$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0dc32e52-7919-4ad4-a486-4bed23a5c3ab/22d02040-89b1-3119-9e38-9bdcfdbc92f2.roa File: 22d02040-89b1-3119-9e38-9bdcfdbc92f2.roa (raw, json) Hash identifier: /cy0NLugh1GTPPxwbId9zWWLrRmV2puldJG1dfLRkoQ= Subject key identifier: 0B:50:E7:A8:3E:AC:B4:41:F0:8C:E2:BA:C8:0F:CC:70:57:CB:A8:70 Certificate issuer: /CN=0dc32e52-7919-4ad4-a486-4bed23a5c3ab Certificate serial: 010D0C9F432858499829CC0F2A2BF67DC1F7FD00 Authority key identifier: E5:FD:14:F3:B0:8F:71:D2:1F:E9:CA:63:A4:F4:70:53:F8:F0:02:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0dc32e52-7919-4ad4-a486-4bed23a5c3ab.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0dc32e52-7919-4ad4-a486-4bed23a5c3ab/22d02040-89b1-3119-9e38-9bdcfdbc92f2.roa Signing time: Mon 21 Apr 2025 01:00:47 +0000 ROA not before: Mon 21 Apr 2025 01:00:47 +0000 ROA not after: Sun 20 Jul 2025 01:00:47 +0000 asID: 394434 IP address blocks: 168.86.160.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0dc32e52-7919-4ad4-a486-4bed23a5c3ab/0dc32e52-7919-4ad4-a486-4bed23a5c3ab.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0dc32e52-7919-4ad4-a486-4bed23a5c3ab/0dc32e52-7919-4ad4-a486-4bed23a5c3ab.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0dc32e52-7919-4ad4-a486-4bed23a5c3ab.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:98:29:cc:0f:2a:2b:f6:7d:c1:f7:fd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dc32e52-7919-4ad4-a486-4bed23a5c3ab Validity Not Before: Apr 21 01:00:47 2025 GMT Not After : Jul 20 01:00:47 2025 GMT Subject: CN=f8c55528-3d1a-4fae-8706-a4b1969826c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:2d:42:c5:10:13:e1:56:7f:06:64:ab:cb:f1: ed:99:71:d9:db:31:8e:ea:4e:c1:35:15:5d:57:59: 26:e7:6b:98:6d:d5:76:98:f0:e5:96:ec:d5:3d:fc: 94:ef:88:b1:71:41:f7:25:d5:f2:81:ab:50:31:d8: 8e:c5:1e:18:c2:ba:c2:c4:e6:f1:65:e5:57:5e:c6: c2:17:17:53:fd:0a:e9:a1:04:d8:8b:22:30:02:d5: d0:e1:e3:48:4a:a9:e7:e2:ce:8d:3a:67:ab:23:7e: 65:50:b2:ee:37:cd:06:aa:36:2f:f4:b4:11:43:65: fc:06:f4:3b:70:38:ab:e9:5f:86:ce:1f:2a:4b:9f: b2:74:59:aa:44:94:59:4c:fe:e5:8e:ed:82:fb:a1: d5:3b:65:6a:07:4f:bd:a9:cf:22:bf:aa:b6:7a:ba: 71:f0:63:b8:45:d1:a2:01:20:dc:6a:d4:0a:48:ff: 2c:15:1d:65:90:14:37:86:d1:85:33:b8:14:bb:d2: 38:48:02:b0:d7:df:ab:c7:3d:f2:82:12:32:34:84: 88:34:ba:68:6b:65:18:01:4e:af:c1:8e:61:4d:f8: 28:14:9c:e9:b7:09:4e:9e:db:ab:eb:e1:3b:db:0b: dc:05:b6:06:53:09:72:17:18:f7:22:7e:bd:9d:b1: 01:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:50:E7:A8:3E:AC:B4:41:F0:8C:E2:BA:C8:0F:CC:70:57:CB:A8:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0dc32e52-7919-4ad4-a486-4bed23a5c3ab/22d02040-89b1-3119-9e38-9bdcfdbc92f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0dc32e52-7919-4ad4-a486-4bed23a5c3ab/0dc32e52-7919-4ad4-a486-4bed23a5c3ab.crl X509v3 Authority Key Identifier: keyid:E5:FD:14:F3:B0:8F:71:D2:1F:E9:CA:63:A4:F4:70:53:F8:F0:02:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0dc32e52-7919-4ad4-a486-4bed23a5c3ab.cer sbgp-ipAddrBlock: critical IPv4: 168.86.160.