$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/7378fdc7-b53f-3c92-a02d-ce46be4a9374.roa File: 7378fdc7-b53f-3c92-a02d-ce46be4a9374.roa (raw, json) Hash identifier: 9khxNH5klJsRkba1wRP0LPZ9j9PQsZd3Rv+vtETIHXY= Subject key identifier: 86:F0:21:59:32:AF:93:EE:20:28:68:62:C7:07:D7:3A:31:7A:3D:E4 Certificate issuer: /CN=48f8534f-57cd-45ba-bfa4-ce60842463a4 Certificate serial: 010D0C9F432858492CAE97434A1DF1714A802D78 Authority key identifier: E8:53:DD:09:72:55:3A:20:6A:9B:7D:EE:50:46:52:6A:5F:62:66:08 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/7378fdc7-b53f-3c92-a02d-ce46be4a9374.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 216382 IP address blocks: 199.119.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/48f8534f-57cd-45ba-bfa4-ce60842463a4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/48f8534f-57cd-45ba-bfa4-ce60842463a4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:ae:97:43:4a:1d:f1:71:4a:80:2d:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48f8534f-57cd-45ba-bfa4-ce60842463a4 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=dfa5aea0-8ea7-4380-b262-498a43ec21c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:65:4a:ed:60:47:da:56:51:c5:68:c5:10:24: ce:66:06:3c:55:d2:7f:13:fc:c4:77:59:38:62:29: a9:02:13:34:6e:9b:43:8c:bd:6c:87:57:2d:6f:9e: 2d:73:90:9e:70:be:6d:50:54:cc:d5:c8:df:26:22: bc:c3:4f:09:3d:b5:6a:c5:63:1e:79:91:02:df:cb: 03:66:94:23:a9:38:87:f4:53:83:f6:66:d9:4b:b8: 38:0b:68:ac:21:38:58:ba:d4:0b:69:cc:ea:40:03: d2:6f:aa:02:e1:da:04:b1:75:6a:9d:52:e2:b4:36: 9f:6e:31:12:20:0a:b2:0a:79:96:c8:19:3f:44:67: 0f:57:8b:84:49:98:f9:16:1e:13:a2:70:23:cf:1c: dd:d3:04:d6:3e:6d:38:64:83:b7:ca:29:59:db:cb: c2:28:3d:91:26:f7:36:09:94:31:24:20:8d:98:64: 6b:53:92:60:3a:03:c0:ca:7b:24:dd:b7:21:ab:29: 85:20:8b:de:1c:4e:15:ee:71:5f:2b:b5:f4:89:77: 5b:21:d4:18:2e:bc:48:27:94:47:ec:17:2f:43:5d: f9:62:12:fa:44:9b:8f:0f:89:dd:af:38:39:66:61: 0e:80:29:b0:79:50:a0:97:ba:c7:86:88:ba:42:ed: 30:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:F0:21:59:32:AF:93:EE:20:28:68:62:C7:07:D7:3A:31:7A:3D:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/7378fdc7-b53f-3c92-a02d-ce46be4a9374.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/48f8534f-57cd-45ba-bfa4-ce60842463a4.crl X509v3 Authority Key Identifier: keyid:E8:53:DD:09:72:55:3A:20:6A:9B:7D:EE:50:46:52:6A:5F:62:66:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4.cer sbgp-ipAddrBlock: critical IPv4: 199.119.