$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a53ac0b1-83a3-47f2-b28e-b2b1977dc375/77edcd41-83c3-3d54-9d91-d3c211050376.roa File: 77edcd41-83c3-3d54-9d91-d3c211050376.roa (raw, json) Hash identifier: +YS2zjZQpLhfT6aMAXL0U4oSaRECQ9ImVs1nLD/jthY= Subject key identifier: A8:EC:13:1D:7B:94:15:EB:B1:B0:FF:8D:9D:42:27:C8:5F:1B:11:05 Certificate issuer: /CN=a53ac0b1-83a3-47f2-b28e-b2b1977dc375 Certificate serial: 010D0C9F43285849B6DF4E0B11F86BE596DC4400 Authority key identifier: AC:C4:2B:19:FD:7B:64:94:F1:BE:8D:6F:0C:E8:8A:B4:D4:7C:F2:83 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a53ac0b1-83a3-47f2-b28e-b2b1977dc375.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a53ac0b1-83a3-47f2-b28e-b2b1977dc375/77edcd41-83c3-3d54-9d91-d3c211050376.roa Signing time: Fri 02 May 2025 01:00:47 +0000 ROA not before: Fri 02 May 2025 01:00:47 +0000 ROA not after: Thu 31 Jul 2025 01:00:47 +0000 asID: 18503 IP address blocks: 199.34.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a53ac0b1-83a3-47f2-b28e-b2b1977dc375/a53ac0b1-83a3-47f2-b28e-b2b1977dc375.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a53ac0b1-83a3-47f2-b28e-b2b1977dc375/a53ac0b1-83a3-47f2-b28e-b2b1977dc375.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a53ac0b1-83a3-47f2-b28e-b2b1977dc375.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b6:df:4e:0b:11:f8:6b:e5:96:dc:44:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53ac0b1-83a3-47f2-b28e-b2b1977dc375 Validity Not Before: May 2 01:00:47 2025 GMT Not After : Jul 31 01:00:47 2025 GMT Subject: CN=480c45d6-1bab-42fd-9996-27d3125ab074 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:a6:10:c5:ea:d8:44:8a:bb:9c:f5:2d:5c:97: 6c:44:2c:f5:88:b6:4e:4e:af:9b:72:79:f2:eb:62: 6c:9d:8b:da:d7:7a:1e:2d:09:14:a2:c2:88:17:41: 47:9c:19:ba:2e:4a:31:a9:5a:f5:fa:d0:e6:0e:6e: 04:f3:0f:46:09:29:25:3a:41:18:5d:02:53:bd:ae: e9:83:96:99:d5:6b:ac:e5:47:23:96:50:0e:83:92: ee:91:0f:c6:f1:e4:35:a2:82:df:92:0e:f2:7d:71: 1b:f7:37:4b:75:91:b5:22:65:5c:c8:26:1c:58:16: cb:ef:7f:29:1d:81:cd:3a:4d:dc:e4:bb:14:97:ab: 0f:a6:72:e6:de:a9:0f:dc:e0:90:93:0c:4a:2d:cc: 6f:4d:28:6b:f6:93:f6:34:23:7d:fc:1e:96:f7:41: 0d:25:3b:46:b1:37:73:4f:88:84:ef:2d:57:92:6b: f5:4b:c5:30:97:38:aa:1e:56:ea:25:81:72:2e:4f: e9:6f:0e:f9:5d:01:e3:9a:b0:40:68:2b:01:3c:0b: d9:7b:c7:19:f3:a4:5e:ba:84:b3:80:14:3f:bb:fc: bb:cf:6c:52:49:fe:cc:16:ce:3b:a5:1a:bc:e6:5a: 43:fb:bd:a3:e2:08:2c:72:eb:5a:fc:50:14:c4:6a: b0:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:EC:13:1D:7B:94:15:EB:B1:B0:FF:8D:9D:42:27:C8:5F:1B:11:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a53ac0b1-83a3-47f2-b28e-b2b1977dc375/77edcd41-83c3-3d54-9d91-d3c211050376.