$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/3f9ad2a5-8547-3650-a790-25df90ed3852.roa File: 3f9ad2a5-8547-3650-a790-25df90ed3852.roa (raw, json) Hash identifier: kCPCLx0FmMUO+bqh2i7qv1j7kXf7H+ezrJXWGIRSFT4= Subject key identifier: 2F:08:F0:4C:C8:35:62:C6:E8:A9:CE:C1:9A:57:C9:27:62:D0:F7:60 Certificate issuer: /CN=8d34ec60-03b0-4663-8748-fab291e36393 Certificate serial: 010D0C9F43285848DD3BA6E89EAA30FA17712CC0 Authority key identifier: 3C:E1:AD:C4:6C:FF:FF:61:D2:6D:75:13:59:A5:F2:0A:4D:07:85:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/3f9ad2a5-8547-3650-a790-25df90ed3852.roa Signing time: Thu 13 Feb 2025 02:00:40 +0000 ROA not before: Thu 13 Feb 2025 02:00:40 +0000 ROA not after: Wed 14 May 2025 01:00:40 +0000 asID: 395807 IP address blocks: 199.60.144.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/8d34ec60-03b0-4663-8748-fab291e36393.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/8d34ec60-03b0-4663-8748-fab291e36393.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 03 May 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:dd:3b:a6:e8:9e:aa:30:fa:17:71:2c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d34ec60-03b0-4663-8748-fab291e36393 Validity Not Before: Feb 13 02:00:40 2025 GMT Not After : May 14 01:00:40 2025 GMT Subject: CN=47b20eed-df7d-4c45-a393-3c53bfe704d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:2a:99:f3:d8:89:06:81:dd:2c:60:f6:e9:61: cf:b9:2a:32:b0:01:ba:fd:52:99:07:85:a1:a3:13: d5:00:aa:48:c6:e1:33:16:e7:09:4d:2f:eb:ba:af: ed:35:75:e8:9a:40:12:9d:84:16:db:d0:0a:5c:32: e8:53:03:81:cb:69:82:48:e9:0b:7f:0d:04:02:29: 6b:95:5b:73:79:25:cd:63:94:81:ad:7b:96:5f:15: 1e:75:f9:40:50:6d:f7:b6:34:9f:13:7d:1a:be:c7: 85:1f:23:69:9d:4b:e0:98:d5:3e:d6:9f:e9:d2:72: 32:f6:17:99:a2:59:df:2a:b9:ef:ff:6f:4c:59:1b: 92:0c:81:fb:4f:77:f3:f5:af:93:1c:35:fa:6f:36: a3:37:29:43:08:23:8e:a1:04:7a:d7:38:29:a2:c9: 5e:df:bb:4d:14:f8:e0:34:1f:d7:f3:27:ec:87:d3: 1f:e0:66:04:37:92:f1:3a:28:39:73:8a:04:a3:a5: d4:b6:a8:cf:d9:19:ef:a2:5f:ef:98:d0:9b:95:af: 15:85:1b:77:ed:59:67:43:3f:69:a5:bb:79:54:ed: fb:a3:10:b2:76:32:d6:ab:a6:6f:3c:ff:d1:75:2a: d3:8e:89:cc:5b:19:00:c2:c2:8e:49:23:20:5c:07: e3:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:08:F0:4C:C8:35:62:C6:E8:A9:CE:C1:9A:57:C9:27:62:D0:F7:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/3f9ad2a5-8547-3650-a790-25df90ed3852.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/8d34ec60-03b0-4663-8748-fab291e36393.crl X509v3 Authority Key Identifier: keyid:3C:E1:AD:C4:6C:FF:FF:61:D2:6D:75:13:59:A5:F2:0A:4D:07:85:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393.cer sbgp-ipAddrBlock: critical IPv4: 199.60.