$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9ff91cfb-8c05-4ee8-9006-f7a1e162f92c/c4cf259e-e700-3217-b9f2-8c833c86c901.roa File: c4cf259e-e700-3217-b9f2-8c833c86c901.roa (raw, json) Hash identifier: 1xgNPJGIVDrM5u8wme0DKOhOdKZIPkw3xkPzZgLC00E= Subject key identifier: D0:DD:D3:6B:9F:98:AB:E7:6B:D3:C7:4C:26:D3:23:8A:2C:48:07:E3 Certificate issuer: /CN=9ff91cfb-8c05-4ee8-9006-f7a1e162f92c Certificate serial: 010D0C9F432858490B4C2433F1210269D3F6AB40 Authority key identifier: 09:F4:11:37:AC:74:7E:B2:59:25:BC:46:14:9E:F9:6E:C9:B7:8A:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9ff91cfb-8c05-4ee8-9006-f7a1e162f92c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9ff91cfb-8c05-4ee8-9006-f7a1e162f92c/c4cf259e-e700-3217-b9f2-8c833c86c901.roa Signing time: Sat 01 Mar 2025 14:00:52 +0000 ROA not before: Sat 01 Mar 2025 14:00:52 +0000 ROA not after: Fri 30 May 2025 13:00:52 +0000 asID: 8075 IP address blocks: 199.38.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9ff91cfb-8c05-4ee8-9006-f7a1e162f92c/9ff91cfb-8c05-4ee8-9006-f7a1e162f92c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9ff91cfb-8c05-4ee8-9006-f7a1e162f92c/9ff91cfb-8c05-4ee8-9006-f7a1e162f92c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9ff91cfb-8c05-4ee8-9006-f7a1e162f92c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0b:4c:24:33:f1:21:02:69:d3:f6:ab:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ff91cfb-8c05-4ee8-9006-f7a1e162f92c Validity Not Before: Mar 1 14:00:52 2025 GMT Not After : May 30 13:00:52 2025 GMT Subject: CN=6f3eb870-399c-4f22-8bbe-d291dc4099a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:6c:c2:c3:ce:99:f7:55:49:46:6f:45:6f:0e: 3b:45:cd:60:c5:fb:23:7d:3e:40:46:db:d7:48:a2: 83:2c:e1:49:78:ee:71:bb:da:ed:9b:ab:59:31:bc: 48:e8:81:fb:01:c6:e3:04:5e:0a:07:f7:f8:7d:5d: 3b:23:04:f5:07:36:94:51:26:af:8a:fb:f9:2a:6e: 89:87:67:13:24:8e:1d:21:3b:f5:91:9b:b8:cd:67: e2:d0:00:ab:8f:ee:65:6d:8a:db:30:8a:19:c4:a2: 0d:24:47:aa:b9:9e:f3:15:fd:c5:31:8b:ba:90:05: 7d:03:a2:f7:db:44:29:71:0c:5c:41:a8:fd:d2:99: cc:2d:06:15:cc:2b:1f:a3:bb:a8:8b:80:1c:5c:a5: 63:18:5e:50:1b:30:84:10:07:f6:34:4a:db:06:20: fc:84:6a:d7:7b:e8:9c:35:e9:53:aa:de:8e:2b:9b: b9:26:34:59:1a:c7:fd:25:af:5f:e3:45:89:af:41: 1d:9f:b8:1c:db:39:40:35:60:ce:bd:31:ae:70:f4: b2:1f:a0:51:53:f4:ce:d1:ad:1f:72:d8:f2:56:b4: 98:a4:b2:ff:d5:01:32:ff:e1:5f:16:e1:db:2a:4a: 02:50:83:b9:78:db:1a:5d:f5:a3:6c:38:d9:cc:73: ff:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:DD:D3:6B:9F:98:AB:E7:6B:D3:C7:4C:26:D3:23:8A:2C:48:07:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9ff91cfb-8c05-4ee8-9006-f7a1e162f92c/c4cf259e-e700-3217-b9f2-8c833c86c901.