$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/6920015b-bb01-392a-9c4a-9c1d6c1833ed.roa File: 6920015b-bb01-392a-9c4a-9c1d6c1833ed.roa (raw, json) Hash identifier: jjd5V1037ErqBTg3Zdab8NvWdXy/6LBti2ifgFHL9xU= Subject key identifier: 51:05:5A:A3:11:21:07:01:3B:4C:DA:9B:19:D2:18:23:26:F3:D4:E1 Certificate issuer: /CN=22f3c152-12b6-441e-b4d6-66feab870c4d Certificate serial: 010D0C9F432858498604686436AED49321986E80 Authority key identifier: 91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/6920015b-bb01-392a-9c4a-9c1d6c1833ed.roa Signing time: Mon 14 Apr 2025 13:00:59 +0000 ROA not before: Mon 14 Apr 2025 13:00:59 +0000 ROA not after: Sun 13 Jul 2025 13:00:59 +0000 asID: 3800 IP address blocks: 45.59.64.0/21 maxlen: 24 199.180.248.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:86:04:68:64:36:ae:d4:93:21:98:6e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22f3c152-12b6-441e-b4d6-66feab870c4d Validity Not Before: Apr 14 13:00:59 2025 GMT Not After : Jul 13 13:00:59 2025 GMT Subject: CN=f1bde8e6-c07f-4bea-8695-02783a76ebc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:cf:ee:ca:29:7e:42:64:04:55:44:90:e0:24: dc:1e:d2:13:1c:c2:74:3f:41:a7:e0:c1:6b:b6:19: cc:e2:a9:d3:80:82:9f:0b:d5:1e:ef:91:34:81:86: f7:6d:5d:b0:9e:1c:19:51:c8:f8:6a:45:50:dd:ef: ed:4c:8f:ad:1d:a9:46:16:57:cb:f8:28:ef:bf:39: 29:14:51:b1:48:b0:ee:51:27:74:b6:63:2e:d5:7a: 8b:66:65:39:10:9e:41:c9:6e:25:58:8f:71:4d:ca: 68:47:90:0f:a0:86:33:2b:83:da:28:3a:f5:08:83: 2d:51:49:d4:84:d9:88:5f:67:80:41:4a:dc:39:8e: 36:fb:19:67:e4:85:cf:45:2e:1d:e6:36:eb:59:b3: 3e:b8:b8:8d:e2:ca:a7:d8:a1:18:43:85:60:2a:90: db:d9:dd:ba:4b:f7:46:04:d8:9d:1e:93:4f:46:4c: 98:ab:70:6c:e5:a2:b5:3c:3a:34:d4:81:6b:4a:2b: 90:81:0a:cb:5e:6c:ad:0d:98:99:e7:47:31:e0:2f: de:c2:17:05:3d:b7:95:98:c0:a4:fd:52:1e:39:94: ac:22:ba:f9:de:55:13:bb:d7:ec:5f:68:db:37:ae: 57:06:dd:51:42:e8:95:98:64:90:f9:39:9c:64:31: 9e:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:05:5A:A3:11:21:07:01:3B:4C:DA:9B:19:D2:18:23:26:F3:D4:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/6920015b-bb01-392a-9c4a-9c1d6c1833ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.crl X509v3 Authority Key Identifier: keyid:91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer sbgp-ipAddrBlock: critical IPv4: 45.59.64.0/21 199.180.248.