$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/293fd22c-acf2-43f5-bbd1-2b63ea7128c7/9ae2582e-294e-3281-bf09-2642a6663c7d.roa File: 9ae2582e-294e-3281-bf09-2642a6663c7d.roa (raw, json) Hash identifier: xTd5TqNiTniSiG0uN77p9hjJHRYZE5pWEg8MkXKMZE8= Subject key identifier: 32:F7:AB:36:F0:66:05:3D:6F:BD:57:D9:E5:C9:25:EB:6F:45:27:29 Certificate issuer: /CN=293fd22c-acf2-43f5-bbd1-2b63ea7128c7 Certificate serial: 010D0C9F43285849B149F0ABF91C69DCDD1F0500 Authority key identifier: 14:D6:F1:9E:F8:E5:BA:88:DB:08:5A:22:98:FE:68:86:61:1D:EB:90 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/293fd22c-acf2-43f5-bbd1-2b63ea7128c7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/293fd22c-acf2-43f5-bbd1-2b63ea7128c7/9ae2582e-294e-3281-bf09-2642a6663c7d.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 399386 IP address blocks: 199.88.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/293fd22c-acf2-43f5-bbd1-2b63ea7128c7/293fd22c-acf2-43f5-bbd1-2b63ea7128c7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/293fd22c-acf2-43f5-bbd1-2b63ea7128c7/293fd22c-acf2-43f5-bbd1-2b63ea7128c7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/293fd22c-acf2-43f5-bbd1-2b63ea7128c7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:49:f0:ab:f9:1c:69:dc:dd:1f:05:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=293fd22c-acf2-43f5-bbd1-2b63ea7128c7 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=5504a19d-6f5f-468d-9257-7268a63f33ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e5:ee:1d:f0:32:01:5d:79:a1:eb:de:42:8c: 4b:04:35:70:56:ba:83:b1:14:99:3e:a9:68:08:8d: 20:d3:fb:dd:59:b2:56:df:9a:aa:87:24:77:6e:29: fd:13:8e:b9:2b:e2:8b:72:66:ca:78:27:07:96:f8: 95:46:5e:f8:c9:18:70:d3:00:83:9d:6b:39:62:88: d6:74:02:26:58:da:a7:f7:a7:90:26:d9:19:7a:31: d7:d6:ef:d0:d3:38:51:6b:52:91:11:61:d0:bd:84: 56:ca:9e:d6:04:da:02:0c:d3:aa:db:08:a8:c7:a5: b8:c4:96:71:03:21:ef:11:c8:ee:da:b8:a7:10:60: 0e:7e:c8:1b:1d:2d:c6:03:71:af:ca:88:2e:15:f7: 5b:03:17:0b:70:24:d0:a2:6d:61:46:11:5b:cc:b3: 54:0e:50:fc:b3:3e:29:12:df:c3:e6:8f:8d:91:4a: 3d:1d:3e:34:12:88:7e:86:b1:e5:37:cb:34:b3:8c: dd:b3:71:5f:09:a0:83:ec:a7:a9:5d:76:58:08:14: 4d:b6:e5:a8:c3:55:91:d2:de:35:3f:77:77:2b:ee: d8:74:11:3d:cb:5b:c2:30:ed:10:18:50:db:4d:72: 0c:b3:ed:0b:f1:91:b0:44:79:41:e8:61:34:fe:fa: d3:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:F7:AB:36:F0:66:05:3D:6F:BD:57:D9:E5:C9:25:EB:6F:45:27:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/293fd22c-acf2-43f5-bbd1-2b63ea7128c7/9ae2582e-294e-3281-bf09-2642a6663c7d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/293fd22c-acf2-43f5-bbd1-2b63ea7128c7/293fd22c-acf2-43f5-bbd1-2b63ea7128c7.crl X509v3 Authority Key Identifier: keyid:14:D6:F1:9E:F8:E5:BA:88:DB:08:5A:22:98:FE:68:86:61:1D:EB:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/293fd22c-acf2-43f5-bbd1-2b63ea7128c7.cer sbgp-ipAddrBlock: critical IPv4: 199.88.