$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/47b922d5-eb8e-4028-aba8-2e282c0b5e76/8c5b25f9-3fb5-366e-a54d-62c0481ec1a1.roa File: 8c5b25f9-3fb5-366e-a54d-62c0481ec1a1.roa (raw, json) Hash identifier: haZDT8LaQxJ4YqpqlyqVKt71Z0KwMPiAu2znNtyOVk0= Subject key identifier: A5:E1:DA:F1:7C:58:DD:11:BC:EE:CE:7A:90:48:7F:34:07:7F:57:1B Certificate issuer: /CN=47b922d5-eb8e-4028-aba8-2e282c0b5e76 Certificate serial: 010D0C9F43285849A4C6EA54623DF912F33642F8 Authority key identifier: 8E:AA:E7:64:02:DD:B5:8A:49:AD:9D:83:8F:28:A9:A5:D6:B7:DC:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/47b922d5-eb8e-4028-aba8-2e282c0b5e76.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/47b922d5-eb8e-4028-aba8-2e282c0b5e76/8c5b25f9-3fb5-366e-a54d-62c0481ec1a1.roa Signing time: Fri 25 Apr 2025 13:27:11 +0000 ROA not before: Fri 25 Apr 2025 13:27:11 +0000 ROA not after: Thu 24 Jul 2025 13:27:11 +0000 asID: 394026 IP address blocks: 199.20.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/47b922d5-eb8e-4028-aba8-2e282c0b5e76/47b922d5-eb8e-4028-aba8-2e282c0b5e76.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/47b922d5-eb8e-4028-aba8-2e282c0b5e76/47b922d5-eb8e-4028-aba8-2e282c0b5e76.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/47b922d5-eb8e-4028-aba8-2e282c0b5e76.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:c6:ea:54:62:3d:f9:12:f3:36:42:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47b922d5-eb8e-4028-aba8-2e282c0b5e76 Validity Not Before: Apr 25 13:27:11 2025 GMT Not After : Jul 24 13:27:11 2025 GMT Subject: CN=085bd51d-1e54-4a39-bb46-bea0b82f0a9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:58:db:3a:f9:04:7d:dd:f2:e0:4f:61:d3:92: ff:2b:70:99:d3:1e:86:eb:77:fe:29:10:13:12:a7: b8:24:0c:3e:0d:71:cd:59:bd:4f:f3:74:29:dd:62: 89:fe:e4:19:8d:72:97:e2:58:73:d3:85:80:94:1f: 8d:a7:b9:38:9d:f3:8f:28:50:ff:1a:1a:99:54:f1: 26:91:36:88:81:35:3d:4f:94:cb:c8:f6:08:6d:7e: 3d:64:ad:06:60:f3:65:51:99:bd:a1:0f:43:43:3c: 19:3e:8e:85:58:86:0d:4e:9e:30:f7:07:16:3f:ac: 32:f1:ed:27:04:a5:b3:d1:1d:8e:1e:cd:13:80:5e: 82:ae:97:3b:4c:2b:28:6b:5e:fc:08:fd:bb:b8:98: f4:fa:f3:5c:0b:dc:21:4d:87:f7:be:5f:8e:f3:3f: af:65:6c:41:b0:27:4d:6e:a6:bf:a7:e1:4b:cb:a0: 1a:cb:7d:0e:ac:7f:02:e9:cb:79:8a:ba:4c:7c:17: 03:a6:33:84:c1:ef:af:22:c7:45:c4:c8:e6:59:50: 74:35:f7:d9:10:55:5e:08:a4:4c:d6:b8:aa:7a:45: 17:65:b6:63:37:56:d8:70:51:b7:cf:4b:ec:86:18: 4a:b5:68:45:46:78:67:5a:31:13:96:b6:27:31:71: be:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:E1:DA:F1:7C:58:DD:11:BC:EE:CE:7A:90:48:7F:34:07:7F:57:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/47b922d5-eb8e-4028-aba8-2e282c0b5e76/8c5b25f9-3fb5-366e-a54d-62c0481ec1a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/47b922d5-eb8e-4028-aba8-2e282c0b5e76/47b922d5-eb8e-4028-aba8-2e282c0b5e76.crl X509v3 Authority Key Identifier: keyid:8E:AA:E7:64:02:DD:B5:8A:49:AD:9D:83:8F:28:A9:A5:D6:B7:DC:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/47b922d5-eb8e-4028-aba8-2e282c0b5e76.cer sbgp-ipAddrBlock: critical IPv4: 199.20.