$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/91f245d2-ace9-4f2b-ab8e-927934d9805f/c1cbc946-fa38-376c-910a-70a850448b50.roa File: c1cbc946-fa38-376c-910a-70a850448b50.roa (raw, json) Hash identifier: Q2xjg/Ny/ZSlX+E7wY1sBC3lJr2L22IGzKbCskiPgIA= Subject key identifier: 10:F5:4D:C6:21:C4:AA:39:8B:D9:0C:16:7E:B9:DB:33:24:36:6F:2F Certificate issuer: /CN=91f245d2-ace9-4f2b-ab8e-927934d9805f Certificate serial: 010D0C9F4328584902EC2530FC8385946A0D8580 Authority key identifier: 7B:81:F3:E6:29:C6:08:6B:E8:1A:B4:36:4F:D1:89:2E:37:B5:0C:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/91f245d2-ace9-4f2b-ab8e-927934d9805f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/91f245d2-ace9-4f2b-ab8e-927934d9805f/c1cbc946-fa38-376c-910a-70a850448b50.roa Signing time: Wed 26 Feb 2025 14:00:51 +0000 ROA not before: Wed 26 Feb 2025 14:00:51 +0000 ROA not after: Tue 27 May 2025 13:00:51 +0000 asID: 16509 IP address blocks: 172.99.14.0/24 maxlen: 24 172.99.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/91f245d2-ace9-4f2b-ab8e-927934d9805f/91f245d2-ace9-4f2b-ab8e-927934d9805f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/91f245d2-ace9-4f2b-ab8e-927934d9805f/91f245d2-ace9-4f2b-ab8e-927934d9805f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/91f245d2-ace9-4f2b-ab8e-927934d9805f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:02:ec:25:30:fc:83:85:94:6a:0d:85:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91f245d2-ace9-4f2b-ab8e-927934d9805f Validity Not Before: Feb 26 14:00:51 2025 GMT Not After : May 27 13:00:51 2025 GMT Subject: CN=95e607dc-4ab6-4b8a-be87-a198ba26e761 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:71:09:46:19:e5:b2:48:e5:2b:64:82:33:cf: fe:a3:8b:6c:77:59:57:7a:e6:70:d7:44:c7:59:64: d9:38:71:ab:90:e2:e9:c0:fd:ab:d9:6f:7d:d9:a2: 1e:18:0b:bf:db:a6:50:73:d6:58:f8:07:12:03:cf: d2:f9:05:d0:95:c6:c3:ed:e4:42:b7:b0:c5:9a:de: 25:ff:ae:31:86:43:05:54:33:2e:0f:43:ed:d0:6c: 1e:b7:a3:a4:c8:17:0a:d6:99:14:c6:77:b6:f3:43: b0:87:f6:4f:e9:36:a3:37:b2:9b:b9:34:10:75:5c: c5:c7:9e:8a:ef:4f:dd:ef:ca:8c:ac:9e:3f:b3:0c: 34:9f:59:91:b4:2b:ff:17:c5:27:1e:29:3f:82:d3: a6:e0:b8:e3:16:9a:1a:dc:fa:90:19:00:34:29:06: 79:5d:e3:f8:b1:d6:4c:02:ee:de:e9:f9:c8:ce:ae: 39:0a:14:ea:a8:a8:bd:df:fe:73:7b:5e:47:af:78: a5:5c:ca:25:6e:55:7e:e8:9d:b1:03:39:a2:07:7d: f0:41:a3:73:ad:c2:f2:8d:24:4a:42:fd:36:76:24: d0:16:a3:9c:fc:7b:98:af:ee:0f:58:3c:88:33:f9: 60:32:dc:66:fa:88:b7:f1:26:df:fa:7d:62:db:41: 58:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:F5:4D:C6:21:C4:AA:39:8B:D9:0C:16:7E:B9:DB:33:24:36:6F:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/91f245d2-ace9-4f2b-ab8e-927934d9805f/c1cbc946-fa38-376c-910a-70a850448b50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/91f245d2-ace9-4f2b-ab8e-927934d9805f/91f245d2-ace9-4f2b-ab8e-927934d9805f.crl X509v3 Authority Key Identifier: keyid:7B:81:F3:E6:29:C6:08:6B:E8:1A:B4:36:4F:D1:89:2E:37:B5:0C:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/91f245d2-ace9-4f2b-ab8e-927934d9805f.cer sbgp-ipAddrBlock: critical IPv4: 172.99.14.