$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/43c6244b-772e-36a4-a28f-a623f82d6ed9.roa File: 43c6244b-772e-36a4-a28f-a623f82d6ed9.roa (raw, json) Hash identifier: pqOMJpFSCBPmf25i0jfdd79gq9C5eTXWzC1x56jdHqI= Subject key identifier: 40:E4:23:C6:EB:2A:B3:4F:12:51:FC:05:12:DB:42:CE:A6:C2:26:27 Certificate issuer: /CN=4bc604de-ac2b-4921-b601-a2c976ab18e8 Certificate serial: 010D0C9F43285849648445410F56FA5A4E272400 Authority key identifier: 5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/43c6244b-772e-36a4-a28f-a623f82d6ed9.roa Signing time: Wed 02 Apr 2025 13:01:01 +0000 ROA not before: Wed 02 Apr 2025 13:01:01 +0000 ROA not after: Tue 01 Jul 2025 13:01:01 +0000 asID: 55195 IP address blocks: 199.4.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:64:84:45:41:0f:56:fa:5a:4e:27:24:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4bc604de-ac2b-4921-b601-a2c976ab18e8 Validity Not Before: Apr 2 13:01:01 2025 GMT Not After : Jul 1 13:01:01 2025 GMT Subject: CN=98ec9e0a-30aa-48b7-9073-696e3621fbe8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:17:bf:65:47:71:2c:16:b2:f2:6e:3f:84:cd: 37:10:08:1d:04:4c:b4:72:6b:cd:fc:f1:76:4c:41: 7b:24:ff:86:ff:ec:90:28:6d:c9:78:8d:77:d3:37: 09:29:f3:8e:15:b5:c8:4e:1d:f4:ae:93:45:f5:1d: 40:55:f6:8c:22:0d:02:44:23:cc:f0:5b:48:b9:07: 1b:5c:53:be:4a:2e:37:c0:83:ad:8b:c5:21:96:06: 80:66:f5:95:67:6a:10:fe:0b:0a:76:5e:34:ee:8f: 42:58:1f:8d:24:7c:a1:37:ad:60:d8:7e:5d:96:50: 51:9f:5e:9a:e9:9c:57:a0:64:9c:30:6d:d4:79:ac: 7c:3c:e3:64:dd:12:e7:e4:38:dd:e7:10:8a:db:b2: 10:4a:cc:ec:e0:1a:9a:30:da:43:c2:79:cf:df:4b: b7:c0:e6:1c:e8:f7:96:c9:87:3c:12:d5:6b:7b:01: 00:41:ee:a0:77:af:60:b7:0b:76:b7:ba:2f:0c:00: f9:9e:d5:39:c3:71:e2:07:ec:52:28:57:7d:81:d0: e1:b1:41:36:86:fe:eb:70:be:a4:a6:3f:12:cc:2d: 0c:33:e7:a7:f9:86:5a:5a:a0:dc:47:de:36:2b:18: 71:3d:40:1d:92:e4:a7:c2:57:53:dc:10:88:be:e8: f9:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:E4:23:C6:EB:2A:B3:4F:12:51:FC:05:12:DB:42:CE:A6:C2:26:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/43c6244b-772e-36a4-a28f-a623f82d6ed9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.crl X509v3 Authority Key Identifier: keyid:5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer sbgp-ipAddrBlock: critical IPv4: 199.4.