$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b8b20ca-2a1e-4742-b63c-4b3b1d151f15/ddc05ad9-535b-34bf-991f-d027fed482d3.roa File: ddc05ad9-535b-34bf-991f-d027fed482d3.roa (raw, json) Hash identifier: 4NOGDS3YO/GKTtTju+sQt8BD1skFAOftRXCnDkyGbkg= Subject key identifier: EA:03:C8:4E:DA:E0:11:91:73:F1:9F:5E:1C:67:DF:CE:CD:7C:2C:EC Certificate issuer: /CN=0b8b20ca-2a1e-4742-b63c-4b3b1d151f15 Certificate serial: 010D0C9F4328584976A990E9B47CF93216D5DB80 Authority key identifier: F3:FF:58:AA:40:01:5E:1D:D0:5D:10:B7:78:A8:F8:65:D2:9D:42:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b8b20ca-2a1e-4742-b63c-4b3b1d151f15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b8b20ca-2a1e-4742-b63c-4b3b1d151f15/ddc05ad9-535b-34bf-991f-d027fed482d3.roa Signing time: Wed 09 Apr 2025 01:00:47 +0000 ROA not before: Wed 09 Apr 2025 01:00:47 +0000 ROA not after: Tue 08 Jul 2025 01:00:47 +0000 asID: 14702 IP address blocks: 134.20.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b8b20ca-2a1e-4742-b63c-4b3b1d151f15/0b8b20ca-2a1e-4742-b63c-4b3b1d151f15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b8b20ca-2a1e-4742-b63c-4b3b1d151f15/0b8b20ca-2a1e-4742-b63c-4b3b1d151f15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b8b20ca-2a1e-4742-b63c-4b3b1d151f15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:76:a9:90:e9:b4:7c:f9:32:16:d5:db:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b8b20ca-2a1e-4742-b63c-4b3b1d151f15 Validity Not Before: Apr 9 01:00:47 2025 GMT Not After : Jul 8 01:00:47 2025 GMT Subject: CN=c4045641-9958-4f56-8624-91fba1322370 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:f4:f0:3c:a4:0c:a6:e2:64:c5:5b:9f:b6:85: 9a:53:1c:b3:e5:8d:2c:fe:7e:be:84:87:14:3e:6d: 71:d3:0e:b8:12:a8:28:e6:93:81:f9:b1:e2:46:44: 51:31:91:27:00:57:ee:6d:94:e4:09:97:d2:10:b4: 5e:ca:d9:fb:1e:24:9c:34:8f:8e:b5:37:cf:ee:47: a6:f0:54:a1:ea:4b:dd:e9:4e:ff:bd:b6:3f:99:69: 22:b1:d8:1a:68:17:f4:18:fd:52:9a:ed:5b:22:6b: 7a:bc:f7:d9:f8:97:33:d3:dc:be:8d:b7:eb:d4:22: 6c:2e:c0:8a:70:8e:8f:e3:e0:32:12:51:20:13:e0: a7:bd:60:f5:55:cc:00:08:b8:4b:32:6a:d9:10:7e: 2f:5e:b5:fe:0f:ec:9b:c4:4b:b9:70:5d:27:39:29: 65:24:30:52:dd:80:9e:85:1e:bc:a9:bf:42:cd:13: 05:d0:c7:73:35:2d:ba:c0:b0:3a:bd:46:6f:7e:e2: bd:6c:b6:41:f6:7d:cb:9e:66:fb:cf:79:43:81:d0: 5c:3e:fd:0d:69:22:5b:c5:4c:8b:40:2f:de:d8:35: 62:76:73:81:9f:2d:0d:f5:10:f0:de:54:01:9e:e7: 7c:47:8b:b3:e6:5d:2d:d5:2e:63:0f:96:ff:11:8e: c2:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:03:C8:4E:DA:E0:11:91:73:F1:9F:5E:1C:67:DF:CE:CD:7C:2C:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b8b20ca-2a1e-4742-b63c-4b3b1d151f15/ddc05ad9-535b-34bf-991f-d027fed482d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b8b20ca-2a1e-4742-b63c-4b3b1d151f15/0b8b20ca-2a1e-4742-b63c-4b3b1d151f15.crl X509v3 Authority Key Identifier: keyid:F3:FF:58:AA:40:01:5E:1D:D0:5D:10:B7:78:A8:F8:65:D2:9D:42:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b8b20ca-2a1e-4742-b63c-4b3b1d151f15.cer sbgp-ipAddrBlock: critical IPv4: 134.20.