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9ff91cfb-8c05-4ee8-9006-f7a1e162f92c/9ff91cfb-8c05-4ee8-9006-f7a1e162f92c.crl X509v3 Authority Key Identifier: keyid:09:F4:11:37:AC:74:7E:B2:59:25:BC:46:14:9E:F9:6E:C9:B7:8A:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9ff91cfb-8c05-4ee8-9006-f7a1e162f92c.cer sbgp-ipAddrBlock: critical IPv4: 199.38.175.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:bf:ce:84:ae:28:6c:47:8a:20:4d:dd:d6:7e:22:17:56:38: 05:58:1d:ba:6e:bb:4e:68:38:3c:24:22:0f:7b:f2:6b:eb:f1: 70:25:b9:6b:cd:b4:94:a8:66:04:d9:a9:51:d3:df:d2:13:ab: b9:4e:09:d2:51:bd:44:02:ae:63:4d:1d:da:1a:b1:79:5a:af: 3b:0b:e9:bf:93:b3:76:36:35:25:25:2a:eb:0c:ea:0b:ea:10: 66:26:16:37:37:b0:6a:e6:4a:82:6a:92:6e:1f:3e:f9:0a:0c: c2:ee:e4:fc:79:8f:01:75:be:cd:15:7b:7f:94:00:d6:43:a3: 3b:a5:3f:dd:64:60:fd:2b:64:bc:21:cb:f1:8f:97:0b:c3:27: f1:77:fb:b1:97:53:82:37:8a:ce:41:0c:2c:78:4a:38:50:66: 2a:5a:ce:fe:2b:87:c8:ac:e9:af:68:12:0e:02:c2:e4:1a:a4: a9:83:6e:0e:40:e6:a6:75:0b:d0:c4:ed:30:b8:09:82:61:16: 9b:e3:23:69:2a:f3:2a:0c:79:54:6f:1d:6a:26:21:dc:8a:ed: e7:7d:96:00:9e:a8:a1:25:18:ee:42:ec:fe:39:39:c6:19:fb: 0a:e7:6c:12:7f:36:3d:47:61:89:27:ac:ab:8a:e9:c7:de:c2: 4f:ce:82:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkLTCQz8SECadP2q0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWZmOTFjZmItOGMwNS00ZWU4LTkwMDYtZjdhMWUxNjJm OTJjMB4XDTI1MDMwMTE0MDA1MloXDTI1MDUzMDEzMDA1MlowLzEtMCsGA1UEAxMk NmYzZWI4NzAtMzk5Yy00ZjIyLThiYmUtZDI5MWRjNDA5OWE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlmzCw86Z91VJRm9Fbw47Rc1gxfsjfT5ARtvX SKKDLOFJeO5xu9rtm6tZMbxI6IH7AcbjBF4KB/f4fV07IwT1BzaUUSavivv5Km6J h2cTJI4dITv1kZu4zWfi0ACrj+5lbYrbMIoZxKINJEequZ7zFf3FMYu6kAV9A6L3 20QpcQxcQaj90pnMLQYVzCsfo7uoi4AcXKVjGF5QGzCEEAf2NErbBiD8hGrXe+ic NelTqt6OK5u5JjRZGsf9Ja9f40WJr0Edn7gc2zlANWDOvTGucPSyH6BRU/TO0a0f ctjyVrSYpLL/1QEy/+FfFuHbKkoCUIO5eNsaXfWjbDjZzHP/AQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNDd02ufmKvna9PHTCbTI4osSAfjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85ZmY5 MWNmYi04YzA1LTRlZTgtOTAwNi1mN2ExZTE2MmY5MmMvYzRjZjI1OWUtZTcwMC0z MjE3LWI5ZjItOGM4MzNjODZjOTAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOWZmOTFjZmItOGMwNS00ZWU4LTkw MDYtZjdhMWUxNjJmOTJjLzlmZjkxY2ZiLThjMDUtNGVlOC05MDA2LWY3YTFlMTYy ZjkyYy5jcmwwHwYDVR0jBBgwFoAUCfQRN6x0frJZJbxGFJ75bsm3ikUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy85ZmY5MWNmYi04YzA1LTRlZTgtOTAwNi1mN2Ex ZTE2MmY5MmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxyavMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB+/zoSuKGxHiiBN3dZ+IhdWOAVYHbpuu05oODwkIg978mvr8XAluWvN tJSoZgTZqVHT39ITq7lOCdJRvUQCrmNNHdoasXlarzsL6b+Ts3Y2NSUlKusM6gvq EGYmFjc3sGrmSoJqkm4fPvkKDMLu5Px5jwF1vs0Ve3+UANZDozulP91kYP0rZLwh y/GPlwvDJ/F3+7GXU4I3is5BDCx4SjhQZipazv4rh8is6a9oEg4CwuQapKmDbg5A 5qZ1C9DE7TC4CYJhFpvjI2kq8yoMeVRvHWomIdyK7ed9lgCeqKElGO5C7P45OcYZ +wrnbBJ/Nj1HYYknrKuK6cfewk/Ogqk= -----END CERTIFICATE-----Generated at Mon Apr 28 12:38:54 2025 by rpki-client