$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/b7751a83-4d77-3534-a692-22c9f15e2c5e.roa File: b7751a83-4d77-3534-a692-22c9f15e2c5e.roa (raw, json) Hash identifier: oigJ3xd2lvai4nuSalSEjlCpUJi68TFaGqn4AYpo520= Subject key identifier: 08:D0:CF:94:70:00:47:68:15:B3:24:35:2B:18:A6:1B:4A:83:78:AE Certificate issuer: /CN=1cf435c0-9d28-477a-90a9-1b4fd75cda76 Certificate serial: 010D0C9F432858495EEEE6AACDAE1766D71419E0 Authority key identifier: D5:3F:14:5F:41:53:5A:F0:41:C2:D2:BF:7D:3B:50:E6:35:32:FF:D4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/b7751a83-4d77-3534-a692-22c9f15e2c5e.roa Signing time: Mon 31 Mar 2025 13:00:59 +0000 ROA not before: Mon 31 Mar 2025 13:00:59 +0000 ROA not after: Sun 29 Jun 2025 13:00:59 +0000 asID: 14618 IP address blocks: 199.187.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/1cf435c0-9d28-477a-90a9-1b4fd75cda76.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/1cf435c0-9d28-477a-90a9-1b4fd75cda76.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5e:ee:e6:aa:cd:ae:17:66:d7:14:19:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1cf435c0-9d28-477a-90a9-1b4fd75cda76 Validity Not Before: Mar 31 13:00:59 2025 GMT Not After : Jun 29 13:00:59 2025 GMT Subject: CN=44394e59-d7fe-4e31-b38f-9e46baa5b3a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:05:3a:5f:de:5e:1d:fd:6c:d3:ad:c7:eb:54: 32:97:c4:09:a4:f9:52:77:e8:07:60:ae:3b:64:8f: 27:38:70:a4:8c:40:66:2d:c0:a5:d1:b0:bd:b3:f2: ac:8b:9b:18:59:14:18:21:78:b9:de:9c:00:e5:87: 43:16:f7:19:44:37:34:97:d6:c1:59:13:ec:c2:9a: 3f:d7:57:44:26:06:02:39:7b:23:2c:1f:d8:8b:56: b2:9e:48:95:4a:88:56:0e:21:da:1e:be:91:74:35: 6b:84:c3:65:5d:b6:3c:fd:92:c5:78:01:75:cd:4d: 5a:99:71:86:4e:4a:43:11:35:da:b4:bb:51:88:97: 1f:04:54:2a:7f:41:f9:f4:3a:0c:5b:f2:f8:87:88: b0:54:33:a2:e1:d4:92:ad:b0:71:7e:4d:31:49:3b: 7c:ed:a3:07:97:b0:0f:21:ac:f4:61:34:58:dd:6a: ec:1f:82:e0:5a:12:a0:92:1e:9d:78:29:4a:25:6c: 50:91:b1:cb:78:aa:b2:20:55:01:71:97:bd:7f:37: 60:0f:34:fa:ae:d3:6d:29:03:fc:b7:88:b7:bf:a6: 52:3a:57:cc:e2:c7:98:5d:a5:7e:80:b4:7a:7f:a3: 29:d9:0e:1e:6f:1a:88:5f:15:5e:d6:7b:7b:05:d9: fa:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:D0:CF:94:70:00:47:68:15:B3:24:35:2B:18:A6:1B:4A:83:78:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/b7751a83-4d77-3534-a692-22c9f15e2c5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/1cf435c0-9d28-477a-90a9-1b4fd75cda76.crl X509v3 Authority Key Identifier: keyid:D5:3F:14:5F:41:53:5A:F0:41:C2:D2:BF:7D:3B:50:E6:35:32:FF:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76.cer sbgp-ipAddrBlock: critical IPv4: 199.187.