$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979/a0319291-6260-33b7-94e3-177209ea6dc7.roa File: a0319291-6260-33b7-94e3-177209ea6dc7.roa (raw, json) Hash identifier: TZaa7wQ29pqfKf6HWxsSEdmRZoVl5tgPg6PFcqzR06g= Subject key identifier: C0:DA:C0:81:C7:16:64:26:ED:0F:FC:E6:DA:EC:AA:F0:A3:E1:D3:6E Certificate issuer: /CN=4e87d83f-b50c-4a65-9d9a-c28458fc1979 Certificate serial: 010D0C9F43285849350EA7583267B2DA89CB3800 Authority key identifier: 1A:08:01:51:82:F8:E8:30:43:E7:6A:B3:45:CD:54:72:A4:B4:CD:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979/a0319291-6260-33b7-94e3-177209ea6dc7.roa Signing time: Sun 16 Mar 2025 13:00:52 +0000 ROA not before: Sun 16 Mar 2025 13:00:52 +0000 ROA not after: Sat 14 Jun 2025 13:00:52 +0000 asID: 394449 IP address blocks: 199.68.53.0/24 maxlen: 24 2604:3dc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979/4e87d83f-b50c-4a65-9d9a-c28458fc1979.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979/4e87d83f-b50c-4a65-9d9a-c28458fc1979.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:35:0e:a7:58:32:67:b2:da:89:cb:38:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e87d83f-b50c-4a65-9d9a-c28458fc1979 Validity Not Before: Mar 16 13:00:52 2025 GMT Not After : Jun 14 13:00:52 2025 GMT Subject: CN=24041d97-3d7b-4e4e-9801-89fb8bd147d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:22:ca:78:c1:6f:e2:7f:e3:79:09:e4:33:22: 5c:e6:05:3e:f0:44:8b:7a:3d:f2:2b:cd:ce:57:97: 98:70:6b:13:b8:b5:c2:b4:cc:bd:2c:df:5a:44:1e: c2:c4:68:db:51:b8:73:19:1b:4a:8f:cc:a0:ca:f4: 69:b6:4a:79:95:28:15:d7:89:d3:7a:90:89:51:93: 5b:65:97:ad:10:88:e0:dc:52:b3:cc:dd:17:2d:7b: dc:4f:82:4d:69:bc:e6:81:fa:17:a4:66:b6:ae:49: 44:17:45:3a:24:11:3f:72:46:8c:31:db:43:b5:db: cb:1e:6a:4e:d4:1f:7b:ab:11:f8:75:96:c1:9f:7b: cf:14:6f:b4:56:26:a4:8b:81:b4:76:ec:68:3e:bb: e7:65:f3:3f:4d:03:a9:45:ab:35:05:6f:d7:6c:ca: ab:b6:53:17:b1:98:14:1a:d3:94:6f:67:ea:d4:d8: 20:68:63:4f:b8:8c:55:9e:c3:c4:7c:06:f9:74:8b: 94:bc:dd:5a:b5:87:03:47:84:5c:1d:ad:e7:77:b0: 9e:52:7d:b8:e1:fd:f2:68:9c:3b:3f:7a:47:8a:8a: f0:8c:bc:f6:9a:5d:13:7d:d2:e4:0d:32:1b:93:04: 48:21:ab:1e:d2:0f:5e:35:8f:e1:1c:50:07:3f:dd: 52:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:DA:C0:81:C7:16:64:26:ED:0F:FC:E6:DA:EC:AA:F0:A3:E1:D3:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979/a0319291-6260-33b7-94e3-177209ea6dc7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979/4e87d83f-b50c-4a65-9d9a-c28458fc1979.crl X509v3 Authority Key Identifier: keyid:1A:08:01:51:82:F8:E8:30:43:E7:6A:B3:45:CD:54:72:A4:B4:CD:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979.cer sbgp-ipAddrBlock: critical IPv4: 