$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498/81ff9af1-83d0-3371-a7aa-bf5418695ebc.roa File: 81ff9af1-83d0-3371-a7aa-bf5418695ebc.roa (raw, json) Hash identifier: j0mjPi+UJ+DM4dEzkEyGx9Ly69jvdcL5Tydva4zGKIs= Subject key identifier: 9C:75:A7:4A:82:B5:D0:EA:7A:D5:30:89:E6:80:A0:CF:22:9C:F2:04 Certificate issuer: /CN=aae4f0de-2296-435c-b411-b16981804498 Certificate serial: 010D0C9F43285849419E8B8BB7369E8FF8BCD500 Authority key identifier: 1F:D3:27:64:4D:58:B9:AF:C5:7F:44:82:4D:FB:8F:B7:1E:18:CF:6D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498/81ff9af1-83d0-3371-a7aa-bf5418695ebc.roa Signing time: Fri 21 Mar 2025 01:00:39 +0000 ROA not before: Fri 21 Mar 2025 01:00:39 +0000 ROA not after: Thu 19 Jun 2025 01:00:39 +0000 asID: 398268 IP address blocks: 199.58.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498/aae4f0de-2296-435c-b411-b16981804498.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498/aae4f0de-2296-435c-b411-b16981804498.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:41:9e:8b:8b:b7:36:9e:8f:f8:bc:d5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aae4f0de-2296-435c-b411-b16981804498 Validity Not Before: Mar 21 01:00:39 2025 GMT Not After : Jun 19 01:00:39 2025 GMT Subject: CN=d7513804-3307-481a-a925-bb3941a7632f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:03:0a:11:db:b8:40:e4:c0:c5:1d:6d:0e:5a: 24:18:f8:00:df:65:83:84:38:0f:0e:bb:05:67:b2: 39:6a:17:ca:4c:93:48:be:72:7e:3d:46:e7:b0:4e: 2c:ee:f8:96:0d:65:47:87:d7:54:c3:ff:58:f3:61: c2:93:39:ef:37:ca:51:b3:b6:22:59:de:9a:d2:cd: b3:86:8a:9a:9c:6e:31:f6:39:0c:90:0b:b7:a6:49: 66:07:af:e9:34:cb:f7:f7:ac:76:aa:78:21:6e:05: d0:f1:ac:41:82:ad:e7:e7:a5:54:82:b6:66:86:85: 89:af:d0:5b:a8:12:a1:4f:30:44:04:2a:85:16:af: e6:41:19:7a:9f:b2:ad:c8:bf:3b:13:41:79:b1:79: 79:48:c6:5d:9a:9f:f2:55:4d:49:28:ff:66:c7:ee: e7:d7:5f:dd:d7:2c:ce:28:92:ce:40:ab:87:28:89: f7:1d:4a:b2:7f:95:c7:b7:a6:20:9a:a8:16:b9:7b: 9b:8d:d1:8e:25:56:23:1c:bb:5a:f8:55:df:f4:88: e8:67:59:5e:fe:27:c1:2f:9b:6b:e3:93:d0:cf:b9: 40:0d:b6:c7:70:68:77:93:66:b6:75:cf:4a:1a:4a: e3:ef:ce:33:1b:a4:31:26:2a:2b:c9:6c:1a:9a:6d: 0b:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:75:A7:4A:82:B5:D0:EA:7A:D5:30:89:E6:80:A0:CF:22:9C:F2:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498/81ff9af1-83d0-3371-a7aa-bf5418695ebc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498/aae4f0de-2296-435c-b411-b16981804498.crl X509v3 Authority Key Identifier: keyid:1F:D3:27:64:4D:58:B9:AF:C5:7F:44:82:4D:FB:8F:B7:1E:18:CF:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498.cer sbgp-ipAddrBlock: critical IPv4: 199.58.