$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/22b799e7-838e-498b-86a0-ef624326159f/e1d40578-98d1-3e6e-8a23-0232e8a2dfa7.roa File: e1d40578-98d1-3e6e-8a23-0232e8a2dfa7.roa (raw, json) Hash identifier: pMR1E3tWtoj6xAXhWpf3JoTKz7gMVs5z+dXO+OfCxxU= Subject key identifier: C1:9E:F2:3C:C2:97:4A:B5:77:A1:4E:5B:85:3D:17:C4:E8:04:46:49 Certificate issuer: /CN=22b799e7-838e-498b-86a0-ef624326159f Certificate serial: 010D0C9F43285849A1EF71D9A19B8032F3A4F280 Authority key identifier: 3F:FD:CE:37:9D:79:67:DE:45:32:CD:CE:5B:C8:AE:3B:61:4D:9C:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/22b799e7-838e-498b-86a0-ef624326159f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/22b799e7-838e-498b-86a0-ef624326159f/e1d40578-98d1-3e6e-8a23-0232e8a2dfa7.roa Signing time: Thu 24 Apr 2025 13:01:00 +0000 ROA not before: Thu 24 Apr 2025 13:01:00 +0000 ROA not after: Wed 23 Jul 2025 13:01:00 +0000 asID: 19212 IP address blocks: 209.213.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/22b799e7-838e-498b-86a0-ef624326159f/22b799e7-838e-498b-86a0-ef624326159f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/22b799e7-838e-498b-86a0-ef624326159f/22b799e7-838e-498b-86a0-ef624326159f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/22b799e7-838e-498b-86a0-ef624326159f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:ef:71:d9:a1:9b:80:32:f3:a4:f2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22b799e7-838e-498b-86a0-ef624326159f Validity Not Before: Apr 24 13:01:00 2025 GMT Not After : Jul 23 13:01:00 2025 GMT Subject: CN=495f7249-e543-4987-94df-c8fde5cbcb18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:c5:7f:a6:b0:8f:43:2b:a6:ae:e0:73:3f:1a: ca:96:00:91:71:a1:10:0f:77:1a:3a:d2:88:39:1e: 7c:0a:b7:9d:0d:dd:67:66:b5:c7:3e:bb:e9:a0:f2: fc:c3:56:bd:1c:e1:b3:cb:6b:9d:ef:b4:1f:ef:a0: 96:34:81:34:4d:1b:17:f6:dd:3c:10:14:4b:e7:af: 92:b0:dc:47:c9:dc:92:47:1f:7d:4f:98:84:50:e8: cb:ce:19:01:e6:05:35:74:af:cb:17:7f:0e:95:78: f6:28:1e:4a:6a:21:71:79:1b:e1:f2:a0:02:43:23: b0:eb:27:61:26:79:b9:a1:56:97:b6:15:93:c5:39: 4a:cf:0f:d2:ad:e8:73:87:20:df:2b:15:7a:3e:43: 54:ff:88:d8:22:b7:30:70:c6:a7:fc:86:4e:1f:24: f3:55:69:36:0c:92:ed:c3:ba:4b:5c:5a:17:de:99: 75:4e:08:ab:8c:a2:69:dd:29:c5:69:2c:7c:36:8e: f5:df:76:77:5e:d0:b1:b3:c2:00:d6:9d:2c:2a:7a: 3c:33:cd:2d:fb:f9:ab:45:28:c0:89:0f:b3:17:a2: 5e:64:86:3e:07:d3:ff:d0:03:65:a7:f4:40:23:87: 45:ae:b7:91:96:24:34:fa:26:60:88:4f:5f:53:24: 70:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:9E:F2:3C:C2:97:4A:B5:77:A1:4E:5B:85:3D:17:C4:E8:04:46:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/22b799e7-838e-498b-86a0-ef624326159f/e1d40578-98d1-3e6e-8a23-0232e8a2dfa7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/22b799e7-838e-498b-86a0-ef624326159f/22b799e7-838e-498b-86a0-ef624326159f.crl X509v3 Authority Key Identifier: keyid:3F:FD:CE:37:9D:79:67:DE:45:32:CD:CE:5B:C8:AE:3B:61:4D:9C:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/22b799e7-838e-498b-86a0-ef624326159f.cer sbgp-ipAddrBlock: critical IPv4: 209.213.