$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b/429747c5-c7e0-337f-97dd-1c905d4631ce.roa File: 429747c5-c7e0-337f-97dd-1c905d4631ce.roa (raw, json) Hash identifier: kr3enqE2PslBdbpxBagavIjfj1M/3GnsIDnAE7gV9gg= Subject key identifier: 41:A0:3C:98:00:B6:ED:4E:C8:B0:84:EB:75:CE:32:88:FC:F9:12:A9 Certificate issuer: /CN=45fe4043-69f6-4f38-9003-897cd909fb3b Certificate serial: 010D0C9F43285849D594E93ED2921302F6FF8EC0 Authority key identifier: D0:31:C8:68:F7:13:5C:D1:51:FE:FC:08:83:5F:D5:29:CD:A3:16:14 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b/429747c5-c7e0-337f-97dd-1c905d4631ce.roa Signing time: Tue 13 May 2025 01:00:47 +0000 ROA not before: Tue 13 May 2025 01:00:47 +0000 ROA not after: Mon 11 Aug 2025 01:00:47 +0000 asID: 14618 IP address blocks: 199.19.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b/45fe4043-69f6-4f38-9003-897cd909fb3b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b/45fe4043-69f6-4f38-9003-897cd909fb3b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d5:94:e9:3e:d2:92:13:02:f6:ff:8e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45fe4043-69f6-4f38-9003-897cd909fb3b Validity Not Before: May 13 01:00:47 2025 GMT Not After : Aug 11 01:00:47 2025 GMT Subject: CN=09aad402-5d7b-42a8-93d5-7dead7e38c13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:c6:00:f7:a8:1c:5e:23:d1:34:2b:74:1b:76: bf:ae:f3:ca:84:bb:3a:2f:f0:8a:37:fc:a3:11:47: 22:1a:53:bf:c7:f1:a6:d9:e7:77:23:fc:1a:45:73: 48:3b:84:76:6d:2a:36:63:69:5e:cf:80:2b:da:c6: a5:aa:f6:ba:fa:d4:95:b1:b6:f3:9f:0b:5a:fb:33: ca:41:83:05:6d:70:69:89:5c:6b:4d:55:b5:74:2c: 54:7a:99:de:25:32:83:f9:a5:1f:d6:b5:d7:97:83: b9:4f:31:17:19:d1:b3:ee:94:2f:50:ec:31:e6:50: cc:71:88:e7:d8:f4:79:ae:98:68:df:d8:4e:f5:ec: 8f:30:80:d0:58:b4:fb:cc:04:61:8e:1d:bc:94:61: b7:40:62:d0:63:66:28:e6:6c:01:ab:83:25:17:fc: 13:96:95:da:14:81:30:cb:ec:46:ef:f0:de:35:ff: f1:1b:49:7f:dd:1e:10:5b:62:b5:5e:cf:a5:d4:f5: f7:3f:e1:b8:9e:d0:4b:cc:bd:96:b5:17:7a:1f:5e: 6f:7a:71:7f:63:fe:fd:64:d3:64:51:2b:9a:68:88: 21:64:94:ab:19:3b:8e:3c:53:00:81:b5:85:80:d7: 25:03:94:5b:ce:ec:f8:09:e8:70:50:d8:53:57:59: 6d:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:A0:3C:98:00:B6:ED:4E:C8:B0:84:EB:75:CE:32:88:FC:F9:12:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b/429747c5-c7e0-337f-97dd-1c905d4631ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b/45fe4043-69f6-4f38-9003-897cd909fb3b.crl X509v3 Authority Key Identifier: keyid:D0:31:C8:68:F7:13:5C:D1:51:FE:FC:08:83:5F:D5:29:CD:A3:16:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b.cer sbgp-ipAddrBlock: critical IPv4: 199.19.192.