$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f5fe3e7-3c15-4742-a824-8c933974ab55/fa68b0de-950c-3c2b-93c2-0c01d381801f.roa File: fa68b0de-950c-3c2b-93c2-0c01d381801f.roa (raw, json) Hash identifier: gIrABzNfBOzo+U4XVlV0hPiLtSE8sDdsLxLmwlHQFDA= Subject key identifier: 7E:E7:F3:E0:97:99:F6:7C:AD:36:B7:42:46:B5:2B:2F:72:A6:EF:EE Certificate issuer: /CN=1f5fe3e7-3c15-4742-a824-8c933974ab55 Certificate serial: 010D0C9F4328584902EC0347C5C3311FBBA0C180 Authority key identifier: 04:16:CB:E5:BD:0C:1A:59:30:EB:0E:72:5C:7A:4E:81:7C:0E:C5:F5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f5fe3e7-3c15-4742-a824-8c933974ab55.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f5fe3e7-3c15-4742-a824-8c933974ab55/fa68b0de-950c-3c2b-93c2-0c01d381801f.roa Signing time: Wed 26 Feb 2025 14:00:51 +0000 ROA not before: Wed 26 Feb 2025 14:00:51 +0000 ROA not after: Tue 27 May 2025 13:00:51 +0000 asID: 16509 IP address blocks: 198.99.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f5fe3e7-3c15-4742-a824-8c933974ab55/1f5fe3e7-3c15-4742-a824-8c933974ab55.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f5fe3e7-3c15-4742-a824-8c933974ab55/1f5fe3e7-3c15-4742-a824-8c933974ab55.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f5fe3e7-3c15-4742-a824-8c933974ab55.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:02:ec:03:47:c5:c3:31:1f:bb:a0:c1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f5fe3e7-3c15-4742-a824-8c933974ab55 Validity Not Before: Feb 26 14:00:51 2025 GMT Not After : May 27 13:00:51 2025 GMT Subject: CN=8d710b72-d7c9-440c-b106-5686cc896048 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:0b:fb:c3:e7:5d:60:ee:f1:5d:09:e5:06:c0: 4e:40:c5:33:3d:e8:d9:74:a2:3d:62:80:de:c7:8e: 6e:10:74:32:cc:b5:8b:2e:a3:ad:9c:8e:c8:a3:b9: a0:9b:2f:5f:8f:c9:27:99:3f:79:cd:44:33:f3:d5: aa:fd:35:17:1f:57:31:f4:4a:36:d7:bd:3f:87:ba: 54:1a:16:23:85:25:52:21:f3:48:d3:c0:58:1e:ad: cd:8a:d3:eb:d0:23:b1:c6:18:55:7b:00:17:62:e2: f3:50:49:37:f3:79:c9:dc:90:20:4e:24:18:a1:89: 98:93:0b:07:07:76:29:84:71:19:ae:78:06:18:23: ff:76:52:a6:55:ea:4c:22:70:df:90:e2:2d:eb:a9: 1d:f7:06:c4:36:18:27:a5:9d:76:cc:ee:71:8a:21: 6d:df:47:c2:5a:d2:4e:a1:0d:d4:e7:39:a5:19:0a: 7e:f1:ab:24:db:a7:41:6f:64:be:28:b4:a8:62:73: 75:4d:fb:03:a2:0b:01:49:9d:fb:a3:36:d9:60:c1: 63:6f:ff:08:14:56:ae:6c:22:4d:e3:5d:17:ed:36: 29:bd:1d:60:e8:7b:18:fd:11:b4:02:26:59:bd:99: 7c:12:93:12:88:a3:2c:47:1c:fa:42:c2:ac:6b:bc: 24:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:E7:F3:E0:97:99:F6:7C:AD:36:B7:42:46:B5:2B:2F:72:A6:EF:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f5fe3e7-3c15-4742-a824-8c933974ab55/fa68b0de-950c-3c2b-93c2-0c01d381801f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f5fe3e7-3c15-4742-a824-8c933974ab55/1f5fe3e7-3c15-4742-a824-8c933974ab55.crl X509v3 Authority Key Identifier: keyid:04:16:CB:E5:BD:0C:1A:59:30:EB:0E:72:5C:7A:4E:81:7C:0E:C5:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f5fe3e7-3c15-4742-a824-8c933974ab55.cer sbgp-ipAddrBlock: critical IPv4: 198.99.