$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/baff8d84-b104-358b-982d-5d770c0aa824.roa File: baff8d84-b104-358b-982d-5d770c0aa824.roa (raw, json) Hash identifier: WcN5m00g+13SAXQn7FysamCUMBr1TjGuNN9iUQChYm4= Subject key identifier: A9:E0:3B:72:CB:CE:F9:FD:24:5C:91:96:17:61:EE:F6:B8:74:57:43 Certificate issuer: /CN=cc3ad4cd-0893-42fc-a743-e36058983069 Certificate serial: 010D0C9F432858491AA6C2A5012BD10CEBA3F400 Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/baff8d84-b104-358b-982d-5d770c0aa824.roa Signing time: Fri 07 Mar 2025 02:00:39 +0000 ROA not before: Fri 07 Mar 2025 02:00:39 +0000 ROA not after: Thu 05 Jun 2025 01:00:39 +0000 asID: 15290 IP address blocks: 216.13.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1a:a6:c2:a5:01:2b:d1:0c:eb:a3:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069 Validity Not Before: Mar 7 02:00:39 2025 GMT Not After : Jun 5 01:00:39 2025 GMT Subject: CN=814bc8d6-02d3-4d55-89ce-3fd74befc368 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:a2:a4:94:7a:7a:cb:04:83:bd:09:03:bc:de: 41:ab:fa:4c:b1:c9:59:3b:ea:f6:43:7f:ba:0e:fa: f0:43:a1:9b:2e:0b:a8:8e:ad:35:ba:b8:96:1b:20: fb:02:fd:e3:74:87:65:4a:b1:34:a9:14:99:cd:e8: d0:5d:44:91:d4:37:b3:32:d2:e9:3b:af:23:4c:38: df:96:f7:77:26:0a:64:1c:2c:5d:e0:f6:93:01:a9: be:29:5e:7d:07:26:61:27:e7:4c:0f:47:1d:c8:bc: ec:d4:ab:cd:76:d7:37:04:f1:61:2b:8c:bf:0d:12: f4:de:e5:0b:28:62:86:ad:69:2b:3c:93:1c:26:11: 12:4e:b5:57:bd:89:f2:77:19:e5:d8:1c:df:3c:90: 4a:68:d6:d5:c3:5c:50:2e:23:dc:2a:d6:2d:99:94: 6f:b8:24:04:e0:fa:75:cb:7d:96:95:fb:3a:89:22: 9d:f9:d3:45:a3:3b:13:5b:03:ac:a5:43:1e:39:46: 72:a9:22:ee:99:85:f3:d3:94:01:03:0d:37:5e:4b: f9:c7:c8:41:5c:1e:84:d7:eb:81:83:f7:9f:c6:98: 3d:d2:f1:15:49:23:80:de:3c:f3:29:09:19:13:23: c7:d3:42:05:15:86:b3:29:1c:64:64:f6:58:9d:3c: f1:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:E0:3B:72:CB:CE:F9:FD:24:5C:91:96:17:61:EE:F6:B8:74:57:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/baff8d84-b104-358b-982d-5d770c0aa824.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl X509v3 Authority Key Identifier: keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer sbgp-ipAddrBlock: critical IPv4: 216.13.