$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/f562549d-9cd5-3fb4-9413-8758db119327.roa File: f562549d-9cd5-3fb4-9413-8758db119327.roa (raw, json) Hash identifier: Q3vGSSKpPHNNNTwBMMysP75ZB4guYWwJE5wBE93Y+kI= Subject key identifier: B6:5C:40:00:BF:18:7A:7D:AC:EA:68:24:7B:06:1A:F7:38:F9:6D:E1 Certificate issuer: /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d Certificate serial: 010D0C9F43285849A4BB6955F9FEAC793ECE9BC0 Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/f562549d-9cd5-3fb4-9413-8758db119327.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 36492 IP address blocks: 172.102.12.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:69:55:f9:fe:ac:79:3e:ce:9b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=d5cc65a3-a8fc-490d-9fe2-05c471cb7f70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:6b:f9:8f:ff:80:43:97:16:e3:18:55:b9:dd: af:b3:41:f8:48:29:48:f9:36:c4:b4:cd:fb:46:31: e5:49:06:6a:57:62:7d:00:49:f4:c9:72:81:b9:cd: cd:bc:25:0b:94:94:ed:34:42:05:15:3c:59:c6:cc: 9a:ad:b4:7a:4a:35:00:99:6e:d9:b5:56:8c:3e:29: a8:9a:e4:c4:e8:34:72:45:41:a9:13:76:d5:ab:b8: 3a:cb:76:61:67:c1:37:da:76:af:f2:ac:57:9f:58: ec:d9:54:d9:6a:81:3d:01:c5:09:f5:16:96:63:bb: 3e:c7:c6:0a:cb:5e:10:ca:e6:67:41:04:8a:b2:3f: 1e:c9:77:b5:27:16:43:cf:c4:b8:df:f3:a0:19:4e: ee:88:29:75:cb:bb:6d:75:e6:af:d0:8f:4a:37:12: bb:da:ee:31:ce:29:fb:9e:30:ee:d3:c3:dd:b1:c4: 47:bb:89:d1:bd:c0:4c:ac:2c:11:0b:62:56:8e:2b: 8f:38:c9:8f:d4:31:03:d1:10:a1:60:84:90:eb:20: ab:8e:ea:c5:11:18:89:a1:84:fe:61:5e:a4:fa:37: 5f:da:27:ff:ce:61:90:44:82:82:78:94:49:d7:44: 50:fa:08:30:12:dd:4a:33:05:4d:d2:b1:3e:03:f3: 1f:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:5C:40:00:BF:18:7A:7D:AC:EA:68:24:7B:06:1A:F7:38:F9:6D:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/f562549d-9cd5-3fb4-9413-8758db119327.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl X509v3 Authority Key Identifier: keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer sbgp-ipAddrBlock: critical IPv4: 172.102.12.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:c8:ff:da:c1:33:a0:01:fc:0d:45:fb:e9:2c:2f:9b:33:f2: ac:01:9e:75:31:93:cd:82:76:f9:c8:52:e3:28:0f:75:45:b9: 53:21:b1:70:39:6e:02:58:21:f3:c4:6c:5a:70:4c:1c:db:67: d1:c1:f4:5c:c0:ff:41:a7:0a:f9:1e:b6:ca:59:f1:fb:a4:41: 52:0c:51:a8:b8:eb:9c:98:40:1e:b0:1c:5c:e6:ab:2b:2a:06: f6:7b:cc:b7:db:60:43:95:6b:a3:0f:72:df:ff:7c:71:b8:e0: 91:e1:52:b9:62:69:96:9c:c8:ed:e1:fe:7a:92:43:08:c7:a9: 4a:52:12:fb:3b:86:ea:cc:0d:c4:11:51:bf:6c:a6:52:dc:90: 9a:97:8b:f7:14:bc:4e:2e:4c:d9:5c:85:42:e5:45:4c:a4:7b: 6a:cb:30:3a:5b:cf:a5:00:c3:c6:c3:17:d7:b0:e3:91:4c:64: 82:1a:1b:9a:22:ce:67:94:e9:b2:26:00:ce:0d:81:ee:28:c5: ce:1e:03:ce:3d:ef:bf:47:48:60:7f:db:3b:f4:f6:11:59:67: 54:0a:55:db:b1:a1:cd:98:df:8c:dc:88:f5:88:cb:3f:99:fb: ed:ec:4f:8f:e9:0c:5a:18:84:cd:fc:5f:34:93:4d:e4:54:b7: 71:c2:fe:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku2lV+f6seT7Om8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWY0M2U1MmYtOTBkZC00YmFmLThiMzYtNzk1Y2FiZTY5 ZTJkMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZDVjYzY1YTMtYThmYy00OTBkLTlmZTItMDVjNDcxY2I3ZjcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmv5j/+AQ5cW4xhVud2vs0H4SClI+TbEtM37 RjHlSQZqV2J9AEn0yXKBuc3NvCULlJTtNEIFFTxZxsyarbR6SjUAmW7ZtVaMPimo muTE6DRyRUGpE3bVq7g6y3ZhZ8E32nav8qxXn1js2VTZaoE9AcUJ9RaWY7s+x8YK y14QyuZnQQSKsj8eyXe1JxZDz8S43/OgGU7uiCl1y7ttdeav0I9KNxK72u4xzin7 njDu08PdscRHu4nRvcBMrCwRC2JWjiuPOMmP1DED0RChYISQ6yCrjurFERiJoYT+ YV6k+jdf2if/zmGQRIKCeJRJ10RQ+ggwEt1KMwVN0rE+A/MfWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLZcQAC/GHp9rOpoJHsGGvc4+W3hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lZjQz ZTUyZi05MGRkLTRiYWYtOGIzNi03OTVjYWJlNjllMmQvZjU2MjU0OWQtOWNkNS0z ZmI0LTk0MTMtODc1OGRiMTE5MzI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZWY0M2U1MmYtOTBkZC00YmFmLThi MzYtNzk1Y2FiZTY5ZTJkL2VmNDNlNTJmLTkwZGQtNGJhZi04YjM2LTc5NWNhYmU2 OWUyZC5jcmwwHwYDVR0jBBgwFoAU6iNeR234DQxqzLkCn+8rY968DzEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9lZjQzZTUyZi05MGRkLTRiYWYtOGIzNi03OTVj YWJlNjllMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrGYMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIrI/9rBM6AB/A1F++ksL5sz8qwBnnUxk82CdvnIUuMoD3VFuVMhsXA5 bgJYIfPEbFpwTBzbZ9HB9FzA/0GnCvketspZ8fukQVIMUai465yYQB6wHFzmqysq BvZ7zLfbYEOVa6MPct//fHG44JHhUrliaZacyO3h/nqSQwjHqUpSEvs7hurMDcQR Ub9splLckJqXi/cUvE4uTNlchULlRUyke2rLMDpbz6UAw8bDF9ew45FMZIIaG5oi zmeU6bImAM4Nge4oxc4eA849779HSGB/2zv09hFZZ1QKVduxoc2Y34zciPWIyz+Z ++3sT4/pDFoYhM38XzSTTeRUt3HC/qc= -----END CERTIFICATE-----Generated at Sun Apr 27 00:16:33 2025 by rpki-client