$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/c9253b4b-02ac-381d-891b-c6a9176dfdc5.roa File: c9253b4b-02ac-381d-891b-c6a9176dfdc5.roa (raw, json) Hash identifier: m/SOwkMVy++nroYHehB4zGD1gHEOwWiPb7l9jy0TOnM= Subject key identifier: B4:1B:ED:1E:8D:78:FD:59:A1:14:11:E8:B0:CB:D4:FE:9A:81:D8:55 Certificate issuer: /CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4 Certificate serial: 010D0C9F43285849244E860677ABF05A441FE400 Authority key identifier: 65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/c9253b4b-02ac-381d-891b-c6a9176dfdc5.roa Signing time: Mon 10 Mar 2025 13:00:52 +0000 ROA not before: Mon 10 Mar 2025 13:00:52 +0000 ROA not after: Sun 08 Jun 2025 13:00:52 +0000 asID: 16509 IP address blocks: 199.45.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:24:4e:86:06:77:ab:f0:5a:44:1f:e4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4 Validity Not Before: Mar 10 13:00:52 2025 GMT Not After : Jun 8 13:00:52 2025 GMT Subject: CN=35089a5d-1649-436f-b075-a1c313e369a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:db:bf:e1:64:32:69:e2:e8:c0:e1:e7:4c:ef: da:ee:56:54:ab:e7:b0:36:80:0d:64:4c:ad:ca:69: 78:80:d9:cf:e3:d0:8c:ac:a1:bf:3c:08:c0:c7:a4: bc:ae:43:f8:15:63:87:d6:1c:f0:61:cc:45:b2:73: 08:9a:0b:f8:5e:c9:fe:bb:82:92:07:54:8e:76:3d: dd:0b:e2:3e:51:44:07:91:73:7e:d7:15:be:49:f1: 61:70:7f:2d:52:07:f3:f0:cf:76:86:10:1c:81:0c: 56:c1:4b:ba:62:be:e1:52:70:06:86:ae:f3:41:4c: b8:60:9f:55:b2:ae:67:f5:c7:ed:85:a0:6b:1d:aa: 94:1d:90:3a:d4:59:08:63:04:fa:15:16:41:65:d3: 15:d7:ef:8d:da:fa:05:f5:ba:c7:c5:f3:09:45:d1: b7:2c:42:8b:a1:14:4d:87:c2:64:8f:ba:82:53:ac: 23:a5:a3:f9:5c:8c:dc:59:4f:fb:e3:e2:5b:48:aa: cb:c1:92:04:bb:25:a6:ab:fa:eb:02:8a:10:ae:eb: 70:e6:5f:4f:f3:a3:c7:c9:88:2f:9b:88:74:5f:49: 40:69:89:56:ba:10:ab:f6:23:04:ac:7a:2b:e3:54: 4b:14:e4:f6:fc:f6:3e:85:48:35:af:53:24:8b:e9: 6a:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:1B:ED:1E:8D:78:FD:59:A1:14:11:E8:B0:CB:D4:FE:9A:81:D8:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/c9253b4b-02ac-381d-891b-c6a9176dfdc5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl X509v3 Authority Key Identifier: keyid:65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer sbgp-ipAddrBlock: critical IPv4: 199.45.