$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/22c74e9d-2e69-37d5-834b-0f33abaf46e8.roa File: 22c74e9d-2e69-37d5-834b-0f33abaf46e8.roa (raw, json) Hash identifier: gcXrERF1aAed1jFs8Pl/eSjKfMstA9oUGaK0bOeLVXg= Subject key identifier: 80:C3:F2:5D:3B:74:67:E4:54:E9:2E:D1:2A:5F:3E:BE:56:37:61:EB Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F432858499AF47BABD979345B3FA4B740 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/22c74e9d-2e69-37d5-834b-0f33abaf46e8.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 852 IP address blocks: 209.162.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:7b:ab:d9:79:34:5b:3f:a4:b7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=fecf9c86-dd7f-455f-a716-39ddc1e2d659 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:fb:ef:de:5d:81:44:f8:56:68:93:27:bf:67: 24:57:87:cf:cd:a3:f2:fb:1c:47:ad:39:aa:e6:d8: 35:7d:02:70:02:dd:b7:13:2a:3e:c6:68:10:4a:7a: d2:df:52:2b:01:16:f8:40:cb:5f:7c:7b:cb:75:4f: 95:bd:79:a9:08:5a:9d:f8:3a:6b:4b:55:eb:93:4c: 7d:41:78:9d:53:74:17:8b:a0:0a:0b:cc:5b:89:e5: bd:39:ae:56:82:aa:6a:f0:b0:34:37:90:85:f5:11: 4f:73:cf:1e:fb:9d:82:89:ca:b3:a4:c5:b1:e2:2c: 57:70:6e:ae:ed:d5:5e:17:12:be:68:39:9c:92:21: 2e:d1:07:7c:15:65:02:a7:01:31:f4:97:9d:fe:7f: 4b:20:46:db:34:b5:ed:68:d2:48:69:4d:28:92:36: 73:bd:2a:7e:04:19:68:27:ae:04:2b:11:2d:f8:a9: c8:40:8b:00:59:86:7a:c3:78:ac:dd:62:df:e5:c2: 7f:3a:4d:a3:a2:cf:f5:8a:c4:dc:d4:cb:8a:35:8e: 37:2c:e5:f1:e8:80:cb:c1:66:02:d8:d3:27:66:44: 1f:6d:92:e2:ef:e4:dc:99:ca:89:a4:51:e9:12:f7: 00:e7:d5:a9:09:82:e3:46:6d:51:4b:20:e5:2d:b5: 9c:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:C3:F2:5D:3B:74:67:E4:54:E9:2E:D1:2A:5F:3E:BE:56:37:61:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/22c74e9d-2e69-37d5-834b-0f33abaf46e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.162.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:2c:1b:cc:25:7d:b7:ac:f8:36:64:c6:96:f7:ca:f6:f3:ac: 13:0c:05:8f:37:1f:eb:89:eb:13:00:d4:70:f2:c0:ba:31:39: 6a:c5:ce:d9:53:e7:e2:5e:19:16:b5:28:17:ad:86:6a:3e:85: 33:3e:12:de:c5:34:94:0d:7c:57:0c:94:ea:96:a3:00:f4:60: 5d:96:21:1a:da:61:f3:fa:bb:b5:30:76:16:aa:ba:e1:30:d4: 41:ce:fc:1a:eb:b5:36:2b:d9:65:8c:da:62:86:3e:63:a9:99: 8f:b2:48:a0:e6:d3:5f:dd:69:21:d3:78:e4:1a:64:42:18:e4: 6f:7c:fb:d5:36:11:0c:47:6b:c1:76:33:ab:dd:73:08:c8:d2: b5:6e:ef:46:36:85:1f:a3:3d:6b:7a:9a:cc:f0:2b:3e:1f:31: 98:37:2f:83:c8:38:4b:33:53:e7:e8:cf:3d:8c:3e:c2:b9:d9: 72:c7:0d:c4:50:45:66:01:71:83:86:ac:69:c6:f4:00:6f:f0: 34:68:04:61:43:5f:65:e3:e9:e0:d7:b3:b7:81:ec:49:aa:97: d9:3a:ec:5d:23:61:0e:e2:de:8d:e9:11:18:df:32:8c:67:2b: f5:2c:ed:81:8c:78:cf:85:95:56:84:8b:29:40:83:7b:00:ae: f6:5e:31:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEma9Hur2Xk0Wz+kt0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk ZmVjZjljODYtZGQ3Zi00NTVmLWE3MTYtMzlkZGMxZTJkNjU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/vv3l2BRPhWaJMnv2ckV4fPzaPy+xxHrTmq 5tg1fQJwAt23Eyo+xmgQSnrS31IrARb4QMtffHvLdU+VvXmpCFqd+DprS1Xrk0x9 QXidU3QXi6AKC8xbieW9Oa5Wgqpq8LA0N5CF9RFPc88e+52CicqzpMWx4ixXcG6u 7dVeFxK+aDmckiEu0Qd8FWUCpwEx9Jed/n9LIEbbNLXtaNJIaU0okjZzvSp+BBlo J64EKxEt+KnIQIsAWYZ6w3is3WLf5cJ/Ok2jos/1isTc1MuKNY43LOXx6IDLwWYC 2NMnZkQfbZLi7+TcmcqJpFHpEvcA59WpCYLjRm1RSyDlLbWcdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIDD8l07dGfkVOku0SpfPr5WN2HrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMjJjNzRlOWQtMmU2OS0z N2Q1LTgzNGItMGYzM2FiYWY0NmU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0aKgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABgsG8wlfbes+DZkxpb3yvbzrBMMBY83H+uJ6xMA1HDywLoxOWrFztlT 5+JeGRa1KBethmo+hTM+Et7FNJQNfFcMlOqWowD0YF2WIRraYfP6u7UwdhaquuEw 1EHO/BrrtTYr2WWM2mKGPmOpmY+ySKDm01/daSHTeOQaZEIY5G98+9U2EQxHa8F2 M6vdcwjI0rVu70Y2hR+jPWt6mszwKz4fMZg3L4PIOEszU+fozz2MPsK52XLHDcRQ RWYBcYOGrGnG9ABv8DRoBGFDX2Xj6eDXs7eB7Emql9k67F0jYQ7i3o3pERjfMoxn K/Us7YGMeM+FlVaEiylAg3sArvZeMck= -----END CERTIFICATE-----Generated at Sun Apr 27 01:01:31 2025 by rpki-client