$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/b8e7b7b8-3ccf-3db8-8b83-1993b0dc718b.roa File: b8e7b7b8-3ccf-3db8-8b83-1993b0dc718b.roa (raw, json) Hash identifier: qabh5OVv6i+n8JWgt9diQ5YZqai4OLmXl7cb0zEtDks= Subject key identifier: 7D:78:79:97:D7:63:9E:7B:AD:6F:BE:F5:A0:0F:F3:43:F5:A8:A7:C4 Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F43285849BF3F923349218F4C5501C500 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/b8e7b7b8-3ccf-3db8-8b83-1993b0dc718b.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 20115 IP address blocks: 172.221.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:92:33:49:21:8f:4c:55:01:c5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=b221ac35-3fa5-4986-aa97-40b823a99157 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:6c:28:de:f7:95:2f:08:70:9e:5e:b6:71:5b: b9:00:3c:fa:f0:3c:66:98:de:3b:4e:b1:2b:9e:bd: 6f:84:b1:4b:d0:3b:5f:b8:f8:4d:26:a8:fb:b1:df: cd:df:82:ec:55:2f:8e:85:1f:17:9e:3d:57:5f:f9: a3:e5:69:31:a3:3e:0d:be:42:ea:ae:7b:86:80:5e: 41:d9:e9:0c:c7:d0:d2:8c:c8:31:2d:7a:6e:db:10: b7:9d:e6:a0:34:86:56:e6:dd:1a:73:0f:3b:06:6e: 9f:39:2b:a4:e7:15:80:78:5e:4c:41:d3:bf:1c:d5: 3f:7c:92:56:92:ef:56:0e:bc:97:5a:7c:2b:a5:d4: 90:27:61:5c:da:b0:f2:78:0a:0a:02:df:77:57:f5: 0d:58:25:15:07:63:50:43:43:c1:38:a0:16:ff:b4: ae:d6:1a:ae:ae:bf:1e:31:80:23:7a:12:d9:a3:62: f4:8e:5f:25:27:11:10:3e:96:da:e7:95:bc:e2:78: 35:21:60:1d:a0:95:9e:34:32:51:bf:e5:8a:b5:b1: f0:4d:6f:eb:dd:69:4f:75:ab:fe:46:09:ea:ff:18: 8b:bd:47:80:18:f3:26:0c:67:f1:29:f6:f8:0b:a0: 44:43:f9:95:21:3d:9b:1a:3d:ef:b2:86:fc:74:8b: aa:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:78:79:97:D7:63:9E:7B:AD:6F:BE:F5:A0:0F:F3:43:F5:A8:A7:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/b8e7b7b8-3ccf-3db8-8b83-1993b0dc718b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv4: 172.221.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:09:bc:1f:28:18:c7:84:07:76:60:79:2f:e2:f5:3a:8d:69: 96:33:ef:ec:06:10:a2:eb:51:12:0e:8a:cf:48:85:99:bf:51: 4b:8a:4f:77:df:19:b9:9b:a7:a6:f2:a2:6b:9c:42:0a:78:e6: a8:ee:e6:5c:7e:d0:92:11:de:f3:01:6f:15:73:13:f9:4f:fb: 78:e4:26:09:21:51:4c:01:c0:d3:b4:29:05:f2:8b:95:37:b9: 70:d7:83:a1:3b:21:e9:19:fb:59:95:8a:3d:84:67:73:21:ef: 6f:97:9f:8d:6f:2e:dd:77:97:48:e4:94:07:9d:2c:33:9d:ec: 52:73:eb:90:ea:f8:b8:e1:06:89:eb:d6:c7:6c:08:7a:8b:3f: 7e:49:b7:87:f8:05:dc:d1:40:3c:57:3e:b8:35:87:77:65:42: 95:80:71:9e:87:2a:e0:94:0d:e3:4a:1a:ed:80:7b:9b:26:e2: 70:7b:70:fe:11:4b:d0:f6:84:b3:48:3c:1e:90:3f:7e:52:a1: 49:b2:6d:24:4a:db:15:98:16:d0:19:b1:cc:dc:cf:e6:4e:6e: a4:40:57:23:87:6a:43:21:2f:43:b3:6c:f5:2e:c3:1f:60:20: 61:bd:6f:5c:18:eb:8e:4c:c6:2d:e0:f6:49:ec:a8:1b:5a:5f: a2:ba:e5:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm/P5IzSSGPTFUBxQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk YjIyMWFjMzUtM2ZhNS00OTg2LWFhOTctNDBiODIzYTk5MTU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Wwo3veVLwhwnl62cVu5ADz68DxmmN47TrEr nr1vhLFL0DtfuPhNJqj7sd/N34LsVS+OhR8Xnj1XX/mj5Wkxoz4NvkLqrnuGgF5B 2ekMx9DSjMgxLXpu2xC3neagNIZW5t0acw87Bm6fOSuk5xWAeF5MQdO/HNU/fJJW ku9WDryXWnwrpdSQJ2Fc2rDyeAoKAt93V/UNWCUVB2NQQ0PBOKAW/7Su1hqurr8e MYAjehLZo2L0jl8lJxEQPpba55W84ng1IWAdoJWeNDJRv+WKtbHwTW/r3WlPdav+ Rgnq/xiLvUeAGPMmDGfxKfb4C6BEQ/mVIT2bGj3vsob8dIuqwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH14eZfXY557rW++9aAP80P1qKfEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvYjhlN2I3YjgtM2NjZi0z ZGI4LThiODMtMTk5M2IwZGM3MThiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHrN2AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGgJvB8oGMeEB3ZgeS/i9TqNaZYz7+wGEKLrURIOis9IhZm/UUuKT3ff Gbmbp6byomucQgp45qju5lx+0JIR3vMBbxVzE/lP+3jkJgkhUUwBwNO0KQXyi5U3 uXDXg6E7IekZ+1mVij2EZ3Mh72+Xn41vLt13l0jklAedLDOd7FJz65Dq+LjhBonr 1sdsCHqLP35Jt4f4BdzRQDxXPrg1h3dlQpWAcZ6HKuCUDeNKGu2Ae5sm4nB7cP4R S9D2hLNIPB6QP35SoUmybSRK2xWYFtAZsczcz+ZObqRAVyOHakMhL0OzbPUuwx9g IGG9b1wY645Mxi3g9knsqBtaX6K65fI= -----END CERTIFICATE-----Generated at Wed May 7 00:39:11 2025 by rpki-client