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:c0:08:c5:59:50:cc:aa:e8:83:bf:62:57:f6:3b:15:80:90: 1b:be:ff:42:2a:02:82:10:c9:23:34:9c:df:bc:cd:33:5b:67: 3b:a5:4e:22:2a:97:91:cb:63:84:6e:e4:73:a1:d2:f7:2c:e5: 2a:6a:50:cb:e8:93:b4:5c:17:d1:95:a0:0f:10:00:7c:3a:9f: ad:02:13:20:20:fb:03:0e:63:86:a6:b3:66:e7:f9:9c:86:79: 28:2a:8f:5e:14:f4:02:02:5d:ab:a1:2a:38:ce:4d:c2:c6:65: ec:7e:25:47:27:a4:87:44:2e:10:da:df:dd:16:2a:e3:e0:7c: 5b:f1:0b:5a:97:c8:d4:f4:be:8f:33:1b:df:39:ac:27:97:8b: ad:6f:20:62:34:ab:cc:bc:00:8a:7b:b8:9d:fd:16:82:b0:ef: d4:0c:27:77:ab:7f:cf:9c:f4:07:3d:95:62:07:60:bb:7c:78: 69:3f:88:ee:c2:d6:d2:d5:4e:24:ce:3e:9f:99:f5:56:98:43: d5:2f:6e:5a:bb:8a:6c:07:59:9e:09:da:da:e3:23:39:7c:6a: 68:2e:f3:30:78:6c:98:16:01:5c:d1:77:0b:16:b6:d7:20:f6: 0b:75:a6:06:1e:b5:2a:23:61:bf:74:15:00:02:25:c4:78:ca: 17:06:78:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkkToYGd6vwWkQf5AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTlmYjZjOWEtY2UyOS00MWVlLWE0YWQtM2RlZTNmNzk3 MGE0MB4XDTI1MDMxMDEzMDA1MloXDTI1MDYwODEzMDA1MlowLzEtMCsGA1UEAxMk MzUwODlhNWQtMTY0OS00MzZmLWIwNzUtYTFjMzEzZTM2OWE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1du/4WQyaeLowOHnTO/a7lZUq+ewNoANZEyt yml4gNnP49CMrKG/PAjAx6S8rkP4FWOH1hzwYcxFsnMImgv4Xsn+u4KSB1SOdj3d C+I+UUQHkXN+1xW+SfFhcH8tUgfz8M92hhAcgQxWwUu6Yr7hUnAGhq7zQUy4YJ9V sq5n9cfthaBrHaqUHZA61FkIYwT6FRZBZdMV1++N2voF9brHxfMJRdG3LEKLoRRN h8Jkj7qCU6wjpaP5XIzcWU/74+JbSKrLwZIEuyWmq/rrAooQrutw5l9P86PHyYgv m4h0X0lAaYlWuhCr9iMErHor41RLFOT2/PY+hUg1r1Mki+lqzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLQb7R6NeP1ZoRQR6LDL1P6agdhVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85OWZi NmM5YS1jZTI5LTQxZWUtYTRhZC0zZGVlM2Y3OTcwYTQvYzkyNTNiNGItMDJhYy0z ODFkLTg5MWItYzZhOTE3NmRmZGM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOTlmYjZjOWEtY2UyOS00MWVlLWE0 YWQtM2RlZTNmNzk3MGE0Lzk5ZmI2YzlhLWNlMjktNDFlZS1hNGFkLTNkZWUzZjc5 NzBhNC5jcmwwHwYDVR0jBBgwFoAUZSJlk/hhOWSY4nrlbMI1s/Z+WzUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85OWZiNmM5YS1jZTI5LTQxZWUtYTRhZC0zZGVl M2Y3OTcwYTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxy3zMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAErACMVZUMyq6IO/Ylf2OxWAkBu+/0IqAoIQySM0nN+8zTNbZzulTiIq l5HLY4Ru5HOh0vcs5SpqUMvok7RcF9GVoA8QAHw6n60CEyAg+wMOY4ams2bn+ZyG eSgqj14U9AICXauhKjjOTcLGZex+JUcnpIdELhDa390WKuPgfFvxC1qXyNT0vo8z G985rCeXi61vIGI0q8y8AIp7uJ39FoKw79QMJ3erf8+c9Ac9lWIHYLt8eGk/iO7C 1tLVTiTOPp+Z9VaYQ9Uvblq7imwHWZ4J2trjIzl8amgu8zB4bJgWAVzRdwsWttcg 9gt1pgYetSojYb90FQACJcR4yhcGeL4= -----END CERTIFICATE-----Generated at Sat Apr 26 17:47:33 2025 by rpki-client