$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86/70876b56-c403-3345-8194-f6fcf917a625.roa File: 70876b56-c403-3345-8194-f6fcf917a625.roa (raw, json) Hash identifier: fHrDHKjqR/DhfLr6fkuN+0N1fSsXngBAA1knwgz0G0A= Subject key identifier: 85:56:0A:61:B1:71:1A:C8:5F:85:EB:77:E2:FE:6F:3F:31:70:D0:A4 Certificate issuer: /CN=94543699-4d50-4a37-8000-038c38671a86 Certificate serial: 010D0C9F432858491246A5EF96A2ADDEDDD96D00 Authority key identifier: 03:F9:93:D0:3A:C4:C9:F5:95:7D:21:84:67:FF:6C:5B:D1:56:81:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86/70876b56-c403-3345-8194-f6fcf917a625.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 22115 IP address blocks: 172.111.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86/94543699-4d50-4a37-8000-038c38671a86.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86/94543699-4d50-4a37-8000-038c38671a86.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:a5:ef:96:a2:ad:de:dd:d9:6d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94543699-4d50-4a37-8000-038c38671a86 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=31ed2b39-2002-47ce-97e3-94ec21c5d81c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ae:f6:69:b4:d6:03:59:6e:f1:69:d4:72:fc: 8a:4a:e0:f8:ce:de:44:a7:b3:e3:d7:d5:70:30:2e: e7:f2:04:53:8c:ed:52:8e:79:e8:46:35:34:75:3d: fb:27:0d:e1:98:da:00:17:b7:42:0f:d9:7c:7d:6b: 74:91:32:96:3e:bf:ec:88:68:7c:e0:b5:e4:05:16: 36:c7:87:cc:43:12:a8:a3:49:64:ab:e7:eb:e8:57: 7c:a2:56:f6:01:3b:ca:00:b5:29:85:86:e7:cf:2f: c9:7e:a3:9a:ba:8d:0e:70:78:16:4b:d8:91:50:2a: da:eb:57:63:61:0f:15:a2:ef:6b:84:5b:ca:68:71: ee:a0:01:cc:e7:88:36:21:54:10:05:dc:69:b9:a6: cf:5e:f2:7e:2e:03:59:77:ee:95:e6:9a:55:46:a5: 6e:da:c5:ff:78:31:0f:20:aa:4e:e6:08:f1:82:c0: f9:8d:ba:5b:92:f1:2c:32:4f:14:de:3e:a0:70:60: d9:7e:12:5f:9c:fb:2f:f6:87:04:54:9a:57:e2:da: d6:8c:d2:e7:f8:a3:30:e7:ff:31:a6:4a:74:43:87: 4b:a1:9d:de:0b:a6:32:34:dc:48:0f:42:3b:ba:1f: 4b:70:8c:a8:9c:2b:d8:24:98:df:27:e4:7c:3b:f3: cd:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:56:0A:61:B1:71:1A:C8:5F:85:EB:77:E2:FE:6F:3F:31:70:D0:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86/70876b56-c403-3345-8194-f6fcf917a625.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86/94543699-4d50-4a37-8000-038c38671a86.crl X509v3 Authority Key Identifier: keyid:03:F9:93:D0:3A:C4:C9:F5:95:7D:21:84:67:FF:6C:5B:D1:56:81:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86.cer sbgp-ipAddrBlock: critical IPv4: 172.111.