$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d/80ca88fd-748b-398c-994d-51d5dfc053ba.roa File: 80ca88fd-748b-398c-994d-51d5dfc053ba.roa (raw, json) Hash identifier: d99m5EbPUvIuVJoFj2BTYrj2HNrIVSEKXBmq245o/S0= Subject key identifier: B6:CE:A1:20:CB:BF:2C:88:30:0D:BC:6E:56:8A:60:63:A3:80:9A:1A Certificate issuer: /CN=8a57b69a-d683-4350-83d4-e449c0242b7d Certificate serial: 010D0C9F432858499294A2C4823665E0CBDB1040 Authority key identifier: 38:8D:06:A4:B8:D5:B5:2E:32:40:F9:04:97:CD:53:11:DC:85:6F:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d/80ca88fd-748b-398c-994d-51d5dfc053ba.roa Signing time: Sat 19 Apr 2025 01:00:48 +0000 ROA not before: Sat 19 Apr 2025 01:00:48 +0000 ROA not after: Fri 18 Jul 2025 01:00:48 +0000 asID: 55134 IP address blocks: 172.111.16.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d/8a57b69a-d683-4350-83d4-e449c0242b7d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d/8a57b69a-d683-4350-83d4-e449c0242b7d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:92:94:a2:c4:82:36:65:e0:cb:db:10:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a57b69a-d683-4350-83d4-e449c0242b7d Validity Not Before: Apr 19 01:00:48 2025 GMT Not After : Jul 18 01:00:48 2025 GMT Subject: CN=ff0858d6-3d8b-427f-8ba0-84304fe1edaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:25:f1:c8:a7:16:ba:0f:36:11:98:97:6c:30: 03:61:b7:9f:02:70:13:44:bb:07:db:65:51:4f:b7: 63:8c:10:2e:74:31:73:99:8f:f4:70:e8:ea:ea:be: 44:e3:be:67:18:cf:9f:66:15:4a:f5:a6:b1:eb:03: c6:c3:4b:8c:21:a8:e3:49:80:40:8e:dc:25:0f:d2: 67:a2:23:16:f8:65:d2:f0:9b:09:eb:0b:37:7d:41: 12:bc:2e:ba:07:2f:63:ad:eb:09:63:15:e3:6e:a9: 63:cb:b9:12:b4:dd:d3:f3:12:11:76:5a:2a:1e:a2: 3f:bb:ef:f7:97:19:4d:08:a3:33:eb:de:43:a2:45: 23:e2:67:9b:67:ba:ba:dd:be:cd:65:a2:8d:ce:23: 60:76:ef:ab:8c:03:21:20:7f:4a:2b:97:df:bd:26: 63:90:35:de:80:a7:61:70:a9:7e:ca:d5:de:33:ed: b4:89:92:6f:52:8d:67:d0:49:21:55:ef:62:fe:80: 7e:27:35:26:1d:be:84:a1:35:dc:1d:45:b3:b4:6e: 3c:ce:03:1c:1c:b8:b8:2a:c9:7d:84:33:e4:e9:a4: 23:ef:a2:e1:ff:bb:0a:ef:bb:72:12:bf:03:71:d3: 63:7d:fe:24:03:fc:68:69:31:a7:2d:cd:4b:e6:a8: c3:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:CE:A1:20:CB:BF:2C:88:30:0D:BC:6E:56:8A:60:63:A3:80:9A:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d/80ca88fd-748b-398c-994d-51d5dfc053ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d/8a57b69a-d683-4350-83d4-e449c0242b7d.crl X509v3 Authority Key Identifier: keyid:38:8D:06:A4:B8:D5:B5:2E:32:40:F9:04:97:CD:53:11:DC:85:6F:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d.cer sbgp-ipAddrBlock: critical IPv4: 172.111.16.