$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5/45097e41-5714-3974-bd1e-65826485fa4f.roa File: 45097e41-5714-3974-bd1e-65826485fa4f.roa (raw, json) Hash identifier: 7WU9+2a1KLb66jJiY7DNjcHxr+j67rwyru+psJbnSG8= Subject key identifier: 9A:AE:A8:C3:C7:5C:7B:B1:C1:01:8F:17:4F:7C:64:94:D3:FA:AA:DC Certificate issuer: /CN=8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5 Certificate serial: 010D0C9F432858491D718966540F9F51998FEC00 Authority key identifier: 92:04:3A:A3:CA:F8:0F:3C:8D:45:A1:49:B5:5F:4B:AD:F5:C3:D9:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5/45097e41-5714-3974-bd1e-65826485fa4f.roa Signing time: Sat 08 Mar 2025 02:00:39 +0000 ROA not before: Sat 08 Mar 2025 02:00:39 +0000 ROA not after: Fri 06 Jun 2025 01:00:39 +0000 asID: 53904 IP address blocks: 199.212.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1d:71:89:66:54:0f:9f:51:99:8f:ec:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5 Validity Not Before: Mar 8 02:00:39 2025 GMT Not After : Jun 6 01:00:39 2025 GMT Subject: CN=f014ffed-ef4f-472e-ba6c-1f3ccebc1f9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:57:e6:51:86:e1:6b:a9:a0:fa:b0:ae:ab:d2: 40:c3:6a:93:5c:8b:cf:c6:22:49:84:5e:7e:d1:8e: ec:7c:cc:c1:c6:71:0b:61:8b:8f:02:bc:c6:de:c0: 4c:2d:1c:d0:7e:ab:5c:5a:09:26:06:55:21:b4:89: c0:6d:6d:0e:7a:f7:2c:c9:a3:68:de:f6:5d:69:27: 5c:c5:5a:6f:b5:d1:cd:36:52:eb:c5:0c:b2:b3:ec: 96:6a:df:cd:5a:f8:d6:14:f4:c7:6b:2c:7e:c0:e4: f2:26:d2:57:71:ad:a3:e2:6b:ea:65:d2:f0:d4:2a: 3f:70:bf:c8:fb:7d:69:07:28:c6:34:e6:91:43:d0: 87:b8:ff:55:14:35:95:63:ac:95:18:91:c9:47:75: c8:86:c2:22:3c:66:46:d2:eb:2a:7a:65:d9:50:8e: 0e:d6:a1:c6:a5:ca:29:d9:02:1d:40:e7:ce:e2:c0: 9f:04:69:d5:7f:35:c0:6b:2d:c7:2a:98:5d:8c:ec: 88:5a:a5:0e:e6:25:06:70:86:71:d8:ea:f2:73:fd: e2:45:f3:09:96:45:e7:fa:0f:23:14:1e:38:19:60: 06:c7:5f:c9:f0:cc:ae:a7:6f:b3:b9:a5:57:a6:27: 51:4f:6f:5c:a4:46:ac:6e:c2:05:6e:a1:a0:0d:e0: 91:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:AE:A8:C3:C7:5C:7B:B1:C1:01:8F:17:4F:7C:64:94:D3:FA:AA:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5/45097e41-5714-3974-bd1e-65826485fa4f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5.crl X509v3 Authority Key Identifier: keyid:92:04:3A:A3:CA:F8:0F:3C:8D:45:A1:49:B5:5F:4B:AD:F5:C3:D9:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5.cer sbgp-ipAddrBlock: critical IPv4: 199.212.