$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59/481e6446-0bc6-31ec-845c-a168a1f29c35.roa File: 481e6446-0bc6-31ec-845c-a168a1f29c35.roa (raw, json) Hash identifier: VGhVkLIynT+NvLbijz7vtdJBr+EqxV/UefWQn0fLx5M= Subject key identifier: 20:17:87:8C:24:BD:69:B1:A0:84:50:31:05:03:85:C2:19:8F:B0:74 Certificate issuer: /CN=7a620d45-1f26-460c-9a3e-9bc0cc4a5d59 Certificate serial: 010D0C9F43285849605417ABBBAA77C3D492FC00 Authority key identifier: 29:1C:70:C0:46:C9:AB:DC:28:EE:26:90:9A:DC:7D:D9:00:2B:F4:C2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59/481e6446-0bc6-31ec-845c-a168a1f29c35.roa Signing time: Tue 01 Apr 2025 01:00:47 +0000 ROA not before: Tue 01 Apr 2025 01:00:47 +0000 ROA not after: Mon 30 Jun 2025 01:00:47 +0000 asID: 25769 IP address blocks: 216.122.96.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:60:54:17:ab:bb:aa:77:c3:d4:92:fc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a620d45-1f26-460c-9a3e-9bc0cc4a5d59 Validity Not Before: Apr 1 01:00:47 2025 GMT Not After : Jun 30 01:00:47 2025 GMT Subject: CN=e3b6e78f-3928-4faa-a82e-7b551903ff77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:3b:ba:39:ab:34:04:55:37:d4:32:7c:78:72: d3:91:26:36:6d:84:98:03:7a:5d:05:74:1e:59:35: 78:47:4d:c2:b4:b6:16:07:1d:18:e4:a4:e4:cd:c0: 06:55:03:b6:12:8c:70:e1:cf:4a:c0:3b:5c:15:d1: d1:55:dd:a2:26:51:08:c8:3a:ce:7a:3d:1e:d0:b5: ae:45:55:8a:71:90:9c:ae:6f:86:99:bf:0a:24:06: 74:17:73:b1:21:48:26:01:e4:cf:6a:39:63:1b:5f: 7c:25:80:3c:e5:90:b5:dd:10:30:e2:8e:53:0b:44: 5a:aa:1d:5b:cf:54:36:66:1e:8d:62:1e:f2:f6:52: 9b:86:b7:d8:ad:e4:42:b6:71:04:6c:50:0c:2a:c7: f1:ae:6c:f3:9c:09:d1:a8:13:fe:f9:46:01:cf:87: 9e:7f:57:f1:11:eb:e1:28:71:18:5b:37:14:35:c3: 92:13:d1:ad:52:30:78:43:cc:f2:13:2d:85:f7:ea: 13:89:5f:3f:85:ec:09:25:ec:f8:43:bd:b2:9f:1a: de:80:f7:3b:6d:5f:1d:72:5e:5b:6e:02:1f:78:f8: 75:57:91:f7:ac:68:3d:a8:93:94:46:d3:aa:83:0a: f3:f7:be:cc:57:dd:17:b2:cb:db:66:7e:d8:18:b7: 42:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:17:87:8C:24:BD:69:B1:A0:84:50:31:05:03:85:C2:19:8F:B0:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59/481e6446-0bc6-31ec-845c-a168a1f29c35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59.crl X509v3 Authority Key Identifier: keyid:29:1C:70:C0:46:C9:AB:DC:28:EE:26:90:9A:DC:7D:D9:00:2B:F4:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59.cer sbgp-ipAddrBlock: critical IPv4: 216.122.96.