$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498/2cfeb2dc-8ccd-366d-861a-64c78f093e4d.roa File: 2cfeb2dc-8ccd-366d-861a-64c78f093e4d.roa (raw, json) Hash identifier: Y7IKQAFJKXOAtYKYiGs2jNc1I1ZnrFe5bSmXrM6/JqQ= Subject key identifier: 59:78:CC:7A:21:8E:16:94:88:15:E6:AB:35:9E:91:15:D6:AC:29:24 Certificate issuer: /CN=aae4f0de-2296-435c-b411-b16981804498 Certificate serial: 010D0C9F43285849110A9AC0A91080B4C2F9D1C0 Authority key identifier: 1F:D3:27:64:4D:58:B9:AF:C5:7F:44:82:4D:FB:8F:B7:1E:18:CF:6D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498/2cfeb2dc-8ccd-366d-861a-64c78f093e4d.roa Signing time: Mon 03 Mar 2025 15:23:56 +0000 ROA not before: Mon 03 Mar 2025 15:23:56 +0000 ROA not after: Sun 01 Jun 2025 14:23:56 +0000 asID: 10103 IP address blocks: 199.58.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498/aae4f0de-2296-435c-b411-b16981804498.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498/aae4f0de-2296-435c-b411-b16981804498.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:11:0a:9a:c0:a9:10:80:b4:c2:f9:d1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aae4f0de-2296-435c-b411-b16981804498 Validity Not Before: Mar 3 15:23:56 2025 GMT Not After : Jun 1 14:23:56 2025 GMT Subject: CN=519de08e-5481-4a72-8b62-d11474c73dc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f3:e9:f8:41:d1:60:2b:db:24:8b:0b:5c:2f: 71:48:2b:f2:78:2d:45:63:2d:e8:a2:28:3d:55:2d: 72:cc:ea:11:1b:d2:81:91:d2:cd:7b:25:52:77:8a: c9:97:28:96:e3:74:66:a3:76:e6:49:46:2f:71:5c: 09:3f:22:91:ef:62:5c:0d:79:ba:ff:b7:38:62:1e: 2c:f8:04:52:26:d3:a6:5b:8a:d1:ab:18:fd:ec:03: e2:a1:09:87:b7:4b:36:20:99:ca:a5:6c:ec:b1:b7: 9a:b6:eb:5f:fc:46:5e:28:4a:c5:af:61:5e:a8:18: ec:f0:13:5a:8b:06:01:24:b7:5b:78:b8:ae:54:1e: 49:54:e7:39:c7:03:93:f2:c5:0f:e4:63:d6:77:68: a2:a4:f6:a6:e2:13:4c:94:a9:a9:6d:99:d6:a9:a4: 5c:7b:46:b7:82:cf:1d:eb:83:18:a5:f3:bd:70:02: c7:c8:14:d1:19:90:49:81:c9:da:32:86:80:4a:ef: 5b:f8:2c:a1:53:b9:b3:20:9a:1e:75:60:8d:28:0d: 4e:3b:18:30:a6:34:80:0c:6d:12:ba:a5:28:74:bf: 7a:2f:65:4b:95:6f:ae:6c:7e:bf:95:51:10:aa:04: f9:a0:3f:33:ca:5b:99:3c:12:1e:54:42:d3:a0:57: e5:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:78:CC:7A:21:8E:16:94:88:15:E6:AB:35:9E:91:15:D6:AC:29:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498/2cfeb2dc-8ccd-366d-861a-64c78f093e4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498/aae4f0de-2296-435c-b411-b16981804498.crl X509v3 Authority Key Identifier: keyid:1F:D3:27:64:4D:58:B9:AF:C5:7F:44:82:4D:FB:8F:B7:1E:18:CF:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498.cer sbgp-ipAddrBlock: critical IPv4: 199.58.