$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8/ff3090a6-0365-3319-a5db-b97f2065e36d.roa File: ff3090a6-0365-3319-a5db-b97f2065e36d.roa (raw, json) Hash identifier: zK7tFHlcz5kBjZx5Ryy0USujGUp91YgQGPl1Ws2Ycm8= Subject key identifier: 1D:EF:12:07:71:9B:AA:9D:98:5A:16:F6:2E:2F:FB:58:F3:47:8E:9F Certificate issuer: /CN=5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8 Certificate serial: 010D0C9F43285849A089CD714D633E9C39D41680 Authority key identifier: 92:9F:B9:15:00:7A:DA:95:56:D3:15:81:73:8D:42:02:1C:CA:3A:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8/ff3090a6-0365-3319-a5db-b97f2065e36d.roa Signing time: Thu 24 Apr 2025 01:00:47 +0000 ROA not before: Thu 24 Apr 2025 01:00:47 +0000 ROA not after: Wed 23 Jul 2025 01:00:47 +0000 asID: 26677 IP address blocks: 172.99.134.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 May 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a0:89:cd:71:4d:63:3e:9c:39:d4:16:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8 Validity Not Before: Apr 24 01:00:47 2025 GMT Not After : Jul 23 01:00:47 2025 GMT Subject: CN=4dacdc01-eaa2-4edf-853e-e61f90730226 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:fa:a2:37:6e:30:7b:1d:65:42:f2:b3:f6:74: 30:4a:b5:73:77:ef:44:7e:09:35:ec:fa:56:0f:ad: c8:03:f9:a1:29:a7:58:7b:21:28:02:a7:a9:83:cc: d1:d7:05:e9:90:f8:64:d1:98:1a:e1:e6:61:a5:7e: 58:ee:40:7f:59:eb:00:54:81:69:fe:20:48:8a:f5: af:b6:3b:62:30:73:e5:10:8e:6c:82:b6:b4:25:23: fb:b0:93:e0:15:98:74:70:96:05:e2:83:fa:db:88: d7:2f:ae:e6:c5:37:12:f0:e4:d6:e3:bf:40:6b:a7: 20:be:e5:eb:8f:3d:41:d3:1c:9f:33:7d:fe:0c:9b: 09:af:9a:74:ad:f9:0f:2c:40:c8:41:89:96:43:31: 95:ef:23:82:70:be:09:1f:c0:ae:70:3b:19:a9:3e: 55:7d:af:0c:f6:ee:3b:7b:6f:a5:22:04:94:d5:cb: b4:b5:cf:12:0f:33:03:45:ca:54:3b:59:1e:a3:21: 82:5c:b3:c8:a2:07:6b:85:36:4d:18:9c:92:51:89: f2:a6:9e:60:36:36:37:ee:f9:ad:29:f1:33:c2:a0: e8:9b:2f:2a:71:1a:05:a0:7f:6a:ce:dc:60:28:c4: d0:2f:5f:09:b4:28:c2:29:83:9a:45:bd:16:92:8e: 3d:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:EF:12:07:71:9B:AA:9D:98:5A:16:F6:2E:2F:FB:58:F3:47:8E:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8/ff3090a6-0365-3319-a5db-b97f2065e36d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8.crl X509v3 Authority Key Identifier: keyid:92:9F:B9:15:00:7A:DA:95:56:D3:15:81:73:8D:42:02:1C:CA:3A:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8.cer sbgp-ipAddrBlock: critical IPv4: 172.99.134.