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:f4:1f:41:b8:bc:68:69:48:1c:bd:f3:2e:fe:8b:18:bc:72: 85:f5:6a:b8:de:c7:9d:e1:3a:7d:69:c9:ce:28:29:fc:5f:0f: 0d:0e:71:67:c5:68:38:67:cb:31:5a:f2:43:32:31:44:63:52: 55:e0:f4:e4:94:a7:e7:65:b2:d5:a8:3a:bd:89:12:56:fc:c5: 9e:d9:11:7a:73:35:f5:7f:36:f4:8f:35:6c:de:a9:5d:fc:d2: 12:e7:cb:5b:a3:53:98:8e:d7:8e:28:b2:e3:a6:b7:6f:ca:35: cc:d5:5b:32:7a:7a:55:bc:db:85:85:64:1a:1e:35:46:2f:62: 81:b1:68:c2:f3:94:bd:fd:3e:8a:6b:26:f5:8e:79:62:d2:ac: 85:03:72:39:78:59:09:4d:8c:fd:33:d4:6d:e8:f4:01:75:46: a1:31:74:89:56:1c:a9:e6:da:3a:9d:a7:93:b5:2d:f1:e9:0f: e0:35:c2:fd:3f:f4:da:98:6f:01:7f:83:99:cd:a0:38:6a:44: d9:5c:79:eb:8f:04:07:02:7d:62:99:9b:50:41:c8:e3:6e:1d: c8:d1:d2:53:6a:db:e3:75:2e:75:46:18:c1:7b:0f:90:59:c9: 5f:54:4e:fd:a0:ad:9b:ce:75:a8:49:59:d6:06:8e:0a:4f:2c: d1:9f:ac:de -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEl2qZDptHz5MhbV24AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGI4YjIwY2EtMmExZS00NzQyLWI2M2MtNGIzYjFkMTUx ZjE1MB4XDTI1MDQwOTAxMDA0N1oXDTI1MDcwODAxMDA0N1owLzEtMCsGA1UEAxMk YzQwNDU2NDEtOTk1OC00ZjU2LTg2MjQtOTFmYmExMzIyMzcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgvTwPKQMpuJkxVuftoWaUxyz5Y0s/n6+hIcU Pm1x0w64Eqgo5pOB+bHiRkRRMZEnAFfubZTkCZfSELReytn7HiScNI+OtTfP7kem 8FSh6kvd6U7/vbY/mWkisdgaaBf0GP1Smu1bImt6vPfZ+Jcz09y+jbfr1CJsLsCK cI6P4+AyElEgE+CnvWD1VcwACLhLMmrZEH4vXrX+D+ybxEu5cF0nOSllJDBS3YCe hR68qb9CzRMF0MdzNS26wLA6vUZvfuK9bLZB9n3Lnmb7z3lDgdBcPv0NaSJbxUyL QC/e2DVidnOBny0N9RDw3lQBnud8R4uz5l0t1S5jD5b/EY7C+QIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFOoDyE7a4BGRc/GfXhxn387NfCzsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8wYjhi MjBjYS0yYTFlLTQ3NDItYjYzYy00YjNiMWQxNTFmMTUvZGRjMDVhZDktNTM1Yi0z NGJmLTk5MWYtZDAyN2ZlZDQ4MmQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMGI4YjIwY2EtMmExZS00NzQyLWI2 M2MtNGIzYjFkMTUxZjE1LzBiOGIyMGNhLTJhMWUtNDc0Mi1iNjNjLTRiM2IxZDE1 MWYxNS5jcmwwHwYDVR0jBBgwFoAU8/9YqkABXh3QXRC3eKj4ZdKdQgwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8wYjhiMjBjYS0yYTFlLTQ3NDItYjYzYy00YjNi MWQxNTFmMTUuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAhhQwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAEPQfQbi8aGlIHL3zLv6LGLxyhfVquN7HneE6fWnJzigp/F8PDQ5xZ8Vo OGfLMVryQzIxRGNSVeD05JSn52Wy1ag6vYkSVvzFntkRenM19X829I81bN6pXfzS EufLW6NTmI7Xjiiy46a3b8o1zNVbMnp6VbzbhYVkGh41Ri9igbFowvOUvf0+imsm 9Y55YtKshQNyOXhZCU2M/TPUbej0AXVGoTF0iVYcqebaOp2nk7Ut8ekP4DXC/T/0 2phvAX+Dmc2gOGpE2Vx5648EBwJ9YpmbUEHI424dyNHSU2rb43UudUYYwXsPkFnJ X1RO/aCtm851qElZ1gaOCk8s0Z+s3g== -----END CERTIFICATE-----Generated at Tue Apr 29 13:36:31 2025 by rpki-client