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:49:d9:a7:ff:3d:74:20:d8:a8:09:51:63:98:fc:68:52:7c: be:2e:9d:d5:f3:42:42:3b:30:23:7a:bb:9a:d4:25:36:09:68: 86:b0:16:b0:4b:48:77:8e:de:92:c4:a9:de:36:f5:f6:53:e0: b4:30:0e:02:d7:87:57:33:69:8d:86:c8:d8:7b:f8:f1:93:93: e8:8c:f3:78:bf:96:71:e3:d2:c6:ab:51:65:73:7c:cc:0e:57: 3a:85:05:78:b9:59:93:31:92:a1:64:2f:93:3c:90:cc:c4:32: 8f:de:f7:a6:34:a8:d2:3b:52:59:9a:6c:29:80:c7:b4:91:b0: 43:f2:a8:4c:c9:51:08:2c:ed:88:72:6b:f8:c4:9f:18:69:91: 7f:af:5f:8f:b9:cc:8d:d4:a2:05:3a:0d:3e:dc:a5:0c:e8:e0: e1:cc:a4:d3:33:eb:8c:6d:b1:d9:bb:cb:35:79:8f:49:cb:09: c1:c9:c3:50:5a:92:4d:da:aa:89:3e:db:a3:69:ac:62:22:0b: cd:f2:be:17:f5:02:a7:10:03:45:0d:27:70:1a:6e:d5:8a:45: a6:45:60:dc:7a:91:9d:6a:79:97:45:be:82:c6:74:5e:f9:1b: 60:c9:fa:7b:81:12:df:ec:0b:7d:0c:7b:49:ee:7c:88:60:40: 70:1d:fd:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkRCprAqRCAtML50cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFlNGYwZGUtMjI5Ni00MzVjLWI0MTEtYjE2OTgxODA0 NDk4MB4XDTI1MDMwMzE1MjM1NloXDTI1MDYwMTE0MjM1NlowLzEtMCsGA1UEAxMk NTE5ZGUwOGUtNTQ4MS00YTcyLThiNjItZDExNDc0YzczZGMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/Pp+EHRYCvbJIsLXC9xSCvyeC1FYy3ooig9 VS1yzOoRG9KBkdLNeyVSd4rJlyiW43Rmo3bmSUYvcVwJPyKR72JcDXm6/7c4Yh4s +ARSJtOmW4rRqxj97APioQmHt0s2IJnKpWzssbeatutf/EZeKErFr2FeqBjs8BNa iwYBJLdbeLiuVB5JVOc5xwOT8sUP5GPWd2iipPam4hNMlKmpbZnWqaRce0a3gs8d 64MYpfO9cALHyBTRGZBJgcnaMoaASu9b+CyhU7mzIJoedWCNKA1OOxgwpjSADG0S uqUodL96L2VLlW+ubH6/lVEQqgT5oD8zyluZPBIeVELToFflXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFl4zHohjhaUiBXmqzWekRXWrCkkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hYWU0 ZjBkZS0yMjk2LTQzNWMtYjQxMS1iMTY5ODE4MDQ0OTgvMmNmZWIyZGMtOGNjZC0z NjZkLTg2MWEtNjRjNzhmMDkzZTRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYWFlNGYwZGUtMjI5Ni00MzVjLWI0 MTEtYjE2OTgxODA0NDk4L2FhZTRmMGRlLTIyOTYtNDM1Yy1iNDExLWIxNjk4MTgw NDQ5OC5jcmwwHwYDVR0jBBgwFoAUH9MnZE1Yua/Ff0SCTfuPtx4Yz20wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hYWU0ZjBkZS0yMjk2LTQzNWMtYjQxMS1iMTY5 ODE4MDQ0OTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxzpYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGBJ2af/PXQg2KgJUWOY/GhSfL4undXzQkI7MCN6u5rUJTYJaIawFrBL SHeO3pLEqd429fZT4LQwDgLXh1czaY2GyNh7+PGTk+iM83i/lnHj0sarUWVzfMwO VzqFBXi5WZMxkqFkL5M8kMzEMo/e96Y0qNI7UlmabCmAx7SRsEPyqEzJUQgs7Yhy a/jEnxhpkX+vX4+5zI3UogU6DT7cpQzo4OHMpNMz64xtsdm7yzV5j0nLCcHJw1Ba kk3aqok+26NprGIiC83yvhf1AqcQA0UNJ3AabtWKRaZFYNx6kZ1qeZdFvoLGdF75 G2DJ+nuBEt/sC30Me0nufIhgQHAd/bY= -----END CERTIFICATE-----Generated at Sat Apr 26 14:57:24 2025 by rpki-client