$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/e51d6345-d432-370c-9bcf-1a0a6bc53063.roa File: e51d6345-d432-370c-9bcf-1a0a6bc53063.roa (raw, json) Hash identifier: oRkuqVk6HOQdfWKNIhfGrqDssHaOM5ThRPmGXSsl1Dg= Subject key identifier: CC:00:F9:E6:C8:2B:1F:F5:AD:26:39:04:41:F8:27:73:CF:AA:BD:22 Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F43285849BF3F91E0E5316A57AD902600 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/e51d6345-d432-370c-9bcf-1a0a6bc53063.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 20115 IP address blocks: 172.220.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:91:e0:e5:31:6a:57:ad:90:26:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=11270086-f1d8-4d5a-8105-2efe0b04d96d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:97:b9:a9:fd:69:ae:04:de:42:65:fc:1f:93: 67:37:ba:09:ba:c2:af:69:e0:20:2d:aa:80:73:b2: b5:1d:5c:c9:a4:dd:b3:1b:8d:b5:db:e9:58:f9:ea: 35:47:ea:8d:5a:5d:47:79:48:d8:4e:cd:01:3e:ac: 2f:d5:61:69:11:a8:81:6b:e2:10:61:b2:bd:bd:b8: 60:c0:14:1a:7c:24:5d:f1:9e:79:18:6b:71:c5:ee: 7e:eb:07:ab:11:2e:ae:96:bd:b7:f0:b5:5d:54:8f: 5a:62:40:16:8a:da:09:a1:cf:92:df:41:1c:9c:7b: 9b:be:9d:16:1e:27:61:f8:8f:7b:95:7f:46:fd:1f: 61:15:ed:a5:7b:08:cb:4f:a3:04:95:65:42:67:e7: 4a:bd:6e:d6:fa:f4:2c:21:7f:6c:e4:b8:ce:f3:13: 83:bb:f4:86:b8:1d:94:bb:7e:42:5d:13:e2:d7:17: bc:16:ff:03:3a:6b:61:dd:73:b2:4b:5b:07:ec:08: 9c:c1:94:33:ee:f4:d4:c2:0c:dd:64:5b:be:b0:30: f6:06:51:c2:97:a7:35:d5:1b:41:92:70:15:53:b3: b4:3a:d7:2c:09:02:22:63:ef:db:e8:f7:24:54:7e: df:3a:f7:dd:bc:87:73:4b:28:1a:c5:a4:fd:75:bc: 4b:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:00:F9:E6:C8:2B:1F:F5:AD:26:39:04:41:F8:27:73:CF:AA:BD:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/e51d6345-d432-370c-9bcf-1a0a6bc53063.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv4: 172.220.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:d5:81:e8:0f:e4:8e:4e:e3:ff:d5:7a:7d:f2:3f:57:21:f3: 62:e9:ab:70:dd:98:ab:81:54:a2:7a:73:0f:f6:5c:91:1d:1a: 8b:d3:70:c0:3d:e9:49:fb:08:d8:63:3a:ee:d3:01:d0:a3:23: 51:9c:39:2a:76:12:1f:d7:13:45:1d:a1:c1:66:de:e7:f5:53: e5:98:84:40:10:2e:dc:8c:17:ec:a1:08:93:f4:e0:69:a3:84: 3b:2f:66:a4:a1:45:d4:8f:1b:31:65:5a:01:99:47:39:27:d2: 32:5c:65:13:19:12:ce:4c:d1:f0:97:03:e0:5d:19:2c:50:2b: bc:72:2b:a4:a8:90:b4:5d:73:01:eb:f9:86:ee:24:88:4f:51: 49:e7:d5:d0:6b:1a:9b:41:cb:1a:cd:cb:61:57:c9:07:83:ea: 8d:3a:ea:ab:28:a6:8a:7a:dc:d3:95:fa:bd:bc:b7:f3:25:9b: be:34:8b:9f:26:29:c9:76:33:3b:f3:2e:a7:95:81:c9:31:7d: 60:6a:22:f9:5e:79:ad:b9:c2:b5:0c:d3:34:8c:8d:67:ba:ff: 96:c3:37:dd:27:3f:9f:e0:5c:dc:01:cb:ae:23:83:36:5a:98: 80:d6:24:5c:27:fc:d9:39:ae:5b:26:0c:7d:de:cc:c6:b0:b3: 6e:79:5d:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm/P5Hg5TFqV62QJgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk MTEyNzAwODYtZjFkOC00ZDVhLTgxMDUtMmVmZTBiMDRkOTZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5e5qf1prgTeQmX8H5NnN7oJusKvaeAgLaqA c7K1HVzJpN2zG4212+lY+eo1R+qNWl1HeUjYTs0BPqwv1WFpEaiBa+IQYbK9vbhg wBQafCRd8Z55GGtxxe5+6werES6ulr238LVdVI9aYkAWitoJoc+S30EcnHubvp0W Hidh+I97lX9G/R9hFe2lewjLT6MElWVCZ+dKvW7W+vQsIX9s5LjO8xODu/SGuB2U u35CXRPi1xe8Fv8DOmth3XOyS1sH7AicwZQz7vTUwgzdZFu+sDD2BlHCl6c11RtB knAVU7O0OtcsCQIiY+/b6PckVH7fOvfdvIdzSygaxaT9dbxLXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMwA+ebIKx/1rSY5BEH4J3PPqr0iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvZTUxZDYzNDUtZDQzMi0z NzBjLTliY2YtMWEwYTZiYzUzMDYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHrNwAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACTVgegP5I5O4//Ven3yP1ch82Lpq3DdmKuBVKJ6cw/2XJEdGovTcMA9 6Un7CNhjOu7TAdCjI1GcOSp2Eh/XE0UdocFm3uf1U+WYhEAQLtyMF+yhCJP04Gmj hDsvZqShRdSPGzFlWgGZRzkn0jJcZRMZEs5M0fCXA+BdGSxQK7xyK6SokLRdcwHr +YbuJIhPUUnn1dBrGptByxrNy2FXyQeD6o066qsopop63NOV+r28t/Mlm740i58m Kcl2MzvzLqeVgckxfWBqIvleea25wrUM0zSMjWe6/5bDN90nP5/gXNwBy64jgzZa mIDWJFwn/Nk5rlsmDH3ezMaws255Xao= -----END CERTIFICATE-----Generated at Tue May 6 03:56:39 2025 by rpki-client