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:70:a0:dd:e6:e8:30:da:25:d7:19:78:b7:b4:80:d6:b4:98: 50:b6:10:b2:59:95:74:29:55:f6:22:5b:39:3c:f6:9f:84:f7: 56:2e:b0:7d:e5:f8:4d:f0:a2:30:ec:23:7f:1c:6c:c5:0a:a3: a0:6b:8c:56:e8:20:42:2e:61:bf:44:31:92:de:3b:e9:7b:09: 97:12:fe:b9:50:f3:26:b0:72:8d:d1:2a:e5:cb:0c:3a:5b:4e: db:c2:eb:a7:35:33:c2:4c:f9:52:93:54:48:6e:fb:b2:1f:32: c9:03:f7:ec:35:8f:44:61:ae:16:60:ba:18:48:51:41:a7:d9: 68:6f:fb:1b:5b:2c:01:bd:c9:08:2b:13:26:b3:77:71:06:7a: cd:f0:22:1a:19:01:60:b2:a6:80:03:37:d7:30:98:e3:65:3e: 7b:9d:90:a2:b9:f3:4d:21:d7:ee:13:7c:3f:33:bd:6a:96:f9: ec:11:73:0e:fa:61:98:b7:63:eb:44:9c:f8:e2:38:55:bd:b3: 78:96:03:b6:33:d5:b6:df:91:4f:62:14:a1:b2:ff:52:82:41: 7b:0b:b5:1a:e5:20:89:e5:48:0d:84:5d:f5:a5:d8:a2:8d:e8: 04:bd:b3:fa:b4:36:3d:38:c5:d2:5d:2c:4a:a8:0c:ce:b9:c2: c7:61:2a:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmSlKLEgjZl4MvbEEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1N2I2OWEtZDY4My00MzUwLTgzZDQtZTQ0OWMwMjQy YjdkMB4XDTI1MDQxOTAxMDA0OFoXDTI1MDcxODAxMDA0OFowLzEtMCsGA1UEAxMk ZmYwODU4ZDYtM2Q4Yi00MjdmLThiYTAtODQzMDRmZTFlZGFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCXxyKcWug82EZiXbDADYbefAnATRLsH22VR T7djjBAudDFzmY/0cOjq6r5E475nGM+fZhVK9aax6wPGw0uMIajjSYBAjtwlD9Jn oiMW+GXS8JsJ6ws3fUESvC66By9jresJYxXjbqljy7kStN3T8xIRdloqHqI/u+/3 lxlNCKMz695DokUj4mebZ7q63b7NZaKNziNgdu+rjAMhIH9KK5ffvSZjkDXegKdh cKl+ytXeM+20iZJvUo1n0EkhVe9i/oB+JzUmHb6EoTXcHUWztG48zgMcHLi4Ksl9 hDPk6aQj76Lh/7sK77tyEr8DcdNjff4kA/xoaTGnLc1L5qjDFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLbOoSDLvyyIMA28blaKYGOjgJoaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84YTU3 YjY5YS1kNjgzLTQzNTAtODNkNC1lNDQ5YzAyNDJiN2QvODBjYTg4ZmQtNzQ4Yi0z OThjLTk5NGQtNTFkNWRmYzA1M2JhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOGE1N2I2OWEtZDY4My00MzUwLTgz ZDQtZTQ0OWMwMjQyYjdkLzhhNTdiNjlhLWQ2ODMtNDM1MC04M2Q0LWU0NDljMDI0 MmI3ZC5jcmwwHwYDVR0jBBgwFoAUOI0GpLjVtS4yQPkEl81TEdyFbwkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84YTU3YjY5YS1kNjgzLTQzNTAtODNkNC1lNDQ5 YzAyNDJiN2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrG8QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB1woN3m6DDaJdcZeLe0gNa0mFC2ELJZlXQpVfYiWzk89p+E91YusH3l +E3wojDsI38cbMUKo6BrjFboIEIuYb9EMZLeO+l7CZcS/rlQ8yawco3RKuXLDDpb TtvC66c1M8JM+VKTVEhu+7IfMskD9+w1j0RhrhZguhhIUUGn2Whv+xtbLAG9yQgr Eyazd3EGes3wIhoZAWCypoADN9cwmONlPnudkKK5800h1+4TfD8zvWqW+ewRcw76 YZi3Y+tEnPjiOFW9s3iWA7Yz1bbfkU9iFKGy/1KCQXsLtRrlIInlSA2EXfWl2KKN 6AS9s/q0Nj04xdJdLEqoDM65wsdhKk4= -----END CERTIFICATE-----Generated at Mon Apr 28 13:52:26 2025 by rpki-client