$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aed01dad-662c-4720-aaa5-ea3d024bad07/896b5e20-222b-3000-8ee0-be86aac797ce.roa File: 896b5e20-222b-3000-8ee0-be86aac797ce.roa (raw, json) Hash identifier: y5carEogueRi2hoeI1z32kwrYc1peqp10A15U/a7qYE= Subject key identifier: 56:4A:10:C6:13:EE:F1:6A:BC:F4:5A:A0:A2:F1:DF:87:B3:37:72:E3 Certificate issuer: /CN=aed01dad-662c-4720-aaa5-ea3d024bad07 Certificate serial: 010D0C9F432858499DBF2A1F7C4818DDD679C4C0 Authority key identifier: AF:28:E5:F5:82:CC:E1:95:E3:06:39:54:5C:79:ED:C7:78:A5:C5:4E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aed01dad-662c-4720-aaa5-ea3d024bad07.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aed01dad-662c-4720-aaa5-ea3d024bad07/896b5e20-222b-3000-8ee0-be86aac797ce.roa Signing time: Wed 23 Apr 2025 01:00:46 +0000 ROA not before: Wed 23 Apr 2025 01:00:46 +0000 ROA not after: Tue 22 Jul 2025 01:00:46 +0000 asID: 400583 IP address blocks: 207.174.124.0/22 maxlen: 24 2602:fb86::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aed01dad-662c-4720-aaa5-ea3d024bad07/aed01dad-662c-4720-aaa5-ea3d024bad07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aed01dad-662c-4720-aaa5-ea3d024bad07/aed01dad-662c-4720-aaa5-ea3d024bad07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aed01dad-662c-4720-aaa5-ea3d024bad07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9d:bf:2a:1f:7c:48:18:dd:d6:79:c4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aed01dad-662c-4720-aaa5-ea3d024bad07 Validity Not Before: Apr 23 01:00:46 2025 GMT Not After : Jul 22 01:00:46 2025 GMT Subject: CN=4f326482-2cb5-4175-877e-680bcba03bf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:65:4a:bb:f8:30:08:e4:93:7d:ad:3d:58:54: ad:2f:d5:89:a9:7d:15:08:67:b6:15:ca:d8:5e:ee: 7b:cb:68:2e:05:92:f9:79:62:7b:02:b1:5a:32:24: 47:1e:9f:12:e9:5f:a7:55:10:df:59:10:03:5c:c0: 2c:d9:78:97:ef:42:f2:8a:c2:fb:94:7d:09:ee:da: 78:64:9c:5a:f5:3a:98:4a:0e:df:6f:92:ba:ee:aa: 5d:aa:29:57:17:37:db:1e:ac:fe:44:c6:53:11:78: 72:d2:f4:21:96:ce:12:8e:c2:04:6d:cc:13:37:a8: b3:ee:13:63:ae:ae:84:90:84:3a:66:e4:39:ae:89: 4c:a3:cd:00:c0:c8:1b:38:b9:41:53:5d:3a:93:27: 74:9a:e9:d4:28:2c:4b:5b:08:5f:b5:53:ad:b1:0c: 8c:65:6a:c1:8a:88:da:c2:40:da:98:de:d0:d1:fe: 7e:87:d3:60:a3:2e:a1:ad:78:fc:29:b8:93:1c:91: bc:68:a1:b6:a9:01:d8:7e:31:54:2d:93:27:c2:d9: 8d:87:7a:00:6e:42:1c:2f:1f:c4:28:b1:ff:58:3c: 48:92:b2:3a:e6:9b:c2:a0:94:6e:97:fd:32:ec:55: bb:44:e9:9e:89:59:2c:b8:20:ec:16:ca:a5:12:c8: 45:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:4A:10:C6:13:EE:F1:6A:BC:F4:5A:A0:A2:F1:DF:87:B3:37:72:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aed01dad-662c-4720-aaa5-ea3d024bad07/896b5e20-222b-3000-8ee0-be86aac797ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aed01dad-662c-4720-aaa5-ea3d024bad07/aed01dad-662c-4720-aaa5-ea3d024bad07.crl X509v3 Authority Key