$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2b666ba7-a215-4f08-8204-c5b168b3360c/0e86ddca-e803-349f-9e1e-d5560596f44d.roa File: 0e86ddca-e803-349f-9e1e-d5560596f44d.roa (raw, json) Hash identifier: WKtFLRAZrbtOWdYbILYkMKMsA7z0wOOANH2+j5LaOlg= Subject key identifier: 3E:F9:29:09:43:F7:63:86:A6:46:82:AB:81:D0:0A:B5:3D:AB:0E:39 Certificate issuer: /CN=2b666ba7-a215-4f08-8204-c5b168b3360c Certificate serial: 010D0C9F432858496FAF14B3D8F2A66380913060 Authority key identifier: AC:C3:A1:4F:EC:7D:26:06:8B:8A:E4:93:8D:2B:C6:45:EB:70:7F:40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2b666ba7-a215-4f08-8204-c5b168b3360c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2b666ba7-a215-4f08-8204-c5b168b3360c/0e86ddca-e803-349f-9e1e-d5560596f44d.roa Signing time: Sun 06 Apr 2025 13:01:01 +0000 ROA not before: Sun 06 Apr 2025 13:01:01 +0000 ROA not after: Sat 05 Jul 2025 13:01:01 +0000 asID: 25661 IP address blocks: 199.119.140.0/22 maxlen: 24 207.167.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2b666ba7-a215-4f08-8204-c5b168b3360c/2b666ba7-a215-4f08-8204-c5b168b3360c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2b666ba7-a215-4f08-8204-c5b168b3360c/2b666ba7-a215-4f08-8204-c5b168b3360c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2b666ba7-a215-4f08-8204-c5b168b3360c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6f:af:14:b3:d8:f2:a6:63:80:91:30:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b666ba7-a215-4f08-8204-c5b168b3360c Validity Not Before: Apr 6 13:01:01 2025 GMT Not After : Jul 5 13:01:01 2025 GMT Subject: CN=49a741d5-f7bf-4918-b79b-2f1b089dc6bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ec:68:f6:8d:b6:cf:2e:2a:7e:47:70:47:32: 47:6b:fb:b5:57:98:e5:14:b9:96:64:84:45:1f:e6: df:81:54:66:8e:3c:7c:99:e1:b1:2e:03:79:9e:37: b9:fc:1c:fe:f8:46:b5:35:e8:0c:b3:a4:96:a8:8d: d2:be:6a:20:ca:4d:8f:53:92:0f:ab:d6:f8:fb:17: 55:a8:e9:0f:fb:52:ac:9c:d4:7d:b1:97:b8:57:a5: 7b:1f:26:7e:da:0a:9f:9e:89:18:88:05:76:ab:fb: 4f:c5:20:59:4a:c8:8c:5c:f1:af:cf:16:bf:38:c7: 5a:f7:16:b9:25:3a:00:79:0c:21:74:b5:a2:ac:a0: 97:78:85:11:2d:53:52:76:8a:fd:c3:eb:9a:19:db: ec:14:3e:a5:c4:3a:7c:2e:97:1c:34:5c:2b:89:48: 38:40:10:bc:a4:4c:32:90:1a:c5:17:49:56:3b:f5: fd:6d:a3:d1:46:2c:ec:ad:8e:ef:5b:38:bc:ea:7a: ce:f0:40:3d:fe:21:e0:66:14:52:7b:6a:d1:f4:c9: 00:f5:ec:26:ed:8e:89:c8:a9:c0:98:2c:f3:19:b5: d0:ad:03:50:97:ea:ed:72:da:95:f3:e6:70:72:8a: e0:cf:65:89:66:6f:ba:f8:90:ba:2d:b3:7c:32:1d: 2a:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:F9:29:09:43:F7:63:86:A6:46:82:AB:81:D0:0A:B5:3D:AB:0E:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2b666ba7-a215-4f08-8204-c5b168b3360c/0e86ddca-e803-349f-9e1e-d5560596f44d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2b666ba7-a215-4f08-8204-c5b168b3360c/2b666ba7-a215-4f08-8204-c5b168b3360c.crl X509v3 Authority Key Identifier: keyid:AC:C3:A1:4F:EC:7D:26:06:8B:8A:E4:93:8D:2B:C6:45:EB:70:7F:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2b666ba7-a215-4f08-8204-c5b168b3360c.cer sbgp-ipAddrBlock: critical IPv4: 199.119.140.0/22 207.167.