$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a24a5b45-65e4-3787-acd8-b655e54a2021.roa File: a24a5b45-65e4-3787-acd8-b655e54a2021.roa (raw, json) Hash identifier: pc/0d5H9pxjknFF1QwM9+eH4pu2HyX6jbIuK22SpjKc= Subject key identifier: AD:08:AB:4F:92:DA:42:04:12:42:66:C9:4C:AC:55:8D:5C:0D:14:84 Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F43285849BF3F69AFC59BDCA711B422F0 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a24a5b45-65e4-3787-acd8-b655e54a2021.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 20115 IP address blocks: 172.223.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:69:af:c5:9b:dc:a7:11:b4:22:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=9c7475d5-7ae5-4ca3-9e4b-c0f10e6a34b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:75:c8:b5:7b:7c:25:a4:7d:ca:48:0d:b9:2a: 30:9b:a7:6d:47:5d:3e:c7:00:71:fe:0c:5e:e6:60: 5a:10:66:59:61:8f:9b:53:6f:af:42:76:c5:d6:c8: 06:f3:d0:39:ed:85:97:84:11:6d:4a:d8:60:36:1a: 18:5e:f7:b4:95:f2:a1:58:93:be:87:2a:bb:9d:fe: 9f:40:48:aa:60:c6:d6:66:92:8a:8e:c5:12:f4:7a: 04:e2:7e:81:d7:ff:43:2d:cb:00:43:8e:a8:73:ba: f0:ef:d5:13:bc:50:eb:61:f7:22:43:c1:cd:62:85: c3:ef:d2:c1:53:a6:72:a9:e8:9e:05:36:5f:1c:ec: 2f:34:0b:17:ca:99:22:cc:ed:1e:d0:71:bd:1e:29: ee:04:0d:af:48:bf:b4:e6:f0:ee:85:c9:12:f6:b5: 25:98:0e:d7:a5:f3:f5:57:19:68:b7:67:42:6a:5c: 32:ca:f0:78:20:74:58:be:38:6e:a1:d8:39:13:c0: db:cd:39:7f:82:4e:dc:d4:64:4e:2c:bb:f7:c8:5b: eb:e9:42:88:f1:a6:aa:a3:bc:45:97:f4:97:24:ff: 42:bb:cb:e1:cb:9b:a3:86:b2:b2:92:f9:39:02:4f: 28:03:01:ee:06:f5:99:07:40:ac:f4:47:7f:86:48: 1b:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:08:AB:4F:92:DA:42:04:12:42:66:C9:4C:AC:55:8D:5C:0D:14:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a24a5b45-65e4-3787-acd8-b655e54a2021.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv4: 172.223.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:c6:ce:b3:a1:42:50:0f:f2:21:d2:40:cd:ca:52:da:ab:e5: cb:dd:36:72:84:9c:bd:6c:75:83:60:7f:e1:0d:8c:ba:f5:23: fe:3a:3a:68:b1:6b:2f:d5:25:cc:ec:65:62:7c:71:1e:55:c7: 44:07:51:eb:72:cf:62:51:f1:b9:2e:57:e0:64:38:88:fb:09: 07:a1:f9:53:50:72:f6:26:fe:ac:40:d6:2b:1e:ed:33:a7:62: bf:0e:db:ff:d0:12:37:6a:f2:37:f3:ea:f2:d1:74:25:0f:90: 2f:64:d9:98:ed:f1:f7:af:8f:99:46:95:e3:1c:0d:99:6b:83: 3f:24:a7:35:f3:3b:9a:19:70:d8:73:ce:25:58:f3:3c:fc:c5: 7c:20:a5:87:be:f6:90:ac:b1:52:69:e4:7c:2a:a6:9a:92:4b: 0e:83:a4:23:a3:57:48:ae:0b:35:1f:ed:98:df:e0:eb:96:b9: 15:5b:00:20:ea:de:f5:c1:ee:0c:89:f2:21:9c:d2:70:35:e1: 4f:6a:83:ce:61:ac:91:6e:5a:2a:62:14:75:0e:b0:57:3b:a5: 65:30:d5:f1:b1:dd:4b:19:e6:c5:c9:7d:ae:c5:c1:21:ce:0d: 2c:3d:9f:51:0a:9d:1e:8d:1d:db:fa:47:91:c6:a3:2e:bb:d0: fd:a5:eb:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm/P2mvxZvcpxG0IvAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk OWM3NDc1ZDUtN2FlNS00Y2EzLTllNGItYzBmMTBlNmEzNGI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2XXItXt8JaR9ykgNuSowm6dtR10+xwBx/gxe 5mBaEGZZYY+bU2+vQnbF1sgG89A57YWXhBFtSthgNhoYXve0lfKhWJO+hyq7nf6f QEiqYMbWZpKKjsUS9HoE4n6B1/9DLcsAQ46oc7rw79UTvFDrYfciQ8HNYoXD79LB U6ZyqeieBTZfHOwvNAsXypkizO0e0HG9HinuBA2vSL+05vDuhckS9rUlmA7XpfP1 Vxlot2dCalwyyvB4IHRYvjhuodg5E8DbzTl/gk7c1GROLLv3yFvr6UKI8aaqo7xF l/SXJP9Cu8vhy5ujhrKykvk5Ak8oAwHuBvWZB0Cs9Ed/hkgbuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK0Iq0+S2kIEEkJmyUysVY1cDRSEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvYTI0YTViNDUtNjVlNC0z Nzg3LWFjZDgtYjY1NWU1NGEyMDIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFrN+AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB3GzrOhQlAP8iHSQM3KUtqr5cvdNnKEnL1sdYNgf+ENjLr1I/46Omix ay/VJczsZWJ8cR5Vx0QHUetyz2JR8bkuV+BkOIj7CQeh+VNQcvYm/qxA1ise7TOn Yr8O2//QEjdq8jfz6vLRdCUPkC9k2Zjt8fevj5lGleMcDZlrgz8kpzXzO5oZcNhz ziVY8zz8xXwgpYe+9pCssVJp5HwqppqSSw6DpCOjV0iuCzUf7Zjf4OuWuRVbACDq 3vXB7gyJ8iGc0nA14U9qg85hrJFuWipiFHUOsFc7pWUw1fGx3UsZ5sXJfa7FwSHO DSw9n1EKnR6NHdv6R5HGoy670P2l6yo= -----END CERTIFICATE-----Generated at Tue May 6 13:20:12 2025 by rpki-client