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:8f:be:85:19:27:d6:6e:5a:cf:c9:b4:90:14:b4:ea:14:f1: 73:2d:35:57:df:1a:e2:df:48:7e:b8:2d:aa:2d:25:39:dc:7e: dd:18:90:b5:1e:89:6e:77:07:c3:d1:83:38:38:42:38:8c:1a: 33:59:1c:76:29:63:c2:f5:7a:23:73:5d:f3:a5:21:66:68:71: 3f:ad:2e:e6:3d:f0:01:43:74:56:7e:2e:2f:0c:46:29:db:cb: 7c:f9:b7:44:83:29:f1:00:fa:4c:aa:4f:50:f1:a3:30:41:5b: 55:c8:16:55:9f:6f:aa:12:24:54:9d:f6:a3:64:d1:86:ea:ae: f6:d0:13:07:6b:44:9d:02:d5:75:8e:2b:42:11:07:3e:14:7f: 8f:1f:16:b1:87:e4:42:82:81:9c:7d:7c:b1:ad:32:b3:a2:2b: 43:d8:4e:6e:32:60:11:bd:a8:db:30:06:06:29:79:1d:3a:d1: c3:c8:c7:94:8e:a1:a4:03:46:bc:bf:d0:af:0b:b8:a2:d5:b9: 90:37:7b:71:75:40:84:c1:1a:80:40:71:31:1b:24:fa:b0:39: 01:35:f5:27:2b:fc:a5:5f:ef:d2:ab:e5:d7:85:eb:54:5d:95: 5c:a6:21:4f:17:82:b4:e7:29:4a:11:6a:f8:5a:81:06:7f:1c: cd:85:b7:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmh73HZoZuAMvOk8oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjJiNzk5ZTctODM4ZS00OThiLTg2YTAtZWY2MjQzMjYx NTlmMB4XDTI1MDQyNDEzMDEwMFoXDTI1MDcyMzEzMDEwMFowLzEtMCsGA1UEAxMk NDk1ZjcyNDktZTU0My00OTg3LTk0ZGYtYzhmZGU1Y2JjYjE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3MV/prCPQyumruBzPxrKlgCRcaEQD3caOtKI OR58CredDd1nZrXHPrvpoPL8w1a9HOGzy2ud77Qf76CWNIE0TRsX9t08EBRL56+S sNxHydySRx99T5iEUOjLzhkB5gU1dK/LF38OlXj2KB5KaiFxeRvh8qACQyOw6ydh Jnm5oVaXthWTxTlKzw/SrehzhyDfKxV6PkNU/4jYIrcwcMan/IZOHyTzVWk2DJLt w7pLXFoX3pl1TgirjKJp3SnFaSx8No7133Z3XtCxs8IA1p0sKno8M80t+/mrRSjA iQ+zF6JeZIY+B9P/0ANlp/RAI4dFrreRliQ0+iZgiE9fUyRwyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMGe8jzCl0q1d6FOW4U9F8ToBEZJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8yMmI3 OTllNy04MzhlLTQ5OGItODZhMC1lZjYyNDMyNjE1OWYvZTFkNDA1NzgtOThkMS0z ZTZlLThhMjMtMDIzMmU4YTJkZmE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMjJiNzk5ZTctODM4ZS00OThiLTg2 YTAtZWY2MjQzMjYxNTlmLzIyYjc5OWU3LTgzOGUtNDk4Yi04NmEwLWVmNjI0MzI2 MTU5Zi5jcmwwHwYDVR0jBBgwFoAUP/3ON515Z95FMs3OW8iuO2FNnHQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8yMmI3OTllNy04MzhlLTQ5OGItODZhMC1lZjYy NDMyNjE1OWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0dUQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA6PvoUZJ9ZuWs/JtJAUtOoU8XMtNVffGuLfSH64LaotJTncft0YkLUe iW53B8PRgzg4QjiMGjNZHHYpY8L1eiNzXfOlIWZocT+tLuY98AFDdFZ+Li8MRinb y3z5t0SDKfEA+kyqT1DxozBBW1XIFlWfb6oSJFSd9qNk0YbqrvbQEwdrRJ0C1XWO K0IRBz4Uf48fFrGH5EKCgZx9fLGtMrOiK0PYTm4yYBG9qNswBgYpeR060cPIx5SO oaQDRry/0K8LuKLVuZA3e3F1QITBGoBAcTEbJPqwOQE19Scr/KVf79Kr5deF61Rd lVymIU8XgrTnKUoRavhagQZ/HM2Ft1M= -----END CERTIFICATE-----Generated at Thu May 8 19:00:43 2025 by rpki-client