$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c6c4fe4-5642-4ad0-8325-69940b2ed04d/03311caa-eedc-35f5-b4a3-a502fc212a0b.roa File: 03311caa-eedc-35f5-b4a3-a502fc212a0b.roa (raw, json) Hash identifier: KfwcRCEiU2jysGHkuWJ3fYTDVxrACQ+oSICr2V5kbHM= Subject key identifier: 0B:19:FC:F9:F0:55:C4:72:63:1B:2C:21:A9:49:0E:35:E2:E5:8A:34 Certificate issuer: /CN=7c6c4fe4-5642-4ad0-8325-69940b2ed04d Certificate serial: 010D0C9F43285849ABB4A931B8BF41860F60AF00 Authority key identifier: 83:EA:7B:A7:EC:EF:C3:78:8A:A5:E9:EE:2C:4B:B3:1B:73:73:BC:56 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c6c4fe4-5642-4ad0-8325-69940b2ed04d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c6c4fe4-5642-4ad0-8325-69940b2ed04d/03311caa-eedc-35f5-b4a3-a502fc212a0b.roa Signing time: Mon 28 Apr 2025 01:00:48 +0000 ROA not before: Mon 28 Apr 2025 01:00:48 +0000 ROA not after: Sun 27 Jul 2025 01:00:48 +0000 asID: 8075 IP address blocks: 156.20.22.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c6c4fe4-5642-4ad0-8325-69940b2ed04d/7c6c4fe4-5642-4ad0-8325-69940b2ed04d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c6c4fe4-5642-4ad0-8325-69940b2ed04d/7c6c4fe4-5642-4ad0-8325-69940b2ed04d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c6c4fe4-5642-4ad0-8325-69940b2ed04d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ab:b4:a9:31:b8:bf:41:86:0f:60:af:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c6c4fe4-5642-4ad0-8325-69940b2ed04d Validity Not Before: Apr 28 01:00:48 2025 GMT Not After : Jul 27 01:00:48 2025 GMT Subject: CN=4864ba08-778d-4215-8df3-843906763eaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:5a:69:4a:72:0f:37:9b:f7:3c:54:9d:8d:83: e5:e4:fc:b1:28:51:f3:a7:02:75:74:a9:ab:89:03: d5:53:7e:22:84:a1:61:8d:e2:a2:03:06:84:b3:3d: 31:59:82:a2:1a:8d:87:07:4e:58:ce:79:98:61:25: cd:c9:3f:06:59:77:b8:56:f5:f3:f7:85:b7:18:ff: bc:2c:0a:98:5f:4b:e2:47:eb:b2:bb:19:a0:91:cb: 14:66:d3:57:85:fa:94:50:27:c4:bb:05:ad:44:1d: c2:d7:42:30:c2:a4:87:06:a2:ec:90:b4:19:64:e9: 10:05:8f:b0:47:52:4c:f4:a1:db:2b:bc:07:3c:80: 65:15:13:05:07:ca:98:41:a0:18:7c:10:51:d8:0f: a3:d6:b9:2a:5a:7a:46:30:44:1f:bb:9d:54:6a:bd: 88:aa:7a:35:d2:40:ce:c0:72:50:89:9a:10:83:d3: b8:14:2f:28:56:7c:19:7d:c1:34:a5:f1:3a:96:34: 8d:b0:cb:60:01:5f:55:5b:5c:db:21:44:7c:66:53: 58:41:32:01:5c:9f:9b:d9:2c:88:1d:ce:da:7f:ff: c3:35:80:f8:29:a9:af:69:6b:80:93:53:91:65:d7: 12:8f:db:b7:b1:ae:cc:4d:83:d3:06:82:a6:aa:e8: aa:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:19:FC:F9:F0:55:C4:72:63:1B:2C:21:A9:49:0E:35:E2:E5:8A:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c6c4fe4-5642-4ad0-8325-69940b2ed04d/03311caa-eedc-35f5-b4a3-a502fc212a0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c6c4fe4-5642-4ad0-8325-69940b2ed04d/7c6c4fe4-5642-4ad0-8325-69940b2ed04d.crl X509v3 Authority Key Identifier: keyid:83:EA:7B:A7:EC:EF:C3:78:8A:A5:E9:EE:2C:4B:B3:1B:73:73:BC:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c6c4fe4-5642-4ad0-8325-69940b2ed04d.cer sbgp-ipAddrBlock: critical IPv4: 156.20.22.