$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/755a8dc3-3cd7-3e8c-82da-5405f1993ac1.roa File: 755a8dc3-3cd7-3e8c-82da-5405f1993ac1.roa (raw, json) Hash identifier: Ap+Wc/ofzu456pNaXQ//Kbn5uV2mJg8QkCgcKDempU8= Subject key identifier: 25:A0:2B:EC:71:EC:35:7B:12:C7:B9:75:B0:5C:18:11:F0:63:A0:31 Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F43285848E006896F991F91923D499060 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/755a8dc3-3cd7-3e8c-82da-5405f1993ac1.roa Signing time: Fri 14 Feb 2025 02:00:39 +0000 ROA not before: Fri 14 Feb 2025 02:00:39 +0000 ROA not after: Thu 15 May 2025 01:00:39 +0000 asID: 20115 IP address blocks: 172.221.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e0:06:89:6f:99:1f:91:92:3d:49:90:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Feb 14 02:00:39 2025 GMT Not After : May 15 01:00:39 2025 GMT Subject: CN=df73cec2-b366-48d0-9549-799d3740e273 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:15:ba:6d:5b:06:ae:df:78:ae:ce:95:c7:a1: 84:12:05:b1:e0:90:dc:0e:c5:69:87:8c:5f:dc:9a: 83:18:ef:69:c9:02:4f:f1:5b:a4:24:f3:60:1c:de: 9d:5e:16:4c:4f:85:f3:c2:d5:28:ab:34:3f:3f:e6: 4c:8a:1a:e1:1d:73:1b:62:31:da:14:91:c0:5b:0b: 12:c1:79:2b:26:67:af:d9:b6:b2:1e:b9:2d:7e:66: dd:b2:23:03:ec:a5:73:ba:f8:f7:08:8a:3b:ff:2b: bf:2e:49:8b:20:c7:62:ab:32:3b:21:13:33:b8:24: bc:09:b7:e9:b6:af:e1:01:30:3b:d3:8f:e5:57:05: 97:7a:42:a8:b0:f7:99:be:ee:d3:c2:77:07:69:34: a0:6b:96:e6:31:b0:4a:15:3d:61:4c:b1:70:58:27: 02:cb:6d:f3:fe:ac:f0:77:dc:92:3e:36:12:9c:bb: 7f:12:6f:81:a1:fe:11:97:39:10:ed:11:aa:40:f2: f1:33:1c:af:c8:4e:96:2a:26:fc:a2:04:69:0e:8d: c3:40:65:c9:73:8f:90:4b:fe:76:8d:56:6b:8d:4b: b2:6b:8a:7d:df:a3:89:59:01:96:48:df:ab:13:23: b0:f4:c2:d4:c8:04:b8:75:96:0b:64:11:e2:1b:c7: d3:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:A0:2B:EC:71:EC:35:7B:12:C7:B9:75:B0:5C:18:11:F0:63:A0:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/755a8dc3-3cd7-3e8c-82da-5405f1993ac1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv4: 172.221.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:da:80:a6:f3:0f:82:a2:04:62:61:ca:34:5e:41:63:49:41: 51:2e:fb:c2:8f:e0:df:4a:db:d7:17:db:b1:a8:f9:e2:a7:de: 38:be:f6:0c:64:ed:e5:81:14:6e:fa:85:a5:67:fd:76:6e:86: 90:15:ed:32:01:b8:b9:d8:84:2a:60:3a:6b:23:0b:23:67:e1: d0:10:88:69:f3:7f:b0:45:59:e1:0a:ff:98:21:9f:c6:9c:98: f4:a5:87:19:ab:46:57:51:69:dd:59:8d:3e:19:ae:53:08:b2: 58:8c:d2:ad:ba:77:e4:d7:17:bc:c8:95:57:e2:f1:40:61:09: 29:ff:a2:e4:6a:75:2a:98:e8:bf:08:71:83:bb:70:03:86:03: e4:47:dc:88:33:f5:18:c3:6e:62:2a:9d:d3:9e:e7:11:2a:97: 0e:79:db:06:73:aa:40:af:26:e2:c0:37:a2:4c:85:ed:c5:b9: 4a:9b:4e:17:b0:d5:c1:0f:c7:60:3e:60:dd:83:71:b1:20:7c: 6d:f7:7d:a3:32:e6:a8:98:26:6e:0b:63:64:ae:38:9c:85:a8: 41:13:98:9e:e2:da:0a:fc:eb:9d:b5:c9:e5:7a:da:b9:da:8e: cc:33:6a:44:fb:5d:31:3b:9f:0d:dc:59:3b:98:58:cd:0e:92: 00:00:39:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjgBolvmR+Rkj1JkGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI1MDIxNDAyMDAzOVoXDTI1MDUxNTAxMDAzOVowLzEtMCsGA1UEAxMk ZGY3M2NlYzItYjM2Ni00OGQwLTk1NDktNzk5ZDM3NDBlMjczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBW6bVsGrt94rs6Vx6GEEgWx4JDcDsVph4xf 3JqDGO9pyQJP8VukJPNgHN6dXhZMT4XzwtUoqzQ/P+ZMihrhHXMbYjHaFJHAWwsS wXkrJmev2bayHrktfmbdsiMD7KVzuvj3CIo7/yu/LkmLIMdiqzI7IRMzuCS8Cbfp tq/hATA704/lVwWXekKosPeZvu7TwncHaTSga5bmMbBKFT1hTLFwWCcCy23z/qzw d9ySPjYSnLt/Em+Bof4RlzkQ7RGqQPLxMxyvyE6WKib8ogRpDo3DQGXJc4+QS/52 jVZrjUuya4p936OJWQGWSN+rEyOw9MLUyAS4dZYLZBHiG8fTqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCWgK+xx7DV7Ese5dbBcGBHwY6AxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvNzU1YThkYzMtM2NkNy0z ZThjLTgyZGEtNTQwNWYxOTkzYWMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGrN0AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF/agKbzD4KiBGJhyjReQWNJQVEu+8KP4N9K29cX27Go+eKn3ji+9gxk 7eWBFG76haVn/XZuhpAV7TIBuLnYhCpgOmsjCyNn4dAQiGnzf7BFWeEK/5ghn8ac mPSlhxmrRldRad1ZjT4ZrlMIsliM0q26d+TXF7zIlVfi8UBhCSn/ouRqdSqY6L8I cYO7cAOGA+RH3Igz9RjDbmIqndOe5xEqlw552wZzqkCvJuLAN6JMhe3FuUqbThew 1cEPx2A+YN2DcbEgfG33faMy5qiYJm4LY2SuOJyFqEETmJ7i2gr86521yeV62rna jswzakT7XTE7nw3cWTuYWM0OkgAAOZA= -----END CERTIFICATE-----Generated at Tue Apr 29 12:48:48 2025 by rpki-client