$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/5ac4bd12-71ae-3569-8e8c-8f844d65b09e.roa File: 5ac4bd12-71ae-3569-8e8c-8f844d65b09e.roa (raw, json) Hash identifier: WN+hw3zcZqW3F9xcbmzhfjtt1jQNa+fNw2GT74kIdo8= Subject key identifier: 80:EF:CB:43:0B:81:85:57:46:CC:EA:FA:08:EE:1E:3D:90:21:15:46 Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F43285849BF3F69A12A4FBA4AA53C6280 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/5ac4bd12-71ae-3569-8e8c-8f844d65b09e.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 20115 IP address blocks: 172.223.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:69:a1:2a:4f:ba:4a:a5:3c:62:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=2a9de818-3d19-4bd3-83db-016b4280f22e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:63:32:47:88:06:39:8d:a3:11:82:92:d1:3b: d5:3a:30:c7:70:77:db:02:39:2c:09:bb:f3:74:de: f7:6a:98:f9:9f:1d:e3:7a:9f:35:1c:68:ed:00:9e: 6f:57:b9:35:1e:ce:c9:ae:03:3d:b5:06:aa:a1:30: 74:aa:72:1a:e1:74:72:30:9b:8e:cf:f6:e0:b7:7d: c8:bc:f5:b3:98:a1:ca:39:7f:26:1d:89:28:1a:96: 31:78:00:7c:d2:f8:7c:20:e8:d3:c0:40:9c:d2:b9: 4d:f8:c1:be:72:38:a4:15:36:1e:c9:38:2b:63:88: 58:17:53:e1:c4:16:90:b5:3f:d7:cc:51:98:f1:6d: b6:cc:41:28:9a:04:5e:b3:e0:56:e4:48:2f:01:cd: 59:73:81:1d:00:c9:d9:c1:60:68:39:94:98:fd:d0: bc:a1:62:bc:46:89:d7:5f:70:e4:48:dc:29:f6:b8: 30:77:4d:d2:05:fe:33:d2:c0:1e:b6:18:f5:d8:5d: 2f:35:3d:1d:aa:e7:43:1c:42:01:ee:e5:8b:c6:96: 3f:6d:01:17:ba:b6:74:a4:61:d3:ae:b3:3c:e1:3a: ba:08:7c:95:8a:c4:c1:bd:be:20:67:25:87:a2:83: 88:84:f8:40:4e:eb:00:52:34:a6:63:c6:f0:1b:f2: 64:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:EF:CB:43:0B:81:85:57:46:CC:EA:FA:08:EE:1E:3D:90:21:15:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/5ac4bd12-71ae-3569-8e8c-8f844d65b09e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv4: 172.223.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:2f:ea:12:71:d0:24:9b:43:59:91:0d:ed:d7:cd:f9:83:41: b5:ab:a2:25:93:6b:50:a7:f8:8d:8c:c5:1f:37:e5:bd:8f:40: fd:c4:9d:b7:64:37:59:22:86:da:41:99:48:27:bc:de:61:f1: fa:d5:0d:32:ec:e5:9e:44:ec:9d:db:86:c0:51:91:60:f1:30: e9:97:25:33:62:2d:3e:76:a5:95:38:7d:b8:6a:38:4c:d4:a7: de:c9:30:47:1a:93:b4:4f:2c:f8:15:1a:29:62:1b:76:b0:a9: 9f:a7:ff:8d:5a:2c:7b:18:68:57:e6:9d:a0:cf:e3:c5:b8:26: a9:bb:38:14:f5:ca:6d:d8:d1:33:bd:dc:18:a9:87:9a:96:30: f1:66:0d:92:4b:9a:c2:8e:7f:7e:fa:c1:e5:ad:2a:ae:87:79: f4:91:ca:fc:0b:a7:43:35:ca:3d:fa:9c:87:dc:5a:11:88:66: 56:2d:94:55:62:ab:b3:49:4a:6f:8e:05:f6:f8:91:b0:ba:85: 90:2b:d6:8c:b2:75:78:90:69:db:b5:da:96:58:c2:35:dd:a4: 11:fc:23:89:42:5d:03:7b:76:89:ea:ed:ea:b1:6a:07:79:a0: 43:5c:e8:41:2e:f3:ec:3b:f5:8a:72:9e:df:38:0a:f0:86:73: 72:eb:a5:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm/P2mhKk+6SqU8YoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk MmE5ZGU4MTgtM2QxOS00YmQzLTgzZGItMDE2YjQyODBmMjJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiWMyR4gGOY2jEYKS0TvVOjDHcHfbAjksCbvz dN73apj5nx3jep81HGjtAJ5vV7k1Hs7JrgM9tQaqoTB0qnIa4XRyMJuOz/bgt33I vPWzmKHKOX8mHYkoGpYxeAB80vh8IOjTwECc0rlN+MG+cjikFTYeyTgrY4hYF1Ph xBaQtT/XzFGY8W22zEEomgRes+BW5EgvAc1Zc4EdAMnZwWBoOZSY/dC8oWK8RonX X3DkSNwp9rgwd03SBf4z0sAethj12F0vNT0dqudDHEIB7uWLxpY/bQEXurZ0pGHT rrM84Tq6CHyVisTBvb4gZyWHooOIhPhATusAUjSmY8bwG/JklQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIDvy0MLgYVXRszq+gjuHj2QIRVGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvNWFjNGJkMTItNzFhZS0z NTY5LThlOGMtOGY4NDRkNjViMDllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGrN9AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACIv6hJx0CSbQ1mRDe3XzfmDQbWroiWTa1Cn+I2MxR835b2PQP3Enbdk N1kihtpBmUgnvN5h8frVDTLs5Z5E7J3bhsBRkWDxMOmXJTNiLT52pZU4fbhqOEzU p97JMEcak7RPLPgVGiliG3awqZ+n/41aLHsYaFfmnaDP48W4Jqm7OBT1ym3Y0TO9 3Biph5qWMPFmDZJLmsKOf376weWtKq6HefSRyvwLp0M1yj36nIfcWhGIZlYtlFVi q7NJSm+OBfb4kbC6hZAr1oyydXiQadu12pZYwjXdpBH8I4lCXQN7donq7eqxagd5 oENc6EEu8+w79Ypynt84CvCGc3LrpfA= -----END CERTIFICATE-----Generated at Tue May 6 22:36:55 2025 by rpki-client