$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a9694c21-178c-4e7b-9e78-08bc978c5e6f/9a9235ac-9ad1-3a83-b931-e086a9800ba2.roa File: 9a9235ac-9ad1-3a83-b931-e086a9800ba2.roa (raw, json) Hash identifier: sylcTsVamG1d8aGp0oATuuvVPfiuTO0Aau22wrfPPhA= Subject key identifier: 5D:24:6E:80:40:3A:A1:43:9B:1D:0D:6C:3D:48:75:68:5A:F4:BA:70 Certificate issuer: /CN=a9694c21-178c-4e7b-9e78-08bc978c5e6f Certificate serial: 010D0C9F432858498CFF15E3F68807BEED455180 Authority key identifier: 84:39:81:4F:67:A4:F0:69:AB:6B:59:7D:A3:EA:1C:66:EE:44:88:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a9694c21-178c-4e7b-9e78-08bc978c5e6f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a9694c21-178c-4e7b-9e78-08bc978c5e6f/9a9235ac-9ad1-3a83-b931-e086a9800ba2.roa Signing time: Thu 17 Apr 2025 01:00:45 +0000 ROA not before: Thu 17 Apr 2025 01:00:45 +0000 ROA not after: Wed 16 Jul 2025 01:00:45 +0000 asID: 32815 IP address blocks: 199.247.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a9694c21-178c-4e7b-9e78-08bc978c5e6f/a9694c21-178c-4e7b-9e78-08bc978c5e6f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a9694c21-178c-4e7b-9e78-08bc978c5e6f/a9694c21-178c-4e7b-9e78-08bc978c5e6f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a9694c21-178c-4e7b-9e78-08bc978c5e6f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8c:ff:15:e3:f6:88:07:be:ed:45:51:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9694c21-178c-4e7b-9e78-08bc978c5e6f Validity Not Before: Apr 17 01:00:45 2025 GMT Not After : Jul 16 01:00:45 2025 GMT Subject: CN=e88dd124-6fea-4556-ae08-640aa03cf94d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e6:42:d0:04:ba:82:a7:2f:10:36:8b:d1:8f: 31:b8:ef:21:87:2c:b7:ee:71:33:83:e9:f1:18:ad: c8:45:4b:e8:71:c7:81:d5:67:eb:b2:bd:3a:6b:f7: cf:3d:72:9d:20:99:3c:d3:4e:29:12:01:cc:0c:f3: a2:51:c1:8e:a0:c0:07:d5:63:be:c6:aa:d3:55:92: fc:2e:15:bd:60:03:ce:6a:bb:07:c8:0f:3a:e1:84: 92:3b:2e:ac:9e:94:f5:89:69:74:76:e4:d6:e9:f9: 7a:2b:0a:de:5e:67:df:ce:97:12:e5:51:c1:58:77: d2:e6:dc:75:fa:08:9b:23:0d:98:b9:e4:3a:94:ac: 1a:c0:d2:b9:1e:21:8d:29:7e:32:cf:39:3f:9a:87: 06:fd:52:c1:31:d1:d2:03:8a:9d:82:fb:71:aa:03: da:f4:ce:2c:ad:3a:44:07:c0:bc:9e:90:78:71:c9: d2:0a:52:df:3f:ca:7e:3e:26:8f:7c:6f:f0:6f:a5: 12:71:74:64:e0:af:bb:db:ed:6f:88:b6:36:8e:49: 39:f2:cd:86:a4:4e:9e:22:ad:10:c0:d4:b8:6a:f5: c2:5f:dd:e6:94:b1:05:4c:09:27:0e:fe:f3:42:59: 25:14:1a:42:39:8b:44:fa:d4:30:0d:6d:3d:c9:68: 3e:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:24:6E:80:40:3A:A1:43:9B:1D:0D:6C:3D:48:75:68:5A:F4:BA:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a9694c21-178c-4e7b-9e78-08bc978c5e6f/9a9235ac-9ad1-3a83-b931-e086a9800ba2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a9694c21-178c-4e7b-9e78-08bc978c5e6f/a9694c21-178c-4e7b-9e78-08bc978c5e6f.crl X509v3 Authority Key Identifier: keyid:84:39:81:4F:67:A4:F0:69:AB:6B:59:7D:A3:EA:1C:66:EE:44:88:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a9694c21-178c-4e7b-9e78-08bc978c5e6f.cer sbgp-ipAddrBlock: critical IPv4: 199.247.