Identifier: keyid:AF:28:E5:F5:82:CC:E1:95:E3:06:39:54:5C:79:ED:C7:78:A5:C5:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aed01dad-662c-4720-aaa5-ea3d024bad07.cer sbgp-ipAddrBlock: critical IPv4: 207.174.124.0/22 IPv6: 2602:fb86::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:15:2a:71:64:b0:34:b3:b0:cf:6c:7b:3a:a5:75:66:29:68: 65:20:f0:9c:46:76:22:3a:76:19:98:a2:c2:10:f6:77:6d:9b: 48:82:1c:31:fc:0b:a0:3f:13:b0:75:9e:ae:3b:42:f3:80:7b: bf:cb:48:bc:c9:ee:9d:f1:52:fb:eb:8f:c6:8a:13:18:ff:ef: 1e:6b:8b:24:62:72:79:10:3b:0d:53:30:93:4e:66:1c:90:57: 7b:81:39:c8:2c:dc:7f:b8:ec:3e:a6:4e:7c:c2:05:4e:dc:ea: cc:9b:51:04:fa:d4:70:64:f5:6b:5c:64:7e:50:3f:50:a0:11: 76:20:d9:a9:5d:84:75:68:70:a1:d4:48:15:96:88:a0:78:81: e6:0c:3c:ae:78:f0:b5:37:6e:b7:96:91:23:bd:d4:ed:93:0b: f4:a3:73:b0:d5:5a:0d:fa:4b:05:49:0e:36:e5:55:cd:7d:c1: 66:43:cc:83:da:12:da:d9:96:cb:8f:11:b1:98:5e:8b:60:f2: 18:fc:9d:9b:b4:df:ba:ed:a1:56:ea:f4:d0:13:ae:3e:a6:f1: e4:9e:1f:7b:6b:e6:e1:aa:b5:10:2b:3a:60:79:39:e3:ff:99: 8e:4c:1f:bb:eb:cd:17:c0:f0:32:e1:4b:67:ac:c6:4d:f0:05: f2:56:aa:93 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEmdvyoffEgY3dZ5xMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWVkMDFkYWQtNjYyYy00NzIwLWFhYTUtZWEzZDAyNGJh ZDA3MB4XDTI1MDQyMzAxMDA0NloXDTI1MDcyMjAxMDA0NlowLzEtMCsGA1UEAxMk NGYzMjY0ODItMmNiNS00MTc1LTg3N2UtNjgwYmNiYTAzYmY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2VKu/gwCOSTfa09WFStL9WJqX0VCGe2FcrY Xu57y2guBZL5eWJ7ArFaMiRHHp8S6V+nVRDfWRADXMAs2XiX70LyisL7lH0J7tp4 ZJxa9TqYSg7fb5K67qpdqilXFzfbHqz+RMZTEXhy0vQhls4SjsIEbcwTN6iz7hNj rq6EkIQ6ZuQ5rolMo80AwMgbOLlBU106kyd0munUKCxLWwhftVOtsQyMZWrBioja wkDamN7Q0f5+h9Ngoy6hrXj8KbiTHJG8aKG2qQHYfjFULZMnwtmNh3oAbkIcLx/E KLH/WDxIkrI65pvCoJRul/0y7FW7ROmeiVksuCDsFsqlEshFqQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFFZKEMYT7vFqvPRaoKLx34ezN3LjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hZWQw MWRhZC02NjJjLTQ3MjAtYWFhNS1lYTNkMDI0YmFkMDcvODk2YjVlMjAtMjIyYi0z MDAwLThlZTAtYmU4NmFhYzc5N2NlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWVkMDFkYWQtNjYyYy00NzIwLWFh YTUtZWEzZDAyNGJhZDA3L2FlZDAxZGFkLTY2MmMtNDcyMC1hYWE1LWVhM2QwMjRi YWQwNy5jcmwwHwYDVR0jBBgwFoAUryjl9YLM4ZXjBjlUXHntx3ilxU4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hZWQwMWRhZC02NjJjLTQ3MjAtYWFhNS1lYTNk MDI0YmFkMDcuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQCz658MA4E AgACMAgDBgQmAvuGADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQACFSpxZLA0s7DPbHs6pXVmKWhlIPCcRnYi OnYZmKLCEPZ3bZtIghwx/AugPxOwdZ6uO0LzgHu/y0i8ye6d8VL764/GihMY/+8e a4skYnJ5EDsNUzCTTmYckFd7gTnILNx/uOw+pk58wgVO3OrMm1EE+tRwZPVrXGR+ UD9QoBF2INmpXYR1aHCh1EgVloigeIHmDDyuePC1N263lpEjvdTtkwv0o3Ow1VoN +ksFSQ425VXNfcFmQ8yD2hLa2ZbLjxGxmF6LYPIY/J2btN+67aFW6vTQE64+pvHk nh97a+bhqrUQKzpgeTnj/5mOTB+7680XwPAy4UtnrMZN8AXyVqqT -----END CERTIFICATE-----Generated at Mon Apr 28 18:04:33 2025 by rpki-client