$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/60fc1c20-f11c-3c0f-be32-0c59e4705579.roa File: 60fc1c20-f11c-3c0f-be32-0c59e4705579.roa (raw, json) Hash identifier: R++9UbERgFFSc1JY/Bpd7kFxjmZIxr74nXqeRmrdjYw= Subject key identifier: D9:BD:0B:40:6C:E8:E1:63:9B:DF:B5:EA:B1:FC:FE:2D:13:16:00:AC Certificate issuer: /CN=34b715b9-211f-4bf7-ace9-03b3446775ab Certificate serial: 010D0C9F43285849A3548237AB426DED2D3AE700 Authority key identifier: A2:06:2D:8C:8F:04:C6:8E:B7:00:2D:04:38:3A:77:9F:8C:EB:67:AC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/60fc1c20-f11c-3c0f-be32-0c59e4705579.roa Signing time: Fri 25 Apr 2025 01:00:47 +0000 ROA not before: Fri 25 Apr 2025 01:00:47 +0000 ROA not after: Thu 24 Jul 2025 01:00:47 +0000 asID: 213867 IP address blocks: 199.79.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/34b715b9-211f-4bf7-ace9-03b3446775ab.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/34b715b9-211f-4bf7-ace9-03b3446775ab.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a3:54:82:37:ab:42:6d:ed:2d:3a:e7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34b715b9-211f-4bf7-ace9-03b3446775ab Validity Not Before: Apr 25 01:00:47 2025 GMT Not After : Jul 24 01:00:47 2025 GMT Subject: CN=a7f28e61-14d5-4db0-bae3-5bbda467f298 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:0b:86:4e:91:1e:cf:8b:bc:a3:c5:e4:08:a8: 51:6d:cf:c9:1a:df:3b:49:43:da:1c:37:fb:6f:e4: 5c:e8:74:c3:bc:50:2e:7c:a4:6d:32:dc:c2:17:13: 31:96:18:e5:c6:25:81:1b:ee:0b:88:a8:b7:c0:50: 0c:d5:60:91:d2:b3:ab:8c:0e:69:47:62:45:33:b8: 64:50:e4:63:f3:e5:cf:77:a1:01:4e:c3:46:c5:0d: 68:fb:68:60:8c:b9:c2:3c:74:18:da:a9:a8:60:78: 12:5e:f0:4f:15:3e:8a:8f:44:32:fa:c7:c0:a0:3e: 7b:71:4f:34:6e:14:f1:26:e2:3e:2c:07:a6:14:13: 01:3a:97:e5:30:e6:ee:32:1d:26:2c:61:59:17:0e: 99:4b:ca:9a:7b:cd:25:b5:29:bb:e9:ef:56:58:37: fe:98:e2:f6:e3:c3:53:e8:40:d1:e5:a8:d2:39:da: bc:02:9f:ae:a3:e2:ae:5f:0d:fc:81:32:76:1f:70: 77:fd:6e:2f:38:35:de:37:a4:d7:c4:8b:cd:6b:df: 32:1a:a7:46:fa:42:24:ca:2a:35:3b:dc:f6:c4:45: ee:df:c2:af:64:d0:00:53:cb:d6:9b:99:d7:6e:57: ca:b9:64:63:9b:6a:77:3b:91:14:0b:57:34:e5:17: ab:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:BD:0B:40:6C:E8:E1:63:9B:DF:B5:EA:B1:FC:FE:2D:13:16:00:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/60fc1c20-f11c-3c0f-be32-0c59e4705579.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/34b715b9-211f-4bf7-ace9-03b3446775ab.crl X509v3 Authority Key Identifier: keyid:A2:06:2D:8C:8F:04:C6:8E:B7:00:2D:04:38:3A:77:9F:8C:EB:67:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab.cer sbgp-ipAddrBlock: critical IPv4: 199.79.