$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2afb66a2-27b1-3e3f-84c9-0eee4eb7c5e8.roa File: 2afb66a2-27b1-3e3f-84c9-0eee4eb7c5e8.roa (raw, json) Hash identifier: Y+MtYY4KBfwiJfohjah+M614aoHm70/Oxvo/ardfLZk= Subject key identifier: A2:B4:0E:07:6F:9E:39:44:91:50:89:E0:C8:C0:AB:DE:9F:BA:D2:34 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858493ED3E48C3CCCC8678CBD4D94 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2afb66a2-27b1-3e3f-84c9-0eee4eb7c5e8.roa Signing time: Thu 20 Mar 2025 01:00:39 +0000 ROA not before: Thu 20 Mar 2025 01:00:39 +0000 ROA not after: Wed 18 Jun 2025 01:00:39 +0000 asID: 0 IP address blocks: 199.233.48.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3e:d3:e4:8c:3c:cc:c8:67:8c:bd:4d:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 20 01:00:39 2025 GMT Not After : Jun 18 01:00:39 2025 GMT Subject: CN=b0843657-290a-457e-9412-f973294ead1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:de:9f:ba:ed:27:ce:c9:21:c5:69:50:b5:c9: fd:d1:84:b8:4d:12:0d:66:6f:7c:3a:33:28:41:15: fc:ce:e5:d7:6d:67:65:26:26:c9:cc:88:87:a7:00: 2d:05:2f:d5:fb:2b:0d:f7:5d:6c:0d:dd:ac:00:50: 49:4b:40:88:44:dc:fd:52:2a:bc:b0:e7:bf:fa:a6: 55:86:07:61:8f:d9:56:b8:33:a0:9a:d5:04:df:d6: 04:b0:67:49:1e:22:bb:5b:cf:30:4d:8d:bc:33:c0: 27:c2:df:31:b6:8b:2e:f5:07:44:18:89:0c:9a:b8: ee:5f:50:da:48:1d:cb:76:2a:db:50:94:da:77:3e: 61:f3:71:41:5e:8e:ba:68:35:06:da:13:28:c2:94: 98:ee:d2:a3:20:9a:29:25:08:b6:c4:b4:f3:a0:78: e8:6a:34:16:52:bf:7f:dc:4c:69:4f:6e:4d:32:60: c2:7d:53:c2:b3:3b:72:f9:d1:9f:88:86:04:ee:06: dd:a8:d5:aa:43:8d:9e:b3:2f:d3:60:93:ac:07:05: c9:db:64:58:b4:19:e3:c0:04:a3:d8:51:78:91:ac: e2:b0:a8:cb:7a:b7:da:53:5a:fa:bd:97:9c:23:ad: d3:88:ff:24:bb:e6:3e:96:fa:57:5f:65:6b:74:9b: 07:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:B4:0E:07:6F:9E:39:44:91:50:89:E0:C8:C0:AB:DE:9F:BA:D2:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2afb66a2-27b1-3e3f-84c9-0eee4eb7c5e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 199.233.48.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:99:fc:ec:30:91:a3:f9:a1:f6:37:68:f0:ca:03:b0:23:03: bd:b0:5b:4a:e7:c0:ac:43:54:7d:da:79:fc:d2:9b:9c:91:f4: a5:b3:e8:02:ae:8d:11:7e:6e:64:59:be:8d:a3:5e:0c:a8:5f: 1d:3c:81:75:f6:90:7b:c5:71:49:2a:1d:6a:f9:69:1d:47:f3: ca:eb:09:dc:b4:05:c4:c8:33:7f:19:00:08:37:bc:56:5e:a7: ff:c3:5c:d8:a5:f6:d0:18:aa:e2:c2:f5:e0:ba:e8:15:24:48: 52:c1:45:67:a2:57:45:71:f5:92:11:24:05:1c:2c:b0:3c:f7: 7c:91:11:8a:55:2f:c0:91:8a:c0:89:9c:3b:ff:52:6a:76:f5: 8e:6c:af:11:e3:af:ee:98:70:1e:d4:a3:f9:a7:c0:9a:4d:c2: 9b:e0:9b:da:99:dc:d3:72:68:20:1e:ef:ff:e1:6d:57:4b:92: b2:f3:2a:c7:8f:3c:ca:9a:e8:5a:68:9d:44:ab:3c:0a:00:76: 4b:38:4c:a0:6f:ad:6d:fe:ed:54:37:e3:f3:f1:ab:16:cf:03: 79:57:36:54:8f:2a:9a:b5:c2:cd:f8:4e:a4:04:71:6b:57:20: 4c:91:d5:a1:27:26:72:ea:c0:c3:e7:a7:ff:23:b2:5c:5c:00: 89:dc:d2:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk+0+SMPMzIZ4y9TZQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMyMDAxMDAzOVoXDTI1MDYxODAxMDAzOVowLzEtMCsGA1UEAxMk YjA4NDM2NTctMjkwYS00NTdlLTk0MTItZjk3MzI5NGVhZDFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlN6fuu0nzskhxWlQtcn90YS4TRINZm98OjMo QRX8zuXXbWdlJibJzIiHpwAtBS/V+ysN911sDd2sAFBJS0CIRNz9Uiq8sOe/+qZV hgdhj9lWuDOgmtUE39YEsGdJHiK7W88wTY28M8Anwt8xtosu9QdEGIkMmrjuX1Da SB3LdirbUJTadz5h83FBXo66aDUG2hMowpSY7tKjIJopJQi2xLTzoHjoajQWUr9/ 3ExpT25NMmDCfVPCszty+dGfiIYE7gbdqNWqQ42esy/TYJOsBwXJ22RYtBnjwASj 2FF4kazisKjLerfaU1r6vZecI63TiP8ku+Y+lvpXX2VrdJsH2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKK0DgdvnjlEkVCJ4MjAq96futI0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMmFmYjY2YTItMjdiMS0z ZTNmLTg0YzktMGVlZTRlYjdjNWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx+kwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADWZ/OwwkaP5ofY3aPDKA7AjA72wW0rnwKxDVH3aefzSm5yR9KWz6AKu jRF+bmRZvo2jXgyoXx08gXX2kHvFcUkqHWr5aR1H88rrCdy0BcTIM38ZAAg3vFZe p//DXNil9tAYquLC9eC66BUkSFLBRWeiV0Vx9ZIRJAUcLLA893yREYpVL8CRisCJ nDv/Ump29Y5srxHjr+6YcB7Uo/mnwJpNwpvgm9qZ3NNyaCAe7//hbVdLkrLzKseP PMqa6FponUSrPAoAdks4TKBvrW3+7VQ34/PxqxbPA3lXNlSPKpq1ws34TqQEcWtX IEyR1aEnJnLqwMPnp/8jslxcAInc0p0= -----END CERTIFICATE-----Generated at Sat Apr 26 12:53:03 2025 by rpki-client