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d0:62:c0:77:c6:63:8a:96:07:db:03:54:c9:b1:58:f8:1c:e2: 11:46:b2:ed:da:90:51:95:31:7e:25:3f:e4:ae:83:7e:77:9d: f1:63:54:72:ee:ed:b9:6c:1f:03:e9:e4:ea:22:de:86:bf:fe: b4:a2:e6:dd:99:3c:69:64:f8:18:48:4a:cc:7a:33:94:fc:f0: ed:0f:de:27:ac:d0:e8:72:06:0d:4f:3e:83:b5:fe:f6:1a:63: e6:6e:1b:2b:93:8d:93:88:4e:37:6d:0b:38:f6:f3:6e:8d:83: 6f:30:f5:81:94:cf:80:10:b5:fd:27:eb:75:0a:70:9e:41:2c: 2a:87:d1:b7:c7:62:7a:10:f6:c7:47:9f:a0:cf:32:81:e8:89: 95:31:1c:56:d4:f4:66:1c:00:0b:c6:05:6d:99:ce:ab:99:4d: 8a:6c:56:98:05:24:ba:0b:e0:9b:76:47:11:d6:99:c1:b0:7a: 37:a7:07:6e:33:fa:ac:bd:f0:dd:92:c6:57:eb:bf:57:f7:72: 94:33:07:ab:b3:b9:54:df:54:3f:e7:ca:63:a4:fd:49:26:bc: bb:e1:ed:1a:dd:d8:84:3c:19:c3:82:b2:5a:ed:52:fb:33:05: 78:63:02:18:24:c1:f3:5e:72:d4:5c:7e:ae:23:83:50:93:92: 13:b2:0e:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElgVBeru6p3w9SS/AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2E2MjBkNDUtMWYyNi00NjBjLTlhM2UtOWJjMGNjNGE1 ZDU5MB4XDTI1MDQwMTAxMDA0N1oXDTI1MDYzMDAxMDA0N1owLzEtMCsGA1UEAxMk ZTNiNmU3OGYtMzkyOC00ZmFhLWE4MmUtN2I1NTE5MDNmZjc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTu6Oas0BFU31DJ8eHLTkSY2bYSYA3pdBXQe WTV4R03CtLYWBx0Y5KTkzcAGVQO2Eoxw4c9KwDtcFdHRVd2iJlEIyDrOej0e0LWu RVWKcZCcrm+Gmb8KJAZ0F3OxIUgmAeTPajljG198JYA85ZC13RAw4o5TC0Raqh1b z1Q2Zh6NYh7y9lKbhrfYreRCtnEEbFAMKsfxrmzznAnRqBP++UYBz4eef1fxEevh KHEYWzcUNcOSE9GtUjB4Q8zyEy2F9+oTiV8/hewJJez4Q72ynxregPc7bV8dcl5b bgIfePh1V5H3rGg9qJOURtOqgwrz977MV90XssvbZn7YGLdCYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCAXh4wkvWmxoIRQMQUDhcIZj7B0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83YTYy MGQ0NS0xZjI2LTQ2MGMtOWEzZS05YmMwY2M0YTVkNTkvNDgxZTY0NDYtMGJjNi0z MWVjLTg0NWMtYTE2OGExZjI5YzM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvN2E2MjBkNDUtMWYyNi00NjBjLTlh M2UtOWJjMGNjNGE1ZDU5LzdhNjIwZDQ1LTFmMjYtNDYwYy05YTNlLTliYzBjYzRh NWQ1OS5jcmwwHwYDVR0jBBgwFoAUKRxwwEbJq9wo7iaQmtx92QAr9MIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83YTYyMGQ0NS0xZjI2LTQ2MGMtOWEzZS05YmMw Y2M0YTVkNTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2HpgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANBiwHfGY4qWB9sDVMmxWPgc4hFGsu3akFGVMX4lP+Sug353nfFjVHLu 7blsHwPp5Ooi3oa//rSi5t2ZPGlk+BhISsx6M5T88O0P3ies0OhyBg1PPoO1/vYa Y+ZuGyuTjZOITjdtCzj2826Ng28w9YGUz4AQtf0n63UKcJ5BLCqH0bfHYnoQ9sdH n6DPMoHoiZUxHFbU9GYcAAvGBW2ZzquZTYpsVpgFJLoL4Jt2RxHWmcGwejenB24z +qy98N2Sxlfrv1f3cpQzB6uzuVTfVD/nymOk/UkmvLvh7Rrd2IQ8GcOCslrtUvsz BXhjAhgkwfNectRcfq4jg1CTkhOyDlM= -----END CERTIFICATE-----Generated at Wed Apr 30 03:31:56 2025 by rpki-client