$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/012bce04-c29f-38f8-9f97-3ab6b1af1180.roa File: 012bce04-c29f-38f8-9f97-3ab6b1af1180.roa (raw, json) Hash identifier: YIbAWdhZFKt/uhQZTs0Mhc5c3jQUOyGoa9XMqUN1ULI= Subject key identifier: 43:F3:E8:1B:71:D4:40:8F:CB:1D:C5:82:62:69:53:C7:87:AC:8A:69 Certificate issuer: /CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Certificate serial: 010D0C9F43285849A61F3D913A1208BDC414B280 Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/012bce04-c29f-38f8-9f97-3ab6b1af1180.roa Signing time: Sat 26 Apr 2025 01:00:47 +0000 ROA not before: Sat 26 Apr 2025 01:00:47 +0000 ROA not after: Fri 25 Jul 2025 01:00:47 +0000 asID: 22885 IP address blocks: 199.0.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a6:1f:3d:91:3a:12:08:bd:c4:14:b2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Validity Not Before: Apr 26 01:00:47 2025 GMT Not After : Jul 25 01:00:47 2025 GMT Subject: CN=571844f6-c298-492b-a79f-738d996a411e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:aa:21:e6:0e:20:cd:d9:cf:0a:e9:f4:2d:20: 57:58:25:55:55:f1:bf:74:f8:df:d6:1a:f5:d7:45: 35:1b:79:80:71:0b:62:8c:42:17:60:f3:a6:45:2e: c9:ad:f8:c7:6e:14:a0:aa:2a:62:3d:6b:7f:1e:59: 90:ec:75:d7:7b:68:ad:fc:dc:6f:0c:ed:97:ac:1f: b8:32:06:f0:f1:f2:1f:19:17:a8:5f:2a:56:99:63: 28:c6:19:1b:98:56:a6:fa:54:da:f8:ee:fc:1c:8b: 83:96:2e:99:a5:0a:50:a4:8b:24:78:c4:8e:a8:09: 7e:15:f0:5a:54:64:68:c8:ee:d3:fd:1d:a1:34:32: 2a:4d:aa:1f:86:27:e1:dc:19:71:14:c3:17:c3:eb: f5:06:4b:9d:dd:85:d4:15:8e:84:88:ee:51:41:f6: 66:8b:21:62:5c:90:fa:27:86:1e:89:5f:b1:5b:47: 3a:3f:c2:05:ad:6d:b6:3c:d2:83:56:fa:95:43:0b: 63:62:83:f5:0c:e0:6d:29:27:1f:9b:db:0e:b7:55: 69:4f:52:02:8c:25:1b:35:aa:96:c2:b2:24:7a:17: d8:14:4a:98:31:42:08:91:4d:98:20:ed:b5:92:1e: dd:ec:f3:a3:59:ad:af:13:29:1c:a9:81:0d:03:9a: 5b:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:F3:E8:1B:71:D4:40:8F:CB:1D:C5:82:62:69:53:C7:87:AC:8A:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/012bce04-c29f-38f8-9f97-3ab6b1af1180.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl X509v3 Authority Key Identifier: keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer sbgp-ipAddrBlock: critical IPv4: 199.0.187.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:ce:78:46:f0:da:11:4c:4b:da:cd:30:54:ee:ad:f2:08:94: df:30:71:3c:27:73:7b:76:f3:1c:06:f5:9e:c5:d0:d0:f0:09: 28:48:81:0b:96:ff:40:8b:4f:3f:0d:80:8b:34:22:75:d0:cb: a5:8c:18:fb:18:bb:0d:8a:b3:f6:15:1e:74:ea:83:7b:cc:be: 83:e0:af:8c:6d:31:aa:d5:65:76:f0:39:e3:41:db:ae:5f:51: 23:d8:3d:90:d8:e2:a7:7a:d8:5f:b7:70:02:81:f4:cc:66:d6: 99:ed:5b:7d:96:07:31:8b:aa:5d:b9:44:50:98:00:6a:97:af: 8c:64:a1:54:c6:34:b9:cf:7a:52:60:bf:3d:4b:36:7c:a0:00: f4:d7:a5:35:30:29:f9:6a:bd:5c:71:61:68:24:a7:85:02:df: 5d:7c:72:53:13:81:a9:d3:76:2a:67:9a:c8:1c:4b:33:de:57: be:dd:f5:b2:49:16:09:21:e0:37:d7:92:76:d8:bb:be:e1:2b: 44:09:30:1b:5a:34:08:8f:df:37:ec:37:79:c0:cf:a1:f2:0c: 87:2a:9b:96:04:b7:79:db:e7:a2:35:93:54:7a:f3:21:a7:82: 37:3a:b8:27:56:fd:99:d9:39:04:9e:b2:7c:bb:08:f9:92:be: 6e:a3:14:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmmHz2ROhIIvcQUsoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDM3MGM0OWUtZjcwYy00NmZiLWEzMGYtZGYyNDc1ODUy Y2MyMB4XDTI1MDQyNjAxMDA0N1oXDTI1MDcyNTAxMDA0N1owLzEtMCsGA1UEAxMk NTcxODQ0ZjYtYzI5OC00OTJiLWE3OWYtNzM4ZDk5NmE0MTFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiKoh5g4gzdnPCun0LSBXWCVVVfG/dPjf1hr1 10U1G3mAcQtijEIXYPOmRS7JrfjHbhSgqipiPWt/HlmQ7HXXe2it/NxvDO2XrB+4 Mgbw8fIfGReoXypWmWMoxhkbmFam+lTa+O78HIuDli6ZpQpQpIskeMSOqAl+FfBa VGRoyO7T/R2hNDIqTaofhifh3BlxFMMXw+v1Bkud3YXUFY6EiO5RQfZmiyFiXJD6 J4YeiV+xW0c6P8IFrW22PNKDVvqVQwtjYoP1DOBtKScfm9sOt1VpT1ICjCUbNaqW wrIkehfYFEqYMUIIkU2YIO21kh7d7POjWa2vEykcqYENA5pbuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEPz6Btx1ECPyx3FgmJpU8eHrIppMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcw YzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0NzU4NTJjYzIvMDEyYmNlMDQtYzI5Zi0z OGY4LTlmOTctM2FiNmIxYWYxMTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDM3MGM0OWUtZjcwYy00NmZiLWEz MGYtZGYyNDc1ODUyY2MyL2QzNzBjNDllLWY3MGMtNDZmYi1hMzBmLWRmMjQ3NTg1 MmNjMi5jcmwwHwYDVR0jBBgwFoAUooa1EEFiDY7Lz82x8x6qqiVcZ5EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcwYzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0 NzU4NTJjYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwC7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJXOeEbw2hFMS9rNMFTurfIIlN8wcTwnc3t28xwG9Z7F0NDwCShIgQuW /0CLTz8NgIs0InXQy6WMGPsYuw2Ks/YVHnTqg3vMvoPgr4xtMarVZXbwOeNB265f USPYPZDY4qd62F+3cAKB9Mxm1pntW32WBzGLql25RFCYAGqXr4xkoVTGNLnPelJg vz1LNnygAPTXpTUwKflqvVxxYWgkp4UC3118clMTganTdipnmsgcSzPeV77d9bJJ Fgkh4DfXknbYu77hK0QJMBtaNAiP3zfsN3nAz6HyDIcqm5YEt3nb56I1k1R68yGn gjc6uCdW/ZnZOQSesny7CPmSvm6jFIM= -----END CERTIFICATE-----Generated at Wed Apr 30 05:24:54 2025 by rpki-client