$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/cae92603-341e-3d54-9fda-0cf1e572484c.roa File: cae92603-341e-3d54-9fda-0cf1e572484c.roa (raw, json) Hash identifier: piRY+iuzNKLhIXbEqD1nAroy699H2EWW0BSSak0G30A= Subject key identifier: 1C:31:56:29:7A:B0:17:0A:55:D5:ED:9A:0B:EA:07:B1:E6:31:19:B6 Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b Certificate serial: 010D0C9F43285848E59BB3AAF7F81D0E12B43C00 Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/cae92603-341e-3d54-9fda-0cf1e572484c.roa Signing time: Sun 16 Feb 2025 02:00:40 +0000 ROA not before: Sun 16 Feb 2025 02:00:40 +0000 ROA not after: Sat 17 May 2025 01:00:40 +0000 asID: 21949 IP address blocks: 199.247.192.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e5:9b:b3:aa:f7:f8:1d:0e:12:b4:3c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b Validity Not Before: Feb 16 02:00:40 2025 GMT Not After : May 17 01:00:40 2025 GMT Subject: CN=18c8f7f1-5c6a-4e8a-954d-68d74369f8c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:bc:a7:cc:fe:3b:c5:76:1e:5b:a3:e1:06:48: 39:78:af:7d:af:a0:c4:72:ef:46:23:ed:0e:e0:a1: 97:9f:81:3d:b0:2c:19:8d:fc:1d:45:57:7b:92:7c: 69:e6:49:96:49:91:11:d5:1b:b8:4e:44:67:65:c9: 29:00:ae:b6:24:2b:1e:12:67:22:74:d0:8e:2b:3e: 22:15:bc:99:05:76:25:7d:79:dd:30:c7:06:12:d3: 8c:15:97:0c:eb:d0:2b:c7:50:97:0d:33:00:9e:ec: 5d:4b:fa:7a:a1:3c:25:fc:67:46:d2:fc:98:5c:5b: 31:a9:49:c5:84:1c:ec:92:6e:0d:bc:e2:ce:4d:2c: f2:1b:14:bc:db:09:e0:26:a3:de:7e:d7:f3:db:3e: da:da:45:84:56:dc:93:51:71:28:44:61:b8:b5:41: fd:9d:b1:fe:65:1e:d2:21:61:5e:3e:4b:d4:8d:d6: 9d:35:be:69:7b:65:49:8a:1a:f1:d3:16:ad:d1:2e: e2:e3:23:4d:61:de:58:5b:54:f2:8d:49:b3:61:ef: cb:b1:ed:9a:4b:0a:17:9e:c8:78:04:2e:44:27:aa: 34:7f:9e:dd:39:17:65:f6:51:20:9e:b1:34:e9:05: 8b:91:22:26:ce:5b:c2:a3:d0:d4:53:c8:1a:79:17: 95:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:31:56:29:7A:B0:17:0A:55:D5:ED:9A:0B:EA:07:B1:E6:31:19:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/cae92603-341e-3d54-9fda-0cf1e572484c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl X509v3 Authority Key Identifier: keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer sbgp-ipAddrBlock: critical IPv4: 199.247.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:75:4d:73:25:af:a5:09:79:52:18:13:e6:21:48:43:a9:f8: 72:85:a3:81:b5:e5:12:b3:30:f5:c2:04:14:4f:c7:e5:f7:9f: 54:68:02:00:35:5d:f3:b8:49:e5:60:6f:c2:67:96:54:ee:2c: 3f:33:f3:e8:73:fd:ac:93:0a:36:21:35:c1:ba:90:9a:89:ca: 02:86:6c:47:0d:42:1d:bb:f0:17:9d:f8:cc:e3:ea:81:b8:a3: 7a:22:c0:71:c8:a0:79:c1:cb:a5:85:aa:ce:1c:7d:a6:00:83: 92:eb:fa:0b:24:85:f4:cf:73:49:20:66:6d:3d:b5:05:86:90: ca:69:05:42:c5:aa:5a:bc:8a:42:17:1c:c2:76:36:56:85:4d: 92:a3:f7:0d:14:1e:cd:0c:12:3f:cb:ec:ce:e5:74:5a:05:3a: fa:6e:46:e9:df:66:53:41:ea:23:58:8b:09:53:2d:6e:e8:cf: d1:64:18:56:99:1a:71:a4:dd:59:b6:8f:9c:88:7e:dc:a4:48: a4:f3:64:b1:10:30:7b:f9:a1:5b:16:43:3e:50:2c:89:b5:e4: 25:e9:a1:c1:50:ad:1f:27:e0:33:0e:d0:2c:c5:4a:8e:21:1e: 8c:6d:56:1a:89:b9:f5:ab:97:57:22:17:0d:6e:f3:90:ec:dc: 45:a0:f7:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjlm7Oq9/gdDhK0PAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ5MTQwY2EtMjc3ZS00ODcxLWExMDAtNDUxZDA2NmQx YzViMB4XDTI1MDIxNjAyMDA0MFoXDTI1MDUxNzAxMDA0MFowLzEtMCsGA1UEAxMk MThjOGY3ZjEtNWM2YS00ZThhLTk1NGQtNjhkNzQzNjlmOGM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg7ynzP47xXYeW6PhBkg5eK99r6DEcu9GI+0O 4KGXn4E9sCwZjfwdRVd7knxp5kmWSZER1Ru4TkRnZckpAK62JCseEmcidNCOKz4i FbyZBXYlfXndMMcGEtOMFZcM69Arx1CXDTMAnuxdS/p6oTwl/GdG0vyYXFsxqUnF hBzskm4NvOLOTSzyGxS82wngJqPeftfz2z7a2kWEVtyTUXEoRGG4tUH9nbH+ZR7S IWFePkvUjdadNb5pe2VJihrx0xat0S7i4yNNYd5YW1TyjUmzYe/Lse2aSwoXnsh4 BC5EJ6o0f57dORdl9lEgnrE06QWLkSImzlvCo9DUU8gaeReVEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBwxVil6sBcKVdXtmgvqB7HmMRm2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkx NDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFkMDY2ZDFjNWIvY2FlOTI2MDMtMzQxZS0z ZDU0LTlmZGEtMGNmMWU1NzI0ODRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjQ5MTQwY2EtMjc3ZS00ODcxLWEx MDAtNDUxZDA2NmQxYzViLzI0OTE0MGNhLTI3N2UtNDg3MS1hMTAwLTQ1MWQwNjZk MWM1Yi5jcmwwHwYDVR0jBBgwFoAUcCTs3b7y+uva+LVMugLAQ4E9SMkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkxNDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFk MDY2ZDFjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx/fAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC91TXMlr6UJeVIYE+YhSEOp+HKFo4G15RKzMPXCBBRPx+X3n1RoAgA1 XfO4SeVgb8JnllTuLD8z8+hz/ayTCjYhNcG6kJqJygKGbEcNQh278Bed+Mzj6oG4 o3oiwHHIoHnBy6WFqs4cfaYAg5Lr+gskhfTPc0kgZm09tQWGkMppBULFqlq8ikIX HMJ2NlaFTZKj9w0UHs0MEj/L7M7ldFoFOvpuRunfZlNB6iNYiwlTLW7oz9FkGFaZ GnGk3Vm2j5yIftykSKTzZLEQMHv5oVsWQz5QLIm15CXpocFQrR8n4DMO0CzFSo4h HoxtVhqJufWrl1ciFw1u85Ds3EWg93c= -----END CERTIFICATE-----Generated at Tue Apr 29 00:01:41 2025 by rpki-client