$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/0d31c566-d234-3f99-8c25-5aa651e59579.roa File: 0d31c566-d234-3f99-8c25-5aa651e59579.roa (raw, json) Hash identifier: FyrQODNrEMxz2mGxpjf02zeN/2Y2dJcNKdSl8xLmoXc= Subject key identifier: EB:03:DF:C4:C8:4D:06:C8:65:81:CD:37:33:B7:15:9B:F9:FB:68:70 Certificate issuer: /CN=8f0bfcde-d958-4e91-af5d-9fd1d33a582a Certificate serial: 010D0C9F4328584973DEE9963A3AEAF8466B7B80 Authority key identifier: AA:2C:89:C4:2A:7A:B8:A4:95:51:83:C3:0C:CF:E3:B0:FC:E3:CE:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/0d31c566-d234-3f99-8c25-5aa651e59579.roa Signing time: Tue 08 Apr 2025 01:00:47 +0000 ROA not before: Tue 08 Apr 2025 01:00:47 +0000 ROA not after: Mon 07 Jul 2025 01:00:47 +0000 asID: 40342 IP address blocks: 199.47.138.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:73:de:e9:96:3a:3a:ea:f8:46:6b:7b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f0bfcde-d958-4e91-af5d-9fd1d33a582a Validity Not Before: Apr 8 01:00:47 2025 GMT Not After : Jul 7 01:00:47 2025 GMT Subject: CN=a569e79c-f1f3-487e-9dc4-966ddfa5c009 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c0:bc:d5:0c:24:78:ff:90:65:72:72:b3:13: dd:f8:f2:05:68:18:78:3e:d6:6e:32:77:8e:8b:4d: 65:09:77:38:2e:b3:2f:0d:57:b2:da:f4:70:76:28: 2c:e0:39:af:0e:c2:e4:ac:b7:4d:02:9b:ae:9d:3a: 50:c3:86:20:56:17:02:af:99:b7:75:11:a8:42:68: 35:8a:bc:8d:56:3e:b5:0b:28:e3:06:7d:35:38:66: 87:ef:8c:1b:a3:14:61:7c:b7:e9:ff:64:ed:28:a9: c9:9c:33:ec:4e:de:e4:95:70:3c:3c:e1:c5:50:83: 02:58:89:b7:da:d1:3f:b2:75:9c:b9:78:da:88:6f: 9e:10:da:09:76:6c:69:c9:6f:df:d9:d2:a2:bf:25: 5b:64:91:09:ae:57:66:f9:0d:1b:42:ca:9f:f3:e4: a6:ac:c0:3d:28:20:67:e3:3f:4f:20:ae:cc:f1:4d: cc:2a:09:62:17:57:be:0b:f1:10:11:f7:93:d2:25: 65:9c:e2:3c:44:15:70:db:63:95:12:00:e3:5e:ee: db:aa:dc:0e:4c:2c:11:4f:b1:12:6e:af:e2:74:d1: 44:53:e7:d1:b9:97:ff:5b:53:0e:f7:8e:e5:cd:67: 0c:41:96:e8:fc:35:b7:5d:74:31:a6:d8:3d:47:29: 67:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:03:DF:C4:C8:4D:06:C8:65:81:CD:37:33:B7:15:9B:F9:FB:68:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/0d31c566-d234-3f99-8c25-5aa651e59579.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.crl X509v3 Authority Key Identifier: keyid:AA:2C:89:C4:2A:7A:B8:A4:95:51:83:C3:0C:CF:E3:B0:FC:E3:CE:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer sbgp-ipAddrBlock: critical IPv4: 199.47.138.