$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42ce9d16-dc85-4007-a59d-6c18d1a42aa2/bff59b2a-b7e8-33f0-8d55-72a1869e139e.roa File: bff59b2a-b7e8-33f0-8d55-72a1869e139e.roa (raw, json) Hash identifier: kVf6zfIM/cK5wo50SWvKI6OQkal1XsGfNJWP3tB2EFA= Subject key identifier: EE:5F:D8:58:04:23:BB:6B:52:DC:99:49:CF:3F:74:47:D7:22:10:1C Certificate issuer: /CN=42ce9d16-dc85-4007-a59d-6c18d1a42aa2 Certificate serial: 010D0C9F43285849A7300736A4F44D00844E2180 Authority key identifier: B6:6F:B4:68:9E:4A:59:AD:81:FA:69:34:12:82:04:39:33:1F:58:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42ce9d16-dc85-4007-a59d-6c18d1a42aa2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42ce9d16-dc85-4007-a59d-6c18d1a42aa2/bff59b2a-b7e8-33f0-8d55-72a1869e139e.roa Signing time: Sat 26 Apr 2025 10:10:35 +0000 ROA not before: Sat 26 Apr 2025 10:10:35 +0000 ROA not after: Fri 25 Jul 2025 10:10:35 +0000 asID: 28931 IP address blocks: 199.201.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42ce9d16-dc85-4007-a59d-6c18d1a42aa2/42ce9d16-dc85-4007-a59d-6c18d1a42aa2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42ce9d16-dc85-4007-a59d-6c18d1a42aa2/42ce9d16-dc85-4007-a59d-6c18d1a42aa2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42ce9d16-dc85-4007-a59d-6c18d1a42aa2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:30:07:36:a4:f4:4d:00:84:4e:21:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42ce9d16-dc85-4007-a59d-6c18d1a42aa2 Validity Not Before: Apr 26 10:10:35 2025 GMT Not After : Jul 25 10:10:35 2025 GMT Subject: CN=b11a8c4f-01b2-4d56-9440-30764aa50dfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:31:6d:f8:d9:6a:71:30:87:50:3e:ea:76:95: a9:63:d7:3d:da:4a:9b:b9:ab:44:c7:dc:1c:57:db: 80:57:12:27:ca:43:33:8a:6b:1b:2c:5e:5d:18:31: 11:65:03:2c:99:b2:8f:e1:19:e6:5b:3e:cc:94:91: fa:f1:53:0e:60:35:ed:e8:7b:75:87:3a:d4:69:6a: 0d:91:89:2f:7a:85:af:dc:2a:60:eb:20:a6:96:26: e3:0a:94:0a:95:e7:33:ea:f1:27:f4:fd:96:43:06: 4b:59:96:88:6b:30:30:6d:43:34:84:d5:e3:15:3f: b6:5b:fb:77:70:ae:a3:e6:f9:05:b3:de:35:e7:b4: 59:59:d7:a4:4d:02:91:41:91:a6:c4:d9:99:4b:48: 29:94:28:58:49:60:4e:7a:75:5d:8e:6a:46:7f:9d: 2a:da:ee:2e:62:24:b8:d6:99:a4:77:10:ff:71:6e: 90:1f:f7:8d:56:d8:bc:a0:b2:48:01:1d:da:22:b4: d6:a8:8a:c0:27:da:ec:46:fc:d0:3d:d9:06:20:be: 21:90:2d:58:7d:37:b7:ae:ee:fe:2a:1f:fc:6f:ed: 84:23:a9:c2:80:86:c9:f7:cc:11:c1:7e:cb:9e:f2: 35:d8:aa:25:c2:63:a2:ee:92:ca:32:0b:cd:ef:0c: a0:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:5F:D8:58:04:23:BB:6B:52:DC:99:49:CF:3F:74:47:D7:22:10:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42ce9d16-dc85-4007-a59d-6c18d1a42aa2/bff59b2a-b7e8-33f0-8d55-72a1869e139e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42ce9d16-dc85-4007-a59d-6c18d1a42aa2/42ce9d16-dc85-4007-a59d-6c18d1a42aa2.crl X509v3 Authority Key Identifier: keyid:B6:6F:B4:68:9E:4A:59:AD:81:FA:69:34:12:82:04:39:33:1F:58:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42ce9d16-dc85-4007-a59d-6c18d1a42aa2.cer sbgp-ipAddrBlock: critical IPv4: 199.201.