$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498/892fdf53-8d98-3430-af33-08660cd96851.roa File: 892fdf53-8d98-3430-af33-08660cd96851.roa (raw, json) Hash identifier: DzfvRDniB0NlZWin5HkhOHtJZG8LLZH55IMe/iqAbk4= Subject key identifier: A9:3C:CC:5C:1B:43:73:F7:3F:A9:EC:AC:73:D6:C7:66:F3:EF:FB:20 Certificate issuer: /CN=aae4f0de-2296-435c-b411-b16981804498 Certificate serial: 010D0C9F43285849B3C0516D5904DF6D90CC7E80 Authority key identifier: 1F:D3:27:64:4D:58:B9:AF:C5:7F:44:82:4D:FB:8F:B7:1E:18:CF:6D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498/892fdf53-8d98-3430-af33-08660cd96851.roa Signing time: Wed 30 Apr 2025 22:11:01 +0000 ROA not before: Wed 30 Apr 2025 22:11:01 +0000 ROA not after: Tue 29 Jul 2025 22:11:01 +0000 asID: 215605 IP address blocks: 199.58.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498/aae4f0de-2296-435c-b411-b16981804498.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498/aae4f0de-2296-435c-b411-b16981804498.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b3:c0:51:6d:59:04:df:6d:90:cc:7e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aae4f0de-2296-435c-b411-b16981804498 Validity Not Before: Apr 30 22:11:01 2025 GMT Not After : Jul 29 22:11:01 2025 GMT Subject: CN=62a14549-7529-4de1-b011-9b6b1b0bac76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:f8:e4:78:d0:a9:50:22:45:b4:b4:40:c4:03: 55:15:96:5a:8c:ec:56:d2:70:89:43:f7:a8:6a:33: 2b:5e:e7:c6:ad:33:ba:6a:4f:64:41:f1:92:4f:91: 8b:78:a0:27:56:27:de:55:16:89:33:92:b4:ef:d9: f6:99:fd:2a:cb:fa:f1:96:93:aa:55:12:71:44:c4: ed:cc:88:18:fc:be:b0:a3:56:c4:22:be:0a:10:75: 9b:7f:30:c7:d1:24:9d:69:55:77:6e:41:d1:7d:ee: dd:df:d6:bd:42:54:36:2d:4e:60:54:59:86:57:bf: 15:8f:c8:31:b8:f7:f0:d8:33:ec:f4:36:ae:52:be: f9:86:ca:b5:01:b6:7c:17:d3:13:43:76:f8:2b:d3: 40:c2:b5:8f:c9:da:1f:b7:0c:c5:1b:28:d5:18:1b: a0:c3:d2:e2:50:c4:b3:37:a5:e5:7a:79:0e:83:a4: 83:5a:33:6e:8b:a5:5e:66:d5:96:49:72:10:58:05: 14:af:bf:94:5c:5c:56:c3:c0:0c:5c:10:d6:b5:d4: 6f:49:e7:7d:dd:57:73:e3:be:6b:ae:22:99:39:32: 4f:18:dc:79:8e:d3:fd:59:a6:d3:7f:a7:3c:70:b2: 6d:41:04:fb:68:e1:80:50:07:4b:52:de:6f:fe:ef: d4:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:3C:CC:5C:1B:43:73:F7:3F:A9:EC:AC:73:D6:C7:66:F3:EF:FB:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498/892fdf53-8d98-3430-af33-08660cd96851.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498/aae4f0de-2296-435c-b411-b16981804498.crl X509v3 Authority Key Identifier: keyid:1F:D3:27:64:4D:58:B9:AF:C5:7F:44:82:4D:FB:8F:B7:1E:18:CF:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498.cer sbgp-ipAddrBlock: critical IPv4: 199.58.91.