$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/b4417de1-ae84-322a-b555-f45428cbdb19.roa File: b4417de1-ae84-322a-b555-f45428cbdb19.roa (raw, json) Hash identifier: CobJKKhu3NsHFhLyo+2kunQcMeUykSiWEYpx3UA94nE= Subject key identifier: D8:DF:B4:6B:9F:D0:4B:B6:57:62:CF:2D:0B:CF:CF:9E:07:E8:36:A2 Certificate issuer: /CN=48f8534f-57cd-45ba-bfa4-ce60842463a4 Certificate serial: 010D0C9F432858492184137F2EDE869C9717BB98 Authority key identifier: E8:53:DD:09:72:55:3A:20:6A:9B:7D:EE:50:46:52:6A:5F:62:66:08 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/b4417de1-ae84-322a-b555-f45428cbdb19.roa Signing time: Sun 09 Mar 2025 13:00:52 +0000 ROA not before: Sun 09 Mar 2025 13:00:52 +0000 ROA not after: Sat 07 Jun 2025 13:00:52 +0000 asID: 3280 IP address blocks: 199.119.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/48f8534f-57cd-45ba-bfa4-ce60842463a4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/48f8534f-57cd-45ba-bfa4-ce60842463a4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:21:84:13:7f:2e:de:86:9c:97:17:bb:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48f8534f-57cd-45ba-bfa4-ce60842463a4 Validity Not Before: Mar 9 13:00:52 2025 GMT Not After : Jun 7 13:00:52 2025 GMT Subject: CN=5a8e56fc-b3e8-4be9-b17c-dc0a6de10c06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:7c:6d:c3:4e:58:70:87:25:71:b0:56:7f:42: f7:77:55:f1:56:e2:cf:58:14:4d:73:3e:cc:49:c3: 68:ea:af:04:3d:be:99:4d:94:12:24:2c:5d:3f:35: 57:f2:a5:cc:eb:1b:d9:f5:2d:5b:a7:23:b7:78:77: 01:46:8c:e3:30:b4:4f:e3:c1:9e:2e:7c:28:aa:d7: 0e:1f:7b:1e:88:6b:0d:1f:9c:50:2b:17:1c:c0:fe: 4d:78:43:f4:52:ed:1d:78:0a:08:91:ff:d2:f6:c9: ae:49:24:84:0d:6a:ef:a3:db:48:0c:f3:a6:c2:01: 48:9e:65:7c:37:d7:3d:c6:ba:20:49:b5:e2:1d:57: fd:9a:2d:27:2e:fb:5e:bd:6e:0c:81:d2:93:5d:57: ad:15:6b:3c:7f:6a:86:8b:7e:64:5e:b6:42:f8:9a: 09:cf:9a:bd:0d:e2:21:84:4d:41:c1:80:66:e8:b1: c7:f9:a7:e3:0d:5a:eb:70:63:72:1e:dd:b8:00:d3: 18:e4:c7:04:86:b1:d3:14:5d:65:c2:6e:19:28:f6: fb:5d:0a:64:ca:07:cb:77:f5:35:d2:da:36:7e:6c: 31:ce:90:5b:e3:88:1d:3d:3e:09:80:1b:d8:1a:42: ea:65:b1:de:0c:af:cf:b2:64:f7:9d:80:bd:62:cd: 5d:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:DF:B4:6B:9F:D0:4B:B6:57:62:CF:2D:0B:CF:CF:9E:07:E8:36:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/b4417de1-ae84-322a-b555-f45428cbdb19.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/48f8534f-57cd-45ba-bfa4-ce60842463a4.crl X509v3 Authority Key Identifier: keyid:E8:53:DD:09:72:55:3A:20:6A:9B:7D:EE:50:46:52:6A:5F:62:66:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4.cer sbgp-ipAddrBlock: critical IPv4: 199.119.