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:6b:aa:04:2c:22:5d:86:c9:d1:67:72:e5:e6:9f:a7:7a:e4: 2e:a1:0b:75:4d:ea:3e:75:0a:88:04:c7:71:ca:90:dc:88:b0: 30:22:dc:95:86:a4:26:07:21:2e:15:d0:dd:ee:90:1d:47:cd: e5:84:e4:53:33:bb:d9:d0:9f:9c:91:f9:ca:08:6d:ab:5a:e0: 9b:ed:fb:a0:ae:85:1d:e5:97:14:06:d7:b1:cd:d6:cb:2b:58: 56:06:9e:1d:02:61:bc:29:eb:5c:75:3c:9a:62:4d:1a:36:22: 95:cf:66:1c:af:83:74:32:ce:c2:d3:40:b4:90:82:56:07:94: 87:f0:6f:08:aa:5f:cb:6a:56:47:85:39:c3:bb:7f:54:ca:29: ff:c3:3c:16:d7:7f:6d:d3:46:af:21:09:a4:b3:cc:a2:a9:09: 3a:e2:89:9b:11:bb:6c:a6:f9:84:7c:7c:90:29:b3:f9:7e:90: 29:c1:ee:c5:24:61:c0:d1:63:fc:4a:5d:33:c4:d9:cb:dd:fd: 5c:d7:94:ed:2e:8a:7c:90:69:da:ea:2a:fd:cb:03:ea:05:99: c0:c7:46:28:ce:28:12:78:aa:ab:70:dd:27:0c:4f:3b:5d:89: 66:89:a7:75:f5:94:a0:fe:46:5e:ac:d9:b7:be:b3:66:fc:7e: 7d:3d:48:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkC7ANHxcMxH7ugwYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWY1ZmUzZTctM2MxNS00NzQyLWE4MjQtOGM5MzM5NzRh YjU1MB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk OGQ3MTBiNzItZDdjOS00NDBjLWIxMDYtNTY4NmNjODk2MDQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAv7w+ddYO7xXQnlBsBOQMUzPejZdKI9YoDe x45uEHQyzLWLLqOtnI7Io7mgmy9fj8knmT95zUQz89Wq/TUXH1cx9Eo2170/h7pU GhYjhSVSIfNI08BYHq3NitPr0COxxhhVewAXYuLzUEk383nJ3JAgTiQYoYmYkwsH B3YphHEZrngGGCP/dlKmVepMInDfkOIt66kd9wbENhgnpZ12zO5xiiFt30fCWtJO oQ3U5zmlGQp+8ask26dBb2S+KLSoYnN1TfsDogsBSZ37ozbZYMFjb/8IFFaubCJN 410X7TYpvR1g6HsY/RG0AiZZvZl8EpMSiKMsRxz6QsKsa7wkQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH7n8+CXmfZ8rTa3Qka1Ky9ypu/uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xZjVm ZTNlNy0zYzE1LTQ3NDItYTgyNC04YzkzMzk3NGFiNTUvZmE2OGIwZGUtOTUwYy0z YzJiLTkzYzItMGMwMWQzODE4MDFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWY1ZmUzZTctM2MxNS00NzQyLWE4 MjQtOGM5MzM5NzRhYjU1LzFmNWZlM2U3LTNjMTUtNDc0Mi1hODI0LThjOTMzOTc0 YWI1NS5jcmwwHwYDVR0jBBgwFoAUBBbL5b0MGlkw6w5yXHpOgXwOxfUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xZjVmZTNlNy0zYzE1LTQ3NDItYTgyNC04Yzkz Mzk3NGFiNTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxmN7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAxrqgQsIl2GydFncuXmn6d65C6hC3VN6j51CogEx3HKkNyIsDAi3JWG pCYHIS4V0N3ukB1HzeWE5FMzu9nQn5yR+coIbata4Jvt+6CuhR3llxQG17HN1ssr WFYGnh0CYbwp61x1PJpiTRo2IpXPZhyvg3QyzsLTQLSQglYHlIfwbwiqX8tqVkeF OcO7f1TKKf/DPBbXf23TRq8hCaSzzKKpCTriiZsRu2ym+YR8fJAps/l+kCnB7sUk YcDRY/xKXTPE2cvd/VzXlO0uinyQadrqKv3LA+oFmcDHRijOKBJ4qqtw3ScMTztd iWaJp3X1lKD+Rl6s2be+s2b8fn09SN0= -----END CERTIFICATE-----Generated at Tue May 6 12:57:56 2025 by rpki-client