$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/b0d5b319-ee82-32b7-bb84-6a47bb9c596e.roa File: b0d5b319-ee82-32b7-bb84-6a47bb9c596e.roa (raw, json) Hash identifier: msPLbJl5lt2rwzCBBIaiL9aPyF4CTzWT9OoWA+NRta4= Subject key identifier: 04:03:CD:9F:BB:6C:CA:DF:67:89:B4:11:7B:39:1C:D0:5C:A3:55:68 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F432858494B642292115209FF76F32500 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/b0d5b319-ee82-32b7-bb84-6a47bb9c596e.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 11404 IP address blocks: 199.189.96.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:64:22:92:11:52:09:ff:76:f3:25:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=846a0239-461f-4d7a-b00a-21ed79e2d30f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a1:df:36:c0:7b:4b:3d:30:9b:fc:c8:3b:fb: d1:ba:aa:f8:20:1e:f1:a9:d2:57:b8:d7:c5:1f:15: 94:53:78:0d:7d:3f:af:a1:83:6e:cf:64:1c:20:a4: 28:e6:14:5e:ed:6e:48:01:2f:8e:f8:20:c9:04:d6: 52:27:0f:a6:a6:a6:87:41:85:5a:31:da:ac:16:90: a1:af:db:2e:5b:2f:34:78:86:34:2b:a2:2c:23:ca: 95:5e:39:86:31:d7:67:f6:e0:44:8b:3d:91:0d:68: da:dd:18:67:c4:ab:05:fa:27:ce:4b:74:f7:c1:e2: 3d:a6:36:41:29:ef:4b:ff:13:90:31:73:ae:fb:62: cc:64:7e:90:48:36:35:ef:fc:a8:7b:07:25:ab:21: 19:69:bb:fc:e9:2d:ed:9f:43:7e:bd:29:d7:49:02: eb:be:88:fd:e6:b9:85:6b:e8:7a:68:b5:d5:02:7d: c8:b4:5d:8f:c4:f4:15:b9:f1:42:f8:fd:f0:02:6c: 9b:5b:12:52:8b:3e:0f:73:dd:96:ea:85:c0:8c:db: 6d:1e:49:f0:17:1f:d6:95:59:02:4f:1e:60:b6:f3: 47:2b:22:e9:80:55:5b:f7:d0:8e:ab:84:ce:dd:de: 06:e1:cc:64:43:a8:65:38:be:74:15:0c:af:ce:cf: 54:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:03:CD:9F:BB:6C:CA:DF:67:89:B4:11:7B:39:1C:D0:5C:A3:55:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/b0d5b319-ee82-32b7-bb84-6a47bb9c596e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 199.189.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:e5:8f:9a:ff:90:a2:c0:5e:23:ef:e8:5a:f9:99:47:f9:47: e0:a7:8b:8e:00:3d:a0:7c:1f:e4:41:a9:4c:2b:1a:9e:6e:b4: 93:52:df:c9:7e:f8:02:03:53:99:33:21:d2:b6:b0:85:8e:f8: 8d:d2:8a:e3:07:41:57:c4:a3:13:5d:e4:4b:f9:f1:94:54:8d: 97:bd:02:a0:fc:34:6d:8a:17:d7:50:44:4c:72:3e:e2:2f:1e: 2b:ae:b9:88:eb:38:48:6d:e5:e7:a4:f6:21:b7:d3:b2:4c:a0: 78:4e:c4:a2:e5:89:38:f7:3e:2b:4c:6b:82:f1:cd:5a:88:f2: b8:c7:43:88:f8:0a:92:1a:f6:49:0d:7d:27:c5:5d:aa:19:61: 0e:4a:f5:d4:0b:cb:0f:13:e0:51:64:5d:79:37:cd:fd:f8:b6: 2a:17:06:de:ab:55:30:91:cd:ea:3b:42:b9:cc:32:32:94:39: 8a:ce:f1:f5:bc:fa:ad:36:60:e6:31:56:d2:42:49:c3:f0:68: 9a:bd:d0:38:a5:3b:ca:97:93:c5:14:3a:36:f6:53:b7:fe:83: 50:81:c8:7b:f9:13:6a:d2:12:ce:c3:03:22:a2:89:b9:d5:b8: df:03:5f:a8:f3:6e:39:b9:47:7f:46:5a:fd:d6:b3:6e:5d:2d: 4d:7e:48:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElLZCKSEVIJ/3bzJQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk ODQ2YTAyMzktNDYxZi00ZDdhLWIwMGEtMjFlZDc5ZTJkMzBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAraHfNsB7Sz0wm/zIO/vRuqr4IB7xqdJXuNfF HxWUU3gNfT+voYNuz2QcIKQo5hRe7W5IAS+O+CDJBNZSJw+mpqaHQYVaMdqsFpCh r9suWy80eIY0K6IsI8qVXjmGMddn9uBEiz2RDWja3RhnxKsF+ifOS3T3weI9pjZB Ke9L/xOQMXOu+2LMZH6QSDY17/yoewclqyEZabv86S3tn0N+vSnXSQLrvoj95rmF a+h6aLXVAn3ItF2PxPQVufFC+P3wAmybWxJSiz4Pc92W6oXAjNttHknwFx/WlVkC Tx5gtvNHKyLpgFVb99COq4TO3d4G4cxkQ6hlOL50FQyvzs9UuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAQDzZ+7bMrfZ4m0EXs5HNBco1VoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvYjBkNWIzMTktZWU4Mi0z MmI3LWJiODQtNmE0N2JiOWM1OTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx71gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFnlj5r/kKLAXiPv6Fr5mUf5R+Cni44APaB8H+RBqUwrGp5utJNS38l+ +AIDU5kzIdK2sIWO+I3SiuMHQVfEoxNd5Ev58ZRUjZe9AqD8NG2KF9dQRExyPuIv HiuuuYjrOEht5eek9iG307JMoHhOxKLliTj3PitMa4LxzVqI8rjHQ4j4CpIa9kkN fSfFXaoZYQ5K9dQLyw8T4FFkXXk3zf34tioXBt6rVTCRzeo7QrnMMjKUOYrO8fW8 +q02YOYxVtJCScPwaJq90DilO8qXk8UUOjb2U7f+g1CByHv5E2rSEs7DAyKiibnV uN8DX6jzbjm5R39GWv3Ws25dLU1+SHg= -----END CERTIFICATE-----Generated at Mon May 5 06:38:40 2025 by rpki-client