$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afb3511b-f1b6-44ad-9c36-f6576a5400df/0ea62e7e-054c-31d5-bb8d-1005bcac50b2.roa File: 0ea62e7e-054c-31d5-bb8d-1005bcac50b2.roa (raw, json) Hash identifier: ctWaE8lhOfCDB7Y+POZwkCXfLTIU9OzURf7cGLcOong= Subject key identifier: 9B:68:68:66:56:D1:1B:3D:AB:F2:2D:96:57:70:C0:0F:D9:F3:FB:B1 Certificate issuer: /CN=afb3511b-f1b6-44ad-9c36-f6576a5400df Certificate serial: 010D0C9F43285849A35481C6DD06C800E814E2E0 Authority key identifier: 9E:6E:F4:05:1C:0B:C6:DB:08:47:57:A8:A3:7A:7D:59:29:AE:D0:33 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afb3511b-f1b6-44ad-9c36-f6576a5400df.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afb3511b-f1b6-44ad-9c36-f6576a5400df/0ea62e7e-054c-31d5-bb8d-1005bcac50b2.roa Signing time: Fri 25 Apr 2025 01:00:47 +0000 ROA not before: Fri 25 Apr 2025 01:00:47 +0000 ROA not after: Thu 24 Jul 2025 01:00:47 +0000 asID: 395839 IP address blocks: 199.5.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afb3511b-f1b6-44ad-9c36-f6576a5400df/afb3511b-f1b6-44ad-9c36-f6576a5400df.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afb3511b-f1b6-44ad-9c36-f6576a5400df/afb3511b-f1b6-44ad-9c36-f6576a5400df.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afb3511b-f1b6-44ad-9c36-f6576a5400df.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a3:54:81:c6:dd:06:c8:00:e8:14:e2:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afb3511b-f1b6-44ad-9c36-f6576a5400df Validity Not Before: Apr 25 01:00:47 2025 GMT Not After : Jul 24 01:00:47 2025 GMT Subject: CN=b029b207-1681-4473-83be-953862ede6d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:d9:fb:de:f3:c7:eb:6d:f5:b7:a4:06:89:ef: b2:0c:6b:d8:39:83:e3:b5:fe:31:25:ea:5d:a8:ad: 5a:4d:1a:69:b2:47:4b:32:83:b8:a5:28:27:5a:94: 22:b6:5f:1c:52:07:d1:71:b0:93:7c:f3:ad:98:e7: 06:39:4b:2f:39:45:c3:b4:18:4f:b9:06:19:d6:40: 62:39:f2:25:ce:61:81:67:31:67:b8:20:9c:27:41: 77:15:a6:41:1a:a7:3b:50:c0:c3:20:db:a2:be:a2: 28:7a:97:be:fb:be:2c:ed:3e:f2:d6:60:b6:7a:22: e1:db:b0:7b:4c:fe:97:aa:b7:d4:a4:fa:1f:d7:c1: 90:29:0b:85:04:1c:9f:a6:3f:a1:41:0d:2a:e4:1c: 14:a2:82:66:9d:e9:dc:5d:39:8e:e9:fd:1c:93:8a: 6c:ba:15:1e:4a:34:39:8d:24:25:42:28:23:52:dd: 4c:79:05:23:2b:60:f2:1c:29:06:78:10:11:79:c3: bc:7c:cd:0e:04:72:20:59:4b:54:e8:4d:bf:02:91: 41:4f:c5:d0:fa:92:3f:f6:80:2e:2e:7f:f8:57:dc: 18:1a:ee:9b:3d:24:21:de:37:6f:54:9e:1a:17:f0: f1:f1:30:ac:45:29:2a:e0:47:23:0f:91:d6:4d:3e: ef:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:68:68:66:56:D1:1B:3D:AB:F2:2D:96:57:70:C0:0F:D9:F3:FB:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afb3511b-f1b6-44ad-9c36-f6576a5400df/0ea62e7e-054c-31d5-bb8d-1005bcac50b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afb3511b-f1b6-44ad-9c36-f6576a5400df/afb3511b-f1b6-44ad-9c36-f6576a5400df.crl X509v3 Authority Key Identifier: keyid:9E:6E:F4:05:1C:0B:C6:DB:08:47:57:A8:A3:7A:7D:59:29:AE:D0:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afb3511b-f1b6-44ad-9c36-f6576a5400df.cer sbgp-ipAddrBlock: critical IPv4: 199.5.163.