$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/3c020dec-3b81-3384-8f84-fc8fb8ef0865.roa File: 3c020dec-3b81-3384-8f84-fc8fb8ef0865.roa (raw, json) Hash identifier: hIFQ/x3FOrMz7mTrOol+rJWvGsC5dCQGGYsFStNImqE= Subject key identifier: 71:46:9B:65:81:96:34:45:FC:03:5F:DC:BE:AE:AA:E7:43:2A:F9:31 Certificate issuer: /CN=8f0bfcde-d958-4e91-af5d-9fd1d33a582a Certificate serial: 010D0C9F4328584973DEE97B214AA193259CFA80 Authority key identifier: AA:2C:89:C4:2A:7A:B8:A4:95:51:83:C3:0C:CF:E3:B0:FC:E3:CE:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/3c020dec-3b81-3384-8f84-fc8fb8ef0865.roa Signing time: Tue 08 Apr 2025 01:00:47 +0000 ROA not before: Tue 08 Apr 2025 01:00:47 +0000 ROA not after: Mon 07 Jul 2025 01:00:47 +0000 asID: 40342 IP address blocks: 199.47.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:73:de:e9:7b:21:4a:a1:93:25:9c:fa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f0bfcde-d958-4e91-af5d-9fd1d33a582a Validity Not Before: Apr 8 01:00:47 2025 GMT Not After : Jul 7 01:00:47 2025 GMT Subject: CN=fd412424-810d-43f2-b2bc-d796b8d6cce4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:3f:bf:3e:ad:66:0f:91:a0:ee:a8:cd:62:a3: a7:9b:aa:e7:60:11:8c:0c:c4:b9:e6:d4:9b:0c:1a: a1:96:c6:fb:06:3e:60:86:2b:7d:c7:24:b4:ad:9f: ce:ec:1b:ae:c1:92:98:b3:39:f4:a9:9b:18:3f:93: ea:fd:de:85:fc:e1:79:5b:0e:5e:84:d8:96:b9:b6: 5a:4d:ab:3f:26:6b:f2:cd:9f:da:94:19:d6:03:67: 6f:12:8c:89:60:ca:72:f3:7f:c2:a7:6e:0c:b3:dc: 3c:4d:2c:96:ae:27:1d:c7:c0:33:29:4d:47:c0:81: 3d:f5:5f:e3:47:74:2b:64:cb:35:c3:64:1d:ad:7f: 9b:e2:e3:f3:06:9b:b6:6b:44:62:e9:22:a3:25:ff: 3a:e9:1c:75:32:f5:36:46:1c:d5:36:2a:95:de:65: 20:75:3f:00:79:a7:4b:32:b0:10:78:2d:88:60:39: 94:40:ec:49:a0:3e:5c:c9:2c:9b:45:84:26:e4:45: 93:2b:53:c2:65:08:71:41:a0:62:70:82:dd:74:34: 26:cd:af:ff:e0:89:f2:94:37:5f:24:2d:07:3c:ca: af:5a:3e:41:74:57:7d:65:dd:a3:68:a1:4b:97:f2: 27:d9:40:db:c8:ba:fe:45:ce:c6:fc:3e:93:56:f4: 50:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:46:9B:65:81:96:34:45:FC:03:5F:DC:BE:AE:AA:E7:43:2A:F9:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/3c020dec-3b81-3384-8f84-fc8fb8ef0865.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.crl X509v3 Authority Key Identifier: keyid:AA:2C:89:C4:2A:7A:B8:A4:95:51:83:C3:0C:CF:E3:B0:FC:E3:CE:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer sbgp-ipAddrBlock: critical IPv4: 199.47.