$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/450b8e4c-d668-3931-b207-a712d28e3174.roa File: 450b8e4c-d668-3931-b207-a712d28e3174.roa (raw, json) Hash identifier: KcFcUCyvOxHos9GJd5Kwffon7agIN3lZAE6GcYSl/YA= Subject key identifier: BA:4A:16:2F:95:D6:8C:58:16:55:57:11:50:8F:9D:2C:97:84:AF:4C Certificate issuer: /CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3 Certificate serial: 010D0C9F4328584A07D538E314F44D857D9F8A00 Authority key identifier: B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/450b8e4c-d668-3931-b207-a712d28e3174.roa Signing time: Sat 31 May 2025 01:00:50 +0000 ROA not before: Sat 31 May 2025 01:00:50 +0000 ROA not after: Fri 29 Aug 2025 01:00:50 +0000 asID: 22140 IP address blocks: 206.29.160.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:07:d5:38:e3:14:f4:4d:85:7d:9f:8a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3 Validity Not Before: May 31 01:00:50 2025 GMT Not After : Aug 29 01:00:50 2025 GMT Subject: CN=0eaaa9b3-bb16-488e-bc6c-d5b1de5b8f22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:4c:f7:03:dd:8e:de:c1:60:d0:36:e7:73:41: 48:d0:a3:8e:2c:c5:2b:09:a6:25:c0:4c:ee:be:5d: 11:31:17:c2:f4:df:a1:e5:4f:29:05:41:06:24:fb: fb:0c:79:58:21:25:e1:ab:56:a2:82:b1:cb:fa:63: 2d:b6:6c:8c:a0:00:9a:f2:39:5c:c7:bb:83:85:d5: 64:07:a1:be:d6:5b:ce:6e:af:cd:61:b0:db:6a:16: 69:f8:3b:46:14:49:ef:d0:2b:d7:b1:57:11:21:74: fc:d9:ac:44:67:e9:f4:02:d9:38:88:dc:63:4f:49: 5b:3e:0f:0b:97:c7:68:d8:03:a1:63:5b:61:b4:63: b2:03:18:8c:88:65:45:5b:1f:22:9c:7f:ae:3f:b1: 75:36:fc:65:60:45:5c:f7:38:5c:af:10:a2:62:a5: fe:b6:a9:c1:0b:46:3d:52:ad:f6:df:c2:c7:d7:d0: 75:a3:d3:84:09:c1:d2:e2:8d:90:6b:6b:67:48:8d: 53:db:17:55:d5:bd:b5:97:8f:9d:59:b9:54:b0:ff: 9c:55:ee:ed:ff:23:2c:af:33:1d:6d:6d:bd:08:03: 2a:f5:8b:6b:5f:b9:6d:be:84:7b:03:55:c4:1a:84: ec:e6:62:e5:35:91:c1:ba:38:0a:c8:54:f7:d7:00: 8c:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:4A:16:2F:95:D6:8C:58:16:55:57:11:50:8F:9D:2C:97:84:AF:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/450b8e4c-d668-3931-b207-a712d28e3174.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl X509v3 Authority Key Identifier: keyid:B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer sbgp-ipAddrBlock: critical IPv4: 206.29.160.