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:84:9f:da:cb:45:7f:cc:69:f3:c0:3f:7f:f5:36:91:32:00: 50:bc:ee:4f:a7:6f:94:05:de:92:46:14:68:a4:b8:1f:e5:10: 1e:ab:d0:b2:73:97:9d:40:56:9c:37:69:be:10:d4:78:a5:0a: f2:46:35:aa:c2:5d:28:4f:05:86:ab:82:fb:3c:0a:89:bf:91: 23:76:de:f3:89:a5:3a:ca:a1:41:76:d4:04:ab:60:99:6d:b6: f0:14:71:95:56:85:c3:12:51:b1:ff:97:89:ae:81:4b:61:f1: eb:10:61:99:c8:f1:51:6d:ba:d5:39:e4:1c:1d:c7:af:40:d3: 08:44:41:05:91:14:ab:ea:07:3c:92:ce:b8:f1:8a:2e:25:97: 00:db:1f:3a:38:5b:95:e2:d0:a1:98:51:e6:77:df:82:19:b7: 8b:10:e7:e5:85:b0:20:bf:3b:2e:5d:3a:96:6c:64:c0:08:cd: 2e:70:23:4b:34:f6:7b:db:c7:6d:d6:71:5d:87:47:9d:14:af: c8:a6:53:ad:5f:dd:05:53:88:29:3a:50:02:35:2b:47:2b:18: fd:61:bd:df:79:dc:bc:c6:16:c9:d2:f3:ea:c9:ea:0d:42:cc: 59:c9:41:c3:88:32:ae:0e:8c:a1:53:da:03:d4:90:1f:29:f4: 71:0e:ba:c9 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWElvrxSz2PKmY4CRMGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmI2NjZiYTctYTIxNS00ZjA4LTgyMDQtYzViMTY4YjMz NjBjMB4XDTI1MDQwNjEzMDEwMVoXDTI1MDcwNTEzMDEwMVowLzEtMCsGA1UEAxMk NDlhNzQxZDUtZjdiZi00OTE4LWI3OWItMmYxYjA4OWRjNmJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOxo9o22zy4qfkdwRzJHa/u1V5jlFLmWZIRF H+bfgVRmjjx8meGxLgN5nje5/Bz++Ea1NegMs6SWqI3Svmogyk2PU5IPq9b4+xdV qOkP+1KsnNR9sZe4V6V7HyZ+2gqfnokYiAV2q/tPxSBZSsiMXPGvzxa/OMda9xa5 JToAeQwhdLWirKCXeIURLVNSdor9w+uaGdvsFD6lxDp8LpccNFwriUg4QBC8pEwy kBrFF0lWO/X9baPRRizsrY7vWzi86nrO8EA9/iHgZhRSe2rR9MkA9ewm7Y6JyKnA mCzzGbXQrQNQl+rtctqV8+Zwcorgz2WJZm+6+JC6LbN8Mh0qPQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFD75KQlD92OGpkaCq4HQCrU9qw45MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8yYjY2 NmJhNy1hMjE1LTRmMDgtODIwNC1jNWIxNjhiMzM2MGMvMGU4NmRkY2EtZTgwMy0z NDlmLTllMWUtZDU1NjA1OTZmNDRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMmI2NjZiYTctYTIxNS00ZjA4LTgy MDQtYzViMTY4YjMzNjBjLzJiNjY2YmE3LWEyMTUtNGYwOC04MjA0LWM1YjE2OGIz MzYwYy5jcmwwHwYDVR0jBBgwFoAUrMOhT+x9JgaLiuSTjSvGRetwf0AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8yYjY2NmJhNy1hMjE1LTRmMDgtODIwNC1jNWIx NjhiMzM2MGMuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCx3eMAwQA z6d8MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAIqEn9rLRX/MafPAP3/1NpEyAFC87k+nb5QF3pJGFGikuB/l EB6r0LJzl51AVpw3ab4Q1HilCvJGNarCXShPBYargvs8Com/kSN23vOJpTrKoUF2 1ASrYJlttvAUcZVWhcMSUbH/l4mugUth8esQYZnI8VFtutU55Bwdx69A0whEQQWR FKvqBzySzrjxii4llwDbHzo4W5Xi0KGYUeZ334IZt4sQ5+WFsCC/Oy5dOpZsZMAI zS5wI0s09nvbx23WcV2HR50Ur8imU61f3QVTiCk6UAI1K0crGP1hvd953LzGFsnS 8+rJ6g1CzFnJQcOIMq4OjKFT2gPUkB8p9HEOusk= -----END CERTIFICATE-----Generated at Wed May 7 11:48:43 2025 by rpki-client