$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/b0dfcc6d-f3df-3256-be73-0e9694e8e57f.roa File: b0dfcc6d-f3df-3256-be73-0e9694e8e57f.roa (raw, json) Hash identifier: TtcL5XVN9bYUz9qrkI648bBCiGWph2Uuxe9IdDHSwwc= Subject key identifier: 0B:EE:42:51:43:E2:00:40:62:7B:C5:E6:75:B9:60:CA:45:76:52:CE Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b Certificate serial: 010D0C9F43285849912F2BCC167DC6D5D9B84900 Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/b0dfcc6d-f3df-3256-be73-0e9694e8e57f.roa Signing time: Fri 18 Apr 2025 13:00:59 +0000 ROA not before: Fri 18 Apr 2025 13:00:59 +0000 ROA not after: Thu 17 Jul 2025 13:00:59 +0000 asID: 21949 IP address blocks: 199.45.164.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:91:2f:2b:cc:16:7d:c6:d5:d9:b8:49:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b Validity Not Before: Apr 18 13:00:59 2025 GMT Not After : Jul 17 13:00:59 2025 GMT Subject: CN=2b48585f-5316-4240-9ed9-2c1320fe8bba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:41:9c:b7:68:42:91:a4:b0:ee:81:c1:38:ff: 87:97:87:35:60:a9:35:88:97:93:f9:1a:64:0a:c3: e2:81:7d:4a:e2:68:ca:24:49:6f:2a:a0:a1:13:72: c7:5f:83:3f:1a:05:09:d3:fc:54:45:3a:93:6a:00: 19:06:a5:89:4b:4b:ce:16:87:d5:34:7c:05:38:20: 51:5d:63:20:a8:b9:d7:28:5d:26:3e:ac:bb:5e:e2: eb:c0:f8:30:be:5f:14:51:ef:70:6f:44:d8:26:81: f3:9a:c5:51:c8:e3:90:7b:c2:f8:7f:32:96:81:79: 3a:3a:c7:7f:b7:e2:ee:33:23:dc:f8:42:e9:8f:21: e9:01:d4:b1:e3:41:56:6e:56:a5:4b:7b:d8:e2:b9: dc:42:9e:82:1a:d3:94:b6:cd:80:77:29:9c:d7:68: a3:7e:a6:23:52:fd:47:3a:bd:f8:dd:0e:04:39:2f: 32:21:be:24:6c:cd:4b:84:92:4f:57:04:a4:4c:9c: 24:9a:77:b0:75:7f:3c:54:34:9b:a7:02:67:23:4d: 9f:f4:ba:56:70:28:31:bf:a7:53:c3:a6:28:fe:0b: 2e:ad:85:1f:a3:61:36:7d:a9:cb:2a:21:6b:ad:8a: 9b:b8:81:91:c4:21:e0:8d:1b:45:46:71:4a:ad:eb: e0:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:EE:42:51:43:E2:00:40:62:7B:C5:E6:75:B9:60:CA:45:76:52:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/b0dfcc6d-f3df-3256-be73-0e9694e8e57f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl X509v3 Authority Key Identifier: keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer sbgp-ipAddrBlock: critical IPv4: 199.45.164.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:77:47:c5:09:8a:75:a2:18:6a:e3:10:0c:d9:86:14:69:45: d1:27:52:c9:d0:53:b7:14:4d:49:59:51:b7:c1:54:5d:5c:cc: 66:58:01:ea:f6:d0:a7:b3:af:ba:ae:23:5b:bc:69:43:cf:e0: 17:cf:94:f6:2a:29:cd:4f:95:b2:bf:a7:63:51:30:b0:ca:53: 85:f4:87:ab:cc:ab:af:79:bc:61:a3:de:60:fd:d6:28:15:d8: 65:9b:1f:08:06:4b:72:11:8f:ac:9b:0f:51:3c:56:cd:b5:98: 4e:a9:53:80:9c:2d:c7:33:7a:0f:49:ec:3f:40:68:49:5e:95: db:c6:c5:cd:5a:46:78:7b:fb:0a:32:76:79:12:ec:ac:bc:51: e1:16:5f:fd:9f:3f:b0:1b:c7:20:aa:56:d5:fe:d9:93:9c:94: 9e:1c:b5:1f:f7:0f:d9:83:b2:12:42:af:3b:50:61:3f:4c:75: e8:dd:d4:00:62:6c:27:22:40:26:12:b3:84:4b:de:ad:b1:62: 6e:c1:86:b4:11:17:77:44:2b:17:3b:ba:c8:f5:6c:73:37:9a: 8d:16:7b:af:b3:75:c7:82:b1:bd:ec:96:ce:88:b5:cf:12:7e: 64:38:52:3a:53:b8:11:98:ed:2e:d8:8d:2d:16:8a:c8:20:67: 84:3c:9b:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmRLyvMFn3G1dm4SQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ5MTQwY2EtMjc3ZS00ODcxLWExMDAtNDUxZDA2NmQx YzViMB4XDTI1MDQxODEzMDA1OVoXDTI1MDcxNzEzMDA1OVowLzEtMCsGA1UEAxMk MmI0ODU4NWYtNTMxNi00MjQwLTllZDktMmMxMzIwZmU4YmJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkGct2hCkaSw7oHBOP+Hl4c1YKk1iJeT+Rpk CsPigX1K4mjKJElvKqChE3LHX4M/GgUJ0/xURTqTagAZBqWJS0vOFofVNHwFOCBR XWMgqLnXKF0mPqy7XuLrwPgwvl8UUe9wb0TYJoHzmsVRyOOQe8L4fzKWgXk6Osd/ t+LuMyPc+ELpjyHpAdSx40FWblalS3vY4rncQp6CGtOUts2Adymc12ijfqYjUv1H Or343Q4EOS8yIb4kbM1LhJJPVwSkTJwkmnewdX88VDSbpwJnI02f9LpWcCgxv6dT w6Yo/gsurYUfo2E2fanLKiFrrYqbuIGRxCHgjRtFRnFKrevg2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAvuQlFD4gBAYnvF5nW5YMpFdlLOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkx NDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFkMDY2ZDFjNWIvYjBkZmNjNmQtZjNkZi0z MjU2LWJlNzMtMGU5Njk0ZThlNTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjQ5MTQwY2EtMjc3ZS00ODcxLWEx MDAtNDUxZDA2NmQxYzViLzI0OTE0MGNhLTI3N2UtNDg3MS1hMTAwLTQ1MWQwNjZk MWM1Yi5jcmwwHwYDVR0jBBgwFoAUcCTs3b7y+uva+LVMugLAQ4E9SMkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkxNDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFk MDY2ZDFjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxy2kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABl3R8UJinWiGGrjEAzZhhRpRdEnUsnQU7cUTUlZUbfBVF1czGZYAer2 0Kezr7quI1u8aUPP4BfPlPYqKc1PlbK/p2NRMLDKU4X0h6vMq695vGGj3mD91igV 2GWbHwgGS3IRj6ybD1E8Vs21mE6pU4CcLcczeg9J7D9AaEleldvGxc1aRnh7+woy dnkS7Ky8UeEWX/2fP7AbxyCqVtX+2ZOclJ4ctR/3D9mDshJCrztQYT9Mdejd1ABi bCciQCYSs4RL3q2xYm7BhrQRF3dEKxc7usj1bHM3mo0We6+zdceCsb3sls6Itc8S fmQ4UjpTuBGY7S7YjS0WisggZ4Q8m5U= -----END CERTIFICATE-----Generated at Sun May 11 03:55:23 2025 by rpki-client