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:f3:cd:7f:fe:41:c8:61:6e:34:f3:ea:77:56:41:17:a8:8e: 10:c4:f4:6c:02:64:31:da:60:19:00:10:a9:f9:8d:cb:c7:9e: 12:fa:d8:22:37:38:23:f7:7b:be:e4:ea:35:31:fb:91:23:95: 47:55:61:49:c0:b1:4f:41:f4:eb:f7:f2:c9:08:b6:6a:c7:69: 1f:47:13:c9:46:22:ab:67:a6:33:47:11:54:3d:87:1e:9e:38: 88:eb:ed:92:e1:5c:fc:1c:fb:e2:95:86:6d:b6:ed:87:ac:c6: 4e:c3:05:8b:af:c1:a0:58:28:e1:a0:17:4f:b6:8e:53:6d:8e: 52:51:dd:44:de:2e:fc:4a:0e:04:d9:6a:c1:a9:67:ae:aa:29: 14:74:8d:e1:f1:b8:2c:12:04:45:6e:80:88:b3:8e:87:3f:c1: b8:66:4a:1f:18:06:48:0b:a7:12:91:aa:3a:00:c5:a6:b6:ba: f5:80:06:76:63:90:06:6d:6f:59:3f:b6:14:89:ce:5c:54:22: 58:a3:23:47:6c:fd:c5:60:37:22:a3:c0:91:73:a9:1a:72:fc: 9a:3d:21:84:32:c5:5f:a7:6e:a6:ea:56:93:42:4e:0f:86:1a: 2b:be:93:96:f8:20:af:b2:e4:bd:b0:bb:25:66:55:a8:28:58: 93:80:86:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElz3umWOjrq+EZre4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGYwYmZjZGUtZDk1OC00ZTkxLWFmNWQtOWZkMWQzM2E1 ODJhMB4XDTI1MDQwODAxMDA0N1oXDTI1MDcwNzAxMDA0N1owLzEtMCsGA1UEAxMk YTU2OWU3OWMtZjFmMy00ODdlLTlkYzQtOTY2ZGRmYTVjMDA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvsC81QwkeP+QZXJysxPd+PIFaBh4PtZuMneO i01lCXc4LrMvDVey2vRwdigs4DmvDsLkrLdNApuunTpQw4YgVhcCr5m3dRGoQmg1 iryNVj61CyjjBn01OGaH74wboxRhfLfp/2TtKKnJnDPsTt7klXA8POHFUIMCWIm3 2tE/snWcuXjaiG+eENoJdmxpyW/f2dKivyVbZJEJrldm+Q0bQsqf8+SmrMA9KCBn 4z9PIK7M8U3MKgliF1e+C/EQEfeT0iVlnOI8RBVw22OVEgDjXu7bqtwOTCwRT7ES bq/idNFEU+fRuZf/W1MO947lzWcMQZbo/DW3XXQxptg9RylnEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOsD38TITQbIZYHNNzO3FZv5+2hwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84ZjBi ZmNkZS1kOTU4LTRlOTEtYWY1ZC05ZmQxZDMzYTU4MmEvMGQzMWM1NjYtZDIzNC0z Zjk5LThjMjUtNWFhNjUxZTU5NTc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGYwYmZjZGUtZDk1OC00ZTkxLWFm NWQtOWZkMWQzM2E1ODJhLzhmMGJmY2RlLWQ5NTgtNGU5MS1hZjVkLTlmZDFkMzNh NTgyYS5jcmwwHwYDVR0jBBgwFoAUqiyJxCp6uKSVUYPDDM/jsPzjzgswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84ZjBiZmNkZS1kOTU4LTRlOTEtYWY1ZC05ZmQx ZDMzYTU4MmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxy+KMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE/zzX/+QchhbjTz6ndWQReojhDE9GwCZDHaYBkAEKn5jcvHnhL62CI3 OCP3e77k6jUx+5EjlUdVYUnAsU9B9Ov38skItmrHaR9HE8lGIqtnpjNHEVQ9hx6e OIjr7ZLhXPwc++KVhm227Yesxk7DBYuvwaBYKOGgF0+2jlNtjlJR3UTeLvxKDgTZ asGpZ66qKRR0jeHxuCwSBEVugIizjoc/wbhmSh8YBkgLpxKRqjoAxaa2uvWABnZj kAZtb1k/thSJzlxUIlijI0ds/cVgNyKjwJFzqRpy/Jo9IYQyxV+nbqbqVpNCTg+G Giu+k5b4IK+y5L2wuyVmVagoWJOAhvY= -----END CERTIFICATE-----Generated at Sun Apr 27 01:59:02 2025 by rpki-client