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:2d:65:8c:18:04:d4:05:04:a8:42:e1:48:82:40:fc:ec:7c: 37:e5:e9:42:b8:22:4e:9f:70:b2:1f:91:62:73:86:bd:14:d8: 40:1f:24:27:b6:c0:cb:23:a4:86:e1:76:7a:d8:0b:e7:9f:dd: c0:95:39:39:79:6a:5c:83:de:48:96:a2:a3:02:57:b8:86:3c: 95:f9:70:cc:7b:d9:54:c2:ae:cb:00:41:b8:6a:0a:1a:49:65: 48:7e:05:a2:d5:19:47:3d:06:b9:6e:a9:03:27:f7:78:5f:6d: 17:fb:2c:4e:05:68:a3:3f:29:e9:23:15:11:4a:23:df:54:86: 16:57:7a:b3:ec:63:40:f3:c4:a8:bd:ac:7f:26:36:02:b2:23: 81:08:94:88:cf:b4:e2:73:98:d7:90:bc:ba:0e:2b:85:45:02: 71:e8:5c:5f:61:5e:a6:f8:00:d3:1b:03:06:01:ca:93:78:59: b3:47:7d:70:3f:13:80:2c:29:81:1d:d8:c6:da:e1:61:de:0b: 4b:49:5d:66:8d:99:02:81:85:a2:28:41:49:ec:82:96:a1:d1: de:20:92:49:f7:42:c3:e3:41:69:f4:55:59:f0:58:86:70:1f: 84:c8:c1:40:34:99:62:df:a3:d4:b3:6c:eb:8b:10:fd:72:95: 29:df:03:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksrpdDSh3xcUqALXgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDhmODUzNGYtNTdjZC00NWJhLWJmYTQtY2U2MDg0MjQ2 M2E0MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk ZGZhNWFlYTAtOGVhNy00MzgwLWIyNjItNDk4YTQzZWMyMWMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGVK7WBH2lZRxWjFECTOZgY8VdJ/E/zEd1k4 YimpAhM0bptDjL1sh1ctb54tc5CecL5tUFTM1cjfJiK8w08JPbVqxWMeeZEC38sD ZpQjqTiH9FOD9mbZS7g4C2isIThYutQLaczqQAPSb6oC4doEsXVqnVLitDafbjES IAqyCnmWyBk/RGcPV4uESZj5Fh4TonAjzxzd0wTWPm04ZIO3yilZ28vCKD2RJvc2 CZQxJCCNmGRrU5JgOgPAynsk3bchqymFIIveHE4V7nFfK7X0iXdbIdQYLrxIJ5RH 7BcvQ135YhL6RJuPD4ndrzg5ZmEOgCmweVCgl7rHhoi6Qu0whwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIbwIVkyr5PuIChoYscH1zoxej3kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80OGY4 NTM0Zi01N2NkLTQ1YmEtYmZhNC1jZTYwODQyNDYzYTQvNzM3OGZkYzctYjUzZi0z YzkyLWEwMmQtY2U0NmJlNGE5Mzc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNDhmODUzNGYtNTdjZC00NWJhLWJm YTQtY2U2MDg0MjQ2M2E0LzQ4Zjg1MzRmLTU3Y2QtNDViYS1iZmE0LWNlNjA4NDI0 NjNhNC5jcmwwHwYDVR0jBBgwFoAU6FPdCXJVOiBqm33uUEZSal9iZggwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80OGY4NTM0Zi01N2NkLTQ1YmEtYmZhNC1jZTYw ODQyNDYzYTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx3eKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABEtZYwYBNQFBKhC4UiCQPzsfDfl6UK4Ik6fcLIfkWJzhr0U2EAfJCe2 wMsjpIbhdnrYC+ef3cCVOTl5alyD3kiWoqMCV7iGPJX5cMx72VTCrssAQbhqChpJ ZUh+BaLVGUc9BrluqQMn93hfbRf7LE4FaKM/KekjFRFKI99UhhZXerPsY0DzxKi9 rH8mNgKyI4EIlIjPtOJzmNeQvLoOK4VFAnHoXF9hXqb4ANMbAwYBypN4WbNHfXA/ E4AsKYEd2Mba4WHeC0tJXWaNmQKBhaIoQUnsgpah0d4gkkn3QsPjQWn0VVnwWIZw H4TIwUA0mWLfo9SzbOuLEP1ylSnfA7M= -----END CERTIFICATE-----Generated at Tue Apr 29 09:40:43 2025 by rpki-client