$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/aad68526-ae17-3047-81db-681a7f988c64.roa File: aad68526-ae17-3047-81db-681a7f988c64.roa (raw, json) Hash identifier: 3AUliMlScCKiw9DDqVvmuogiEF+NLUlraQjtgU55J2k= Subject key identifier: 33:88:46:E3:F5:B2:1C:EE:16:24:B7:0A:0A:46:65:B9:53:42:66:11 Certificate issuer: /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58 Certificate serial: 010D0C9F43285849AA4F6CB61897F4138C2FB000 Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/aad68526-ae17-3047-81db-681a7f988c64.roa Signing time: Sun 27 Apr 2025 13:01:01 +0000 ROA not before: Sun 27 Apr 2025 13:01:01 +0000 ROA not after: Sat 26 Jul 2025 13:01:01 +0000 asID: 55293 IP address blocks: 216.119.128.0/20 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:aa:4f:6c:b6:18:97:f4:13:8c:2f:b0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58 Validity Not Before: Apr 27 13:01:01 2025 GMT Not After : Jul 26 13:01:01 2025 GMT Subject: CN=2e3e2e37-b7f7-48ff-947a-69fef04eecf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:1e:00:43:b3:9a:11:ff:40:9c:5f:6d:95:15: be:4a:2e:c7:8d:46:6f:85:0b:6c:cd:f7:1f:72:5e: f9:29:4d:59:4c:b7:49:59:c3:d0:33:59:17:9a:3f: 63:d5:39:90:d9:25:5b:3e:89:2f:41:25:1a:9a:06: 67:86:ce:d3:df:b6:d9:3b:3b:46:ed:a9:71:b7:5b: ce:c2:aa:fb:94:55:33:8c:6c:f0:3f:a1:e7:18:22: db:c3:f0:ae:b0:e5:63:ae:bb:6b:c1:bb:36:32:1a: 67:0e:22:13:c7:8d:98:66:85:14:3a:6b:a0:05:18: 8b:54:61:3a:1e:bd:38:55:cc:bc:68:ef:3a:17:1e: 60:32:43:01:15:14:56:2f:a3:33:97:a4:50:63:6e: d7:0d:a3:c6:83:f1:a2:a7:2e:d4:ab:d0:71:91:4b: 4f:0e:db:3c:df:93:7e:60:9a:bc:05:6e:e1:9f:60: 75:21:00:3b:10:7b:d0:39:f4:c5:85:0f:96:be:01: 39:2f:80:8d:dd:63:06:e7:7d:87:38:29:0a:31:c9: 56:93:62:60:22:c8:4e:9e:13:0d:90:1b:79:f9:e5: 3f:55:c0:7a:a0:e7:8f:5e:da:76:01:b3:b2:38:2c: 45:87:6d:ae:63:f7:39:4d:e1:dd:38:ec:50:bd:67: 3e:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:88:46:E3:F5:B2:1C:EE:16:24:B7:0A:0A:46:65:B9:53:42:66:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/aad68526-ae17-3047-81db-681a7f988c64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl X509v3 Authority Key Identifier: keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer sbgp-ipAddrBlock: critical IPv4: 216.119.