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:b9:09:7f:a8:d6:49:28:6a:9a:fe:47:65:76:39:ff:de:65: 81:3c:fa:b1:0c:37:98:cb:47:99:b5:99:c6:b6:83:24:01:ed: 7d:e2:de:be:68:5e:50:5c:c2:b7:6f:ea:c9:f5:a7:b3:c2:d5: bb:18:87:5b:54:17:27:51:27:e8:bd:21:b9:54:cc:37:c4:7b: d2:a8:db:2f:44:fd:f3:26:67:16:3f:f0:0a:f3:5b:5f:24:87: 1c:c6:79:66:d3:d1:6e:96:66:b6:50:f6:db:e8:85:52:31:98: 02:b6:2b:d7:bb:6d:38:4a:47:df:96:d3:98:6b:fc:de:ff:97: 5c:46:7e:bb:0d:c7:2f:dd:21:ea:08:e4:c4:4b:cc:5d:16:d3: 38:f8:c7:f4:18:4f:c3:da:0a:c0:5b:cc:97:07:39:b9:fd:f2: 73:5e:49:65:82:55:5b:d4:20:1e:94:e1:d9:22:53:9b:54:82: 15:26:08:67:e3:cb:5a:c0:85:94:96:a1:ba:63:77:be:3b:2a: d0:a2:a0:b9:49:fe:e1:09:db:6d:b8:fe:ce:d2:da:38:f9:65: 6b:4a:8a:13:a5:f0:12:1c:2a:93:5f:63:98:05:a2:5e:b7:f4: 75:61:b0:28:d2:85:9b:75:5e:85:09:0a:05:cf:37:6a:7d:0d: b1:bf:89:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmgic1xTWM+nDnUFoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWFkNmQ5YzItZDM4MC00ZjFmLThmNmMtZWJjMmU1MDNj NGE4MB4XDTI1MDQyNDAxMDA0N1oXDTI1MDcyMzAxMDA0N1owLzEtMCsGA1UEAxMk NGRhY2RjMDEtZWFhMi00ZWRmLTg1M2UtZTYxZjkwNzMwMjI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvqiN24wex1lQvKz9nQwSrVzd+9Efgk17PpW D63IA/mhKadYeyEoAqepg8zR1wXpkPhk0Zga4eZhpX5Y7kB/WesAVIFp/iBIivWv tjtiMHPlEI5sgra0JSP7sJPgFZh0cJYF4oP624jXL67mxTcS8OTW479Aa6cgvuXr jz1B0xyfM33+DJsJr5p0rfkPLEDIQYmWQzGV7yOCcL4JH8CucDsZqT5Vfa8M9u47 e2+lIgSU1cu0tc8SDzMDRcpUO1keoyGCXLPIogdrhTZNGJySUYnypp5gNjY37vmt KfEzwqDomy8qcRoFoH9qztxgKMTQL18JtCjCKYOaRb0Wko49eQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB3vEgdxm6qdmFoW9i4v+1jzR46fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81YWQ2 ZDljMi1kMzgwLTRmMWYtOGY2Yy1lYmMyZTUwM2M0YTgvZmYzMDkwYTYtMDM2NS0z MzE5LWE1ZGItYjk3ZjIwNjVlMzZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNWFkNmQ5YzItZDM4MC00ZjFmLThm NmMtZWJjMmU1MDNjNGE4LzVhZDZkOWMyLWQzODAtNGYxZi04ZjZjLWViYzJlNTAz YzRhOC5jcmwwHwYDVR0jBBgwFoAUkp+5FQB62pVW0xWBc41CAhzKOocwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC81YWQ2ZDljMi1kMzgwLTRmMWYtOGY2Yy1lYmMy ZTUwM2M0YTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrGOGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAES5CX+o1kkoapr+R2V2Of/eZYE8+rEMN5jLR5m1mca2gyQB7X3i3r5o XlBcwrdv6sn1p7PC1bsYh1tUFydRJ+i9IblUzDfEe9Ko2y9E/fMmZxY/8ArzW18k hxzGeWbT0W6WZrZQ9tvohVIxmAK2K9e7bThKR9+W05hr/N7/l1xGfrsNxy/dIeoI 5MRLzF0W0zj4x/QYT8PaCsBbzJcHObn98nNeSWWCVVvUIB6U4dkiU5tUghUmCGfj y1rAhZSWobpjd747KtCioLlJ/uEJ2224/s7S2jj5ZWtKihOl8BIcKpNfY5gFol63 9HVhsCjShZt1XoUJCgXPN2p9DbG/iV8= -----END CERTIFICATE-----Generated at Sun May 4 02:18:46 2025 by rpki-client