBgA9ELKSx60cj+J+fSL7gpZCGopJumlbVzgYmDaZEYOKjG33Yy9Xv P+SblGlughNjs/su88mL8jAKQt+M4C3Obuv84aAJd80V0OKv5NT5AoisMyRxnxMa O8afwUb0PvBt0j1OcdIDb3lmYq+w6Z0= -----END CERTIFICATE-----Generated at Sun May 11 03:47:18 2025 by rpki-client