$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/891700c1-b3f6-3099-9f5f-78ba0b27d31f.roa File: 891700c1-b3f6-3099-9f5f-78ba0b27d31f.roa (raw, json) Hash identifier: 576MPLC1clpFoW9gGk5J6IsxPJ6AdBNCWd2Y8UBcXrQ= Subject key identifier: A1:BE:68:5E:95:8A:45:D4:38:69:48:77:09:F2:81:AC:89:79:50:94 Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b Certificate serial: 010D0C9F43285849912F2BF772BD715834471580 Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/891700c1-b3f6-3099-9f5f-78ba0b27d31f.roa Signing time: Fri 18 Apr 2025 13:00:59 +0000 ROA not before: Fri 18 Apr 2025 13:00:59 +0000 ROA not after: Thu 17 Jul 2025 13:00:59 +0000 asID: 21949 IP address blocks: 199.45.144.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:91:2f:2b:f7:72:bd:71:58:34:47:15:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b Validity Not Before: Apr 18 13:00:59 2025 GMT Not After : Jul 17 13:00:59 2025 GMT Subject: CN=3f16860d-cc5a-4307-84aa-2333b40181bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:26:0f:9c:8e:ba:10:97:1e:8b:7d:93:9e:6d: 73:6d:8d:7f:77:c3:9c:51:38:a7:42:89:49:b1:5a: df:bc:1a:1c:61:ae:d6:bd:93:83:73:62:5a:77:d8: 84:2d:5f:ac:22:cb:b9:bb:4f:ca:93:1d:29:dc:ba: 6a:e6:80:7e:ff:44:0c:4a:fb:09:a1:fb:50:71:71: 27:3f:88:df:cc:35:b7:22:42:df:79:9c:f8:a2:14: e7:2a:1b:43:ed:aa:83:db:78:a5:a9:70:8c:0a:8c: 0a:5a:3c:38:0d:f2:ec:0e:0d:5d:b8:ff:87:19:0f: 75:6f:0b:6e:8b:e2:98:72:7c:45:35:d9:f7:c3:d3: 85:4d:ff:f3:83:8c:ed:f2:27:65:fd:0a:2e:20:f1: bb:3d:82:bc:bd:77:64:4d:a7:c7:a5:85:53:f0:3d: 8a:e2:1a:03:fe:2f:ca:bd:2a:63:96:b0:58:33:4b: 23:6a:fc:ef:d8:3d:5d:e9:46:5f:4e:97:6b:07:a3: cc:00:9d:f2:35:7c:bc:d0:4c:18:ba:93:21:79:68: 9d:63:d1:9b:03:1c:12:31:33:00:20:97:db:a7:bd: 46:cd:5d:82:72:05:f5:98:66:25:7e:9a:40:3a:bf: a9:ee:07:49:fb:76:25:47:13:c3:be:ad:5d:42:8f: 13:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:BE:68:5E:95:8A:45:D4:38:69:48:77:09:F2:81:AC:89:79:50:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/891700c1-b3f6-3099-9f5f-78ba0b27d31f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl X509v3 Authority Key Identifier: keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer sbgp-ipAddrBlock: critical IPv4: 199.45.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:ee:8f:87:d2:bf:c4:1d:33:22:dc:e6:1d:65:96:64:dd:d5: d9:09:2b:01:08:37:5c:47:8f:60:92:91:a1:85:36:92:c1:ee: eb:81:0a:c7:e3:f3:fb:2b:86:5d:64:18:63:68:b7:fd:19:43: a4:36:e0:70:39:35:c4:2f:77:92:c1:0e:e3:27:0c:24:fa:f2: 0b:a3:c2:22:5c:e8:63:1a:a2:a5:5e:d0:24:b4:73:3a:55:e8: 43:61:4e:9f:c0:89:d3:56:1e:3d:c3:7d:d4:a3:86:ac:e6:0b: f3:05:40:ff:b9:e4:03:08:9d:6c:76:40:9d:81:63:53:06:e4: 30:d1:d0:67:af:1b:88:6c:9d:cd:98:00:7f:15:dd:d9:bf:4e: b2:a5:d5:c6:6a:89:da:01:02:bc:39:e1:5e:56:63:eb:16:34: 5d:88:0f:2f:df:1e:99:4b:fc:1f:f3:02:2b:6a:17:d3:de:27: c6:b8:d7:ee:d5:d9:22:57:73:4d:35:96:33:6f:95:25:cf:0b: 15:3c:e6:ff:b1:6b:c3:26:71:09:77:05:8f:f0:59:87:e4:c6: 54:13:f2:23:cb:a2:3e:e9:b0:50:91:82:c4:ae:69:40:1d:ac: 10:e7:95:52:4d:92:bc:41:5b:fd:6c:ad:9f:2c:cf:6a:15:63: 36:ae:e7:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmRLyv3cr1xWDRHFYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ5MTQwY2EtMjc3ZS00ODcxLWExMDAtNDUxZDA2NmQx YzViMB4XDTI1MDQxODEzMDA1OVoXDTI1MDcxNzEzMDA1OVowLzEtMCsGA1UEAxMk M2YxNjg2MGQtY2M1YS00MzA3LTg0YWEtMjMzM2I0MDE4MWJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiiYPnI66EJcei32Tnm1zbY1/d8OcUTinQolJ sVrfvBocYa7WvZODc2Jad9iELV+sIsu5u0/Kkx0p3Lpq5oB+/0QMSvsJoftQcXEn P4jfzDW3IkLfeZz4ohTnKhtD7aqD23ilqXCMCowKWjw4DfLsDg1duP+HGQ91bwtu i+KYcnxFNdn3w9OFTf/zg4zt8idl/QouIPG7PYK8vXdkTafHpYVT8D2K4hoD/i/K vSpjlrBYM0sjavzv2D1d6UZfTpdrB6PMAJ3yNXy80EwYupMheWidY9GbAxwSMTMA IJfbp71GzV2CcgX1mGYlfppAOr+p7gdJ+3YlRxPDvq1dQo8TOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKG+aF6VikXUOGlIdwnygayJeVCUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkx NDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFkMDY2ZDFjNWIvODkxNzAwYzEtYjNmNi0z MDk5LTlmNWYtNzhiYTBiMjdkMzFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjQ5MTQwY2EtMjc3ZS00ODcxLWEx MDAtNDUxZDA2NmQxYzViLzI0OTE0MGNhLTI3N2UtNDg3MS1hMTAwLTQ1MWQwNjZk MWM1Yi5jcmwwHwYDVR0jBBgwFoAUcCTs3b7y+uva+LVMugLAQ4E9SMkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkxNDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFk MDY2ZDFjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxy2QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABPuj4fSv8QdMyLc5h1llmTd1dkJKwEIN1xHj2CSkaGFNpLB7uuBCsfj 8/srhl1kGGNot/0ZQ6Q24HA5NcQvd5LBDuMnDCT68gujwiJc6GMaoqVe0CS0czpV 6ENhTp/AidNWHj3DfdSjhqzmC/MFQP+55AMInWx2QJ2BY1MG5DDR0GevG4hsnc2Y AH8V3dm/TrKl1cZqidoBArw54V5WY+sWNF2IDy/fHplL/B/zAitqF9PeJ8a41+7V 2SJXc001ljNvlSXPCxU85v+xa8MmcQl3BY/wWYfkxlQT8iPLoj7psFCRgsSuaUAd rBDnlVJNkrxBW/1srZ8sz2oVYzau57Q= -----END CERTIFICATE-----Generated at Mon May 12 07:12:55 2025 by rpki-client