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a53ac0b1-83a3-47f2-b28e-b2b1977dc375/a53ac0b1-83a3-47f2-b28e-b2b1977dc375.crl X509v3 Authority Key Identifier: keyid:AC:C4:2B:19:FD:7B:64:94:F1:BE:8D:6F:0C:E8:8A:B4:D4:7C:F2:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a53ac0b1-83a3-47f2-b28e-b2b1977dc375.cer sbgp-ipAddrBlock: critical IPv4: 199.34.241.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:5e:0b:59:e1:75:29:0b:c0:9e:5a:7f:a1:99:43:91:6d:ff: 30:d6:54:c7:b5:8a:82:8b:02:2e:eb:0c:db:52:fa:02:03:e8: b4:96:0d:e1:7f:db:65:9b:1f:5b:af:b4:26:fa:b4:41:2c:3b: 40:b0:35:c7:1e:27:3a:f4:6f:34:7f:ec:95:6b:f4:85:53:f6: 5a:db:63:27:31:99:af:57:f3:45:46:a9:c2:05:85:be:11:c1: dc:50:5a:f3:af:08:9a:e8:3c:e3:96:3b:3c:71:3d:56:a7:79: f4:eb:10:44:2e:a0:09:8e:3d:85:0f:e8:29:04:c6:ce:20:e9: 9d:77:e3:f8:a2:08:2e:52:b0:3c:8e:4e:39:42:2c:3c:1b:40: 07:43:c9:44:1b:75:64:ea:d3:d2:6b:e2:49:dc:dd:55:0f:00: c3:6d:4e:41:56:74:95:ce:43:63:e9:f1:46:1a:02:8c:cc:8a: 25:c1:00:40:d5:4f:65:94:73:da:dc:c4:d4:45:71:35:1a:35: ef:e9:db:19:54:0c:b3:2f:e7:05:b5:e3:15:3e:0e:29:2e:da: c9:67:25:df:a7:51:c6:a8:ba:2c:10:b5:69:b7:7e:b1:79:5c: e5:dc:13:62:51:0f:d6:93:ae:66:7d:03:9b:59:12:b1:35:99: 16:50:25:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm2304LEfhr5ZbcRAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzYWMwYjEtODNhMy00N2YyLWIyOGUtYjJiMTk3N2Rj Mzc1MB4XDTI1MDUwMjAxMDA0N1oXDTI1MDczMTAxMDA0N1owLzEtMCsGA1UEAxMk NDgwYzQ1ZDYtMWJhYi00MmZkLTk5OTYtMjdkMzEyNWFiMDc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKYQxerYRIq7nPUtXJdsRCz1iLZOTq+bcnny 62JsnYva13oeLQkUosKIF0FHnBm6LkoxqVr1+tDmDm4E8w9GCSklOkEYXQJTva7p g5aZ1Wus5UcjllAOg5LukQ/G8eQ1ooLfkg7yfXEb9zdLdZG1ImVcyCYcWBbL738p HYHNOk3c5LsUl6sPpnLm3qkP3OCQkwxKLcxvTShr9pP2NCN9/B6W90ENJTtGsTdz T4iE7y1Xkmv1S8UwlziqHlbqJYFyLk/pbw75XQHjmrBAaCsBPAvZe8cZ86ReuoSz gBQ/u/y7z2xSSf7MFs47pRq85lpD+72j4ggscuta/FAUxGqw/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKjsEx17lBXrsbD/jZ1CJ8hfGxEFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNTNh YzBiMS04M2EzLTQ3ZjItYjI4ZS1iMmIxOTc3ZGMzNzUvNzdlZGNkNDEtODNjMy0z ZDU0LTlkOTEtZDNjMjExMDUwMzc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYTUzYWMwYjEtODNhMy00N2YyLWIy OGUtYjJiMTk3N2RjMzc1L2E1M2FjMGIxLTgzYTMtNDdmMi1iMjhlLWIyYjE5Nzdk YzM3NS5jcmwwHwYDVR0jBBgwFoAUrMQrGf17ZJTxvo1vDOiKtNR88oMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hNTNhYzBiMS04M2EzLTQ3ZjItYjI4ZS1iMmIx OTc3ZGMzNzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxyLxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADxeC1nhdSkLwJ5af6GZQ5Ft/zDWVMe1ioKLAi7rDNtS+gID6LSWDeF/ 22WbH1uvtCb6tEEsO0CwNcceJzr0bzR/7JVr9IVT9lrbYycxma9X80VGqcIFhb4R wdxQWvOvCJroPOOWOzxxPVanefTrEEQuoAmOPYUP6CkExs4g6Z134/iiCC5SsDyO TjlCLDwbQAdDyUQbdWTq09Jr4knc3VUPAMNtTkFWdJXOQ2Pp8UYaAozMiiXBAEDV T2WUc9rcxNRFcTUaNe/p2xlUDLMv5wW14xU+Diku2slnJd+nUcaouiwQtWm3frF5 XOXcE2JRD9aTrmZ9A5tZErE1mRZQJVQ= -----END CERTIFICATE-----Generated at Fri May 9 07:18:33 2025 by rpki-client