$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ee796558-82d6-41a5-b8ec-5dfdbd89d5d7/0a1c3907-f7d7-3691-8044-6f13e6d1cfbe.roa File: 0a1c3907-f7d7-3691-8044-6f13e6d1cfbe.roa (raw, json) Hash identifier: PEpR3Kh5FC1j8TYSqS3Eem57/w4cZaQPbEl+xhYSpAY= Subject key identifier: 32:78:BE:1F:A0:81:59:20:F3:A1:FF:72:8F:C3:14:B3:B9:62:ED:41 Certificate issuer: /CN=ee796558-82d6-41a5-b8ec-5dfdbd89d5d7 Certificate serial: 010D0C9F43285849955F25940317C42558BCD880 Authority key identifier: 5C:A3:ED:89:EB:E7:96:FF:87:08:32:46:85:60:7A:6C:A1:46:1D:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ee796558-82d6-41a5-b8ec-5dfdbd89d5d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ee796558-82d6-41a5-b8ec-5dfdbd89d5d7/0a1c3907-f7d7-3691-8044-6f13e6d1cfbe.roa Signing time: Sun 20 Apr 2025 01:00:47 +0000 ROA not before: Sun 20 Apr 2025 01:00:47 +0000 ROA not after: Sat 19 Jul 2025 01:00:47 +0000 asID: 25222 IP address blocks: 192.40.224.0/22 maxlen: 24 216.86.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ee796558-82d6-41a5-b8ec-5dfdbd89d5d7/ee796558-82d6-41a5-b8ec-5dfdbd89d5d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ee796558-82d6-41a5-b8ec-5dfdbd89d5d7/ee796558-82d6-41a5-b8ec-5dfdbd89d5d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ee796558-82d6-41a5-b8ec-5dfdbd89d5d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:95:5f:25:94:03:17:c4:25:58:bc:d8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee796558-82d6-41a5-b8ec-5dfdbd89d5d7 Validity Not Before: Apr 20 01:00:47 2025 GMT Not After : Jul 19 01:00:47 2025 GMT Subject: CN=4a4a6009-d565-4a2f-a00b-7fc1581b9d31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:2f:3e:af:70:f2:b8:ad:19:17:2d:08:26:f5: ed:3a:0c:51:d3:25:76:f8:8e:4d:bb:a1:99:db:f4: 30:f8:18:4c:02:e7:52:d2:d5:eb:fb:e4:82:13:c9: 6d:39:bb:49:c2:a4:ea:a9:66:b3:e2:d4:f4:1e:7a: 4a:de:03:be:8a:fa:0d:de:6e:df:87:d7:75:80:1d: f9:1b:a8:1b:b8:bd:32:05:aa:6c:c8:d0:b8:b1:38: 36:8b:be:c7:8a:4b:6c:78:07:79:d0:55:93:f7:d6: a1:7d:30:16:81:b7:fc:75:3f:03:72:be:e1:4f:ae: b7:cb:23:b5:15:9e:3f:ba:a5:ad:04:0d:bc:e8:63: d2:6f:ac:6b:df:f0:d2:b1:ce:5c:7b:94:14:29:ca: 13:bd:0a:aa:82:88:1e:30:ac:e5:d3:91:57:da:f9: 58:97:8e:be:33:20:30:4e:b1:46:b9:1f:05:63:84: 5d:85:cc:6a:95:b1:3a:db:b0:3f:6a:4d:0c:4d:db: fc:e3:b7:4c:6d:4d:20:97:b0:8e:3d:41:f8:46:76: f7:42:61:5b:d6:a4:96:2f:74:ef:98:7e:1d:df:34: 5b:03:99:f3:65:e0:1b:0e:5b:77:86:a8:77:0e:a6: 13:31:b5:e9:9a:62:20:af:7a:90:c1:ae:43:aa:5c: 2b:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:78:BE:1F:A0:81:59:20:F3:A1:FF:72:8F:C3:14:B3:B9:62:ED:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ee796558-82d6-41a5-b8ec-5dfdbd89d5d7/0a1c3907-f7d7-3691-8044-6f13e6d1cfbe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ee796558-82d6-41a5-b8ec-5dfdbd89d5d7/ee796558-82d6-41a5-b8ec-5dfdbd89d5d7.crl X509v3 Authority Key Identifier: keyid:5C:A3:ED:89:EB:E7:96:FF:87:08:32:46:85:60:7A:6C:A1:46:1D:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ee796558-82d6-41a5-b8ec-5dfdbd89d5d7.cer sbgp-ipAddrBlock: critical IPv4: 192.40.224.0/22 216.86.