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:ec:cc:b1:2c:33:02:2c:dc:80:34:4c:a7:8d:02:d8:62:51: 77:45:2f:94:56:ce:0b:f9:bb:c5:04:65:64:67:9e:d8:9d:e1: 9e:13:67:a0:47:61:42:e4:67:c8:5f:97:61:76:61:8d:2b:3e: d4:0e:84:8d:bf:23:9a:0c:b0:8e:6d:b2:df:96:67:0a:55:ef: dd:92:df:4e:bf:e2:3b:d6:f0:f7:ec:2c:b3:4b:77:76:e7:cf: 67:29:48:e6:bb:21:28:ab:ba:70:8f:fd:d1:5a:d7:19:82:78: b9:28:29:12:01:d7:f9:08:40:d3:14:77:b1:78:da:ef:7f:1a: 19:5a:16:bc:b3:25:bb:41:bf:bc:b6:f5:d0:59:ea:f3:85:46: 0a:bc:9a:38:96:7f:d8:8c:ed:92:0a:95:9e:48:07:4c:9f:04: 34:b5:57:c2:ed:c6:f5:99:21:e1:7e:9f:0f:0c:08:47:13:d2: 3c:d9:42:00:ce:9a:7f:f9:75:0f:21:5f:cc:e1:a8:70:b2:a5: be:b1:eb:44:2f:06:8c:db:a5:37:98:c3:24:c2:d2:03:ee:67: fb:e8:93:48:42:fd:b3:d1:54:da:2f:a9:b7:e0:52:aa:a0:70: 27:db:38:72:05:64:ba:02:dd:8b:d5:ba:da:33:8c:a2:ab:40: d5:d3:7a:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElz3ul7IUqhkyWc+oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGYwYmZjZGUtZDk1OC00ZTkxLWFmNWQtOWZkMWQzM2E1 ODJhMB4XDTI1MDQwODAxMDA0N1oXDTI1MDcwNzAxMDA0N1owLzEtMCsGA1UEAxMk ZmQ0MTI0MjQtODEwZC00M2YyLWIyYmMtZDc5NmI4ZDZjY2U0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhj+/Pq1mD5Gg7qjNYqOnm6rnYBGMDMS55tSb DBqhlsb7Bj5ghit9xyS0rZ/O7BuuwZKYszn0qZsYP5Pq/d6F/OF5Ww5ehNiWubZa Tas/JmvyzZ/alBnWA2dvEoyJYMpy83/Cp24Ms9w8TSyWricdx8AzKU1HwIE99V/j R3QrZMs1w2QdrX+b4uPzBpu2a0Ri6SKjJf866Rx1MvU2RhzVNiqV3mUgdT8AeadL MrAQeC2IYDmUQOxJoD5cySybRYQm5EWTK1PCZQhxQaBicILddDQmza//4InylDdf JC0HPMqvWj5BdFd9Zd2jaKFLl/In2UDbyLr+Rc7G/D6TVvRQ6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHFGm2WBljRF/ANf3L6uqudDKvkxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84ZjBi ZmNkZS1kOTU4LTRlOTEtYWY1ZC05ZmQxZDMzYTU4MmEvM2MwMjBkZWMtM2I4MS0z Mzg0LThmODQtZmM4ZmI4ZWYwODY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGYwYmZjZGUtZDk1OC00ZTkxLWFm NWQtOWZkMWQzM2E1ODJhLzhmMGJmY2RlLWQ5NTgtNGU5MS1hZjVkLTlmZDFkMzNh NTgyYS5jcmwwHwYDVR0jBBgwFoAUqiyJxCp6uKSVUYPDDM/jsPzjzgswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84ZjBiZmNkZS1kOTU4LTRlOTEtYWY1ZC05ZmQx ZDMzYTU4MmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxy+JMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADTszLEsMwIs3IA0TKeNAthiUXdFL5RWzgv5u8UEZWRnntid4Z4TZ6BH YULkZ8hfl2F2YY0rPtQOhI2/I5oMsI5tst+WZwpV792S306/4jvW8PfsLLNLd3bn z2cpSOa7ISirunCP/dFa1xmCeLkoKRIB1/kIQNMUd7F42u9/GhlaFryzJbtBv7y2 9dBZ6vOFRgq8mjiWf9iM7ZIKlZ5IB0yfBDS1V8LtxvWZIeF+nw8MCEcT0jzZQgDO mn/5dQ8hX8zhqHCypb6x60QvBozbpTeYwyTC0gPuZ/vok0hC/bPRVNovqbfgUqqg cCfbOHIFZLoC3YvVutozjKKrQNXTelM= -----END CERTIFICATE-----Generated at Sun Apr 27 10:10:26 2025 by rpki-client