$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/b93ec95e-7693-3c4e-8a1d-9271bf6f7c9c.roa File: b93ec95e-7693-3c4e-8a1d-9271bf6f7c9c.roa (raw, json) Hash identifier: iKny+wChstyoheN35H4U7fumJhe1O1Wn9Bu0zwP/imE= Subject key identifier: C1:D6:BF:40:BB:01:05:0A:1B:81:2D:43:1A:33:D4:3E:F7:BC:1E:5C Certificate issuer: /CN=71ea89b4-ed85-463f-83d9-8453300bf2bd Certificate serial: 010D0C9F43285849AD1A081083046EEFB435DF00 Authority key identifier: 00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/b93ec95e-7693-3c4e-8a1d-9271bf6f7c9c.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 7862 IP address blocks: 146.23.220.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:08:10:83:04:6e:ef:b4:35:df:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71ea89b4-ed85-463f-83d9-8453300bf2bd Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=4ddaed10-56f0-4ba4-b679-f1f07a6373b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:93:bd:4b:c8:f3:22:ed:b2:bd:f3:c3:a4:ce: 99:d6:20:f0:21:b1:c5:de:e0:92:e1:1a:dc:5a:68: 9b:ed:df:89:2d:9d:33:c8:a7:65:95:d9:6d:87:57: 76:32:9d:c1:51:7d:fa:c5:c4:5c:7c:58:29:b6:da: b2:0f:71:04:16:f3:34:8f:4e:53:e7:83:7c:22:3f: bb:ba:5b:de:08:42:ff:e3:9f:f6:26:fc:ec:9d:4e: 70:16:7b:fc:b9:a4:e7:4d:83:81:91:cc:a2:e0:7b: bc:a2:ba:aa:4e:3b:f1:56:9d:e5:d3:f4:10:45:8c: 24:2b:51:ed:8d:a8:6f:35:76:0b:03:e0:43:64:ad: bf:0c:04:34:e2:ab:6b:56:9b:88:fb:9e:50:e5:75: 6c:a5:dc:df:4a:d8:bd:94:72:71:99:d2:42:11:19: 71:7f:3e:76:3d:eb:d6:ad:da:66:ed:b6:4d:92:ab: 1c:85:87:61:ad:ff:34:21:ff:53:9e:b6:f0:43:12: c7:60:bd:e3:29:f5:b3:ea:ae:03:c1:ec:d9:59:33: 73:5f:a7:db:50:86:0f:46:d7:d5:ff:0d:92:f8:29: d0:6c:96:59:08:09:7b:d9:6b:2b:08:59:b9:92:c7: 4b:78:8d:b1:03:71:bb:54:44:bb:42:f5:71:30:82: a0:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:D6:BF:40:BB:01:05:0A:1B:81:2D:43:1A:33:D4:3E:F7:BC:1E:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/b93ec95e-7693-3c4e-8a1d-9271bf6f7c9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.crl X509v3 Authority Key Identifier: keyid:00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer sbgp-ipAddrBlock: critical IPv4: 146.23.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:62:27:d5:4f:64:d8:d5:4b:87:66:bf:3c:22:89:8e:35:7c: e6:cf:4f:39:f7:65:01:6b:61:1b:1d:f3:19:c7:a5:77:2f:11: bf:2f:77:f1:fa:54:c3:21:67:db:ab:64:6b:16:12:47:06:7c: 6c:1c:90:7b:57:8a:71:24:b9:ef:bd:33:0a:1c:0c:8d:82:09: 64:e1:63:c6:09:58:e2:cd:20:a0:88:b5:a5:ad:bb:c8:24:cb: bd:7f:75:f7:f0:d2:60:84:b3:1d:23:d7:44:5b:99:46:45:72: 58:db:6b:24:25:aa:a4:23:30:8f:f0:d3:fb:52:3e:14:74:0f: 5a:28:cd:1e:25:db:37:f0:59:a9:6e:4e:ff:35:86:8c:88:2c: 0a:db:9b:b3:13:a2:c0:40:3b:d3:92:4d:a6:98:f6:ff:ed:44: e1:ef:80:24:5c:9c:7c:2a:27:a9:e7:b1:8f:c3:24:48:fa:04: 99:f6:52:90:5e:c6:c1:9b:76:cb:b6:59:5f:0f:bf:f6:b8:9a: 70:f1:bf:4a:fb:eb:85:f9:92:79:0d:ec:2e:f7:89:cc:33:a8: 9f:77:ee:1c:b8:ee:28:86:9a:0f:e6:0c:64:3a:a4:e5:aa:5d: 25:e4:4e:7e:d9:47:19:f0:c0:ca:cf:73:38:fc:70:87:0e:8b: 13:ed:fb:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmtGggQgwRu77Q13wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzFlYTg5YjQtZWQ4NS00NjNmLTgzZDktODQ1MzMwMGJm MmJkMB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk NGRkYWVkMTAtNTZmMC00YmE0LWI2NzktZjFmMDdhNjM3M2I3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZO9S8jzIu2yvfPDpM6Z1iDwIbHF3uCS4Rrc Wmib7d+JLZ0zyKdlldlth1d2Mp3BUX36xcRcfFgpttqyD3EEFvM0j05T54N8Ij+7 ulveCEL/45/2JvzsnU5wFnv8uaTnTYOBkcyi4Hu8orqqTjvxVp3l0/QQRYwkK1Ht jahvNXYLA+BDZK2/DAQ04qtrVpuI+55Q5XVspdzfSti9lHJxmdJCERlxfz52PevW rdpm7bZNkqschYdhrf80If9TnrbwQxLHYL3jKfWz6q4DwezZWTNzX6fbUIYPRtfV /w2S+CnQbJZZCAl72WsrCFm5ksdLeI2xA3G7VES7QvVxMIKgpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMHWv0C7AQUKG4EtQxoz1D73vB5cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83MWVh ODliNC1lZDg1LTQ2M2YtODNkOS04NDUzMzAwYmYyYmQvYjkzZWM5NWUtNzY5My0z YzRlLThhMWQtOTI3MWJmNmY3YzljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNzFlYTg5YjQtZWQ4NS00NjNmLTgz ZDktODQ1MzMwMGJmMmJkLzcxZWE4OWI0LWVkODUtNDYzZi04M2Q5LTg0NTMzMDBi ZjJiZC5jcmwwHwYDVR0jBBgwFoAUAPoosGNeNAxamY5KWp40aTpaVmIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC83MWVhODliNC1lZDg1LTQ2M2YtODNkOS04NDUz MzAwYmYyYmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCkhfcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKxiJ9VPZNjVS4dmvzwiiY41fObPTzn3ZQFrYRsd8xnHpXcvEb8vd/H6 VMMhZ9urZGsWEkcGfGwckHtXinEkue+9MwocDI2CCWThY8YJWOLNIKCItaWtu8gk y71/dffw0mCEsx0j10RbmUZFcljbayQlqqQjMI/w0/tSPhR0D1oozR4l2zfwWalu Tv81hoyILArbm7MTosBAO9OSTaaY9v/tROHvgCRcnHwqJ6nnsY/DJEj6BJn2UpBe xsGbdsu2WV8Pv/a4mnDxv0r764X5knkN7C73icwzqJ937hy47iiGmg/mDGQ6pOWq XSXkTn7ZRxnwwMrPczj8cIcOixPt+5I= -----END CERTIFICATE-----Generated at Mon May 12 05:33:44 2025 by rpki-client