$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/84c3d0fb-60e4-362f-ab75-4e581cdd3f90.roa File: 84c3d0fb-60e4-362f-ab75-4e581cdd3f90.roa (raw, json) Hash identifier: geW6wJap4JjTiWZd9A/I6dfnmHncOD0onpWbjuER7/I= Subject key identifier: 22:F0:64:80:30:93:D8:F0:A8:C4:94:5D:5B:EE:72:14:28:8D:E0:3F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D4315CE8786EED32062F4B1E Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/84c3d0fb-60e4-362f-ab75-4e581cdd3f90.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 7015 IP address blocks: 174.169.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:31:5c:e8:78:6e:ed:32:06:2f:4b:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=c030b496-9ab8-4111-8676-31f5f297fd22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:9d:76:2e:5e:7f:01:a0:29:b7:f5:2a:89:2e: 82:03:7f:97:e7:4f:75:79:7a:8a:e5:1f:be:bc:09: b8:77:c9:14:a7:3b:dd:ee:62:e1:2e:c9:a6:fc:dd: fa:c1:0e:56:bc:18:e6:88:11:57:11:25:71:4c:54: fb:78:60:88:d3:c3:3e:dc:94:c5:be:4f:32:8d:39: d4:7d:7b:d9:ff:92:b5:e0:93:fb:47:a9:f8:c3:55: ea:a6:02:a6:c8:01:53:7b:bb:c7:0f:02:45:df:61: a8:50:c7:c4:36:41:ce:51:15:fa:2d:a0:76:e8:a3: 40:99:03:d7:d7:86:a8:67:7b:35:0d:22:31:21:f3: e6:8b:fb:bf:91:49:f8:eb:cb:f6:ea:33:55:30:6f: 44:49:e5:33:e7:99:2b:1f:71:dc:f7:c6:8f:62:12: 9f:5a:40:5f:dc:06:b4:3f:fe:25:fe:b2:d3:bd:b6: 13:b4:2c:1b:5b:1a:b5:54:6e:45:21:eb:b3:05:74: 43:74:d0:e4:1c:47:5c:eb:8c:78:63:48:2c:1a:b3: 86:53:b7:eb:16:73:49:03:ef:05:d3:52:22:87:73: 41:14:00:16:80:5b:ec:16:ed:cf:25:76:77:c9:82: 03:fd:59:a6:ce:33:2c:6d:e3:7a:8d:fc:9e:05:a6: ee:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:F0:64:80:30:93:D8:F0:A8:C4:94:5D:5B:EE:72:14:28:8D:E0:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/84c3d0fb-60e4-362f-ab75-4e581cdd3f90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 174.169.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:b0:e4:b6:bb:f6:c2:ce:49:92:c3:ef:cd:1c:1c:99:51:52: 7c:a5:7a:48:2d:f5:43:9d:0b:e3:41:8c:0e:28:90:69:dc:32: 82:47:42:e1:e5:43:0e:ee:9a:ec:f8:87:c9:20:ce:b8:d6:f1: 3b:e6:78:e8:34:dc:66:e0:13:b1:c0:3f:e3:e2:4a:b4:57:49: 06:af:0c:e2:f6:ef:fe:9e:59:3b:91:8f:b1:1b:61:ad:89:60: 42:13:7a:a0:13:03:e2:7a:60:28:2b:93:fa:19:5b:ba:2e:76: a6:f7:53:87:81:f1:19:a9:04:4d:02:06:e0:d4:a1:ed:5b:64: 04:f2:05:73:65:20:18:4c:00:a8:99:19:d4:41:13:6c:4a:9a: 73:49:79:29:cc:76:85:b0:59:ce:0e:aa:a0:b6:c0:22:d4:4a: b7:86:8f:51:b7:7e:eb:06:8d:ec:62:19:85:9b:4c:96:16:e1: 46:e9:6b:8c:f9:50:02:b4:e5:9b:90:07:59:0d:69:b2:49:00: b1:42:aa:92:03:fe:00:97:05:24:71:df:9c:c1:a8:c8:1b:3f: bf:e8:8b:c4:42:61:a8:b3:06:9a:b2:43:15:9c:5d:fb:d2:55: 2a:0d:46:3b:31:35:1c:c4:c5:73:ad:4d:ca:dc:d6:2f:4f:6a: 39:f6:7f:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMVzoeG7tMgYvSx4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk YzAzMGI0OTYtOWFiOC00MTExLTg2NzYtMzFmNWYyOTdmZDIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZ12Ll5/AaApt/UqiS6CA3+X5091eXqK5R++ vAm4d8kUpzvd7mLhLsmm/N36wQ5WvBjmiBFXESVxTFT7eGCI08M+3JTFvk8yjTnU fXvZ/5K14JP7R6n4w1XqpgKmyAFTe7vHDwJF32GoUMfENkHOURX6LaB26KNAmQPX 14aoZ3s1DSIxIfPmi/u/kUn468v26jNVMG9ESeUz55krH3Hc98aPYhKfWkBf3Aa0 P/4l/rLTvbYTtCwbWxq1VG5FIeuzBXRDdNDkHEdc64x4Y0gsGrOGU7frFnNJA+8F 01Iih3NBFAAWgFvsFu3PJXZ3yYID/VmmzjMsbeN6jfyeBabuzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCLwZIAwk9jwqMSUXVvuchQojeA/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODRjM2QwZmItNjBlNC0z NjJmLWFiNzUtNGU1ODFjZGQzZjkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrql4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACSw5La79sLOSZLD780cHJlRUnylekgt9UOdC+NBjA4okGncMoJHQuHl Qw7umuz4h8kgzrjW8TvmeOg03GbgE7HAP+PiSrRXSQavDOL27/6eWTuRj7EbYa2J YEITeqATA+J6YCgrk/oZW7oudqb3U4eB8RmpBE0CBuDUoe1bZATyBXNlIBhMAKiZ GdRBE2xKmnNJeSnMdoWwWc4OqqC2wCLUSreGj1G3fusGjexiGYWbTJYW4Ubpa4z5 UAK05ZuQB1kNabJJALFCqpID/gCXBSRx35zBqMgbP7/oi8RCYaizBpqyQxWcXfvS VSoNRjsxNRzExXOtTcrc1i9Pajn2f40= -----END CERTIFICATE-----Generated at Mon Jun 16 00:39:21 2025 by rpki-client