$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/1b54a3eb-c57f-38c6-85bb-063509906029.roa File: 1b54a3eb-c57f-38c6-85bb-063509906029.roa (raw, json) Hash identifier: xm6vOQf/dZXnoEm9YkFSWY8ReuM9LpHNmr/hSDz1nF0= Subject key identifier: 72:32:F4:91:32:0E:2D:F4:5C:CF:8B:0D:0C:EF:43:17:83:5E:E8:EF Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F432858494B642269F7F7CDFBBF132580 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/1b54a3eb-c57f-38c6-85bb-063509906029.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 11404 IP address blocks: 199.27.104.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:64:22:69:f7:f7:cd:fb:bf:13:25:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=11ae94dc-5ec7-4bc9-95dd-eb0ed5acca7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:21:e6:e7:a3:2e:dd:81:cd:b7:fe:cf:f4:e7: 5b:d7:06:3a:5a:29:b1:39:38:ee:2b:d8:2d:b7:76: 5b:64:93:37:40:64:84:84:32:57:8b:4a:f3:6a:8d: 7a:00:15:19:42:33:22:8d:c1:dc:84:4c:de:63:a4: cc:f5:8e:22:d0:7d:a4:bb:03:c7:c6:03:34:f3:37: c2:e6:54:e6:5c:f5:71:b1:52:f0:6a:83:f1:34:7f: ec:1e:5b:08:78:2c:99:9f:e6:be:90:f5:71:7a:f9: 62:c1:02:7a:88:29:a4:cd:3d:88:76:49:f2:af:e3: fd:0c:37:1d:af:ab:cf:38:99:97:6a:18:a6:5e:6a: 9c:d4:cb:50:60:d0:92:61:87:1d:d5:48:43:92:9c: 7b:56:dc:2f:9c:b9:bd:44:aa:45:c0:84:9f:87:4f: f6:6d:3b:71:67:f2:24:63:0a:a5:d1:18:6e:d6:00: bb:dc:64:11:41:b7:7b:19:ae:3a:ce:05:e0:b1:9f: 06:92:7e:15:9d:b1:f6:f7:b6:e7:47:9a:b6:2e:77: 68:67:6c:5b:cf:96:cd:d7:5b:4b:b8:24:34:8b:f6: 90:f5:88:63:71:ff:6c:ca:fc:b5:62:26:f9:f4:45: 8d:37:e5:5e:ab:48:ac:80:52:05:f8:92:e4:b6:6e: b8:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:32:F4:91:32:0E:2D:F4:5C:CF:8B:0D:0C:EF:43:17:83:5E:E8:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/1b54a3eb-c57f-38c6-85bb-063509906029.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 199.27.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:ae:9e:90:14:9b:a5:02:9e:6d:9a:39:c7:54:2f:a6:9c:17: c3:bf:1a:08:40:ec:d3:da:bd:fc:57:76:0b:53:6b:dc:37:7a: d2:4b:f6:2e:86:c8:76:9c:79:79:d9:ec:74:45:1c:cc:a2:e0: 28:0b:20:4c:1c:1d:c7:ad:76:c6:e7:50:d4:76:7f:64:fb:bf: c5:bc:80:e3:ef:67:24:25:29:dd:08:03:ed:be:53:33:24:91: 4e:af:63:28:cf:6c:b7:71:d1:52:84:08:61:62:d6:e4:a1:11: 70:13:77:28:e2:b0:5c:da:9f:c1:86:4e:71:6b:ba:70:ca:14: 7f:59:97:82:75:75:a1:c4:1f:05:c6:e4:04:88:02:b1:19:13: 4e:c2:ee:2b:53:60:4f:4d:50:40:91:aa:33:3d:4e:3c:e6:e9: 29:0b:66:7b:a0:fb:f5:dd:a0:5d:cc:66:08:3a:5b:20:7f:48: f6:6a:f4:44:bc:59:e8:6e:92:eb:9f:6d:ce:7e:dc:21:ed:94: 60:64:9f:cb:c1:fa:0b:ba:5e:15:83:c7:bf:c1:e1:a1:3e:17: 52:24:d6:07:04:19:03:ae:8b:b5:5a:1d:58:54:2a:d7:51:d8: e2:98:bd:b3:ea:d9:77:8e:bc:c5:01:95:98:c7:5d:1f:6f:13: 5a:1e:20:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElLZCJp9/fN+78TJYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk MTFhZTk0ZGMtNWVjNy00YmM5LTk1ZGQtZWIwZWQ1YWNjYTdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiCHm56Mu3YHNt/7P9Odb1wY6WimxOTjuK9gt t3ZbZJM3QGSEhDJXi0rzao16ABUZQjMijcHchEzeY6TM9Y4i0H2kuwPHxgM08zfC 5lTmXPVxsVLwaoPxNH/sHlsIeCyZn+a+kPVxevliwQJ6iCmkzT2Idknyr+P9DDcd r6vPOJmXahimXmqc1MtQYNCSYYcd1UhDkpx7VtwvnLm9RKpFwISfh0/2bTtxZ/Ik Ywql0Rhu1gC73GQRQbd7Ga46zgXgsZ8Gkn4VnbH297bnR5q2LndoZ2xbz5bN11tL uCQ0i/aQ9Yhjcf9syvy1Yib59EWNN+Veq0isgFIF+JLktm64mQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHIy9JEyDi30XM+LDQzvQxeDXujvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvMWI1NGEzZWItYzU3Zi0z OGM2LTg1YmItMDYzNTA5OTA2MDI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxxtoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFaunpAUm6UCnm2aOcdUL6acF8O/GghA7NPavfxXdgtTa9w3etJL9i6G yHaceXnZ7HRFHMyi4CgLIEwcHcetdsbnUNR2f2T7v8W8gOPvZyQlKd0IA+2+UzMk kU6vYyjPbLdx0VKECGFi1uShEXATdyjisFzan8GGTnFrunDKFH9Zl4J1daHEHwXG 5ASIArEZE07C7itTYE9NUECRqjM9Tjzm6SkLZnug+/XdoF3MZgg6WyB/SPZq9ES8 Wehukuufbc5+3CHtlGBkn8vB+gu6XhWDx7/B4aE+F1Ik1gcEGQOui7VaHVhUKtdR 2OKYvbPq2XeOvMUBlZjHXR9vE1oeID0= -----END CERTIFICATE-----Generated at Mon May 5 05:03:48 2025 by rpki-client