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:00:6f:ed:a6:af:69:24:a2:04:9f:da:58:52:d5:d7:62:59: df:57:4d:d6:c4:b3:43:a2:f5:3f:d2:24:75:ac:2b:dc:b3:1d: 9e:39:ae:fb:e1:be:2b:02:5a:d8:87:7d:08:8f:32:7b:a2:68: a9:75:62:c2:98:e4:7f:cc:cf:12:3d:c3:e9:31:c1:fd:03:4e: 93:97:1f:7b:8b:b2:68:a4:da:e7:3f:56:fd:36:d6:92:c4:ce: 61:1c:2d:4f:f4:09:08:31:b7:a0:54:ab:cf:0a:7f:a4:2e:c2: c6:d7:05:13:71:8b:46:f3:dd:4a:8e:47:23:7f:4b:bc:9a:2c: 37:58:f1:5e:88:1d:8e:a9:36:be:82:c9:8b:2c:e4:c0:24:f4: 3e:d6:7a:5a:b4:fc:4d:fc:5f:e8:86:36:a6:f8:4c:86:3e:3a: ba:9c:a5:b7:05:35:3b:a1:6d:d8:93:30:ac:c8:df:77:45:18: eb:fe:29:c6:40:f9:4f:ad:3d:1f:ef:00:9a:92:cc:4f:d8:b8: 5d:06:bb:af:80:b5:5c:15:ee:9d:63:6f:18:04:0b:a7:e1:f4: bc:ba:8a:d4:62:0a:72:c3:a2:e1:b6:cd:dd:1a:13:41:ca:ee: 47:e5:29:87:65:1f:cb:9f:12:83:7f:b0:46:2a:14:f2:08:c4: 19:43:fb:fd -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEmVXyWUAxfEJVi82IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWU3OTY1NTgtODJkNi00MWE1LWI4ZWMtNWRmZGJkODlk NWQ3MB4XDTI1MDQyMDAxMDA0N1oXDTI1MDcxOTAxMDA0N1owLzEtMCsGA1UEAxMk NGE0YTYwMDktZDU2NS00YTJmLWEwMGItN2ZjMTU4MWI5ZDMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsC8+r3DyuK0ZFy0IJvXtOgxR0yV2+I5Nu6GZ 2/Qw+BhMAudS0tXr++SCE8ltObtJwqTqqWaz4tT0HnpK3gO+ivoN3m7fh9d1gB35 G6gbuL0yBapsyNC4sTg2i77HiktseAd50FWT99ahfTAWgbf8dT8Dcr7hT663yyO1 FZ4/uqWtBA286GPSb6xr3/DSsc5ce5QUKcoTvQqqgogeMKzl05FX2vlYl46+MyAw TrFGuR8FY4RdhcxqlbE627A/ak0MTdv847dMbU0gl7COPUH4Rnb3QmFb1qSWL3Tv mH4d3zRbA5nzZeAbDlt3hqh3DqYTMbXpmmIgr3qQwa5Dqlwr9QIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFDJ4vh+ggVkg86H/co/DFLO5Yu1BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lZTc5 NjU1OC04MmQ2LTQxYTUtYjhlYy01ZGZkYmQ4OWQ1ZDcvMGExYzM5MDctZjdkNy0z NjkxLTgwNDQtNmYxM2U2ZDFjZmJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZWU3OTY1NTgtODJkNi00MWE1LWI4 ZWMtNWRmZGJkODlkNWQ3L2VlNzk2NTU4LTgyZDYtNDFhNS1iOGVjLTVkZmRiZDg5 ZDVkNy5jcmwwHwYDVR0jBBgwFoAUXKPtievnlv+HCDJGhWB6bKFGHdgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lZTc5NjU1OC04MmQ2LTQxYTUtYjhlYy01ZGZk YmQ4OWQ1ZDcuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCwCjgAwQE 2FbwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAAcAb+2mr2kkogSf2lhS1ddiWd9XTdbEs0Oi9T/SJHWsK9yz HZ45rvvhvisCWtiHfQiPMnuiaKl1YsKY5H/MzxI9w+kxwf0DTpOXH3uLsmik2uc/ Vv021pLEzmEcLU/0CQgxt6BUq88Kf6QuwsbXBRNxi0bz3UqORyN/S7yaLDdY8V6I HY6pNr6CyYss5MAk9D7Welq0/E38X+iGNqb4TIY+OrqcpbcFNTuhbdiTMKzI33dF GOv+KcZA+U+tPR/vAJqSzE/YuF0Gu6+AtVwV7p1jbxgEC6fh9Ly6itRiCnLDouG2 zd0aE0HK7kflKYdlH8ufEoN/sEYqFPIIxBlD+/0= -----END CERTIFICATE-----Generated at Tue Apr 29 02:34:25 2025 by rpki-client