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:05:03:68:cd:ac:eb:60:f9:f7:32:68:b3:97:5a:d4:22:a1: 01:ea:69:44:1f:ed:4b:bd:32:5d:70:80:f6:47:08:93:80:c0: 5d:2e:42:06:08:e9:2b:10:2d:4d:4d:e4:40:51:e8:31:2e:43: 52:a3:55:e9:a5:57:8e:48:ea:89:93:bf:4e:0f:41:98:32:fa: 33:a3:20:45:31:14:ab:c0:13:70:75:8b:43:ce:1a:de:24:68: fe:b1:24:52:53:70:2a:b1:44:ee:4f:de:b4:35:02:d1:dc:4c: e3:69:f1:cb:a5:2e:16:80:0e:cf:67:b3:2c:56:7c:b0:28:af: f5:5d:1a:9c:a1:27:f7:f9:79:ae:d8:2e:a8:57:7a:d0:4d:e4: 66:1b:e7:0b:30:b8:dd:33:ac:d7:11:36:a9:14:38:c0:31:04: b1:d1:fe:fe:98:90:d0:74:b5:a7:8b:9a:b0:52:6e:12:ed:a1: 53:1e:15:74:bc:c2:fa:a0:2d:00:07:bf:58:9d:b0:06:a2:d4: 1b:72:11:a6:d3:66:5e:dd:52:84:9c:a6:00:54:08:c6:15:9b: 31:18:2e:33:27:a3:13:93:02:a2:54:c4:59:f1:36:88:17:a0: b8:6d:26:37:b2:65:54:7d:93:89:7b:0a:eb:e0:21:76:d0:9e: 8a:a1:a0:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmjVII3q0Jt7S065wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzRiNzE1YjktMjExZi00YmY3LWFjZTktMDNiMzQ0Njc3 NWFiMB4XDTI1MDQyNTAxMDA0N1oXDTI1MDcyNDAxMDA0N1owLzEtMCsGA1UEAxMk YTdmMjhlNjEtMTRkNS00ZGIwLWJhZTMtNWJiZGE0NjdmMjk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4AuGTpEez4u8o8XkCKhRbc/JGt87SUPaHDf7 b+Rc6HTDvFAufKRtMtzCFxMxlhjlxiWBG+4LiKi3wFAM1WCR0rOrjA5pR2JFM7hk UORj8+XPd6EBTsNGxQ1o+2hgjLnCPHQY2qmoYHgSXvBPFT6Kj0Qy+sfAoD57cU80 bhTxJuI+LAemFBMBOpflMObuMh0mLGFZFw6ZS8qae80ltSm76e9WWDf+mOL248NT 6EDR5ajSOdq8Ap+uo+KuXw38gTJ2H3B3/W4vODXeN6TXxIvNa98yGqdG+kIkyio1 O9z2xEXu38KvZNAAU8vWm5nXblfKuWRjm2p3O5EUC1c05RerkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNm9C0Bs6OFjm9+16rH8/i0TFgCsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zNGI3 MTViOS0yMTFmLTRiZjctYWNlOS0wM2IzNDQ2Nzc1YWIvNjBmYzFjMjAtZjExYy0z YzBmLWJlMzItMGM1OWU0NzA1NTc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMzRiNzE1YjktMjExZi00YmY3LWFj ZTktMDNiMzQ0Njc3NWFiLzM0YjcxNWI5LTIxMWYtNGJmNy1hY2U5LTAzYjM0NDY3 NzVhYi5jcmwwHwYDVR0jBBgwFoAUogYtjI8Exo63AC0EODp3n4zrZ6wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8zNGI3MTViOS0yMTFmLTRiZjctYWNlOS0wM2Iz NDQ2Nzc1YWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx0/3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHoFA2jNrOtg+fcyaLOXWtQioQHqaUQf7Uu9Ml1wgPZHCJOAwF0uQgYI 6SsQLU1N5EBR6DEuQ1KjVemlV45I6omTv04PQZgy+jOjIEUxFKvAE3B1i0POGt4k aP6xJFJTcCqxRO5P3rQ1AtHcTONp8culLhaADs9nsyxWfLAor/VdGpyhJ/f5ea7Y LqhXetBN5GYb5wswuN0zrNcRNqkUOMAxBLHR/v6YkNB0taeLmrBSbhLtoVMeFXS8 wvqgLQAHv1idsAai1BtyEabTZl7dUoScpgBUCMYVmzEYLjMnoxOTAqJUxFnxNogX oLhtJjeyZVR9k4l7CuvgIXbQnoqhoAU= -----END CERTIFICATE-----Generated at Sun Apr 27 15:05:43 2025 by rpki-client