$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854/854cc417-9964-39fb-bc3c-89da106824ca.roa File: 854cc417-9964-39fb-bc3c-89da106824ca.roa (raw, json) Hash identifier: n0YxYqUl3m48xFVjCVX7kLUjIXaKdWhERayO16psas4= Subject key identifier: 79:8C:CD:A4:7C:AE:C4:64:F9:37:A2:2C:B7:F9:7A:5C:D5:C4:EE:13 Certificate issuer: /CN=f84ea5c3-3226-48ac-838b-0fdf69176854 Certificate serial: 010D0C9F43285849955F1AA03ABEB86C26437140 Authority key identifier: 82:71:9E:64:EE:FB:6C:5A:E9:41:FD:EE:1D:55:A8:32:16:3B:EE:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854/854cc417-9964-39fb-bc3c-89da106824ca.roa Signing time: Sun 20 Apr 2025 01:00:47 +0000 ROA not before: Sun 20 Apr 2025 01:00:47 +0000 ROA not after: Sat 19 Jul 2025 01:00:47 +0000 asID: 21777 IP address blocks: 199.33.74.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854/f84ea5c3-3226-48ac-838b-0fdf69176854.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854/f84ea5c3-3226-48ac-838b-0fdf69176854.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:95:5f:1a:a0:3a:be:b8:6c:26:43:71:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f84ea5c3-3226-48ac-838b-0fdf69176854 Validity Not Before: Apr 20 01:00:47 2025 GMT Not After : Jul 19 01:00:47 2025 GMT Subject: CN=090d3786-4035-41e1-a906-f0f8d5a8e437 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:53:b7:45:44:58:79:15:83:ab:41:18:99:14: c4:73:de:a3:db:62:0f:7c:c0:8f:b0:0d:cb:32:de: d9:e8:fc:6b:d2:38:d8:80:43:3c:6e:e7:f0:2a:f0: b2:11:25:d7:98:8c:26:66:5a:b4:e3:f1:f0:52:76: 85:b7:cb:9f:ae:11:e1:6b:9b:fc:82:0a:47:d0:06: 0a:1b:69:0c:97:bc:f4:11:1a:c9:56:11:7f:4b:63: 26:22:3a:90:56:bb:9d:54:d9:a5:d9:52:c9:42:b7: ff:ed:d2:d9:a9:b5:67:40:62:58:f8:cb:45:d0:63: a6:48:cb:a4:ec:18:3c:d9:47:dc:1d:ff:de:0f:5b: f2:19:aa:26:8f:90:42:39:8b:99:ff:32:af:46:ef: fd:7b:4f:f9:d0:32:52:1c:ae:71:ec:40:25:95:dc: 29:ca:ea:eb:4a:38:d1:04:2c:83:5d:af:74:b9:db: aa:7f:5b:14:d7:a3:dc:ec:e7:06:6f:b5:cf:cc:ad: 34:0b:ca:99:7b:2d:db:eb:1e:04:de:24:aa:7e:82: b0:bb:37:d3:58:83:49:2a:33:a1:51:c5:1b:82:ae: 78:9d:0f:51:a6:b2:b5:48:69:29:6a:e0:84:d2:14: 01:01:2e:b9:54:74:92:92:81:09:73:f1:25:7b:15: ea:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:8C:CD:A4:7C:AE:C4:64:F9:37:A2:2C:B7:F9:7A:5C:D5:C4:EE:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854/854cc417-9964-39fb-bc3c-89da106824ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854/f84ea5c3-3226-48ac-838b-0fdf69176854.crl X509v3 Authority Key Identifier: keyid:82:71:9E:64:EE:FB:6C:5A:E9:41:FD:EE:1D:55:A8:32:16:3B:EE:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854.cer sbgp-ipAddrBlock: critical IPv4: 199.33.74.