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:13:85:c3:34:58:58:0a:9e:0e:0e:c6:d1:76:d1:10:de:f1: f4:05:ce:1b:12:21:d9:46:bc:b5:19:3e:c6:c5:df:5f:3f:68: 2c:14:23:a5:0e:e3:ec:ab:c9:75:dd:fd:1f:d1:47:80:24:06: a9:55:24:0a:58:4c:d6:6b:45:e3:78:f8:b6:e6:3c:6a:a0:3c: fe:74:8a:2a:b5:15:1c:e8:47:03:2c:70:9b:99:ff:5b:23:31: 07:17:06:e5:97:41:83:b6:0a:59:e2:eb:f8:75:0e:9b:42:c7: 11:ae:1d:93:4b:f6:ef:67:88:41:d7:55:92:29:47:da:00:27: c1:64:13:0f:18:f2:17:32:26:dd:64:75:27:29:e1:b2:9f:0f: 3d:6c:78:5c:0b:22:e1:e9:d7:b7:8c:1f:dc:5f:ca:4f:27:f4: c3:29:a2:81:11:b3:f8:44:31:6b:4b:20:bc:93:f8:04:cd:a6: 1a:bc:e4:e5:42:23:e4:9d:c2:02:22:1b:cf:a2:82:f5:13:3a: 50:19:09:4a:89:98:6e:fd:ca:d6:84:97:19:f6:96:b0:69:e1: 51:bd:1b:38:55:00:07:88:f8:33:bf:ff:53:e8:5b:a4:25:46: 46:c2:80:82:fe:3e:aa:34:6f:36:c3:f4:cc:e0:fd:02:b8:0f: d3:e6:23:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkapsKlASvRDOuj9AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2MzYWQ0Y2QtMDg5My00MmZjLWE3NDMtZTM2MDU4OTgz MDY5MB4XDTI1MDMwNzAyMDAzOVoXDTI1MDYwNTAxMDAzOVowLzEtMCsGA1UEAxMk ODE0YmM4ZDYtMDJkMy00ZDU1LTg5Y2UtM2ZkNzRiZWZjMzY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7qKklHp6ywSDvQkDvN5Bq/pMsclZO+r2Q3+6 DvrwQ6GbLguojq01uriWGyD7Av3jdIdlSrE0qRSZzejQXUSR1DezMtLpO68jTDjf lvd3JgpkHCxd4PaTAam+KV59ByZhJ+dMD0cdyLzs1KvNdtc3BPFhK4y/DRL03uUL KGKGrWkrPJMcJhESTrVXvYnydxnl2BzfPJBKaNbVw1xQLiPcKtYtmZRvuCQE4Pp1 y32Wlfs6iSKd+dNFozsTWwOspUMeOUZyqSLumYXz05QBAw03Xkv5x8hBXB6E1+uB g/efxpg90vEVSSOA3jzzKQkZEyPH00IFFYazKRxkZPZYnTzxlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKngO3LLzvn9JFyRlhdh7va4dFdDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jYzNh ZDRjZC0wODkzLTQyZmMtYTc0My1lMzYwNTg5ODMwNjkvYmFmZjhkODQtYjEwNC0z NThiLTk4MmQtNWQ3NzBjMGFhODI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2MzYWQ0Y2QtMDg5My00MmZjLWE3 NDMtZTM2MDU4OTgzMDY5L2NjM2FkNGNkLTA4OTMtNDJmYy1hNzQzLWUzNjA1ODk4 MzA2OS5jcmwwHwYDVR0jBBgwFoAU0BkzYCA5uLEoc26e1umhhrVK+64wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jYzNhZDRjZC0wODkzLTQyZmMtYTc0My1lMzYw NTg5ODMwNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2A14MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHsThcM0WFgKng4OxtF20RDe8fQFzhsSIdlGvLUZPsbF318/aCwUI6UO 4+yryXXd/R/RR4AkBqlVJApYTNZrReN4+LbmPGqgPP50iiq1FRzoRwMscJuZ/1sj MQcXBuWXQYO2Clni6/h1DptCxxGuHZNL9u9niEHXVZIpR9oAJ8FkEw8Y8hcyJt1k dScp4bKfDz1seFwLIuHp17eMH9xfyk8n9MMpooERs/hEMWtLILyT+ATNphq85OVC I+SdwgIiG8+igvUTOlAZCUqJmG79ytaElxn2lrBp4VG9GzhVAAeI+DO//1PoW6Ql RkbCgIL+Pqo0bzbD9Mzg/QK4D9PmI+U= -----END CERTIFICATE-----Generated at Sun May 11 00:44:04 2025 by rpki-client