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:5a:44:47:2f:1c:8d:4d:99:d1:0a:50:5f:9a:b4:b4:a4:a5: 03:26:b5:e2:ab:9a:ed:9c:47:4f:6d:88:d0:bf:42:3e:a2:dc: 2a:71:2c:2a:de:a9:32:ab:f0:1a:19:1d:ea:1c:1a:bb:1f:c2: 3e:f6:7b:e1:e6:37:aa:ba:89:4f:c8:72:59:15:dc:1c:f4:f0: 5b:d5:0a:44:89:15:cd:83:fd:35:89:62:0f:7e:67:24:14:c4: 0b:7c:d7:b2:5f:aa:b5:de:6d:4b:53:38:13:4f:93:19:44:02: aa:ae:34:0c:a4:da:3d:36:2f:c6:2f:dc:5d:31:6a:f1:3c:c6: ac:cb:6e:77:c1:70:31:7c:ef:01:92:56:b7:06:90:fe:39:ba: d2:a5:8f:c1:67:c1:d2:c6:41:f5:1b:8f:03:f8:de:2f:aa:89: b8:5e:38:4f:78:75:88:66:99:38:eb:67:9b:3b:b8:59:2a:ed: ff:55:95:e8:12:39:0e:ed:5e:cb:9c:66:c3:56:e1:7e:85:97: 42:6a:25:15:95:04:ac:91:fc:b2:1c:94:b8:ed:85:d0:e1:fa: 81:a0:0f:ef:0a:bd:42:b8:82:ae:92:1d:50:1b:cd:ed:f3:9f: b1:f2:88:ba:27:ca:b9:04:25:0b:bb:28:5d:07:ca:79:9b:9a: eb:b9:75:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnVlOk+0pITAvb/jsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDVmZTQwNDMtNjlmNi00ZjM4LTkwMDMtODk3Y2Q5MDlm YjNiMB4XDTI1MDUxMzAxMDA0N1oXDTI1MDgxMTAxMDA0N1owLzEtMCsGA1UEAxMk MDlhYWQ0MDItNWQ3Yi00MmE4LTkzZDUtN2RlYWQ3ZTM4YzEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnsYA96gcXiPRNCt0G3a/rvPKhLs6L/CKN/yj EUciGlO/x/Gm2ed3I/waRXNIO4R2bSo2Y2lez4Ar2salqva6+tSVsbbznwta+zPK QYMFbXBpiVxrTVW1dCxUepneJTKD+aUf1rXXl4O5TzEXGdGz7pQvUOwx5lDMcYjn 2PR5rpho39hO9eyPMIDQWLT7zARhjh28lGG3QGLQY2Yo5mwBq4MlF/wTlpXaFIEw y+xG7/DeNf/xG0l/3R4QW2K1Xs+l1PX3P+G4ntBLzL2WtRd6H15venF/Y/79ZNNk USuaaIghZJSrGTuOPFMAgbWFgNclA5Rbzuz4CehwUNhTV1ltQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEGgPJgAtu1OyLCE63XOMoj8+RKpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80NWZl NDA0My02OWY2LTRmMzgtOTAwMy04OTdjZDkwOWZiM2IvNDI5NzQ3YzUtYzdlMC0z MzdmLTk3ZGQtMWM5MDVkNDYzMWNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDVmZTQwNDMtNjlmNi00ZjM4LTkw MDMtODk3Y2Q5MDlmYjNiLzQ1ZmU0MDQzLTY5ZjYtNGYzOC05MDAzLTg5N2NkOTA5 ZmIzYi5jcmwwHwYDVR0jBBgwFoAU0DHIaPcTXNFR/vwIg1/VKc2jFhQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80NWZlNDA0My02OWY2LTRmMzgtOTAwMy04OTdj ZDkwOWZiM2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxxPAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACNaREcvHI1NmdEKUF+atLSkpQMmteKrmu2cR09tiNC/Qj6i3CpxLCre qTKr8BoZHeocGrsfwj72e+HmN6q6iU/IclkV3Bz08FvVCkSJFc2D/TWJYg9+ZyQU xAt817JfqrXebUtTOBNPkxlEAqquNAyk2j02L8Yv3F0xavE8xqzLbnfBcDF87wGS VrcGkP45utKlj8FnwdLGQfUbjwP43i+qibheOE94dYhmmTjrZ5s7uFkq7f9VlegS OQ7tXsucZsNW4X6Fl0JqJRWVBKyR/LIclLjthdDh+oGgD+8KvUK4gq6SHVAbze3z n7HyiLonyrkEJQu7KF0Hynmbmuu5daQ= -----END CERTIFICATE-----Generated at Tue Jun 17 10:22:19 2025 by rpki-client