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:c4:d0:4a:d5:66:4c:25:ba:7f:fd:06:4e:36:ad:af:a1:fb: 76:43:9e:5c:8b:fa:64:e8:c3:06:7f:54:26:9c:42:27:be:5c: 0c:28:c9:d1:a9:99:cc:2c:e7:c1:ed:e8:02:6e:02:17:ad:8f: 80:ae:d6:6e:58:ad:8b:df:a8:b5:8a:b0:f1:24:58:bf:71:15: a5:e9:3f:7c:9e:f6:83:72:01:b4:5e:c9:00:3e:24:f7:32:f1: b3:bf:80:51:ba:34:13:3a:13:7f:85:e7:a8:ba:eb:80:51:1c: a3:5d:b9:98:03:1f:db:0b:6f:9f:a0:07:41:fd:a6:cd:bc:07: 7a:e6:01:31:45:fd:08:a7:bc:55:9e:48:0b:24:9c:f1:f5:9a: 62:ef:99:47:0f:cc:1d:70:85:a6:3c:25:aa:2b:2e:81:2e:9c: c3:bc:14:c5:08:3f:9a:24:39:9a:b6:50:7c:8d:86:7f:a9:53: 62:85:58:d8:00:08:c2:71:d3:42:01:7e:2e:7b:4e:d8:08:0c: d8:90:38:5f:22:c2:d7:3f:37:64:58:fa:05:a6:ba:dc:f1:fa: 39:e8:26:dc:6d:05:52:e2:6e:60:a1:73:64:ef:29:83:74:65: b8:a6:33:a0:fd:b5:b5:c0:66:1b:37:c3:c5:1d:0c:8c:98:12: 73:d4:f2:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmYKcwPKiv2fcH3/QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRjMzJlNTItNzkxOS00YWQ0LWE0ODYtNGJlZDIzYTVj M2FiMB4XDTI1MDQyMTAxMDA0N1oXDTI1MDcyMDAxMDA0N1owLzEtMCsGA1UEAxMk ZjhjNTU1MjgtM2QxYS00ZmFlLTg3MDYtYTRiMTk2OTgyNmM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAui1CxRAT4VZ/BmSry/HtmXHZ2zGO6k7BNRVd V1km52uYbdV2mPDlluzVPfyU74ixcUH3JdXygatQMdiOxR4YwrrCxObxZeVXXsbC FxdT/QrpoQTYiyIwAtXQ4eNISqnn4s6NOmerI35lULLuN80GqjYv9LQRQ2X8BvQ7 cDir6V+Gzh8qS5+ydFmqRJRZTP7lju2C+6HVO2VqB0+9qc8iv6q2erpx8GO4RdGi ASDcatQKSP8sFR1lkBQ3htGFM7gUu9I4SAKw19+rxz3yghIyNISINLpoa2UYAU6v wY5hTfgoFJzptwlOntur6+E72wvcBbYGUwlyFxj3In69nbEBlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAtQ56g+rLRB8IziusgPzHBXy6hwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wZGMz MmU1Mi03OTE5LTRhZDQtYTQ4Ni00YmVkMjNhNWMzYWIvMjJkMDIwNDAtODliMS0z MTE5LTllMzgtOWJkY2ZkYmM5MmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGRjMzJlNTItNzkxOS00YWQ0LWE0 ODYtNGJlZDIzYTVjM2FiLzBkYzMyZTUyLTc5MTktNGFkNC1hNDg2LTRiZWQyM2E1 YzNhYi5jcmwwHwYDVR0jBBgwFoAU5f0U87CPcdIf6cpjpPRwU/jwArIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wZGMzMmU1Mi03OTE5LTRhZDQtYTQ4Ni00YmVk MjNhNWMzYWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFqFagMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHTE0ErVZkwlun/9Bk42ra+h+3ZDnlyL+mTowwZ/VCacQie+XAwoydGp mcws58Ht6AJuAhetj4Cu1m5YrYvfqLWKsPEkWL9xFaXpP3ye9oNyAbReyQA+JPcy 8bO/gFG6NBM6E3+F56i664BRHKNduZgDH9sLb5+gB0H9ps28B3rmATFF/QinvFWe SAsknPH1mmLvmUcPzB1whaY8JaorLoEunMO8FMUIP5okOZq2UHyNhn+pU2KFWNgA CMJx00IBfi57TtgIDNiQOF8iwtc/N2RY+gWmutzx+jnoJtxtBVLibmChc2TvKYN0 ZbimM6D9tbXAZhs3w8UdDIyYEnPU8hA= -----END CERTIFICATE-----Generated at Sun Apr 27 00:21:21 2025 by rpki-client