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:9d:b1:ca:ad:da:ea:81:98:b8:fa:84:4f:7b:64:e1:f2:cd: 9b:43:58:7c:ee:d7:e0:e3:c6:22:8d:57:6c:fb:3f:1f:d2:64: cc:c5:be:96:7f:53:47:5b:81:18:e7:7b:13:9b:7a:c0:3b:3f: 1b:af:a3:9c:e1:1d:3b:fd:00:d6:34:d1:b4:f1:0d:57:a8:9e: a0:af:32:49:10:fb:85:41:f8:89:4b:a1:62:35:f0:80:0b:9a: 15:f7:23:3b:a5:22:3a:88:ea:5e:e2:83:d2:f7:cf:58:7a:4d: c9:92:76:07:14:8d:90:31:30:1f:86:a0:8a:47:49:b9:b0:eb: 70:6f:f5:4b:8a:87:77:52:6f:12:ce:01:1f:0b:7e:79:e9:ec: 03:c1:d4:96:1e:ce:58:27:c4:3e:66:ca:11:07:9a:23:01:c0: 57:4c:88:b2:52:e6:f1:e2:32:1d:fa:97:e2:8c:c5:b8:ee:da: 9f:a4:94:7f:f9:c2:fa:ec:c8:f5:02:9f:72:50:3b:e1:96:41: 47:0a:01:0f:56:da:45:f5:17:a3:74:aa:1c:b8:cf:da:dd:66: 67:8a:2e:2b:00:a9:9e:a1:7b:9e:4e:7f:0b:a3:26:2a:64:f8: a5:40:66:1f:3a:0e:34:26:94:b3:6c:64:4d:0c:80:ca:84:00: 18:6c:16:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnMAc2pPRNAIROIYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDJjZTlkMTYtZGM4NS00MDA3LWE1OWQtNmMxOGQxYTQy YWEyMB4XDTI1MDQyNjEwMTAzNVoXDTI1MDcyNTEwMTAzNVowLzEtMCsGA1UEAxMk YjExYThjNGYtMDFiMi00ZDU2LTk0NDAtMzA3NjRhYTUwZGZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgzFt+NlqcTCHUD7qdpWpY9c92kqbuatEx9wc V9uAVxInykMzimsbLF5dGDERZQMsmbKP4RnmWz7MlJH68VMOYDXt6Ht1hzrUaWoN kYkveoWv3Cpg6yCmlibjCpQKlecz6vEn9P2WQwZLWZaIazAwbUM0hNXjFT+2W/t3 cK6j5vkFs94157RZWdekTQKRQZGmxNmZS0gplChYSWBOenVdjmpGf50q2u4uYiS4 1pmkdxD/cW6QH/eNVti8oLJIAR3aIrTWqIrAJ9rsRvzQPdkGIL4hkC1YfTe3ru7+ Kh/8b+2EI6nCgIbJ98wRwX7LnvI12KolwmOi7pLKMgvN7wygewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO5f2FgEI7trUtyZSc8/dEfXIhAcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80MmNl OWQxNi1kYzg1LTQwMDctYTU5ZC02YzE4ZDFhNDJhYTIvYmZmNTliMmEtYjdlOC0z M2YwLThkNTUtNzJhMTg2OWUxMzllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNDJjZTlkMTYtZGM4NS00MDA3LWE1 OWQtNmMxOGQxYTQyYWEyLzQyY2U5ZDE2LWRjODUtNDAwNy1hNTlkLTZjMThkMWE0 MmFhMi5jcmwwHwYDVR0jBBgwFoAUtm+0aJ5KWa2B+mk0EoIEOTMfWPwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80MmNlOWQxNi1kYzg1LTQwMDctYTU5ZC02YzE4 ZDFhNDJhYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx8l1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIedscqt2uqBmLj6hE97ZOHyzZtDWHzu1+DjxiKNV2z7Px/SZMzFvpZ/ U0dbgRjnexObesA7Pxuvo5zhHTv9ANY00bTxDVeonqCvMkkQ+4VB+IlLoWI18IAL mhX3IzulIjqI6l7ig9L3z1h6TcmSdgcUjZAxMB+GoIpHSbmw63Bv9UuKh3dSbxLO AR8Lfnnp7APB1JYezlgnxD5myhEHmiMBwFdMiLJS5vHiMh36l+KMxbju2p+klH/5 wvrsyPUCn3JQO+GWQUcKAQ9W2kX1F6N0qhy4z9rdZmeKLisAqZ6he55OfwujJipk +KVAZh86DjQmlLNsZE0MgMqEABhsFvY= -----END CERTIFICATE-----Generated at Sun Apr 27 16:39:20 2025 by rpki-client