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:7d:49:80:75:d6:2f:c4:82:dc:20:63:ac:31:12:f1:3e:b4: f2:2d:2a:c9:0c:33:08:b7:80:5f:23:f7:97:44:11:37:ca:bb: 9c:1e:48:0b:9b:59:fd:3c:7f:b8:f3:9f:cc:6c:d5:d0:25:0f: 1b:49:16:f3:84:9e:db:4a:64:a2:ac:f4:81:07:8d:59:ec:e2: c5:15:a6:2e:92:73:b1:74:11:80:7c:7e:ed:8c:89:4c:48:22: 9e:83:94:a2:92:6c:7f:91:e7:c5:f1:62:7b:6d:36:1e:34:8b: 88:93:bc:97:ce:e8:74:35:4d:5f:e9:c6:a5:71:5c:f5:d5:5a: 23:ba:12:e2:83:ab:2a:24:25:d3:da:81:d0:be:f2:ee:73:18: 0c:31:36:f9:b7:04:8a:8c:14:09:ac:9b:fa:44:71:e6:3c:9e: ca:70:7f:d5:c7:d4:fb:c0:44:1c:06:5c:88:08:50:50:7a:c3: 76:51:5b:d5:44:4f:74:a2:e9:74:a3:70:4f:27:3c:c6:ee:b5: 01:39:ea:0f:56:dd:c6:7a:ec:1f:21:57:b0:6b:17:20:aa:b3: 62:a5:df:13:19:29:36:82:c0:3e:11:8f:37:f0:5f:00:29:3d: f2:a9:d1:dc:d8:4c:6c:af:de:6d:72:df:c6:dd:f7:7c:9f:9e: c3:80:13:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSfCr+Rxp3N0fBQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjkzZmQyMmMtYWNmMi00M2Y1LWJiZDEtMmI2M2VhNzEy OGM3MB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk NTUwNGExOWQtNmY1Zi00NjhkLTkyNTctNzI2OGE2M2YzM2VlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOXuHfAyAV15oeveQoxLBDVwVrqDsRSZPqlo CI0g0/vdWbJW35qqhyR3bin9E465K+KLcmbKeCcHlviVRl74yRhw0wCDnWs5YojW dAImWNqn96eQJtkZejHX1u/Q0zhRa1KREWHQvYRWyp7WBNoCDNOq2wiox6W4xJZx AyHvEcju2rinEGAOfsgbHS3GA3GvyoguFfdbAxcLcCTQom1hRhFbzLNUDlD8sz4p Et/D5o+NkUo9HT40Eoh+hrHlN8s0s4zds3FfCaCD7KepXXZYCBRNtuWow1WR0t41 P3d3K+7YdBE9y1vCMO0QGFDbTXIMs+0L8ZGwRHlB6GE0/vrThQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDL3qzbwZgU9b71X2eXJJetvRScpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8yOTNm ZDIyYy1hY2YyLTQzZjUtYmJkMS0yYjYzZWE3MTI4YzcvOWFlMjU4MmUtMjk0ZS0z MjgxLWJmMDktMjY0MmE2NjYzYzdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMjkzZmQyMmMtYWNmMi00M2Y1LWJi ZDEtMmI2M2VhNzEyOGM3LzI5M2ZkMjJjLWFjZjItNDNmNS1iYmQxLTJiNjNlYTcx MjhjNy5jcmwwHwYDVR0jBBgwFoAUFNbxnvjluojbCFoimP5ohmEd65AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8yOTNmZDIyYy1hY2YyLTQzZjUtYmJkMS0yYjYz ZWE3MTI4YzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx1iDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABN9SYB11i/EgtwgY6wxEvE+tPItKskMMwi3gF8j95dEETfKu5weSAub Wf08f7jzn8xs1dAlDxtJFvOEnttKZKKs9IEHjVns4sUVpi6Sc7F0EYB8fu2MiUxI Ip6DlKKSbH+R58XxYnttNh40i4iTvJfO6HQ1TV/pxqVxXPXVWiO6EuKDqyokJdPa gdC+8u5zGAwxNvm3BIqMFAmsm/pEceY8nspwf9XH1PvARBwGXIgIUFB6w3ZRW9VE T3Si6XSjcE8nPMbutQE56g9W3cZ67B8hV7BrFyCqs2Kl3xMZKTaCwD4RjzfwXwAp PfKp0dzYTGyv3m1y38bd93yfnsOAE1w= -----END CERTIFICATE-----Generated at Wed May 7 00:57:41 2025 by rpki-client