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:75:fd:ff:1c:70:8a:c2:d3:84:f7:09:08:ec:74:e8:96:02: db:90:e1:2e:98:9c:cb:1a:a2:5f:7b:ff:f8:2d:97:34:31:9b: d7:43:3e:e6:04:ee:9c:71:d1:75:b7:e0:fc:d3:d4:d8:48:23: be:56:da:09:40:02:e2:a0:34:bd:e7:73:c4:1b:50:97:4d:30: 7d:c7:53:90:4a:1d:4f:44:eb:50:d4:b8:3e:2b:04:40:5d:46: a1:59:78:48:d7:cb:2e:45:07:d7:2e:d7:d4:1c:e4:f1:18:9c: b1:44:cd:36:36:21:64:3b:22:37:2b:92:bd:81:c8:57:1d:d0: a9:b3:7e:da:0b:b2:87:71:d4:c0:22:7c:e0:65:35:23:f4:9a: ac:c7:f0:4f:b6:0d:11:f6:48:7b:8d:ab:96:4b:07:43:6d:07: d2:c3:51:9b:3c:6c:50:ab:ed:b0:38:23:3a:af:5d:41:ae:f7: c2:08:e2:bf:ff:14:b1:97:db:c4:4c:dc:5e:fe:14:7a:0f:29: 2b:bf:ec:09:f1:e6:05:d4:e6:74:51:d5:c5:22:e8:a3:0f:f7: e5:4d:7f:60:dd:5e:cb:11:af:6f:a0:b8:52:93:42:74:54:b8: 53:47:47:6e:0a:d6:a2:13:67:27:59:07:ca:c1:75:ac:77:a2: df:11:9d:c4 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEmGBGhkNq7UkyGYboAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjJmM2MxNTItMTJiNi00NDFlLWI0ZDYtNjZmZWFiODcw YzRkMB4XDTI1MDQxNDEzMDA1OVoXDTI1MDcxMzEzMDA1OVowLzEtMCsGA1UEAxMk ZjFiZGU4ZTYtYzA3Zi00YmVhLTg2OTUtMDI3ODNhNzZlYmM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8/uyil+QmQEVUSQ4CTcHtITHMJ0P0Gn4MFr thnM4qnTgIKfC9Ue75E0gYb3bV2wnhwZUcj4akVQ3e/tTI+tHalGFlfL+Cjvvzkp FFGxSLDuUSd0tmMu1XqLZmU5EJ5ByW4lWI9xTcpoR5APoIYzK4PaKDr1CIMtUUnU hNmIX2eAQUrcOY42+xln5IXPRS4d5jbrWbM+uLiN4sqn2KEYQ4VgKpDb2d26S/dG BNidHpNPRkyYq3Bs5aK1PDo01IFrSiuQgQrLXmytDZiZ50cx4C/ewhcFPbeVmMCk /VIeOZSsIrr53lUTu9fsX2jbN65XBt1RQuiVmGSQ+TmcZDGecwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFFEFWqMRIQcBO0zamxnSGCMm89ThMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yMmYz YzE1Mi0xMmI2LTQ0MWUtYjRkNi02NmZlYWI4NzBjNGQvNjkyMDAxNWItYmIwMS0z OTJhLTljNGEtOWMxZDZjMTgzM2VkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjJmM2MxNTItMTJiNi00NDFlLWI0 ZDYtNjZmZWFiODcwYzRkLzIyZjNjMTUyLTEyYjYtNDQxZS1iNGQ2LTY2ZmVhYjg3 MGM0ZC5jcmwwHwYDVR0jBBgwFoAUkeRCH5hh7EAysvnCVlRvINOvvS8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yMmYzYzE1Mi0xMmI2LTQ0MWUtYjRkNi02NmZl YWI4NzBjNGQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDLTtAAwQD x7T4MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAHF1/f8ccIrC04T3CQjsdOiWAtuQ4S6YnMsaol97//gtlzQx m9dDPuYE7pxx0XW34PzT1NhII75W2glAAuKgNL3nc8QbUJdNMH3HU5BKHU9E61DU uD4rBEBdRqFZeEjXyy5FB9cu19Qc5PEYnLFEzTY2IWQ7Ijcrkr2ByFcd0KmzftoL sodx1MAifOBlNSP0mqzH8E+2DRH2SHuNq5ZLB0NtB9LDUZs8bFCr7bA4IzqvXUGu 98II4r//FLGX28RM3F7+FHoPKSu/7Anx5gXU5nRR1cUi6KMP9+VNf2DdXssRr2+g uFKTQnRUuFNHR24K1qITZydZB8rBdax3ot8RncQ= -----END CERTIFICATE-----Generated at Mon May 12 19:10:03 2025 by rpki-client