$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ceaf7c2b-544f-4639-a6ad-4b0bac926ab8/8c609069-4384-3695-9ac5-2533f2d92953.roa File: 8c609069-4384-3695-9ac5-2533f2d92953.roa (raw, json) Hash identifier: nJ9vCYO3MbG4EQtNn0bjDKM5xJYfW9h6CfAO/B/Q7BI= Subject key identifier: FA:64:00:D5:2B:EA:15:CE:B9:12:CF:A2:7B:26:AA:77:45:FE:E2:F5 Certificate issuer: /CN=ceaf7c2b-544f-4639-a6ad-4b0bac926ab8 Certificate serial: 010D0C9F432858495C243F36DCF008CF5D97D880 Authority key identifier: 9F:30:CF:EA:1B:C7:54:A8:51:5D:E3:99:6A:E1:50:F3:25:1B:99:C8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ceaf7c2b-544f-4639-a6ad-4b0bac926ab8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ceaf7c2b-544f-4639-a6ad-4b0bac926ab8/8c609069-4384-3695-9ac5-2533f2d92953.roa Signing time: Sun 30 Mar 2025 13:01:02 +0000 ROA not before: Sun 30 Mar 2025 13:01:02 +0000 ROA not after: Sat 28 Jun 2025 13:01:02 +0000 asID: 46523 IP address blocks: 199.38.56.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ceaf7c2b-544f-4639-a6ad-4b0bac926ab8/ceaf7c2b-544f-4639-a6ad-4b0bac926ab8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ceaf7c2b-544f-4639-a6ad-4b0bac926ab8/ceaf7c2b-544f-4639-a6ad-4b0bac926ab8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ceaf7c2b-544f-4639-a6ad-4b0bac926ab8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5c:24:3f:36:dc:f0:08:cf:5d:97:d8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ceaf7c2b-544f-4639-a6ad-4b0bac926ab8 Validity Not Before: Mar 30 13:01:02 2025 GMT Not After : Jun 28 13:01:02 2025 GMT Subject: CN=18682b25-0bd7-4293-a40f-239546d101cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:72:dc:a2:43:40:fe:f0:39:25:04:2d:3f:1c: 59:af:b5:c1:8b:17:8e:d7:33:67:3d:a5:13:24:dc: fe:04:9f:fb:a4:6d:5e:c7:1f:b7:d8:ad:30:a2:12: e7:d1:65:fd:71:f1:0b:1e:ed:79:12:86:b2:ef:62: 24:bb:e2:49:3d:87:f6:7c:57:2b:79:b2:ce:1d:90: ce:b1:ba:3e:4a:81:9e:56:3a:a2:8c:75:df:cf:46: 4d:99:f8:9a:13:94:10:dd:ca:9e:ed:92:cb:a6:29: f7:95:75:3c:1c:dc:2d:7a:58:5f:0a:0f:67:45:73: ca:51:cc:41:57:30:0c:1b:13:77:67:45:d1:1b:03: 39:0b:a2:98:85:ec:9c:ab:4f:c3:bf:58:fa:45:6e: a7:8e:3e:6a:70:92:f2:0f:80:1d:5f:44:9d:d3:77: 74:42:e8:4d:50:ee:b0:32:a1:9c:f9:65:02:31:dd: 24:64:04:f0:2f:f6:e0:f3:eb:77:c5:0a:0c:18:15: 68:b2:2c:c0:37:86:f5:8c:54:9e:b7:79:88:0e:b9: d6:58:33:9a:2b:e9:c8:46:10:91:9b:20:02:a5:46: 2c:59:39:71:67:34:d3:29:1d:72:a0:30:83:95:d2: b2:10:3e:cf:a5:94:43:ce:a5:09:26:71:65:53:c5: ac:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:64:00:D5:2B:EA:15:CE:B9:12:CF:A2:7B:26:AA:77:45:FE:E2:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ceaf7c2b-544f-4639-a6ad-4b0bac926ab8/8c609069-4384-3695-9ac5-2533f2d92953.