$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901/680d15e7-a36c-3758-9cb4-c1ea5f325659.roa File: 680d15e7-a36c-3758-9cb4-c1ea5f325659.roa (raw, json) Hash identifier: Nc7H3+F5/qt6/vVJnPZHHK0ImqrcELwvU5Qljpie3/0= Subject key identifier: 2E:D4:BC:4E:D9:4B:A6:46:F3:98:F8:3C:67:71:3C:90:BB:31:09:D6 Certificate issuer: /CN=5ec4eaab-a927-41c8-b94d-d5dc7ba3d901 Certificate serial: 010D0C9F43285849AD1A0D3AB3BABF86A8E9EA00 Authority key identifier: 3C:B7:B0:D2:32:96:28:88:E7:95:B8:8C:13:24:8D:13:9D:CD:6D:05 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901/680d15e7-a36c-3758-9cb4-c1ea5f325659.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 63178 IP address blocks: 216.229.120.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:0d:3a:b3:ba:bf:86:a8:e9:ea:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ec4eaab-a927-41c8-b94d-d5dc7ba3d901 Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=b07a7e40-11bc-44aa-b6ca-4029d948623a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:98:b8:b4:c8:51:1c:ed:35:03:ee:a4:24:f1: 13:e5:a6:96:53:47:e9:8e:a3:31:02:49:d1:54:89: 9f:6b:bf:f2:26:f8:e3:49:ec:4f:0f:94:57:2f:c5: b8:b2:d4:c9:e8:11:f7:f6:aa:d8:b1:1d:fc:27:b0: 29:a0:ab:b1:aa:c7:82:c1:9f:9d:0d:20:36:77:3a: 4f:09:08:af:db:a4:95:07:cb:f1:b5:bc:c3:1e:6a: 59:aa:de:9e:17:fd:74:06:64:82:a0:ca:49:86:e0: 81:cb:b6:5f:24:d8:ea:cd:27:eb:81:ea:2e:77:6b: 2b:e6:19:30:e3:bd:11:38:71:51:e8:15:2a:ae:f3: 44:bb:bc:2b:eb:9b:c8:d8:fc:f7:fb:11:e2:9f:5e: 7e:52:70:c6:58:fd:a2:90:18:32:a5:b5:63:0d:16: 7d:be:70:76:17:af:4c:a1:5a:64:63:60:43:62:49: 15:5f:f4:f0:bb:73:14:94:c3:99:6a:5d:16:46:b4: 5a:e4:87:49:d4:92:28:0d:c6:84:49:3a:7e:d5:cb: 7b:49:e3:17:2d:d6:e1:86:e5:92:8a:6b:ec:04:b7: f1:9d:6a:c5:11:d6:be:ae:7c:6c:fb:6f:fe:70:e9: b0:99:17:36:98:d8:30:d2:2b:4f:4f:8f:8f:0f:67: ed:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:D4:BC:4E:D9:4B:A6:46:F3:98:F8:3C:67:71:3C:90:BB:31:09:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901/680d15e7-a36c-3758-9cb4-c1ea5f325659.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901.crl X509v3 Authority Key Identifier: keyid:3C:B7:B0:D2:32:96:28:88:E7:95:B8:8C:13:24:8D:13:9D:CD:6D:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901.cer sbgp-ipAddrBlock: critical IPv4: 216.229.