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:31:33:a4:eb:a2:14:4e:b4:32:aa:01:9a:e9:ba:c8:69:34: ac:91:3d:64:35:b0:01:aa:10:cf:59:0c:65:1b:10:67:90:94: 52:e9:5d:0d:2f:35:ee:8e:c7:e3:90:28:44:7b:a1:87:df:a3: 8d:73:6e:6c:df:c0:e2:a4:0a:72:f9:86:6e:bb:e0:ac:dc:e2: b4:05:23:c0:82:04:18:26:0d:bc:4f:6f:61:a5:5a:3a:93:c3: 06:a3:04:5e:a4:26:c2:1d:12:de:25:b6:16:8d:54:e3:87:ba: 53:8a:2b:88:db:f1:3f:98:8e:2c:b5:31:71:7b:d7:56:85:88: 4f:e1:de:92:10:cb:0d:db:e9:6b:4d:6a:cc:ca:38:a3:60:63: f0:54:a0:42:20:3a:2d:11:c8:1f:1d:03:c9:b2:af:67:fc:42: 0d:e5:8d:2f:80:97:31:21:f8:80:d4:ed:e1:40:97:bb:35:bc: 5d:1c:44:b2:51:e7:80:cf:ef:f3:12:95:a9:09:ce:6e:b0:fb: 2a:93:f4:17:fe:02:e0:df:68:28:dc:fb:74:54:85:f6:4f:59: 1a:90:11:17:f7:e6:31:64:fe:68:9c:19:de:38:52:b0:62:75: d4:6e:77:3c:20:ac:38:3f:41:4d:79:96:0f:22:62:06:7c:1f: e8:27:eb:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkC7CUw/IOFlGoNhYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTFmMjQ1ZDItYWNlOS00ZjJiLWFiOGUtOTI3OTM0ZDk4 MDVmMB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk OTVlNjA3ZGMtNGFiNi00YjhhLWJlODctYTE5OGJhMjZlNzYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgXEJRhnlskjlK2SCM8/+o4tsd1lXeuZw10TH WWTZOHGrkOLpwP2r2W992aIeGAu/26ZQc9ZY+AcSA8/S+QXQlcbD7eRCt7DFmt4l /64xhkMFVDMuD0Pt0Gwet6OkyBcK1pkUxne280Owh/ZP6TajN7KbuTQQdVzFx56K 70/d78qMrJ4/sww0n1mRtCv/F8UnHik/gtOm4LjjFpoa3PqQGQA0KQZ5XeP4sdZM Au7e6fnIzq45ChTqqKi93/5ze15Hr3ilXMolblV+6J2xAzmiB33wQaNzrcLyjSRK Qv02diTQFqOc/HuYr+4PWDyIM/lgMtxm+oi38Sbf+n1i20FYywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBD1TcYhxKo5i9kMFn652zMkNm8vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85MWYy NDVkMi1hY2U5LTRmMmItYWI4ZS05Mjc5MzRkOTgwNWYvYzFjYmM5NDYtZmEzOC0z NzZjLTkxMGEtNzBhODUwNDQ4YjUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOTFmMjQ1ZDItYWNlOS00ZjJiLWFi OGUtOTI3OTM0ZDk4MDVmLzkxZjI0NWQyLWFjZTktNGYyYi1hYjhlLTkyNzkzNGQ5 ODA1Zi5jcmwwHwYDVR0jBBgwFoAUe4Hz5inGCGvoGrQ2T9GJLje1DJQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85MWYyNDVkMi1hY2U5LTRmMmItYWI4ZS05Mjc5 MzRkOTgwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrGMOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIUxM6TrohROtDKqAZrpushpNKyRPWQ1sAGqEM9ZDGUbEGeQlFLpXQ0v Ne6Ox+OQKER7oYffo41zbmzfwOKkCnL5hm674Kzc4rQFI8CCBBgmDbxPb2GlWjqT wwajBF6kJsIdEt4lthaNVOOHulOKK4jb8T+Yjiy1MXF711aFiE/h3pIQyw3b6WtN aszKOKNgY/BUoEIgOi0RyB8dA8myr2f8Qg3ljS+AlzEh+IDU7eFAl7s1vF0cRLJR 54DP7/MSlakJzm6w+yqT9Bf+AuDfaCjc+3RUhfZPWRqQERf35jFk/micGd44UrBi ddRudzwgrDg/QU15lg8iYgZ8H+gn61g= -----END CERTIFICATE-----Generated at Sat Apr 26 16:04:01 2025 by rpki-client