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ceaf7c2b-544f-4639-a6ad-4b0bac926ab8/ceaf7c2b-544f-4639-a6ad-4b0bac926ab8.crl X509v3 Authority Key Identifier: keyid:9F:30:CF:EA:1B:C7:54:A8:51:5D:E3:99:6A:E1:50:F3:25:1B:99:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ceaf7c2b-544f-4639-a6ad-4b0bac926ab8.cer sbgp-ipAddrBlock: critical IPv4: 199.38.56.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:b9:18:57:64:bd:cc:65:e2:bd:b8:28:a0:18:55:ef:b6:c8: 87:50:82:8e:70:a3:11:ea:2c:a3:12:de:5b:7d:06:c4:96:90: f0:b2:4a:aa:9f:d8:82:a8:33:b3:ac:03:3f:9b:89:5c:9a:a8: 98:71:a9:91:a6:1b:ea:de:a9:7d:a5:b4:76:f1:77:73:d0:90: dd:83:25:71:08:ed:5b:64:87:7c:95:6e:bc:f1:4d:7f:9b:77: 61:91:dd:6d:fe:2e:18:25:a9:32:b4:1d:64:aa:72:31:8d:f1: a1:0f:cb:df:8f:a6:9b:ee:e2:29:e4:6a:ba:c5:08:da:1c:c0: 74:45:a6:ca:62:ee:2a:75:ae:68:a5:ad:cf:9c:2c:9d:4a:eb: 18:21:2c:4b:9b:da:a2:f2:5c:e7:24:b4:76:d8:bd:a5:ce:e7: 77:55:be:60:58:02:f0:de:a6:59:a5:6d:fb:b7:7e:ac:ad:e5: fc:b3:c3:d7:60:19:15:9f:72:b5:17:71:ba:a5:9d:de:64:a7: 1d:9d:4d:72:8b:62:a7:25:9c:c9:b1:9c:3d:e5:28:99:56:a8: 2b:a6:23:f8:00:16:97:c4:e3:74:2c:36:08:dc:f5:2c:13:2d: 00:0b:7a:94:28:6b:60:02:c3:05:53:67:d8:ce:47:20:f0:d2: 5c:c6:0e:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElcJD823PAIz12X2IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VhZjdjMmItNTQ0Zi00NjM5LWE2YWQtNGIwYmFjOTI2 YWI4MB4XDTI1MDMzMDEzMDEwMloXDTI1MDYyODEzMDEwMlowLzEtMCsGA1UEAxMk MTg2ODJiMjUtMGJkNy00MjkzLWE0MGYtMjM5NTQ2ZDEwMWNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhXLcokNA/vA5JQQtPxxZr7XBixeO1zNnPaUT JNz+BJ/7pG1exx+32K0wohLn0WX9cfELHu15Eoay72Iku+JJPYf2fFcrebLOHZDO sbo+SoGeVjqijHXfz0ZNmfiaE5QQ3cqe7ZLLpin3lXU8HNwtelhfCg9nRXPKUcxB VzAMGxN3Z0XRGwM5C6KYheycq0/Dv1j6RW6njj5qcJLyD4AdX0Sd03d0QuhNUO6w MqGc+WUCMd0kZATwL/bg8+t3xQoMGBVosizAN4b1jFSet3mIDrnWWDOaK+nIRhCR myACpUYsWTlxZzTTKR1yoDCDldKyED7PpZRDzqUJJnFlU8WsdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPpkANUr6hXOuRLPonsmqndF/uL1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9jZWFm N2MyYi01NDRmLTQ2MzktYTZhZC00YjBiYWM5MjZhYjgvOGM2MDkwNjktNDM4NC0z Njk1LTlhYzUtMjUzM2YyZDkyOTUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvY2VhZjdjMmItNTQ0Zi00NjM5LWE2 YWQtNGIwYmFjOTI2YWI4L2NlYWY3YzJiLTU0NGYtNDYzOS1hNmFkLTRiMGJhYzky NmFiOC5jcmwwHwYDVR0jBBgwFoAUnzDP6hvHVKhRXeOZauFQ8yUbmcgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9jZWFmN2MyYi01NDRmLTQ2MzktYTZhZC00YjBi YWM5MjZhYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxyY4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADS5GFdkvcxl4r24KKAYVe+2yIdQgo5woxHqLKMS3lt9BsSWkPCySqqf 2IKoM7OsAz+biVyaqJhxqZGmG+reqX2ltHbxd3PQkN2DJXEI7Vtkh3yVbrzxTX+b d2GR3W3+LhglqTK0HWSqcjGN8aEPy9+Pppvu4inkarrFCNocwHRFpspi7ip1rmil rc+cLJ1K6xghLEub2qLyXOcktHbYvaXO53dVvmBYAvDeplmlbfu3fqyt5fyzw9dg GRWfcrUXcbqlnd5kpx2dTXKLYqclnMmxnD3lKJlWqCumI/gAFpfE43QsNgjc9SwT LQALepQoa2ACwwVTZ9jORyDw0lzGDhY= -----END CERTIFICATE-----Generated at Sun May 11 14:54:26 2025 by rpki-client