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:79:b0:14:22:b7:6e:23:b3:97:58:2c:65:06:3e:60:89:a8: 55:f9:66:4d:9a:31:e7:05:97:af:3f:f0:7c:33:54:ca:cb:33: 10:df:10:9c:35:08:09:2b:c8:9a:39:26:b4:94:b2:0a:85:94: 9e:5d:80:09:65:f2:9b:6e:10:be:8b:89:2c:01:f7:8d:8e:4e: 08:58:12:73:11:7e:c2:ff:09:11:9f:c3:91:db:c3:c8:9c:0b: 32:22:14:ae:ad:af:ad:13:4f:dc:e0:bc:47:54:2a:05:bf:f3: f6:64:ff:ba:cc:4b:66:c6:cb:be:1c:30:4c:60:63:f7:57:a7: f8:67:fd:5f:62:67:7b:74:a1:e3:b2:e2:b3:0d:97:5e:b3:13: 47:ee:d0:68:8a:18:a3:a5:ba:ea:a7:90:62:ca:93:34:2b:3e: 25:bb:d4:0d:62:e1:c9:b7:b5:10:0e:87:94:ca:82:26:36:56: dd:22:12:5b:af:1d:ee:6b:80:74:05:f0:7f:62:7f:a0:0d:d1: f6:a8:33:23:8c:e3:c0:42:e2:c6:99:69:e2:5b:f5:ce:5b:c5: c3:8a:16:b5:a4:e2:44:3b:05:1f:de:55:19:61:65:8a:77:06: 20:1e:aa:8b:89:ae:c7:34:e9:6c:50:25:3e:25:ab:2f:af:cd: 29:8c:2d:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmzwFFtWQTfbZDMfoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFlNGYwZGUtMjI5Ni00MzVjLWI0MTEtYjE2OTgxODA0 NDk4MB4XDTI1MDQzMDIyMTEwMVoXDTI1MDcyOTIyMTEwMVowLzEtMCsGA1UEAxMk NjJhMTQ1NDktNzUyOS00ZGUxLWIwMTEtOWI2YjFiMGJhYzc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlvjkeNCpUCJFtLRAxANVFZZajOxW0nCJQ/eo ajMrXufGrTO6ak9kQfGST5GLeKAnVifeVRaJM5K079n2mf0qy/rxlpOqVRJxRMTt zIgY/L6wo1bEIr4KEHWbfzDH0SSdaVV3bkHRfe7d39a9QlQ2LU5gVFmGV78Vj8gx uPfw2DPs9DauUr75hsq1AbZ8F9MTQ3b4K9NAwrWPydoftwzFGyjVGBugw9LiUMSz N6XlenkOg6SDWjNui6VeZtWWSXIQWAUUr7+UXFxWw8AMXBDWtdRvSed93Vdz475r riKZOTJPGNx5jtP9WabTf6c8cLJtQQT7aOGAUAdLUt5v/u/UgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKk8zFwbQ3P3P6nsrHPWx2bz7/sgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hYWU0 ZjBkZS0yMjk2LTQzNWMtYjQxMS1iMTY5ODE4MDQ0OTgvODkyZmRmNTMtOGQ5OC0z NDMwLWFmMzMtMDg2NjBjZDk2ODUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYWFlNGYwZGUtMjI5Ni00MzVjLWI0 MTEtYjE2OTgxODA0NDk4L2FhZTRmMGRlLTIyOTYtNDM1Yy1iNDExLWIxNjk4MTgw NDQ5OC5jcmwwHwYDVR0jBBgwFoAUH9MnZE1Yua/Ff0SCTfuPtx4Yz20wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hYWU0ZjBkZS0yMjk2LTQzNWMtYjQxMS1iMTY5 ODE4MDQ0OTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxzpbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIR5sBQit24js5dYLGUGPmCJqFX5Zk2aMecFl68/8HwzVMrLMxDfEJw1 CAkryJo5JrSUsgqFlJ5dgAll8ptuEL6LiSwB942OTghYEnMRfsL/CRGfw5Hbw8ic CzIiFK6tr60TT9zgvEdUKgW/8/Zk/7rMS2bGy74cMExgY/dXp/hn/V9iZ3t0oeOy 4rMNl16zE0fu0GiKGKOluuqnkGLKkzQrPiW71A1i4cm3tRAOh5TKgiY2Vt0iEluv He5rgHQF8H9if6AN0faoMyOM48BC4saZaeJb9c5bxcOKFrWk4kQ7BR/eVRlhZYp3 BiAeqouJrsc06WxQJT4lqy+vzSmMLdY= -----END CERTIFICATE-----Generated at Sat May 3 14:17:18 2025 by rpki-client