$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a8e3e6b2-d1dc-33be-bcd5-e0733b001b4a.roa File: a8e3e6b2-d1dc-33be-bcd5-e0733b001b4a.roa (raw, json) Hash identifier: QtwlMC57LBzZfm4XDfcBlCn0/oLBWKBiG3F186sxx+s= Subject key identifier: 69:77:37:D2:C0:6E:FF:B1:7B:32:7E:99:A2:4F:1F:D9:E7:9B:1B:89 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F432858494CC949D5E034B51F9E2CD080 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a8e3e6b2-d1dc-33be-bcd5-e0733b001b4a.roa Signing time: Tue 25 Mar 2025 01:00:40 +0000 ROA not before: Tue 25 Mar 2025 01:00:40 +0000 ROA not after: Mon 23 Jun 2025 01:00:40 +0000 asID: 0 IP address blocks: 199.16.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4c:c9:49:d5:e0:34:b5:1f:9e:2c:d0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 25 01:00:40 2025 GMT Not After : Jun 23 01:00:40 2025 GMT Subject: CN=f8329d3c-09b6-4a18-8100-852f0d576946 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:0a:46:75:61:3a:7d:e7:ef:a2:44:eb:3e:5d: e5:c3:9a:7c:93:6a:0f:59:83:65:89:dc:47:3c:2c: d8:00:5c:8a:22:19:38:83:78:a0:c6:8a:ca:32:42: 6a:6f:ae:6e:24:13:bb:55:cc:e6:d6:e2:25:44:bc: 84:39:5b:15:83:6c:ad:34:61:29:98:c8:04:6e:d2: 01:1c:80:25:d6:04:2f:78:c3:ac:83:b5:bb:0c:84: 5a:88:ec:ee:db:e4:93:1d:03:7c:4c:24:ee:bf:d1: 3f:ba:5a:b9:84:fa:9b:cf:ab:e0:94:a6:be:7b:47: cd:74:7a:78:ca:32:fb:89:a5:5f:2c:00:f7:34:ec: f6:59:a1:2d:a1:d7:34:b9:d7:c4:ef:30:82:8b:5f: 35:40:90:53:35:4f:41:9e:58:9c:f0:3f:2d:1c:ac: 14:25:3f:37:30:83:fb:04:e9:92:14:b3:79:77:94: 4f:27:3c:3a:ec:b1:30:e0:72:82:68:85:c9:2b:4b: 43:9b:f0:17:92:0d:41:95:ab:92:04:0b:0d:b5:20: aa:04:9f:da:a9:5c:25:bd:ca:1d:e2:20:1a:54:4a: f3:17:8b:4a:43:d7:30:e4:bd:ae:2f:ae:e8:19:27: a5:7f:71:6f:b2:50:60:a9:5a:3b:c5:82:9a:01:7f: 88:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:77:37:D2:C0:6E:FF:B1:7B:32:7E:99:A2:4F:1F:D9:E7:9B:1B:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a8e3e6b2-d1dc-33be-bcd5-e0733b001b4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 199.16.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:9e:52:85:7b:32:e1:d9:dd:a1:1e:4b:49:65:10:a1:a5:89: 07:c8:cf:fe:aa:f8:ae:fb:9f:c3:17:8a:bc:38:9e:dc:d6:bf: 0c:a9:f7:f0:b3:73:d5:5e:42:ea:ad:e1:1e:62:09:1f:8a:a6: 95:d8:c3:6f:a4:71:d5:e7:0a:a9:d8:35:32:4b:38:16:ad:a8: a5:4d:27:4c:94:4b:94:e9:61:2b:3e:17:67:52:e8:4e:91:eb: 5f:7c:bf:35:42:38:06:77:a7:ca:cf:c3:7a:7a:20:d3:f1:be: 83:db:97:36:ee:3a:3f:3d:98:a8:4a:eb:bd:60:ee:94:64:53: 14:f7:83:5f:77:95:59:d9:66:24:fc:1c:7a:36:5b:73:1f:85: 6c:31:8c:95:85:b6:90:b7:58:4c:48:98:7b:36:d2:83:b7:de: 25:6e:58:47:84:e9:e2:d7:8b:e1:20:70:f6:60:bd:19:36:de: 33:37:3f:6e:aa:3d:ec:64:1a:3e:b0:fe:97:6c:a0:e8:8b:51: c8:48:86:7d:b7:cd:07:b4:f7:02:d3:2f:88:5f:5d:07:b9:b9: 06:f7:ed:3c:f5:29:55:7e:d7:6c:eb:92:6a:56:99:bf:d0:62: 85:eb:09:68:84:68:c7:53:5b:95:ec:0b:17:8a:80:33:6f:42: 41:51:aa:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElMyUnV4DS1H54s0IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDMyNTAxMDA0MFoXDTI1MDYyMzAxMDA0MFowLzEtMCsGA1UEAxMk ZjgzMjlkM2MtMDliNi00YTE4LTgxMDAtODUyZjBkNTc2OTQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhwpGdWE6fefvokTrPl3lw5p8k2oPWYNlidxH PCzYAFyKIhk4g3igxorKMkJqb65uJBO7Vczm1uIlRLyEOVsVg2ytNGEpmMgEbtIB HIAl1gQveMOsg7W7DIRaiOzu2+STHQN8TCTuv9E/ulq5hPqbz6vglKa+e0fNdHp4 yjL7iaVfLAD3NOz2WaEtodc0udfE7zCCi181QJBTNU9Bnlic8D8tHKwUJT83MIP7 BOmSFLN5d5RPJzw67LEw4HKCaIXJK0tDm/AXkg1BlauSBAsNtSCqBJ/aqVwlvcod 4iAaVErzF4tKQ9cw5L2uL67oGSelf3FvslBgqVo7xYKaAX+IrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGl3N9LAbv+xezJ+maJPH9nnmxuJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYThlM2U2YjItZDFkYy0z M2JlLWJjZDUtZTA3MzNiMDAxYjRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxxBVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABSeUoV7MuHZ3aEeS0llEKGliQfIz/6q+K77n8MXirw4ntzWvwyp9/Cz c9VeQuqt4R5iCR+KppXYw2+kcdXnCqnYNTJLOBatqKVNJ0yUS5TpYSs+F2dS6E6R 6198vzVCOAZ3p8rPw3p6INPxvoPblzbuOj89mKhK671g7pRkUxT3g193lVnZZiT8 HHo2W3MfhWwxjJWFtpC3WExImHs20oO33iVuWEeE6eLXi+EgcPZgvRk23jM3P26q PexkGj6w/pdsoOiLUchIhn23zQe09wLTL4hfXQe5uQb37Tz1KVV+12zrkmpWmb/Q YoXrCWiEaMdTW5XsCxeKgDNvQkFRqpw= -----END CERTIFICATE-----Generated at Sat Apr 26 12:54:50 2025 by rpki-client