$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/20daa57e-6e7f-3026-95b0-e7896bc91c38.roa File: 20daa57e-6e7f-3026-95b0-e7896bc91c38.roa (raw, json) Hash identifier: A+jIAL3xWNfvXf7Mg8yMH7IDr9g3d4i2Onww8ib9I2s= Subject key identifier: 3B:6D:0C:AE:0C:1E:F9:54:AC:06:DB:76:12:5B:28:CB:C5:58:5F:18 Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F43285849BF3F91ECC6075875624BF2E8 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/20daa57e-6e7f-3026-95b0-e7896bc91c38.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 20115 IP address blocks: 172.220.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:91:ec:c6:07:58:75:62:4b:f2:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=97daa2db-2a78-415c-9ee0-a9bf9d290081 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:94:9d:cc:4a:0e:32:a9:23:c6:ac:a5:12:89: 11:a7:6e:34:1a:8f:51:d1:0f:ce:4f:5f:da:fb:59: 7b:5a:dc:ad:52:90:4c:c3:eb:a4:c5:5f:e4:bc:2b: 03:0a:ad:de:b7:e5:3a:25:3d:5a:09:45:61:b2:bf: 0f:0d:2a:4d:02:e0:10:1c:10:a1:28:98:39:3d:00: 69:66:d6:d8:03:e6:e4:52:7d:a9:23:57:a7:ee:5d: 3a:92:7f:20:6b:3d:b9:66:e4:1e:70:1e:26:d3:eb: 90:7c:f0:13:45:1b:94:0e:ab:d0:f1:41:6a:7b:7b: fe:a9:63:c2:9a:91:fa:82:a9:ab:e5:d8:af:18:13: 44:ec:a9:c1:90:b4:6d:83:cd:db:0c:3b:93:f5:1c: 38:94:a4:0e:5f:f4:9f:18:8e:d6:9a:1b:f0:0c:71: 5c:62:9c:9d:5c:0a:65:11:0f:72:90:46:76:c8:13: 22:4f:ce:5c:b3:69:4f:0d:c7:fd:78:4d:d1:74:9a: 9d:33:16:ac:0a:12:f0:0d:a4:00:7e:e6:70:ad:38: c8:1a:01:e8:ea:b5:2a:64:f3:2d:a0:88:34:fc:56: 83:e2:15:c8:1d:fd:8d:a1:ee:f8:c1:a5:63:18:08: ca:ae:64:de:88:be:17:f9:6d:9a:5b:08:2e:12:1c: 3a:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:6D:0C:AE:0C:1E:F9:54:AC:06:DB:76:12:5B:28:CB:C5:58:5F:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/20daa57e-6e7f-3026-95b0-e7896bc91c38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv4: 172.220.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:1d:75:f4:58:b5:de:d6:49:1f:bd:60:5a:46:5e:d5:47:86: a5:64:81:c2:1d:ec:b0:c4:49:c5:a7:a3:23:37:09:08:76:79: 55:83:9c:e9:6f:35:6e:42:7b:bd:60:92:3c:23:27:62:8d:60: 86:f8:c1:68:7e:81:a1:7f:21:35:c7:0a:0b:64:cc:b4:cf:05: 99:8d:8b:ad:35:8d:06:49:46:45:6d:d7:11:e5:48:7b:3e:4a: 1c:96:8a:70:b8:cf:85:18:89:15:b6:34:84:48:89:92:da:a2: 6e:bb:f8:f4:69:6f:68:02:f7:bb:92:d6:d6:1a:44:8c:ed:3d: 9a:22:71:29:54:c4:50:ab:72:07:93:b9:fa:a0:78:ef:5d:10: 5b:f5:fd:7a:31:6b:ff:36:55:8e:f8:d5:25:e2:8c:e7:b8:73: ec:72:be:a8:be:1b:da:92:af:cc:3c:3e:3e:6e:f7:47:ea:9f: 00:01:44:46:fa:40:fd:35:24:d3:8a:60:cc:ca:21:82:6d:8b: 11:ce:7d:7d:d5:6f:63:d8:48:e6:b8:19:70:0c:10:02:37:35: 49:45:82:30:d4:66:77:01:72:7b:5e:80:c5:aa:6e:aa:4e:cd: 7c:48:10:ac:89:53:31:19:f7:e6:14:bd:c1:9d:cb:a2:da:fc: 16:71:74:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm/P5HsxgdYdWJL8ugwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk OTdkYWEyZGItMmE3OC00MTVjLTllZTAtYTliZjlkMjkwMDgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5SdzEoOMqkjxqylEokRp240Go9R0Q/OT1/a +1l7WtytUpBMw+ukxV/kvCsDCq3et+U6JT1aCUVhsr8PDSpNAuAQHBChKJg5PQBp ZtbYA+bkUn2pI1en7l06kn8gaz25ZuQecB4m0+uQfPATRRuUDqvQ8UFqe3v+qWPC mpH6gqmr5divGBNE7KnBkLRtg83bDDuT9Rw4lKQOX/SfGI7WmhvwDHFcYpydXApl EQ9ykEZ2yBMiT85cs2lPDcf9eE3RdJqdMxasChLwDaQAfuZwrTjIGgHo6rUqZPMt oIg0/FaD4hXIHf2Noe74waVjGAjKrmTeiL4X+W2aWwguEhw6fQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDttDK4MHvlUrAbbdhJbKMvFWF8YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvMjBkYWE1N2UtNmU3Zi0z MDI2LTk1YjAtZTc4OTZiYzkxYzM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGrNyAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGoddfRYtd7WSR+9YFpGXtVHhqVkgcId7LDEScWnoyM3CQh2eVWDnOlv NW5Ce71gkjwjJ2KNYIb4wWh+gaF/ITXHCgtkzLTPBZmNi601jQZJRkVt1xHlSHs+ ShyWinC4z4UYiRW2NIRIiZLaom67+PRpb2gC97uS1tYaRIztPZoicSlUxFCrcgeT ufqgeO9dEFv1/Xoxa/82VY741SXijOe4c+xyvqi+G9qSr8w8Pj5u90fqnwABREb6 QP01JNOKYMzKIYJtixHOfX3Vb2PYSOa4GXAMEAI3NUlFgjDUZncBcntegMWqbqpO zXxIEKyJUzEZ9+YUvcGdy6La/BZxdFo= -----END CERTIFICATE-----Generated at Tue May 6 15:38:38 2025 by rpki-client