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:7f:ec:6c:9f:6f:33:6c:e2:59:38:bd:0c:01:5a:d9:14:c4: 2c:05:7a:5c:00:24:75:a2:73:53:a7:c5:72:ae:06:f1:f8:35: df:19:bf:90:1e:97:42:24:a8:6f:0e:82:4e:dc:26:11:47:3c: fb:4b:da:07:7c:e3:8c:2b:7a:f3:97:f4:6b:36:30:f9:10:1b: cd:1a:2d:12:a9:b0:23:27:86:ed:c0:13:ce:f6:fe:b8:bb:2a: 31:c9:e3:b0:8e:3b:fa:a2:ac:ec:1c:97:65:31:68:fd:d8:e4: 62:13:65:16:65:80:85:b6:70:e1:17:9c:a6:9e:cd:14:2b:da: 8f:7c:18:16:46:b2:da:48:16:40:7d:33:b0:f4:ae:02:48:7f: 91:7a:7d:46:3b:da:4b:45:71:b0:9c:e9:83:4c:a1:79:f1:d1: 8a:1d:93:8e:a9:c1:3e:ec:6b:93:a3:5b:fc:61:cb:b3:b2:01: 3e:9d:f1:c1:d4:95:c9:c9:55:4f:63:cf:19:87:e4:f6:e9:05: 94:d4:5a:06:1c:92:44:06:12:4d:38:9f:cb:9d:1e:82:9d:55: e7:50:da:bc:a1:a5:ab:8e:90:5f:d0:ef:f8:8a:2c:95:2b:6f: 92:e7:48:37:e9:11:e8:d2:7f:54:f8:8f:93:f2:44:49:07:68: 86:6e:c4:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkhhBN/Lt6GnJcXu5gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDhmODUzNGYtNTdjZC00NWJhLWJmYTQtY2U2MDg0MjQ2 M2E0MB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk NWE4ZTU2ZmMtYjNlOC00YmU5LWIxN2MtZGMwYTZkZTEwYzA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnxtw05YcIclcbBWf0L3d1XxVuLPWBRNcz7M ScNo6q8EPb6ZTZQSJCxdPzVX8qXM6xvZ9S1bpyO3eHcBRozjMLRP48GeLnwoqtcO H3seiGsNH5xQKxccwP5NeEP0Uu0deAoIkf/S9smuSSSEDWrvo9tIDPOmwgFInmV8 N9c9xrogSbXiHVf9mi0nLvtevW4MgdKTXVetFWs8f2qGi35kXrZC+JoJz5q9DeIh hE1BwYBm6LHH+afjDVrrcGNyHt24ANMY5McEhrHTFF1lwm4ZKPb7XQpkygfLd/U1 0to2fmwxzpBb44gdPT4JgBvYGkLqZbHeDK/PsmT3nYC9Ys1dbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNjftGuf0Eu2V2LPLQvPz54H6DaiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80OGY4 NTM0Zi01N2NkLTQ1YmEtYmZhNC1jZTYwODQyNDYzYTQvYjQ0MTdkZTEtYWU4NC0z MjJhLWI1NTUtZjQ1NDI4Y2JkYjE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNDhmODUzNGYtNTdjZC00NWJhLWJm YTQtY2U2MDg0MjQ2M2E0LzQ4Zjg1MzRmLTU3Y2QtNDViYS1iZmE0LWNlNjA4NDI0 NjNhNC5jcmwwHwYDVR0jBBgwFoAU6FPdCXJVOiBqm33uUEZSal9iZggwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80OGY4NTM0Zi01N2NkLTQ1YmEtYmZhNC1jZTYw ODQyNDYzYTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx3eLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIh/7GyfbzNs4lk4vQwBWtkUxCwFelwAJHWic1OnxXKuBvH4Nd8Zv5Ae l0IkqG8Ogk7cJhFHPPtL2gd844wrevOX9Gs2MPkQG80aLRKpsCMnhu3AE872/ri7 KjHJ47COO/qirOwcl2UxaP3Y5GITZRZlgIW2cOEXnKaezRQr2o98GBZGstpIFkB9 M7D0rgJIf5F6fUY72ktFcbCc6YNMoXnx0Yodk46pwT7sa5OjW/xhy7OyAT6d8cHU lcnJVU9jzxmH5PbpBZTUWgYckkQGEk04n8udHoKdVedQ2ryhpauOkF/Q7/iKLJUr b5LnSDfpEejSf1T4j5PyREkHaIZuxLk= -----END CERTIFICATE-----Generated at Tue Apr 29 00:36:11 2025 by rpki-client