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:a4:33:0b:cf:1d:fe:16:6c:52:c5:ca:a1:07:0f:54:e8:a1: ee:fb:6b:54:ce:29:30:08:65:ef:75:ac:e8:92:f1:6c:55:63: e6:c0:bd:6e:a5:33:78:c5:c2:7d:92:bb:bb:9a:03:79:8b:2c: 91:95:f1:46:ba:8e:41:cb:f5:75:46:3e:60:78:4b:8a:c3:9e: 51:5e:6c:4f:9d:c1:7f:78:5a:05:cb:62:ef:b9:d0:d5:4e:77: e9:de:c9:20:b3:22:00:90:b6:06:61:c1:a4:e6:69:4e:65:8d: 89:d4:3d:8f:95:9d:9b:ce:d9:f9:d3:04:21:fb:c0:fa:02:7c: 2a:73:3e:cf:5a:33:45:1b:2e:37:1f:81:80:1d:3f:7b:94:78: 16:a8:97:ec:8c:c3:05:0f:5a:be:31:53:7b:18:13:35:4e:2d: 18:29:28:7f:17:3f:f6:e0:43:46:4e:20:b6:cf:69:0d:8c:b6: 12:ce:70:59:1e:ed:41:b4:26:77:10:c1:1e:d9:c7:fa:a6:98: c0:17:f6:43:b5:65:a1:d2:3b:bb:9a:8e:88:26:32:16:d1:82: 0f:47:2a:13:ee:ae:9e:98:b0:08:a1:de:07:23:8c:d4:62:96: 9d:8d:ee:1e:a2:58:57:1d:4a:0d:fd:3d:55:84:d0:4f:24:e4: 83:ee:9e:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmVXxqgOr64bCZDcUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjg0ZWE1YzMtMzIyNi00OGFjLTgzOGItMGZkZjY5MTc2 ODU0MB4XDTI1MDQyMDAxMDA0N1oXDTI1MDcxOTAxMDA0N1owLzEtMCsGA1UEAxMk MDkwZDM3ODYtNDAzNS00MWUxLWE5MDYtZjBmOGQ1YThlNDM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVO3RURYeRWDq0EYmRTEc96j22IPfMCPsA3L Mt7Z6Pxr0jjYgEM8bufwKvCyESXXmIwmZlq04/HwUnaFt8ufrhHha5v8ggpH0AYK G2kMl7z0ERrJVhF/S2MmIjqQVrudVNml2VLJQrf/7dLZqbVnQGJY+MtF0GOmSMuk 7Bg82UfcHf/eD1vyGaomj5BCOYuZ/zKvRu/9e0/50DJSHK5x7EAlldwpyurrSjjR BCyDXa90uduqf1sU16Pc7OcGb7XPzK00C8qZey3b6x4E3iSqfoKwuzfTWINJKjOh UcUbgq54nQ9RprK1SGkpauCE0hQBAS65VHSSkoEJc/ElexXq9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHmMzaR8rsRk+TeiLLf5elzVxO4TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mODRl YTVjMy0zMjI2LTQ4YWMtODM4Yi0wZmRmNjkxNzY4NTQvODU0Y2M0MTctOTk2NC0z OWZiLWJjM2MtODlkYTEwNjgyNGNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZjg0ZWE1YzMtMzIyNi00OGFjLTgz OGItMGZkZjY5MTc2ODU0L2Y4NGVhNWMzLTMyMjYtNDhhYy04MzhiLTBmZGY2OTE3 Njg1NC5jcmwwHwYDVR0jBBgwFoAUgnGeZO77bFrpQf3uHVWoMhY77kIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mODRlYTVjMy0zMjI2LTQ4YWMtODM4Yi0wZmRm NjkxNzY4NTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxyFKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAKkMwvPHf4WbFLFyqEHD1Tooe77a1TOKTAIZe91rOiS8WxVY+bAvW6l M3jFwn2Su7uaA3mLLJGV8Ua6jkHL9XVGPmB4S4rDnlFebE+dwX94WgXLYu+50NVO d+neySCzIgCQtgZhwaTmaU5ljYnUPY+VnZvO2fnTBCH7wPoCfCpzPs9aM0UbLjcf gYAdP3uUeBaol+yMwwUPWr4xU3sYEzVOLRgpKH8XP/bgQ0ZOILbPaQ2MthLOcFke 7UG0JncQwR7Zx/qmmMAX9kO1ZaHSO7uajogmMhbRgg9HKhPurp6YsAih3gcjjNRi lp2N7h6iWFcdSg39PVWE0E8k5IPunts= -----END CERTIFICATE-----Generated at Wed Apr 30 05:52:30 2025 by rpki-client