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:f7:75:06:50:24:07:09:23:2b:ea:60:cb:3b:99:27:1f:e1: b5:a1:37:ea:3a:b8:d9:b6:b9:1c:8a:d3:37:cf:fa:8e:ad:af: 55:a0:82:b5:b7:ec:8e:71:a1:b4:ba:ff:7e:cb:b5:7e:4e:0a: bc:ee:61:34:6e:c9:99:78:7a:95:61:c2:8a:cf:42:a0:3b:87: 9a:94:4a:8d:67:91:8e:0b:7d:19:b0:01:bb:77:26:d9:41:da: a1:fc:86:f5:e4:87:e9:84:d4:80:28:c8:70:3a:50:46:e9:e1: 3d:27:ee:da:12:31:7b:02:44:16:62:4c:a8:8c:0e:fc:7e:49: e0:a9:4e:80:e3:58:ba:6c:74:6a:38:92:a0:e6:a9:59:68:ec: 20:83:f5:52:14:58:88:82:b9:8a:39:a7:75:bb:4e:b4:a0:76: a4:67:09:43:85:0b:e2:43:1b:46:ef:1f:5c:04:f8:23:ee:5a: 63:81:d4:ff:9a:45:17:60:38:79:ea:2a:a7:d0:ea:cd:56:32: 21:84:16:aa:63:e3:78:5c:1b:3c:25:48:89:cd:a8:8a:c1:14: 51:0f:e7:4a:81:0d:12:ee:b7:36:6a:37:b5:9f:4c:49:e9:9b: 08:50:b2:93:bb:3a:b5:05:12:fe:40:b0:c8:bf:6b:92:76:f2: a1:93:84:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmrtKkxuL9Bhg9grwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2M2YzRmZTQtNTY0Mi00YWQwLTgzMjUtNjk5NDBiMmVk MDRkMB4XDTI1MDQyODAxMDA0OFoXDTI1MDcyNzAxMDA0OFowLzEtMCsGA1UEAxMk NDg2NGJhMDgtNzc4ZC00MjE1LThkZjMtODQzOTA2NzYzZWFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjlppSnIPN5v3PFSdjYPl5PyxKFHzpwJ1dKmr iQPVU34ihKFhjeKiAwaEsz0xWYKiGo2HB05YznmYYSXNyT8GWXe4VvXz94W3GP+8 LAqYX0viR+uyuxmgkcsUZtNXhfqUUCfEuwWtRB3C10IwwqSHBqLskLQZZOkQBY+w R1JM9KHbK7wHPIBlFRMFB8qYQaAYfBBR2A+j1rkqWnpGMEQfu51Uar2Iqno10kDO wHJQiZoQg9O4FC8oVnwZfcE0pfE6ljSNsMtgAV9VW1zbIUR8ZlNYQTIBXJ+b2SyI Hc7af//DNYD4KamvaWuAk1ORZdcSj9u3sa7MTYPTBoKmquiq/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAsZ/PnwVcRyYxssIalJDjXi5Yo0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi83YzZj NGZlNC01NjQyLTRhZDAtODMyNS02OTk0MGIyZWQwNGQvMDMzMTFjYWEtZWVkYy0z NWY1LWI0YTMtYTUwMmZjMjEyYTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvN2M2YzRmZTQtNTY0Mi00YWQwLTgz MjUtNjk5NDBiMmVkMDRkLzdjNmM0ZmU0LTU2NDItNGFkMC04MzI1LTY5OTQwYjJl ZDA0ZC5jcmwwHwYDVR0jBBgwFoAUg+p7p+zvw3iKpenuLEuzG3NzvFYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi83YzZjNGZlNC01NjQyLTRhZDAtODMyNS02OTk0 MGIyZWQwNGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnBQWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAv3dQZQJAcJIyvqYMs7mScf4bWhN+o6uNm2uRyK0zfP+o6tr1WggrW3 7I5xobS6/37LtX5OCrzuYTRuyZl4epVhworPQqA7h5qUSo1nkY4LfRmwAbt3JtlB 2qH8hvXkh+mE1IAoyHA6UEbp4T0n7toSMXsCRBZiTKiMDvx+SeCpToDjWLpsdGo4 kqDmqVlo7CCD9VIUWIiCuYo5p3W7TrSgdqRnCUOFC+JDG0bvH1wE+CPuWmOB1P+a RRdgOHnqKqfQ6s1WMiGEFqpj43hcGzwlSInNqIrBFFEP50qBDRLutzZqN7WfTEnp mwhQspO7OrUFEv5AsMi/a5J28qGThJw= -----END CERTIFICATE-----Generated at Mon May 5 14:38:46 2025 by rpki-client