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:f3:26:67:4a:9c:a4:16:9a:1d:6d:46:d8:7e:99:97:f8:90: ee:65:2a:3b:fc:6c:40:92:89:fd:9c:a8:b6:30:af:6a:d3:c6: 08:22:ae:ea:1a:03:34:ff:b6:4f:43:4e:d0:3e:0a:f4:5a:bd: c9:53:2c:3c:ab:93:d0:90:9d:44:45:ba:70:1e:6f:9b:8d:66: e4:7e:d8:99:b3:ef:3b:5f:94:51:1a:9d:bd:88:47:7e:d8:69: cf:78:3f:23:bf:97:c2:00:db:27:cb:60:2f:51:93:b1:a3:e6: f7:fb:76:29:8d:59:1f:70:95:51:a1:10:02:82:34:bb:48:5c: 3a:f8:d7:6b:a4:7b:11:05:bb:08:15:d1:39:e4:21:2f:9a:5d: ea:5d:0f:86:8d:d3:54:f8:bd:68:56:56:8b:a1:9f:36:2f:af: 82:f2:07:12:ab:ab:96:79:88:09:2c:ea:97:99:66:2d:c3:c1: 7f:33:5b:4e:96:5d:21:18:83:e6:d0:86:c2:91:70:9f:b1:3b: 1c:89:1f:b5:7a:2a:a8:2f:3c:38:7c:1a:82:59:88:38:0a:24: 8f:04:17:09:1a:1c:45:81:55:4c:4a:83:40:37:53:e4:84:42: 05:8e:d1:59:2a:e7:88:ce:2e:87:84:31:c3:85:c4:c3:88:43: 62:fd:97:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkdcYlmVA+fUZmP7AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGM5ZjUzYzctZTY0ZC00ZjE0LWE1ZTEtYzE0ZThiMWUz OGI1MB4XDTI1MDMwODAyMDAzOVoXDTI1MDYwNjAxMDAzOVowLzEtMCsGA1UEAxMk ZjAxNGZmZWQtZWY0Zi00NzJlLWJhNmMtMWYzY2NlYmMxZjlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlfmUYbha6mg+rCuq9JAw2qTXIvPxiJJhF5+ 0Y7sfMzBxnELYYuPArzG3sBMLRzQfqtcWgkmBlUhtInAbW0OevcsyaNo3vZdaSdc xVpvtdHNNlLrxQyys+yWat/NWvjWFPTHayx+wOTyJtJXca2j4mvqZdLw1Co/cL/I +31pByjGNOaRQ9CHuP9VFDWVY6yVGJHJR3XIhsIiPGZG0usqemXZUI4O1qHGpcop 2QIdQOfO4sCfBGnVfzXAay3HKphdjOyIWqUO5iUGcIZx2Oryc/3iRfMJlkXn+g8j FB44GWAGx1/J8Myup2+zuaVXpidRT29cpEasbsIFbqGgDeCRDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJquqMPHXHuxwQGPF098ZJTT+qrcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84Yzlm NTNjNy1lNjRkLTRmMTQtYTVlMS1jMTRlOGIxZTM4YjUvNDUwOTdlNDEtNTcxNC0z OTc0LWJkMWUtNjU4MjY0ODVmYTRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGM5ZjUzYzctZTY0ZC00ZjE0LWE1 ZTEtYzE0ZThiMWUzOGI1LzhjOWY1M2M3LWU2NGQtNGYxNC1hNWUxLWMxNGU4YjFl MzhiNS5jcmwwHwYDVR0jBBgwFoAUkgQ6o8r4DzyNRaFJtV9LrfXD2Q4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84YzlmNTNjNy1lNjRkLTRmMTQtYTVlMS1jMTRl OGIxZTM4YjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx9QYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFbzJmdKnKQWmh1tRth+mZf4kO5lKjv8bECSif2cqLYwr2rTxggiruoa AzT/tk9DTtA+CvRavclTLDyrk9CQnURFunAeb5uNZuR+2Jmz7ztflFEanb2IR37Y ac94PyO/l8IA2yfLYC9Rk7Gj5vf7dimNWR9wlVGhEAKCNLtIXDr412ukexEFuwgV 0TnkIS+aXepdD4aN01T4vWhWVouhnzYvr4LyBxKrq5Z5iAks6peZZi3DwX8zW06W XSEYg+bQhsKRcJ+xOxyJH7V6KqgvPDh8GoJZiDgKJI8EFwkaHEWBVUxKg0A3U+SE QgWO0Vkq54jOLoeEMcOFxMOIQ2L9l/k= -----END CERTIFICATE-----Generated at Sun Apr 27 19:04:58 2025 by rpki-client