$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a5e0fed5-af06-3fda-9888-efbccbcbd4b7.roa File: a5e0fed5-af06-3fda-9888-efbccbcbd4b7.roa (raw, json) Hash identifier: MdeMjN4gRnpEmU0DGqpi57Jed6XvxcwEIOGHzSGEyWw= Subject key identifier: 20:BC:64:3F:7F:A6:9C:11:2D:0A:46:AF:37:26:05:FE:7F:93:AD:69 Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F43285848E006895FE47EB2F54F67EC00 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a5e0fed5-af06-3fda-9888-efbccbcbd4b7.roa Signing time: Fri 14 Feb 2025 02:00:39 +0000 ROA not before: Fri 14 Feb 2025 02:00:39 +0000 ROA not after: Thu 15 May 2025 01:00:39 +0000 asID: 20115 IP address blocks: 172.220.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e0:06:89:5f:e4:7e:b2:f5:4f:67:ec:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Feb 14 02:00:39 2025 GMT Not After : May 15 01:00:39 2025 GMT Subject: CN=e8c9509a-d860-45f5-bce9-27d785dd7849 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:92:a7:0e:a7:40:bb:dd:5f:15:62:f9:4a:d3: 75:c7:67:01:6a:86:f5:7f:15:fe:95:35:b4:5b:2f: 74:c7:72:f8:12:e1:2b:16:9f:dd:d6:ad:f6:ce:99: 41:59:c0:e5:d8:a8:85:e8:11:4b:73:16:e3:86:ef: 2e:73:01:80:43:22:66:f0:14:a4:c7:d6:af:c5:69: 58:be:40:a3:0d:ca:46:fe:05:8a:7a:a6:ef:6c:80: 48:61:03:1a:71:b8:2c:6c:a4:f0:db:ba:48:a2:60: 55:98:19:b9:36:41:e1:f3:72:ca:8c:35:de:8f:e2: d3:45:d4:ec:bb:84:e1:00:8b:b3:7b:fc:8a:d6:02: 65:a1:26:64:54:20:48:53:2f:00:a6:ac:e2:21:a0: 98:dd:f4:9f:b6:6c:67:47:6d:93:2f:db:1f:db:33: 2c:30:b6:fb:23:ae:22:f9:4c:c5:99:01:a9:c5:17: 71:64:5b:53:b9:da:2c:75:c7:1a:dd:ba:28:87:da: 0e:21:dc:e2:86:c8:44:78:8c:58:80:96:45:4e:06: 5d:ab:63:b4:5b:16:c5:41:27:cb:0a:bc:9c:97:a5: ee:58:88:44:82:a4:c0:02:2a:74:3e:b0:4c:e3:71: 9f:49:32:89:00:38:71:f7:82:12:37:5a:47:fe:88: 54:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:BC:64:3F:7F:A6:9C:11:2D:0A:46:AF:37:26:05:FE:7F:93:AD:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a5e0fed5-af06-3fda-9888-efbccbcbd4b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv4: 172.220.192.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:30:53:2b:7d:a1:33:3e:c1:d7:86:b9:6b:bd:e9:c1:40:fc: 46:8c:fd:e0:12:72:e9:c4:23:67:43:d3:aa:18:41:2a:c3:9e: d5:97:0f:bb:fd:b0:56:42:dc:4e:8e:aa:66:8b:ef:8a:04:16: b9:2e:0e:84:a4:d9:1a:57:51:67:a1:33:36:5a:5b:1d:29:08: c8:f1:26:8b:98:9a:68:7a:42:9b:e5:c9:a8:49:fd:5a:f3:86: b2:72:94:7e:61:ae:18:ae:b9:b8:7d:43:a2:b5:dd:3d:d8:09: 9a:e4:b5:31:86:6d:7b:c6:9c:e0:92:14:94:c0:e8:45:00:ad: 7b:cd:dc:bf:6e:69:f6:7b:f2:89:4d:60:eb:88:f0:0f:3c:8c: 61:be:26:27:c0:28:3b:22:dd:bd:14:49:c4:a5:09:20:e9:20: 5d:b8:93:89:e1:a6:df:bb:4d:9f:32:af:b6:e9:f1:32:42:80: 06:f6:be:0a:03:fe:7f:4f:5f:7c:3c:e7:8d:1c:10:d4:ab:2f: 4b:73:86:8c:1c:fe:97:23:6f:3c:29:0c:70:43:dd:dd:65:cf: fd:9c:0b:b0:4f:e1:2f:54:02:d8:e2:1a:cc:1e:38:32:fd:e3: 79:e6:3c:eb:57:c8:88:b1:82:43:17:c0:e6:1f:f5:d4:79:15: 00:61:d2:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjgBolf5H6y9U9n7AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI1MDIxNDAyMDAzOVoXDTI1MDUxNTAxMDAzOVowLzEtMCsGA1UEAxMk ZThjOTUwOWEtZDg2MC00NWY1LWJjZTktMjdkNzg1ZGQ3ODQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5KnDqdAu91fFWL5StN1x2cBaob1fxX+lTW0 Wy90x3L4EuErFp/d1q32zplBWcDl2KiF6BFLcxbjhu8ucwGAQyJm8BSkx9avxWlY vkCjDcpG/gWKeqbvbIBIYQMacbgsbKTw27pIomBVmBm5NkHh83LKjDXej+LTRdTs u4ThAIuze/yK1gJloSZkVCBIUy8ApqziIaCY3fSftmxnR22TL9sf2zMsMLb7I64i +UzFmQGpxRdxZFtTudosdcca3booh9oOIdzihshEeIxYgJZFTgZdq2O0WxbFQSfL Crycl6XuWIhEgqTAAip0PrBM43GfSTKJADhx94ISN1pH/ohULwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCC8ZD9/ppwRLQpGrzcmBf5/k61pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvYTVlMGZlZDUtYWYwNi0z ZmRhLTk4ODgtZWZiY2NiY2JkNGI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGrNzAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABkwUyt9oTM+wdeGuWu96cFA/EaM/eAScunEI2dD06oYQSrDntWXD7v9 sFZC3E6OqmaL74oEFrkuDoSk2RpXUWehMzZaWx0pCMjxJouYmmh6QpvlyahJ/Vrz hrJylH5hrhiuubh9Q6K13T3YCZrktTGGbXvGnOCSFJTA6EUArXvN3L9uafZ78olN YOuI8A88jGG+JifAKDsi3b0UScSlCSDpIF24k4nhpt+7TZ8yr7bp8TJCgAb2vgoD /n9PX3w8540cENSrL0tzhowc/pcjbzwpDHBD3d1lz/2cC7BP4S9UAtjiGsweODL9 43nmPOtXyIixgkMXwOYf9dR5FQBh0gA= -----END CERTIFICATE-----Generated at Tue Apr 29 14:31:51 2025 by rpki-client