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:15:9f:36:80:33:fe:a0:d0:10:b3:f7:9a:90:69:e6:a4:7f: 10:70:f3:17:4d:ad:32:53:ea:60:57:21:bb:60:b3:d5:f1:44: c7:56:bf:ef:0c:8a:ed:ea:79:90:18:6b:71:89:b5:0b:a4:cb: 4c:c4:18:73:92:39:a1:10:18:e8:03:a2:b7:52:71:83:a9:82: bd:de:1c:10:3f:cd:ba:c9:c2:b5:47:fc:4b:56:68:9d:dd:78: c9:06:d6:06:18:b3:66:ac:2f:b2:7e:b3:c5:c5:43:ec:d5:f5: 6f:19:11:11:7c:35:65:df:e0:60:33:c4:db:a5:c2:69:2b:64: 23:6a:56:86:91:02:ed:83:59:40:0a:7e:b0:2e:28:f4:31:28: 71:d7:f6:6c:9a:4c:b6:7f:3d:19:0a:8b:c5:32:27:da:4d:df: dc:ec:0a:59:d3:5d:0e:16:ca:75:0b:0a:f6:87:e3:ad:9a:4d: cd:79:bb:7a:a7:d7:63:6e:07:72:13:00:9d:a0:c9:c9:3b:e5: 9d:90:65:97:3f:f0:10:ea:03:60:12:ec:15:1a:99:19:20:66: 2c:16:13:86:e5:d0:1e:91:f7:53:06:ae:0d:9a:c0:32:3e:dc: 4a:54:49:04:b4:20:35:18:80:ed:2b:25:e9:38:30:de:ef:23: 2c:5e:a3:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEle7uaqza4XZtcUGeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWNmNDM1YzAtOWQyOC00NzdhLTkwYTktMWI0ZmQ3NWNk YTc2MB4XDTI1MDMzMTEzMDA1OVoXDTI1MDYyOTEzMDA1OVowLzEtMCsGA1UEAxMk NDQzOTRlNTktZDdmZS00ZTMxLWIzOGYtOWU0NmJhYTViM2E0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3AU6X95eHf1s063H61Qyl8QJpPlSd+gHYK47 ZI8nOHCkjEBmLcCl0bC9s/Ksi5sYWRQYIXi53pwA5YdDFvcZRDc0l9bBWRPswpo/ 11dEJgYCOXsjLB/Yi1aynkiVSohWDiHaHr6RdDVrhMNlXbY8/ZLFeAF1zU1amXGG TkpDETXatLtRiJcfBFQqf0H59DoMW/L4h4iwVDOi4dSSrbBxfk0xSTt87aMHl7AP Iaz0YTRY3WrsH4LgWhKgkh6deClKJWxQkbHLeKqyIFUBcZe9fzdgDzT6rtNtKQP8 t4i3v6ZSOlfM4seYXaV+gLR6f6Mp2Q4ebxqIXxVe1nt7Bdn6MwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAjQz5RwAEdoFbMkNSsYphtKg3iuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xY2Y0 MzVjMC05ZDI4LTQ3N2EtOTBhOS0xYjRmZDc1Y2RhNzYvYjc3NTFhODMtNGQ3Ny0z NTM0LWE2OTItMjJjOWYxNWUyYzVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMWNmNDM1YzAtOWQyOC00NzdhLTkw YTktMWI0ZmQ3NWNkYTc2LzFjZjQzNWMwLTlkMjgtNDc3YS05MGE5LTFiNGZkNzVj ZGE3Ni5jcmwwHwYDVR0jBBgwFoAU1T8UX0FTWvBBwtK/fTtQ5jUy/9QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xY2Y0MzVjMC05ZDI4LTQ3N2EtOTBhOS0xYjRm ZDc1Y2RhNzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx7uqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJYVnzaAM/6g0BCz95qQaeakfxBw8xdNrTJT6mBXIbtgs9XxRMdWv+8M iu3qeZAYa3GJtQuky0zEGHOSOaEQGOgDordScYOpgr3eHBA/zbrJwrVH/EtWaJ3d eMkG1gYYs2asL7J+s8XFQ+zV9W8ZERF8NWXf4GAzxNulwmkrZCNqVoaRAu2DWUAK frAuKPQxKHHX9myaTLZ/PRkKi8UyJ9pN39zsClnTXQ4WynULCvaH462aTc15u3qn 12NuB3ITAJ2gyck75Z2QZZc/8BDqA2AS7BUamRkgZiwWE4bl0B6R91MGrg2awDI+ 3EpUSQS0IDUYgO0rJek4MN7vIyxeo4k= -----END CERTIFICATE-----Generated at Sat Apr 26 13:24:09 2025 by rpki-client