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:5d:1b:fb:a4:5d:30:ac:41:cd:b1:8e:51:db:68:59:75:f0: 90:b0:91:69:ed:28:b0:42:04:00:07:6a:84:94:06:76:ec:58: a2:5b:b3:f1:48:ca:1d:53:ac:92:a0:2d:38:e8:67:28:84:da: b4:ce:f6:83:a7:04:8f:de:e3:8a:ee:c7:e6:d6:43:47:5f:0c: e4:ba:d2:6c:c1:81:fd:52:79:cf:11:b9:41:f7:03:d6:15:9c: ae:fd:90:9e:24:07:50:68:fd:e3:03:23:13:c5:30:3a:e7:f0: d2:9d:45:c2:d3:aa:a2:0c:62:25:38:91:22:29:70:b7:dc:cb: 99:7b:7a:a6:ca:af:ec:ea:7c:39:e6:b7:23:93:86:d6:0b:98: 0a:50:0a:5c:e6:b7:6d:3b:05:b6:27:e0:44:74:2e:f4:7a:b6: d4:08:36:35:19:d1:71:21:e9:8b:38:b6:62:84:2c:fa:29:43: 8f:fa:2a:81:0b:04:8e:bc:3d:14:35:2d:f0:d3:32:e5:ba:84: f9:1f:22:e8:00:23:44:9a:86:87:e7:29:3f:87:95:2c:27:c6: 5f:31:3c:80:3b:b6:02:af:a5:64:2b:6b:f4:30:29:45:5a:2b: 3d:79:10:23:c9:52:45:0e:22:a2:c4:af:16:8e:c5:7f:ed:00: 2c:62:52:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkxupUYj35EvM2QvgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDdiOTIyZDUtZWI4ZS00MDI4LWFiYTgtMmUyODJjMGI1 ZTc2MB4XDTI1MDQyNTEzMjcxMVoXDTI1MDcyNDEzMjcxMVowLzEtMCsGA1UEAxMk MDg1YmQ1MWQtMWU1NC00YTM5LWJiNDYtYmVhMGI4MmYwYTlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVjbOvkEfd3y4E9h05L/K3CZ0x6G63f+KRAT Eqe4JAw+DXHNWb1P83Qp3WKJ/uQZjXKX4lhz04WAlB+Np7k4nfOPKFD/GhqZVPEm kTaIgTU9T5TLyPYIbX49ZK0GYPNlUZm9oQ9DQzwZPo6FWIYNTp4w9wcWP6wy8e0n BKWz0R2OHs0TgF6Crpc7TCsoa178CP27uJj0+vNcC9whTYf3vl+O8z+vZWxBsCdN bqa/p+FLy6Aay30OrH8C6ct5irpMfBcDpjOEwe+vIsdFxMjmWVB0NffZEFVeCKRM 1riqekUXZbZjN1bYcFG3z0vshhhKtWhFRnhnWjETlrYnMXG+dwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKXh2vF8WN0RvO7OepBIfzQHf1cbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy80N2I5 MjJkNS1lYjhlLTQwMjgtYWJhOC0yZTI4MmMwYjVlNzYvOGM1YjI1ZjktM2ZiNS0z NjZlLWE1NGQtNjJjMDQ4MWVjMWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNDdiOTIyZDUtZWI4ZS00MDI4LWFi YTgtMmUyODJjMGI1ZTc2LzQ3YjkyMmQ1LWViOGUtNDAyOC1hYmE4LTJlMjgyYzBi NWU3Ni5jcmwwHwYDVR0jBBgwFoAUjqrnZALdtYpJrZ2Djyippda33J0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy80N2I5MjJkNS1lYjhlLTQwMjgtYWJhOC0yZTI4 MmMwYjVlNzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxxQOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADtdG/ukXTCsQc2xjlHbaFl18JCwkWntKLBCBAAHaoSUBnbsWKJbs/FI yh1TrJKgLTjoZyiE2rTO9oOnBI/e44rux+bWQ0dfDOS60mzBgf1Sec8RuUH3A9YV nK79kJ4kB1Bo/eMDIxPFMDrn8NKdRcLTqqIMYiU4kSIpcLfcy5l7eqbKr+zqfDnm tyOThtYLmApQClzmt207BbYn4ER0LvR6ttQINjUZ0XEh6Ys4tmKELPopQ4/6KoEL BI68PRQ1LfDTMuW6hPkfIugAI0SahofnKT+HlSwnxl8xPIA7tgKvpWQra/QwKUVa Kz15ECPJUkUOIqLErxaOxX/tACxiUuw= -----END CERTIFICATE-----Generated at Mon Apr 28 09:28:46 2025 by rpki-client