$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4418b7bb-7f1c-4333-9b8e-babf8b8fa391/afe4eaec-855a-3198-8438-4f284572e247.roa File: afe4eaec-855a-3198-8438-4f284572e247.roa (raw, json) Hash identifier: KfKaQsKUlMvDMWHGTD79Eu8wZeHZk3+KguMWLBwezQs= Subject key identifier: 19:85:E6:40:0A:20:3A:36:53:D9:0A:2A:2A:2A:A7:E0:5D:77:02:91 Certificate issuer: /CN=4418b7bb-7f1c-4333-9b8e-babf8b8fa391 Certificate serial: 010D0C9F432858494F263568277D9238A57C8A80 Authority key identifier: 17:E9:E4:BC:6B:9B:24:9D:73:30:0A:9A:89:6E:F3:7B:9C:E5:43:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4418b7bb-7f1c-4333-9b8e-babf8b8fa391.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4418b7bb-7f1c-4333-9b8e-babf8b8fa391/afe4eaec-855a-3198-8438-4f284572e247.roa Signing time: Tue 25 Mar 2025 21:19:40 +0000 ROA not before: Tue 25 Mar 2025 21:19:40 +0000 ROA not after: Mon 23 Jun 2025 21:19:40 +0000 asID: 26548 IP address blocks: 199.96.164.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4418b7bb-7f1c-4333-9b8e-babf8b8fa391/4418b7bb-7f1c-4333-9b8e-babf8b8fa391.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4418b7bb-7f1c-4333-9b8e-babf8b8fa391/4418b7bb-7f1c-4333-9b8e-babf8b8fa391.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4418b7bb-7f1c-4333-9b8e-babf8b8fa391.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4f:26:35:68:27:7d:92:38:a5:7c:8a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4418b7bb-7f1c-4333-9b8e-babf8b8fa391 Validity Not Before: Mar 25 21:19:40 2025 GMT Not After : Jun 23 21:19:40 2025 GMT Subject: CN=38d15621-aadf-4269-b985-5ff58e3e1360 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:c6:80:ac:0a:d1:66:cc:d6:71:70:b1:73:62: 88:0b:2b:f7:5d:79:a3:73:f4:98:c2:48:53:32:5b: d6:c1:9e:e5:42:1d:d0:e0:18:0c:33:10:3a:d0:2e: e9:2f:ea:3c:00:4c:9f:ba:b7:26:ce:01:f6:24:b9: a9:a6:47:0c:d8:ef:2a:81:ea:e1:e6:c6:43:6d:b6: 1e:db:94:30:55:73:f9:71:ee:a9:a4:75:fd:a7:e6: 1f:a3:72:3e:14:79:a9:fa:79:b3:2d:7e:c9:aa:d5: b6:60:a9:21:04:d6:80:17:d2:32:3c:26:be:1b:1c: cc:d3:e8:e0:f7:e1:65:06:4c:34:66:d6:3c:6b:e1: 52:13:49:ec:7f:82:6c:8c:aa:7e:fd:71:92:b4:de: 65:75:a4:8a:39:cb:1d:77:a7:98:13:78:f1:50:10: 4b:a2:a5:2d:11:fc:da:5f:62:29:ba:09:17:7d:a2: 41:d0:5b:fe:9f:4e:62:62:7e:e0:8c:c9:43:0d:f3: 5a:dc:00:57:55:01:1e:bf:a5:09:49:40:57:58:f9: 27:44:3b:45:20:b2:f9:e5:9a:d9:78:b3:b7:31:3d: c1:af:60:48:a7:09:c2:3c:e1:61:16:5d:af:04:64: 25:f4:a9:90:10:ec:b6:82:04:a9:10:1b:92:27:5b: 26:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:85:E6:40:0A:20:3A:36:53:D9:0A:2A:2A:2A:A7:E0:5D:77:02:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4418b7bb-7f1c-4333-9b8e-babf8b8fa391/afe4eaec-855a-3198-8438-4f284572e247.