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:6f:42:6b:0c:fe:73:f2:bc:8d:81:f3:85:7c:53:bd:31:65: 92:69:43:d6:db:7a:a2:74:26:4e:89:f7:50:6e:74:b9:ac:02: 62:09:f3:f6:23:42:1a:ea:18:e0:df:e8:ee:e3:ce:dd:48:81: f5:2a:8d:13:0d:50:3c:84:c2:59:c1:18:0a:e8:a0:d0:3f:c0: cd:ef:1d:48:ef:60:f4:b4:6c:40:af:a6:34:24:3b:32:f1:53: 3b:43:99:d9:56:49:7d:d2:f6:65:40:fc:43:63:9e:3f:47:f5: 59:e5:89:39:5b:fe:01:cb:1e:35:89:80:ea:e3:99:cc:f8:cd: 44:d2:7a:b9:99:cb:57:ca:44:96:6f:56:fe:8f:fb:3d:06:1c: 88:99:c7:dd:0d:af:1e:b9:4f:d1:e7:b7:ef:2b:c4:1d:04:7e: 26:9e:99:6b:08:25:34:b9:93:9e:36:8c:62:25:bc:8e:b6:4b: 07:bf:67:fc:ce:a0:e3:c0:b6:bf:cb:51:82:a5:fa:28:6b:a6: bd:4f:66:03:e2:1c:06:b9:df:b2:58:68:b9:57:7b:f1:3b:fb: d9:e0:47:52:d0:84:57:21:70:17:5a:20:89:fd:41:98:21:1f: 60:8a:ff:72:ff:80:75:c0:bb:7a:da:86:b4:8d:fa:36:ac:60: ce:32:5b:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmjVIHG3QbIAOgU4uAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZiMzUxMWItZjFiNi00NGFkLTljMzYtZjY1NzZhNTQw MGRmMB4XDTI1MDQyNTAxMDA0N1oXDTI1MDcyNDAxMDA0N1owLzEtMCsGA1UEAxMk YjAyOWIyMDctMTY4MS00NDczLTgzYmUtOTUzODYyZWRlNmQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9n73vPH6231t6QGie+yDGvYOYPjtf4xJepd qK1aTRppskdLMoO4pSgnWpQitl8cUgfRcbCTfPOtmOcGOUsvOUXDtBhPuQYZ1kBi OfIlzmGBZzFnuCCcJ0F3FaZBGqc7UMDDINuivqIoepe++74s7T7y1mC2eiLh27B7 TP6XqrfUpPof18GQKQuFBByfpj+hQQ0q5BwUooJmnencXTmO6f0ck4psuhUeSjQ5 jSQlQigjUt1MeQUjK2DyHCkGeBARecO8fM0OBHIgWUtU6E2/ApFBT8XQ+pI/9oAu Ln/4V9wYGu6bPSQh3jdvVJ4aF/Dx8TCsRSkq4EcjD5HWTT7vDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJtoaGZW0Rs9q/ItlldwwA/Z8/uxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hZmIz NTExYi1mMWI2LTQ0YWQtOWMzNi1mNjU3NmE1NDAwZGYvMGVhNjJlN2UtMDU0Yy0z MWQ1LWJiOGQtMTAwNWJjYWM1MGIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYWZiMzUxMWItZjFiNi00NGFkLTlj MzYtZjY1NzZhNTQwMGRmL2FmYjM1MTFiLWYxYjYtNDRhZC05YzM2LWY2NTc2YTU0 MDBkZi5jcmwwHwYDVR0jBBgwFoAUnm70BRwLxtsIR1eoo3p9WSmu0DMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hZmIzNTExYi1mMWI2LTQ0YWQtOWMzNi1mNjU3 NmE1NDAwZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwWjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABlvQmsM/nPyvI2B84V8U70xZZJpQ9bbeqJ0Jk6J91BudLmsAmIJ8/Yj QhrqGODf6O7jzt1IgfUqjRMNUDyEwlnBGArooNA/wM3vHUjvYPS0bECvpjQkOzLx UztDmdlWSX3S9mVA/ENjnj9H9VnliTlb/gHLHjWJgOrjmcz4zUTSermZy1fKRJZv Vv6P+z0GHIiZx90Nrx65T9Hnt+8rxB0EfiaemWsIJTS5k542jGIlvI62Swe/Z/zO oOPAtr/LUYKl+ihrpr1PZgPiHAa537JYaLlXe/E7+9ngR1LQhFchcBdaIIn9QZgh H2CK/3L/gHXAu3rahrSN+jasYM4yW6U= -----END CERTIFICATE-----Generated at Tue Apr 29 05:30:50 2025 by rpki-client