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:a1:19:96:d1:52:33:fc:5b:d2:f0:97:7c:59:56:78:f7:1c: 31:88:c9:33:6b:bc:83:45:9c:c1:61:88:41:07:41:a3:03:8e: 58:87:61:61:7b:c3:68:ed:8b:75:df:2c:0a:c7:45:c3:bf:f0: 14:03:32:6b:6f:c9:f0:0d:a8:2a:65:82:e5:d9:51:b7:07:41: 70:d9:d2:8a:30:c5:ce:c8:74:ff:43:c8:04:c5:bc:13:d7:da: 7e:f4:e9:70:58:34:8f:87:5a:11:9d:8b:38:54:a2:75:ab:7e: b9:fb:87:2a:3d:ef:ac:ba:33:9c:b6:95:e3:0b:a1:3f:3d:fd: d0:3d:f5:d3:ca:28:fc:3c:f8:fb:76:f8:b2:11:1a:0f:af:d1: f3:72:2b:7b:bd:9b:aa:e4:20:40:af:3e:92:94:78:e7:18:0f: 80:7b:98:17:2c:f2:c2:fc:b4:29:92:c6:56:9e:af:c9:ba:b0: 2e:bc:41:fe:65:05:0a:46:e2:17:a2:e5:8b:30:ce:be:f8:09: 0e:71:0c:94:2a:50:e8:d1:13:ac:28:44:4e:1c:d7:0c:91:27: 21:14:f7:41:c2:4b:7c:ef:63:62:e4:f0:3f:70:4a:ed:a3:c3: 03:7a:36:ac:a7:b7:0b:b6:99:ae:93:32:b1:f0:01:42:4c:11: b4:31:9c:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmqT2y2GJf0E4wvsAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2M5MzgzZTQtMmM1MS00ZmZkLWJmZTktNjllOWZkNmM1 YjU4MB4XDTI1MDQyNzEzMDEwMVoXDTI1MDcyNjEzMDEwMVowLzEtMCsGA1UEAxMk MmUzZTJlMzctYjdmNy00OGZmLTk0N2EtNjlmZWYwNGVlY2Y3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxR4AQ7OaEf9AnF9tlRW+Si7HjUZvhQtszfcf cl75KU1ZTLdJWcPQM1kXmj9j1TmQ2SVbPokvQSUamgZnhs7T37bZOztG7alxt1vO wqr7lFUzjGzwP6HnGCLbw/CusOVjrrtrwbs2MhpnDiITx42YZoUUOmugBRiLVGE6 Hr04Vcy8aO86Fx5gMkMBFRRWL6Mzl6RQY27XDaPGg/Gipy7Uq9BxkUtPDts835N+ YJq8BW7hn2B1IQA7EHvQOfTFhQ+WvgE5L4CN3WMG532HOCkKMclWk2JgIshOnhMN kBt5+eU/VcB6oOePXtp2AbOyOCxFh22uY/c5TeHdOOxQvWc+xQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDOIRuP1shzuFiS3CgpGZblTQmYRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jYzkz ODNlNC0yYzUxLTRmZmQtYmZlOS02OWU5ZmQ2YzViNTgvYWFkNjg1MjYtYWUxNy0z MDQ3LTgxZGItNjgxYTdmOTg4YzY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvY2M5MzgzZTQtMmM1MS00ZmZkLWJm ZTktNjllOWZkNmM1YjU4L2NjOTM4M2U0LTJjNTEtNGZmZC1iZmU5LTY5ZTlmZDZj NWI1OC5jcmwwHwYDVR0jBBgwFoAUJtGbtQL9y3VNYKC7ao9HB+JMFzswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9jYzkzODNlNC0yYzUxLTRmZmQtYmZlOS02OWU5 ZmQ2YzViNTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2HeAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACChGZbRUjP8W9Lwl3xZVnj3HDGIyTNrvINFnMFhiEEHQaMDjliHYWF7 w2jti3XfLArHRcO/8BQDMmtvyfANqCplguXZUbcHQXDZ0oowxc7IdP9DyATFvBPX 2n706XBYNI+HWhGdizhUonWrfrn7hyo976y6M5y2leMLoT89/dA99dPKKPw8+Pt2 +LIRGg+v0fNyK3u9m6rkIECvPpKUeOcYD4B7mBcs8sL8tCmSxlaer8m6sC68Qf5l BQpG4hei5Yswzr74CQ5xDJQqUOjRE6woRE4c1wyRJyEU90HCS3zvY2Lk8D9wSu2j wwN6Nqyntwu2ma6TMrHwAUJMEbQxnMM= -----END CERTIFICATE-----Generated at Mon May 5 12:02:28 2025 by rpki-client