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4418b7bb-7f1c-4333-9b8e-babf8b8fa391/4418b7bb-7f1c-4333-9b8e-babf8b8fa391.crl X509v3 Authority Key Identifier: keyid:17:E9:E4:BC:6B:9B:24:9D:73:30:0A:9A:89:6E:F3:7B:9C:E5:43:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4418b7bb-7f1c-4333-9b8e-babf8b8fa391.cer sbgp-ipAddrBlock: critical IPv4: 199.96.164.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:f1:69:9c:d0:52:70:03:74:0c:88:e0:2c:0a:24:ac:51:99: 82:70:bc:80:d4:21:8a:6a:4a:8c:c7:3a:98:a2:4d:d8:33:91: 68:d1:62:da:64:05:ae:ce:83:15:20:17:fa:a9:33:82:da:e6: bf:44:7c:5a:1b:52:6e:b4:75:b6:26:16:fd:a4:55:18:d5:3b: bd:8e:4c:c5:72:87:ef:c7:f7:c0:82:11:52:40:ba:40:15:78: b6:87:37:ef:57:12:a1:b5:5c:10:ab:6a:40:80:64:8a:7b:d7: 86:98:d5:a8:41:79:4d:17:ce:83:b8:a6:59:2c:e6:35:ba:91: 13:6a:08:66:99:5b:77:9a:c2:75:55:ee:90:49:8e:c1:a0:c0: ea:c0:ee:91:ab:a7:e9:d8:54:94:b8:2d:89:a1:6d:3b:2e:51: f2:59:36:e9:7b:d9:cc:f1:99:31:43:c9:e2:78:94:a5:4f:d1: 41:24:99:6f:7e:6b:2a:b4:9c:b0:fc:b8:91:a5:87:8d:db:66: 8a:b1:02:c6:68:df:9e:ce:7d:bb:a2:5d:1b:76:74:81:bc:a0: 43:58:60:ba:00:99:80:16:80:6b:b6:8f:35:95:89:fb:ee:34: e4:9a:ee:56:6f:a1:f8:42:64:73:0c:35:31:57:c8:62:d2:62: 96:3e:ba:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElPJjVoJ32SOKV8ioAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDQxOGI3YmItN2YxYy00MzMzLTliOGUtYmFiZjhiOGZh MzkxMB4XDTI1MDMyNTIxMTk0MFoXDTI1MDYyMzIxMTk0MFowLzEtMCsGA1UEAxMk MzhkMTU2MjEtYWFkZi00MjY5LWI5ODUtNWZmNThlM2UxMzYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4MaArArRZszWcXCxc2KICyv3XXmjc/SYwkhT MlvWwZ7lQh3Q4BgMMxA60C7pL+o8AEyfurcmzgH2JLmppkcM2O8qgerh5sZDbbYe 25QwVXP5ce6ppHX9p+Yfo3I+FHmp+nmzLX7JqtW2YKkhBNaAF9IyPCa+GxzM0+jg 9+FlBkw0ZtY8a+FSE0nsf4JsjKp+/XGStN5ldaSKOcsdd6eYE3jxUBBLoqUtEfza X2IpugkXfaJB0Fv+n05iYn7gjMlDDfNa3ABXVQEev6UJSUBXWPknRDtFILL55ZrZ eLO3MT3Br2BIpwnCPOFhFl2vBGQl9KmQEOy2ggSpEBuSJ1sm7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBmF5kAKIDo2U9kKKioqp+BddwKRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80NDE4 YjdiYi03ZjFjLTQzMzMtOWI4ZS1iYWJmOGI4ZmEzOTEvYWZlNGVhZWMtODU1YS0z MTk4LTg0MzgtNGYyODQ1NzJlMjQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNDQxOGI3YmItN2YxYy00MzMzLTli OGUtYmFiZjhiOGZhMzkxLzQ0MThiN2JiLTdmMWMtNDMzMy05YjhlLWJhYmY4Yjhm YTM5MS5jcmwwHwYDVR0jBBgwFoAUF+nkvGubJJ1zMAqaiW7ze5zlQ5EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80NDE4YjdiYi03ZjFjLTQzMzMtOWI4ZS1iYWJm OGI4ZmEzOTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx2CkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJzxaZzQUnADdAyI4CwKJKxRmYJwvIDUIYpqSozHOpiiTdgzkWjRYtpk Ba7OgxUgF/qpM4La5r9EfFobUm60dbYmFv2kVRjVO72OTMVyh+/H98CCEVJAukAV eLaHN+9XEqG1XBCrakCAZIp714aY1ahBeU0XzoO4plks5jW6kRNqCGaZW3eawnVV 7pBJjsGgwOrA7pGrp+nYVJS4LYmhbTsuUfJZNul72czxmTFDyeJ4lKVP0UEkmW9+ ayq0nLD8uJGlh43bZoqxAsZo357OfbuiXRt2dIG8oENYYLoAmYAWgGu2jzWVifvu NOSa7lZvofhCZHMMNTFXyGLSYpY+uhg= -----END CERTIFICATE-----Generated at Sat Apr 26 16:55:30 2025 by rpki-client