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:53:ff:c0:72:49:17:7d:9f:af:7f:a2:10:bb:66:10:50:25: a3:df:dd:df:5e:04:40:cc:e7:4a:d0:49:ed:0e:d6:92:07:0c: 07:43:05:f2:d8:e2:16:7d:57:89:49:c3:3b:34:ef:23:2e:b6: a3:61:17:2d:38:20:13:88:ef:be:4d:ed:a3:a6:a3:ea:b8:6d: 9f:b1:7b:57:a6:34:7c:96:df:e0:a9:5f:20:79:e6:a4:6c:2b: 5d:4c:80:e0:11:71:fe:83:c9:b6:09:d2:2f:0f:9a:2b:d8:96: d0:32:f1:d0:db:1e:2f:5f:80:85:80:12:8d:f8:9d:9b:e0:7f: 7c:cc:f1:4e:76:6e:e8:2a:fb:2c:75:aa:da:c6:69:e7:62:4f: 8c:dc:d2:19:c1:4e:c7:4f:c3:8c:12:b6:d4:16:4d:3a:a5:78: 72:ae:98:20:0b:ed:c8:8f:b8:05:9b:a8:54:31:f2:51:aa:91: 4c:13:56:97:20:23:dd:c6:ca:e4:68:9d:ab:9a:e2:5a:25:99: 51:26:69:50:bb:10:f9:55:8a:28:af:78:ea:55:28:cd:ab:b6: 89:3d:18:06:80:c4:e0:39:80:e0:a8:ce:23:fe:fd:30:63:6a: 3c:98:0c:62:26:77:5b:69:5b:35:33:43:60:48:28:af:99:ca: bf:20:35:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjdO6bonqow+hdxLMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGQzNGVjNjAtMDNiMC00NjYzLTg3NDgtZmFiMjkxZTM2 MzkzMB4XDTI1MDIxMzAyMDA0MFoXDTI1MDUxNDAxMDA0MFowLzEtMCsGA1UEAxMk NDdiMjBlZWQtZGY3ZC00YzQ1LWEzOTMtM2M1M2JmZTcwNGQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkSqZ89iJBoHdLGD26WHPuSoysAG6/VKZB4Wh oxPVAKpIxuEzFucJTS/ruq/tNXXomkASnYQW29AKXDLoUwOBy2mCSOkLfw0EAilr lVtzeSXNY5SBrXuWXxUedflAUG33tjSfE30avseFHyNpnUvgmNU+1p/p0nIy9heZ olnfKrnv/29MWRuSDIH7T3fz9a+THDX6bzajNylDCCOOoQR61zgposle37tNFPjg NB/X8yfsh9Mf4GYEN5LxOig5c4oEo6XUtqjP2Rnvol/vmNCbla8VhRt37VlnQz9p pbt5VO37oxCydjLWq6ZvPP/RdSrTjonMWxkAwsKOSSMgXAfjzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC8I8EzINWLG6KnOwZpXySdi0PdgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84ZDM0 ZWM2MC0wM2IwLTQ2NjMtODc0OC1mYWIyOTFlMzYzOTMvM2Y5YWQyYTUtODU0Ny0z NjUwLWE3OTAtMjVkZjkwZWQzODUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOGQzNGVjNjAtMDNiMC00NjYzLTg3 NDgtZmFiMjkxZTM2MzkzLzhkMzRlYzYwLTAzYjAtNDY2My04NzQ4LWZhYjI5MWUz NjM5My5jcmwwHwYDVR0jBBgwFoAUPOGtxGz//2HSbXUTWaXyCk0Hhd0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84ZDM0ZWM2MC0wM2IwLTQ2NjMtODc0OC1mYWIy OTFlMzYzOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxzyQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJNT/8BySRd9n69/ohC7ZhBQJaPf3d9eBEDM50rQSe0O1pIHDAdDBfLY 4hZ9V4lJwzs07yMutqNhFy04IBOI775N7aOmo+q4bZ+xe1emNHyW3+CpXyB55qRs K11MgOARcf6DybYJ0i8PmivYltAy8dDbHi9fgIWAEo34nZvgf3zM8U52bugq+yx1 qtrGaediT4zc0hnBTsdPw4wSttQWTTqleHKumCAL7ciPuAWbqFQx8lGqkUwTVpcg I93GyuRonaua4lolmVEmaVC7EPlViiiveOpVKM2rtok9GAaAxOA5gOCoziP+/TBj ajyYDGImd1tpWzUzQ2BIKK+Zyr8gNWo= -----END CERTIFICATE-----Generated at Fri May 2 08:06:16 2025 by rpki-client