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:6b:eb:c8:eb:e4:84:7e:c2:b1:de:72:8c:8f:31:93:fb:1e: b0:26:9a:3c:d5:1e:bd:7c:39:90:10:30:9a:7c:fd:ef:d9:03: 77:02:9a:6d:7b:ec:fc:e9:7e:c7:ae:c9:37:61:6c:3f:5f:f7: 52:e2:23:9d:ec:f1:3f:d2:01:4e:82:5d:d1:f9:a9:e4:cb:d4: b8:d6:63:cd:40:ec:89:9f:65:c0:68:c0:f9:22:35:26:c9:5e: 2e:30:83:42:a6:74:1b:47:1a:c6:de:23:15:78:ee:f1:8b:ed: 66:f6:7a:5e:64:1f:07:b8:52:39:f9:68:ba:99:d1:8d:aa:75: c5:81:0e:49:93:14:64:00:e3:75:dd:73:d0:51:89:98:60:98: d4:e3:98:fa:97:ab:d2:44:82:67:f3:d9:8e:3b:e2:4b:31:6b: 29:32:01:92:07:c7:e7:7d:0f:5c:4a:ce:91:fe:97:79:23:d5: 06:56:4b:e9:43:26:f8:8a:63:b6:5c:0f:e3:4e:f0:2c:95:69: db:71:7b:99:75:69:fe:01:bb:a0:bd:ff:e2:17:b5:68:b2:5b: b7:03:13:fe:6a:d6:f1:0d:a1:04:32:4d:3e:dc:10:a2:14:c4: 67:3d:8d:2f:44:f6:88:c4:32:e1:20:fc:9f:ae:02:12:fa:fc: db:01:28:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElkhEVBD1b6Wk4nJAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGJjNjA0ZGUtYWMyYi00OTIxLWI2MDEtYTJjOTc2YWIx OGU4MB4XDTI1MDQwMjEzMDEwMVoXDTI1MDcwMTEzMDEwMVowLzEtMCsGA1UEAxMk OThlYzllMGEtMzBhYS00OGI3LTkwNzMtNjk2ZTM2MjFmYmU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgRe/ZUdxLBay8m4/hM03EAgdBEy0cmvN/PF2 TEF7JP+G/+yQKG3JeI130zcJKfOOFbXITh30rpNF9R1AVfaMIg0CRCPM8FtIuQcb XFO+Si43wIOti8UhlgaAZvWVZ2oQ/gsKdl407o9CWB+NJHyhN61g2H5dllBRn16a 6ZxXoGScMG3Ueax8PONk3RLn5Djd5xCK27IQSszs4BqaMNpDwnnP30u3wOYc6PeW yYc8EtVrewEAQe6gd69gtwt2t7ovDAD5ntU5w3HiB+xSKFd9gdDhsUE2hv7rcL6k pj8SzC0MM+en+YZaWqDcR942KxhxPUAdkuSnwldT3BCIvuj5mQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEDkI8brKrNPElH8BRLbQs6mwiYnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80YmM2 MDRkZS1hYzJiLTQ5MjEtYjYwMS1hMmM5NzZhYjE4ZTgvNDNjNjI0NGItNzcyZS0z NmE0LWEyOGYtYTYyM2Y4MmQ2ZWQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNGJjNjA0ZGUtYWMyYi00OTIxLWI2 MDEtYTJjOTc2YWIxOGU4LzRiYzYwNGRlLWFjMmItNDkyMS1iNjAxLWEyYzk3NmFi MThlOC5jcmwwHwYDVR0jBBgwFoAUXezCHp0HnbEJciCnXQk9+uP8rEAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80YmM2MDRkZS1hYzJiLTQ5MjEtYjYwMS1hMmM5 NzZhYjE4ZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwSQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACpr68jr5IR+wrHecoyPMZP7HrAmmjzVHr18OZAQMJp8/e/ZA3cCmm17 7PzpfseuyTdhbD9f91LiI53s8T/SAU6CXdH5qeTL1LjWY81A7ImfZcBowPkiNSbJ Xi4wg0KmdBtHGsbeIxV47vGL7Wb2el5kHwe4Ujn5aLqZ0Y2qdcWBDkmTFGQA43Xd c9BRiZhgmNTjmPqXq9JEgmfz2Y474ksxaykyAZIHx+d9D1xKzpH+l3kj1QZWS+lD JviKY7ZcD+NO8CyVadtxe5l1af4Bu6C9/+IXtWiyW7cDE/5q1vENoQQyTT7cEKIU xGc9jS9E9ojEMuEg/J+uAhL6/NsBKAs= -----END CERTIFICATE-----Generated at Tue Apr 29 12:45:26 2025 by rpki-client