$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a5e0fed5-af06-3fda-9888-efbccbcbd4b7.roa File: a5e0fed5-af06-3fda-9888-efbccbcbd4b7.roa (raw, json) Hash identifier: AJyZdbgxaec11TjUM6APo1FhoyWE/txpwRV4a4P57rw= Subject key identifier: CD:86:44:BC:B4:9B:F6:98:41:43:D8:6E:64:F0:14:16:0C:80:48:6A Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F43285849BF3F920A0BF0BB6966666768 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a5e0fed5-af06-3fda-9888-efbccbcbd4b7.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 20115 IP address blocks: 172.220.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:92:0a:0b:f0:bb:69:66:66:67:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=115488f3-807d-4f64-b8d3-c1f3fd9763b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f8:b6:e0:83:d9:bf:2d:ac:71:e3:4e:79:47: 20:4d:da:21:1a:e0:0a:d0:1e:86:4d:8b:6a:eb:44: ae:53:f9:54:89:af:7a:77:03:ba:1b:0e:16:52:d9: 4e:a0:a9:a4:fb:1e:c0:84:c4:da:49:26:4a:e8:a9: e1:ed:ed:54:45:18:e3:22:d2:e7:1a:49:f2:dd:07: 8a:3f:5d:41:7e:71:c9:ce:83:a6:45:87:13:1f:ed: f9:09:2c:00:5b:ec:78:32:de:21:51:2c:81:58:83: 05:70:4e:cb:1e:75:e5:99:41:b6:d2:b0:81:bf:13: 36:18:21:70:00:c1:8c:84:9e:18:ff:41:90:3c:9d: 02:d9:28:41:ff:69:a8:be:bb:49:bd:6f:a9:d9:2a: 6c:06:c0:81:84:bc:04:59:cd:57:69:79:e0:ab:37: 32:28:7a:bd:51:32:e6:a3:08:77:41:78:03:e9:c9: 20:bd:e0:48:de:38:aa:a9:54:dd:5d:65:2a:98:95: 03:85:df:bd:c5:db:b7:80:77:f3:49:d4:91:4b:50: 2b:04:a2:20:0b:3a:3f:cf:75:d4:a5:10:8a:8b:79: 11:57:e1:70:34:02:19:b8:12:1a:3a:a1:17:b7:e9: da:af:12:c7:d3:79:80:1b:c6:9a:ea:5a:f9:1e:46: 16:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:86:44:BC:B4:9B:F6:98:41:43:D8:6E:64:F0:14:16:0C:80:48:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a5e0fed5-af06-3fda-9888-efbccbcbd4b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv4: 172.220.192.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:c2:2f:10:bd:f5:45:b3:5c:fd:aa:33:31:02:e8:44:d0:2b: 72:c6:af:3b:1f:ea:ed:66:36:c8:99:41:df:8f:dc:44:c2:83: a0:6e:c9:e2:82:f0:df:12:44:71:a3:03:ad:2e:3a:9e:f2:3a: 38:92:17:2b:e6:eb:dc:af:7f:c2:c3:dc:20:74:df:4e:b9:22: 7b:73:be:f0:4e:ec:15:90:a1:5f:71:94:29:4a:27:d4:74:3d: 80:6b:da:c9:ab:8d:e2:0b:c5:64:b8:fc:2a:7d:a3:80:da:d8: a0:60:23:95:13:11:3c:41:cb:95:58:f8:62:13:13:70:94:09: 60:da:0f:4f:6c:bf:7d:5f:30:3e:7c:aa:2c:6b:bb:ca:52:7c: ea:1a:c8:a7:9a:1d:49:6c:c2:28:25:ce:49:df:09:92:e5:54: ae:07:24:49:02:c4:e3:26:ac:0f:82:68:93:af:2b:ca:4d:dc: 27:f1:a1:17:97:82:38:f1:7c:f1:27:ed:6c:10:ab:6e:0e:f5: 9b:c4:7a:89:f2:f1:64:0b:3e:88:a7:ef:0e:62:d7:8c:61:b0: ad:a1:46:68:1d:7f:a0:6a:90:b9:d6:d8:b3:ef:1f:a3:b2:10: 24:46:3d:e3:d1:30:ec:91:a5:77:f7:28:26:11:80:b2:5c:cc: b5:2e:92:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm/P5IKC/C7aWZmZ2gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk MTE1NDg4ZjMtODA3ZC00ZjY0LWI4ZDMtYzFmM2ZkOTc2M2IxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfi24IPZvy2sceNOeUcgTdohGuAK0B6GTYtq 60SuU/lUia96dwO6Gw4WUtlOoKmk+x7AhMTaSSZK6Knh7e1URRjjItLnGkny3QeK P11BfnHJzoOmRYcTH+35CSwAW+x4Mt4hUSyBWIMFcE7LHnXlmUG20rCBvxM2GCFw AMGMhJ4Y/0GQPJ0C2ShB/2movrtJvW+p2SpsBsCBhLwEWc1XaXngqzcyKHq9UTLm owh3QXgD6ckgveBI3jiqqVTdXWUqmJUDhd+9xdu3gHfzSdSRS1ArBKIgCzo/z3XU pRCKi3kRV+FwNAIZuBIaOqEXt+narxLH03mAG8aa6lr5HkYWdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM2GRLy0m/aYQUPYbmTwFBYMgEhqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvYTVlMGZlZDUtYWYwNi0z ZmRhLTk4ODgtZWZiY2NiY2JkNGI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGrNzAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACnCLxC99UWzXP2qMzEC6ETQK3LGrzsf6u1mNsiZQd+P3ETCg6BuyeKC 8N8SRHGjA60uOp7yOjiSFyvm69yvf8LD3CB03065IntzvvBO7BWQoV9xlClKJ9R0 PYBr2smrjeILxWS4/Cp9o4Da2KBgI5UTETxBy5VY+GITE3CUCWDaD09sv31fMD58 qixru8pSfOoayKeaHUlswiglzknfCZLlVK4HJEkCxOMmrA+CaJOvK8pN3CfxoReX gjjxfPEn7WwQq24O9ZvEeony8WQLPoin7w5i14xhsK2hRmgdf6BqkLnW2LPvH6Oy ECRGPePRMOyRpXf3KCYRgLJczLUuklU= -----END CERTIFICATE-----Generated at Tue May 6 13:38:56 2025 by rpki-client