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:60:4a:03:19:b6:a1:50:b1:44:04:da:ad:b4:d9:fa:3b:b7: d5:f5:ac:b6:36:a6:fd:10:e6:62:6f:ac:e5:76:3e:03:ec:6f: aa:e9:ff:3f:57:25:4e:27:2e:3b:59:de:c7:da:cf:56:16:e0: a1:4c:03:d4:7d:d9:99:39:20:eb:8a:02:57:ab:da:52:b9:cb: dc:91:b4:db:01:fa:a9:74:1c:6b:ba:76:24:42:a2:3c:4d:8c: f4:11:0c:4c:45:f9:76:9b:29:58:17:bc:d5:fc:7b:d3:3b:7a: b1:b2:04:9e:7b:ef:40:3d:59:2f:c2:ef:1f:79:c7:dc:bd:ca: 5d:12:63:e1:26:07:db:55:ad:c5:f8:bb:94:f1:6d:30:c5:14: b6:10:0a:61:ca:9f:3e:60:b7:ae:ef:24:ab:45:30:16:76:27: b7:67:30:3b:07:70:93:ab:43:40:e6:b3:9d:17:61:87:d0:ae: db:f8:0a:9b:b2:35:14:1a:32:3f:e8:33:34:af:31:1e:5b:82: da:d5:b9:3e:e3:3f:33:b5:a2:2a:4e:7b:3e:09:f1:02:d0:1a: 64:6d:aa:36:16:e2:f9:ca:a1:07:29:9b:7d:26:41:4d:b6:1d: 70:d7:5b:44:44:fa:cc:32:ae:b8:37:76:be:25:6d:cb:6c:f4: 1f:df:d1:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoH1TjjFPRNhX2figAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGUyZjMzNTMtODJiOS00MzJiLWJkOTQtMDAwYmY1Y2Vm MGMzMB4XDTI1MDUzMTAxMDA1MFoXDTI1MDgyOTAxMDA1MFowLzEtMCsGA1UEAxMk MGVhYWE5YjMtYmIxNi00ODhlLWJjNmMtZDViMWRlNWI4ZjIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUz3A92O3sFg0Dbnc0FI0KOOLMUrCaYlwEzu vl0RMRfC9N+h5U8pBUEGJPv7DHlYISXhq1aigrHL+mMttmyMoACa8jlcx7uDhdVk B6G+1lvObq/NYbDbahZp+DtGFEnv0CvXsVcRIXT82axEZ+n0Atk4iNxjT0lbPg8L l8do2AOhY1thtGOyAxiMiGVFWx8inH+uP7F1NvxlYEVc9zhcrxCiYqX+tqnBC0Y9 Uq3238LH19B1o9OECcHS4o2Qa2tnSI1T2xdV1b21l4+dWblUsP+cVe7t/yMsrzMd bW29CAMq9YtrX7ltvoR7A1XEGoTs5mLlNZHBujgKyFT31wCMyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLpKFi+V1oxYFlVXEVCPnSyXhK9MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTJm MzM1My04MmI5LTQzMmItYmQ5NC0wMDBiZjVjZWYwYzMvNDUwYjhlNGMtZDY2OC0z OTMxLWIyMDctYTcxMmQyOGUzMTc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGUyZjMzNTMtODJiOS00MzJiLWJk OTQtMDAwYmY1Y2VmMGMzLzhlMmYzMzUzLTgyYjktNDMyYi1iZDk0LTAwMGJmNWNl ZjBjMy5jcmwwHwYDVR0jBBgwFoAUtLVsZEY9R+vcpQ7L0HuaM0NVQEUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTJmMzM1My04MmI5LTQzMmItYmQ5NC0wMDBi ZjVjZWYwYzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFzh2gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACBgSgMZtqFQsUQE2q202fo7t9X1rLY2pv0Q5mJvrOV2PgPsb6rp/z9X JU4nLjtZ3sfaz1YW4KFMA9R92Zk5IOuKAler2lK5y9yRtNsB+ql0HGu6diRCojxN jPQRDExF+XabKVgXvNX8e9M7erGyBJ5770A9WS/C7x95x9y9yl0SY+EmB9tVrcX4 u5TxbTDFFLYQCmHKnz5gt67vJKtFMBZ2J7dnMDsHcJOrQ0Dms50XYYfQrtv4Cpuy NRQaMj/oMzSvMR5bgtrVuT7jPzO1oipOez4J8QLQGmRtqjYW4vnKoQcpm30mQU22 HXDXW0RE+swyrrg3dr4lbcts9B/f0fQ= -----END CERTIFICATE-----Generated at Tue Jul 1 16:06:14 2025 by rpki-client