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:d3:9a:9e:08:73:13:19:6d:3a:e5:92:48:82:1c:f6:e8:c2: d5:9f:6d:65:a2:c5:93:0d:0c:92:09:e8:99:aa:38:cc:0d:21: a7:f4:a9:7f:8c:22:ac:ec:01:10:89:2f:f3:88:b5:e6:ff:70: c3:c8:fb:e8:22:8c:2b:a2:a3:b1:a2:45:c5:44:68:84:9f:12: f4:58:90:3b:b7:1d:f0:b0:af:e9:e6:f5:be:4b:36:ad:73:84: 9b:79:ea:9f:70:26:b8:4f:23:35:1a:ff:32:c6:c9:d8:ce:51: 13:61:e0:dd:81:cf:87:04:49:bd:27:6e:6a:cb:40:dc:6e:80: 1a:ed:08:c8:b2:22:10:b5:f0:f9:96:da:3b:9c:4a:d7:22:fe: ce:1b:c1:6e:e2:ae:11:46:3a:c9:ee:8a:f9:62:a2:14:91:61: 02:e6:2a:be:f5:7d:cd:e5:65:fc:14:63:da:87:c5:58:35:2d: 7b:9b:d9:ef:72:7d:11:ff:78:8f:22:fa:9a:fd:2b:28:53:4c: 96:81:86:c2:ba:a7:c9:c0:a9:07:f8:31:4d:3f:d4:d8:a3:5d: 0b:64:42:c6:f4:06:3c:9f:9e:fd:39:27:13:d5:72:e3:cb:e2: 41:7b:64:a5:63:91:69:fd:a3:5a:86:89:00:24:e9:b9:3c:c8: 31:74:61:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmtGg06s7q/hqjp6gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWVjNGVhYWItYTkyNy00MWM4LWI5NGQtZDVkYzdiYTNk OTAxMB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk YjA3YTdlNDAtMTFiYy00NGFhLWI2Y2EtNDAyOWQ5NDg2MjNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg5i4tMhRHO01A+6kJPET5aaWU0fpjqMxAknR VImfa7/yJvjjSexPD5RXL8W4stTJ6BH39qrYsR38J7ApoKuxqseCwZ+dDSA2dzpP CQiv26SVB8vxtbzDHmpZqt6eF/10BmSCoMpJhuCBy7ZfJNjqzSfrgeoud2sr5hkw 470ROHFR6BUqrvNEu7wr65vI2Pz3+xHin15+UnDGWP2ikBgypbVjDRZ9vnB2F69M oVpkY2BDYkkVX/Twu3MUlMOZal0WRrRa5IdJ1JIoDcaESTp+1ct7SeMXLdbhhuWS imvsBLfxnWrFEda+rnxs+2/+cOmwmRc2mNgw0itPT4+PD2ft1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC7UvE7ZS6ZG85j4PGdxPJC7MQnWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81ZWM0 ZWFhYi1hOTI3LTQxYzgtYjk0ZC1kNWRjN2JhM2Q5MDEvNjgwZDE1ZTctYTM2Yy0z NzU4LTljYjQtYzFlYTVmMzI1NjU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNWVjNGVhYWItYTkyNy00MWM4LWI5 NGQtZDVkYzdiYTNkOTAxLzVlYzRlYWFiLWE5MjctNDFjOC1iOTRkLWQ1ZGM3YmEz ZDkwMS5jcmwwHwYDVR0jBBgwFoAUPLew0jKWKIjnlbiMEySNE53NbQUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi81ZWM0ZWFhYi1hOTI3LTQxYzgtYjk0ZC1kNWRj N2JhM2Q5MDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2OV4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIrTmp4IcxMZbTrlkkiCHPbowtWfbWWixZMNDJIJ6JmqOMwNIaf0qX+M IqzsARCJL/OIteb/cMPI++gijCuio7GiRcVEaISfEvRYkDu3HfCwr+nm9b5LNq1z hJt56p9wJrhPIzUa/zLGydjOURNh4N2Bz4cESb0nbmrLQNxugBrtCMiyIhC18PmW 2jucStci/s4bwW7irhFGOsnuivliohSRYQLmKr71fc3lZfwUY9qHxVg1LXub2e9y fRH/eI8i+pr9KyhTTJaBhsK6p8nAqQf4MU0/1NijXQtkQsb0Bjyfnv05JxPVcuPL 4kF7ZKVjkWn9o1qGiQAk6bk8yDF0YcQ= -----END CERTIFICATE-----Generated at Mon Jun 30 00:40:51 2025 by rpki-client