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:91:1f:29:50:f4:50:4c:58:23:d2:10:d5:8a:29:78:c3:70: 86:2d:8c:d0:c3:bc:9f:4d:50:62:12:a9:32:8e:98:90:9a:d1: 57:8d:14:33:9f:a1:08:0b:92:89:f9:f0:2d:23:15:b3:30:5b: d0:b6:53:1b:a0:58:b0:dc:a8:d0:08:8d:ac:81:aa:1b:0f:7c: a9:36:11:57:f5:14:81:3c:8b:eb:dc:99:8f:4b:11:36:63:13: 5c:3e:8a:6a:de:f7:f5:4d:02:ad:26:81:d7:82:66:ad:fd:1d: 35:ec:2d:bf:e8:96:1b:7e:c5:22:da:3d:7f:84:2c:5a:30:f6: 09:68:dd:6b:0b:2a:69:50:ef:ae:88:11:44:94:3c:3f:d0:90: f8:5a:3b:ed:ad:58:f3:03:cb:9d:6a:78:f5:f8:71:37:06:fb: f5:db:02:ea:69:e6:d7:5a:64:b2:96:21:80:3e:d8:eb:d4:73: 38:a7:7f:77:f2:7d:27:75:20:d1:9b:c2:3d:60:72:9a:e0:cb: 31:23:60:e2:2f:d5:f6:c0:9e:b8:ac:87:a9:5a:c7:8e:8a:fe: 77:26:66:78:6c:2a:c7:83:d7:48:0c:1c:b1:3e:3a:43:81:1d: ee:55:a6:ed:a2:09:b3:f9:f3:69:33:cf:95:6d:ec:27:a2:88: f9:d3:75:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmM/xXj9ogHvu1FUYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTk2OTRjMjEtMTc4Yy00ZTdiLTllNzgtMDhiYzk3OGM1 ZTZmMB4XDTI1MDQxNzAxMDA0NVoXDTI1MDcxNjAxMDA0NVowLzEtMCsGA1UEAxMk ZTg4ZGQxMjQtNmZlYS00NTU2LWFlMDgtNjQwYWEwM2NmOTRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwuZC0AS6gqcvEDaL0Y8xuO8hhyy37nEzg+nx GK3IRUvocceB1Wfrsr06a/fPPXKdIJk8004pEgHMDPOiUcGOoMAH1WO+xqrTVZL8 LhW9YAPOarsHyA864YSSOy6snpT1iWl0duTW6fl6KwreXmffzpcS5VHBWHfS5tx1 +gibIw2YueQ6lKwawNK5HiGNKX4yzzk/mocG/VLBMdHSA4qdgvtxqgPa9M4srTpE B8C8npB4ccnSClLfP8p+PiaPfG/wb6UScXRk4K+72+1viLY2jkk58s2GpE6eIq0Q wNS4avXCX93mlLEFTAknDv7zQlklFBpCOYtE+tQwDW09yWg+KQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF0kboBAOqFDmx0NbD1IdWha9LpwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hOTY5 NGMyMS0xNzhjLTRlN2ItOWU3OC0wOGJjOTc4YzVlNmYvOWE5MjM1YWMtOWFkMS0z YTgzLWI5MzEtZTA4NmE5ODAwYmEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYTk2OTRjMjEtMTc4Yy00ZTdiLTll NzgtMDhiYzk3OGM1ZTZmL2E5Njk0YzIxLTE3OGMtNGU3Yi05ZTc4LTA4YmM5Nzhj NWU2Zi5jcmwwHwYDVR0jBBgwFoAUhDmBT2ek8Gmra1l9o+ocZu5EiB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hOTY5NGMyMS0xNzhjLTRlN2ItOWU3OC0wOGJj OTc4YzVlNmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEx/eAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ6RHylQ9FBMWCPSENWKKXjDcIYtjNDDvJ9NUGISqTKOmJCa0VeNFDOf oQgLkon58C0jFbMwW9C2UxugWLDcqNAIjayBqhsPfKk2EVf1FIE8i+vcmY9LETZj E1w+imre9/VNAq0mgdeCZq39HTXsLb/olht+xSLaPX+ELFow9glo3WsLKmlQ766I EUSUPD/QkPhaO+2tWPMDy51qePX4cTcG+/XbAupp5tdaZLKWIYA+2OvUczinf3fy fSd1INGbwj1gcprgyzEjYOIv1fbAnrish6lax46K/ncmZnhsKseD10gMHLE+OkOB He5Vpu2iCbP582kzz5Vt7CeiiPnTdfY= -----END CERTIFICATE-----Generated at Sun Apr 27 20:17:08 2025 by rpki-client