199.68.53.0/24 IPv6: 2604:3dc0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:bc:10:97:14:0e:39:1d:1a:31:d8:8a:5b:0e:30:0c:bb:ed: 79:ee:c4:10:f5:35:bf:ee:75:27:0a:9c:27:46:a6:66:ad:0f: cb:ca:29:a1:40:ef:23:6e:fa:d0:80:8e:ae:ff:b6:2b:4b:05: a3:5d:c5:02:c3:1a:dc:3e:65:27:c7:8a:e1:55:8f:99:03:54: 51:8e:64:c8:54:5d:fb:e0:53:3f:b4:06:d2:23:00:94:49:3d: 51:32:9d:45:e7:80:5f:6e:50:ea:fa:0b:36:f7:4e:0b:3f:a8: b7:ce:d0:32:4a:9d:d8:b7:26:10:43:1e:ef:ab:21:ca:64:2a: c0:cc:7d:30:94:41:4a:96:ab:f5:eb:32:32:e2:22:af:87:55: ef:2c:48:ba:c1:e1:59:fe:de:5b:8e:33:b1:1c:0f:bd:9d:ab: 64:90:8e:ed:40:99:13:94:cf:1f:c7:d8:01:09:b8:a0:04:7d: 70:af:91:14:0c:4c:10:50:c0:16:28:e4:eb:db:26:36:82:42: b6:e4:39:9a:97:ae:ac:64:6a:d0:d1:c3:9f:31:20:b3:0d:43: da:e5:b0:99:16:32:0d:c2:d0:89:c2:cd:4a:b7:20:65:fd:52: a3:4d:17:c5:8f:b1:dd:f1:56:8e:5e:a3:cf:cb:34:6b:fe:b8: 62:3a:59:6c -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEk1DqdYMmey2onLOAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU4N2Q4M2YtYjUwYy00YTY1LTlkOWEtYzI4NDU4ZmMx OTc5MB4XDTI1MDMxNjEzMDA1MloXDTI1MDYxNDEzMDA1MlowLzEtMCsGA1UEAxMk MjQwNDFkOTctM2Q3Yi00ZTRlLTk4MDEtODlmYjhiZDE0N2Q1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryLKeMFv4n/jeQnkMyJc5gU+8ESLej3yK83O V5eYcGsTuLXCtMy9LN9aRB7CxGjbUbhzGRtKj8ygyvRptkp5lSgV14nTepCJUZNb ZZetEIjg3FKzzN0XLXvcT4JNabzmgfoXpGa2rklEF0U6JBE/ckaMMdtDtdvLHmpO 1B97qxH4dZbBn3vPFG+0Viaki4G0duxoPrvnZfM/TQOpRas1BW/XbMqrtlMXsZgU GtOUb2fq1NggaGNPuIxVnsPEfAb5dIuUvN1atYcDR4RcHa3nd7CeUn244f3yaJw7 P3pHiorwjLz2ml0TfdLkDTIbkwRIIase0g9eNY/hHFAHP91SlwIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFMDawIHHFmQm7Q/85trsqvCj4dNuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTg3 ZDgzZi1iNTBjLTRhNjUtOWQ5YS1jMjg0NThmYzE5NzkvYTAzMTkyOTEtNjI2MC0z M2I3LTk0ZTMtMTc3MjA5ZWE2ZGM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGU4N2Q4M2YtYjUwYy00YTY1LTlk OWEtYzI4NDU4ZmMxOTc5LzRlODdkODNmLWI1MGMtNGE2NS05ZDlhLWMyODQ1OGZj MTk3OS5jcmwwHwYDVR0jBBgwFoAUGggBUYL46DBD52qzRc1UcqS0zfwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTg3ZDgzZi1iNTBjLTRhNjUtOWQ5YS1jMjg0 NThmYzE5NzkuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAx0Q1MA0E AgACMAcDBQAmBD3AMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAH28EJcUDjkdGjHYilsOMAy77XnuxBD1Nb/u dScKnCdGpmatD8vKKaFA7yNu+tCAjq7/titLBaNdxQLDGtw+ZSfHiuFVj5kDVFGO ZMhUXfvgUz+0BtIjAJRJPVEynUXngF9uUOr6Czb3Tgs/qLfO0DJKndi3JhBDHu+r IcpkKsDMfTCUQUqWq/XrMjLiIq+HVe8sSLrB4Vn+3luOM7EcD72dq2SQju1AmROU zx/H2AEJuKAEfXCvkRQMTBBQwBYo5OvbJjaCQrbkOZqXrqxkatDRw58xILMNQ9rl sJkWMg3C0InCzUq3IGX9UqNNF8WPsd3xVo5eo8/LNGv+uGI6WWw= -----END CERTIFICATE-----Generated at Sun May 11 02:01:35 2025 by rpki-client