$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/9c42a073-036c-3eda-9504-2ea2f4a79e70.roa File: 9c42a073-036c-3eda-9504-2ea2f4a79e70.roa (raw, json) Hash identifier: GpX/fETdIiwHGIio1Jln9l6iPE3HsSyUCJMzeL0dnMs= Subject key identifier: 08:32:6B:90:57:77:3C:DA:20:07:78:74:07:CA:B5:12:8E:B8:39:4F Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F43285849BF3F6A2457EE3C8DBA21A540 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/9c42a073-036c-3eda-9504-2ea2f4a79e70.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 20115 IP address blocks: 174.81.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:6a:24:57:ee:3c:8d:ba:21:a5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=5f69f45b-62f6-4dff-9b19-c23eeae9d0df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f9:f8:42:97:b3:8d:aa:17:c5:dc:f0:4f:ba: 6e:db:a1:70:72:9e:f0:e8:6c:96:cd:70:73:20:71: df:e2:20:ff:32:7c:97:1a:19:82:c3:42:56:b1:ff: 42:73:da:af:20:fc:2b:23:97:69:59:e7:04:d6:29: a8:ce:07:31:1d:ab:0a:b1:50:fc:01:3e:cc:13:5e: 7b:09:9c:61:74:6f:f7:00:b8:8d:08:cf:c5:84:ba: 33:8c:9c:a3:b4:37:96:20:a4:73:32:eb:d9:ab:6f: dd:08:d6:e5:11:cb:29:f4:ec:ef:2c:28:cb:7a:b9: b4:2b:e6:cc:0c:ff:74:21:52:fc:fa:f5:bc:47:33: aa:97:9e:48:a4:b1:29:ab:99:59:b9:cc:f3:55:fa: 88:e3:3a:d7:05:50:82:6b:de:5c:74:86:89:c7:25: 71:0e:0c:28:3e:ee:a3:bb:92:f7:8e:9e:6e:ff:3b: 2d:97:44:42:f7:46:e6:45:d1:6e:15:cb:41:4d:7a: b9:d4:cb:e1:7f:3d:c6:a2:5b:c1:fb:be:79:d2:c6: 3e:bd:4d:8f:f3:12:a5:27:11:f5:6b:98:ad:3f:d2: 97:33:34:aa:a9:58:d8:71:0c:c8:a4:3a:18:7a:b6: ba:66:22:34:4b:da:f9:aa:81:08:fb:4b:bf:57:d3: cd:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:32:6B:90:57:77:3C:DA:20:07:78:74:07:CA:B5:12:8E:B8:39:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/9c42a073-036c-3eda-9504-2ea2f4a79e70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv4: 174.81.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:a9:6a:f6:8a:1b:e6:a8:c1:9f:2c:2c:aa:e0:87:83:1b:52: a6:3d:4c:44:f8:cc:f8:77:e6:16:60:42:38:2a:a6:8b:d2:1c: 5c:1d:17:dc:0e:a0:49:4b:f1:77:1d:0b:ab:e9:81:73:60:41: bb:06:3d:56:61:41:08:b4:5b:47:23:f4:8b:41:4e:70:b2:6f: 35:0e:93:9e:fc:68:6a:05:3a:0c:25:7a:22:75:2c:a0:93:ac: 83:40:7c:dc:0b:05:64:4b:98:7b:45:5c:eb:fd:54:70:96:e6: 14:76:5d:eb:b6:cd:2e:40:09:2a:c9:0c:82:65:9f:8a:25:16: af:82:04:94:a5:ab:67:38:9a:20:42:e8:d3:86:2f:51:13:f1: a8:95:13:e2:e2:c4:34:79:01:f2:61:04:62:bf:b0:0c:4a:56: 7d:7e:ed:06:0c:dc:1e:f8:51:9a:e9:74:e6:24:d3:24:28:07: f6:f7:d7:94:6e:7c:1e:4e:a0:05:9a:6c:16:a0:5f:74:1e:32: d9:36:c0:e1:c1:97:9e:89:ad:25:3b:a9:07:e1:46:21:ac:b3: 10:99:6a:5c:f2:f7:37:b4:61:bb:73:7d:b0:30:e7:51:4a:ae: ac:b2:94:47:b0:60:86:a8:01:da:71:94:56:65:20:9d:1c:9c: e0:61:f5:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm/P2okV+48jbohpUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk NWY2OWY0NWItNjJmNi00ZGZmLTliMTktYzIzZWVhZTlkMGRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/n4QpezjaoXxdzwT7pu26Fwcp7w6GyWzXBz IHHf4iD/MnyXGhmCw0JWsf9Cc9qvIPwrI5dpWecE1imozgcxHasKsVD8AT7ME157 CZxhdG/3ALiNCM/FhLozjJyjtDeWIKRzMuvZq2/dCNblEcsp9OzvLCjLerm0K+bM DP90IVL8+vW8RzOql55IpLEpq5lZuczzVfqI4zrXBVCCa95cdIaJxyVxDgwoPu6j u5L3jp5u/zstl0RC90bmRdFuFctBTXq51Mvhfz3GolvB+7550sY+vU2P8xKlJxH1 a5itP9KXMzSqqVjYcQzIpDoYera6ZiI0S9r5qoEI+0u/V9PNQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAgya5BXdzzaIAd4dAfKtRKOuDlPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvOWM0MmEwNzMtMDM2Yy0z ZWRhLTk1MDQtMmVhMmY0YTc5ZTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFrlHgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJOpavaKG+aowZ8sLKrgh4MbUqY9TET4zPh35hZgQjgqpovSHFwdF9wO oElL8XcdC6vpgXNgQbsGPVZhQQi0W0cj9ItBTnCybzUOk578aGoFOgwleiJ1LKCT rINAfNwLBWRLmHtFXOv9VHCW5hR2Xeu2zS5ACSrJDIJln4olFq+CBJSlq2c4miBC 6NOGL1ET8aiVE+LixDR5AfJhBGK/sAxKVn1+7QYM3B74UZrpdOYk0yQoB/b315Ru fB5OoAWabBagX3QeMtk2wOHBl56JrSU7qQfhRiGssxCZalzy9ze0YbtzfbAw51FK rqyylEewYIaoAdpxlFZlIJ0cnOBh9aU= -----END CERTIFICATE-----Generated at Tue May 6 18:22:28 2025 by rpki-client