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:f0:6e:4b:3a:fa:65:c7:08:17:43:b3:44:26:8a:61:11:d1: 5c:15:e9:50:7c:0e:1b:d3:9b:5c:a4:c1:7c:40:dc:11:3d:e7: cc:3e:f2:7f:03:c1:ab:3c:b9:a8:62:1b:f5:c5:dc:42:02:d2: 9b:a2:5b:f1:d8:af:3d:5f:e2:ff:ef:1b:ba:14:34:59:01:b6: 7d:e4:65:88:b6:eb:2b:2c:73:16:9a:7c:13:cf:71:d4:1d:0b: 4c:bc:b8:dc:3f:12:48:eb:df:fe:06:e5:06:69:0b:b8:42:26: f1:1e:bc:6b:2c:5d:7a:2d:21:b7:3e:85:18:e9:56:e4:03:20: ba:b9:88:58:e9:64:4a:8a:54:f1:46:98:a8:e1:57:83:77:06: 84:53:f2:0a:06:47:6c:8e:08:fe:4a:a7:0f:fa:f3:23:d3:fc: 3d:9b:4e:ea:e1:89:19:7f:4a:7a:27:dc:68:d7:76:3c:ee:d3: 24:94:1d:a3:d5:20:04:23:cc:20:54:7c:ba:3c:df:52:99:fd: 71:a9:65:ee:81:9e:bb:15:a2:5e:33:2e:b7:3b:5b:26:1c:f3: 31:bc:54:24:a8:f7:38:45:f9:5c:0a:3c:e9:8c:0f:08:75:bd: 9d:67:31:b7:9f:18:4e:7d:9d:97:ae:80:c6:93:8f:4d:58:e1: 20:b7:4c:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRqXvlqKt3t3ZbQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTQ1NDM2OTktNGQ1MC00YTM3LTgwMDAtMDM4YzM4Njcx YTg2MB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk MzFlZDJiMzktMjAwMi00N2NlLTk3ZTMtOTRlYzIxYzVkODFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwK72abTWA1lu8WnUcvyKSuD4zt5Ep7Pj19Vw MC7n8gRTjO1SjnnoRjU0dT37Jw3hmNoAF7dCD9l8fWt0kTKWPr/siGh84LXkBRY2 x4fMQxKoo0lkq+fr6Fd8olb2ATvKALUphYbnzy/JfqOauo0OcHgWS9iRUCra61dj YQ8Vou9rhFvKaHHuoAHM54g2IVQQBdxpuabPXvJ+LgNZd+6V5ppVRqVu2sX/eDEP IKpO5gjxgsD5jbpbkvEsMk8U3j6gcGDZfhJfnPsv9ocEVJpX4trWjNLn+KMw5/8x pkp0Q4dLoZ3eC6YyNNxID0I7uh9LcIyonCvYJJjfJ+R8O/PN3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIVWCmGxcRrIX4Xrd+L+bz8xcNCkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85NDU0 MzY5OS00ZDUwLTRhMzctODAwMC0wMzhjMzg2NzFhODYvNzA4NzZiNTYtYzQwMy0z MzQ1LTgxOTQtZjZmY2Y5MTdhNjI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOTQ1NDM2OTktNGQ1MC00YTM3LTgw MDAtMDM4YzM4NjcxYTg2Lzk0NTQzNjk5LTRkNTAtNGEzNy04MDAwLTAzOGMzODY3 MWE4Ni5jcmwwHwYDVR0jBBgwFoAUA/mT0DrEyfWVfSGEZ/9sW9FWgeAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85NDU0MzY5OS00ZDUwLTRhMzctODAwMC0wMzhj Mzg2NzFhODYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrG8UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIjwbks6+mXHCBdDs0QmimER0VwV6VB8DhvTm1ykwXxA3BE958w+8n8D was8uahiG/XF3EIC0puiW/HYrz1f4v/vG7oUNFkBtn3kZYi26ysscxaafBPPcdQd C0y8uNw/Ekjr3/4G5QZpC7hCJvEevGssXXotIbc+hRjpVuQDILq5iFjpZEqKVPFG mKjhV4N3BoRT8goGR2yOCP5Kpw/68yPT/D2bTurhiRl/Snon3GjXdjzu0ySUHaPV IAQjzCBUfLo831KZ/XGpZe6BnrsVol4zLrc7WyYc8zG8VCSo9zhF+VwKPOmMDwh1 vZ1nMbefGE59nZeugMaTj01Y4SC3TLo= -----END CERTIFICATE-----Generated at Tue Apr 29 19:57:09 2025 by rpki-client