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:69:cf:9f:a8:ab:4d:04:01:e0:36:8b:05:6e:83:01:fc:05: 84:de:58:d6:69:64:e3:5e:8e:c6:b5:f9:f4:7c:ad:47:18:91: 0b:36:17:ce:a3:b1:04:8f:a9:ad:f4:01:21:c6:7a:bd:90:12: 56:4a:2d:7f:17:c9:af:2d:df:7f:6b:72:d8:9a:43:02:e2:d1: 52:9f:1f:c5:a1:44:38:80:a5:db:b0:85:c1:1c:7b:cd:53:11: 43:ae:d2:02:d2:0a:44:a2:1b:f0:f3:c2:8e:e5:cd:04:80:1a: 13:1a:f7:0a:26:c0:89:ce:cb:72:2a:6c:a4:72:75:be:59:09: 13:eb:30:a3:78:2c:1f:f2:2f:f1:8d:21:2f:42:c8:ad:c6:a0: 8c:4e:41:dd:7a:7b:5e:a2:ce:f0:ad:0e:1e:7f:a0:ff:a3:18: 0c:df:72:91:9a:4c:b4:5c:b5:3e:25:92:e8:b2:ff:c0:3f:36: 64:88:9f:6c:28:b7:c2:41:15:3d:29:5d:fb:27:e0:a7:6a:85: 8f:56:2d:64:21:f7:21:c3:22:79:ad:f9:0f:5e:36:87:84:bc: 9a:13:3a:9f:d3:f2:7e:b4:1d:76:ed:14:f3:0d:a5:9a:c4:15: 76:2c:26:80:e7:b6:2a:f7:0d:1c:d7:c0:2e:10:0e:eb:f5:d8: aa:70:08:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElBnouLtzaej/i81QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFlNGYwZGUtMjI5Ni00MzVjLWI0MTEtYjE2OTgxODA0 NDk4MB4XDTI1MDMyMTAxMDAzOVoXDTI1MDYxOTAxMDAzOVowLzEtMCsGA1UEAxMk ZDc1MTM4MDQtMzMwNy00ODFhLWE5MjUtYmIzOTQxYTc2MzJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwMKEdu4QOTAxR1tDlokGPgA32WDhDgPDrsF Z7I5ahfKTJNIvnJ+PUbnsE4s7viWDWVHh9dUw/9Y82HCkznvN8pRs7YiWd6a0s2z hoqanG4x9jkMkAu3pklmB6/pNMv396x2qnghbgXQ8axBgq3n56VUgrZmhoWJr9Bb qBKhTzBEBCqFFq/mQRl6n7KtyL87E0F5sXl5SMZdmp/yVU1JKP9mx+7n11/d1yzO KJLOQKuHKIn3HUqyf5XHt6YgmqgWuXubjdGOJVYjHLta+FXf9IjoZ1le/ifBL5tr 45PQz7lADbbHcGh3k2a2dc9KGkrj784zG6QxJioryWwamm0LXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJx1p0qCtdDqetUwieaAoM8inPIEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hYWU0 ZjBkZS0yMjk2LTQzNWMtYjQxMS1iMTY5ODE4MDQ0OTgvODFmZjlhZjEtODNkMC0z MzcxLWE3YWEtYmY1NDE4Njk1ZWJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYWFlNGYwZGUtMjI5Ni00MzVjLWI0 MTEtYjE2OTgxODA0NDk4L2FhZTRmMGRlLTIyOTYtNDM1Yy1iNDExLWIxNjk4MTgw NDQ5OC5jcmwwHwYDVR0jBBgwFoAUH9MnZE1Yua/Ff0SCTfuPtx4Yz20wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hYWU0ZjBkZS0yMjk2LTQzNWMtYjQxMS1iMTY5 ODE4MDQ0OTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxzpZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABppz5+oq00EAeA2iwVugwH8BYTeWNZpZONejsa1+fR8rUcYkQs2F86j sQSPqa30ASHGer2QElZKLX8Xya8t339rctiaQwLi0VKfH8WhRDiApduwhcEce81T EUOu0gLSCkSiG/Dzwo7lzQSAGhMa9womwInOy3IqbKRydb5ZCRPrMKN4LB/yL/GN IS9CyK3GoIxOQd16e16izvCtDh5/oP+jGAzfcpGaTLRctT4lkuiy/8A/NmSIn2wo t8JBFT0pXfsn4KdqhY9WLWQh9yHDInmt+Q9eNoeEvJoTOp/T8n60HXbtFPMNpZrE FXYsJoDntir3DRzXwC4QDuv12KpwCKI= -----END CERTIFICATE-----Generated at Thu May 1 09:37:33 2025 by rpki-client