$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/460a070d-2ded-3e86-9735-47539cf8b568.roa File: 460a070d-2ded-3e86-9735-47539cf8b568.roa (raw, json) Hash identifier: wfbOEy8xwJDJRy5zt28AsTyuHCKZazme4ABAC4RMb9M= Subject key identifier: 5B:C8:D4:DA:E1:3A:77:6C:2B:5D:D7:F7:AA:41:4A:1D:50:B4:08:63 Certificate issuer: /CN=5ad0865e-7786-4c66-9f91-bc1f46f2c34f Certificate serial: 010D0C9F4328584A5E4198F46B073907F92BC380 Authority key identifier: 3A:AF:94:EF:9A:DA:A0:89:89:87:5D:CA:E8:60:86:C9:40:E3:0D:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/460a070d-2ded-3e86-9735-47539cf8b568.roa Signing time: Sat 31 May 2025 01:00:50 +0000 ROA not before: Sat 31 May 2025 01:00:50 +0000 ROA not after: Fri 29 Aug 2025 01:00:50 +0000 asID: 16509 IP address blocks: 198.29.16.0/22 maxlen: 24 2602:f9e7:20::/45 maxlen: 48 2602:f9e7:28::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5e:41:98:f4:6b:07:39:07:f9:2b:c3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ad0865e-7786-4c66-9f91-bc1f46f2c34f Validity Not Before: May 31 01:00:50 2025 GMT Not After : Aug 29 01:00:50 2025 GMT Subject: CN=26b05824-6e33-4ec0-a84a-446907c8e1f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:33:b5:e0:44:84:b2:41:07:ac:07:1b:3e:02: 9a:4c:c8:35:93:48:73:1d:8b:1d:87:d1:10:8d:55: 26:0c:b0:31:5a:83:79:81:b5:9d:45:1f:0f:1f:f8: d5:f0:9d:38:fc:9a:7a:eb:ea:74:b5:84:80:72:39: 65:4d:e2:57:31:f0:b7:c6:fd:af:ee:06:4b:88:3f: cc:62:71:5f:b7:31:a4:17:32:ed:ec:3b:9b:98:c9: 43:8e:73:18:ec:3a:b6:d9:67:a8:4d:99:b5:a0:ba: fd:8b:e3:7e:cc:dc:48:ef:5c:d1:cb:2a:69:10:a0: 08:71:53:1d:da:2c:05:7c:01:ad:ca:8f:69:b0:c5: 8f:b2:30:7e:13:87:98:b6:52:51:2d:9b:7a:ab:1a: e3:06:5a:33:f3:26:d4:6a:54:d7:b2:4e:ec:2f:0e: 2e:c3:df:4c:7b:bd:4f:1b:97:75:9e:9b:3d:aa:3d: 16:9d:cb:d9:7f:99:36:cc:6f:6d:61:da:be:ac:c5: 07:90:82:c9:4d:b7:0c:e8:cf:46:0c:3f:82:ef:06: a8:96:cd:c1:d1:b3:dc:eb:1e:9a:3b:c1:6c:30:c5: 00:a8:50:b3:7d:02:f5:36:5e:d3:4a:e6:34:ab:4b: 06:63:31:79:6f:d2:ff:09:28:ef:97:20:18:2c:46: 98:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:C8:D4:DA:E1:3A:77:6C:2B:5D:D7:F7:AA:41:4A:1D:50:B4:08:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/460a070d-2ded-3e86-9735-47539cf8b568.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.crl X509v3 Authority Key Identifier: keyid:3A:AF:94:EF:9A:DA:A0:89:89:87:5D:CA:E8:60:86:C9:40:E3:0D:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.cer sbgp-ipAddrBlock: critical IPv4: 198.29.16.0/22 IPv6: 2602:f9e7:20::-2602:f9e7:2b:ffff:ffff:ffff:ffff:ffff X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:f0:f0:95:ca:1e:91:7a:64:92:4d:eb:fd:5f:0d:1b:28:31: 08:76:5b:e5:a5:91:10:8a:33:ab:7b:8f:0d:7a:ba:92:30:fa: 0a:a7:c2:08:5b:a7:8d:9e:8b:01:46:87:b2:d8:3c:26:93:71: 6e:35:8a:7b:dc:74:a2:ba:99:0e:a4:26:9c:fb:41:af:9f:fe: d8:63:97:a2:76:38:4f:d4:5f:6a:b3:45:cc:a8:71:00:67:b3: f3:b7:9c:0e:d1:5b:b8:42:77:10:76:d6:c7:74:76:5b:50:d1: b2:bd:86:53:19:5e:79:25:9c:84:04:db:d7:c3:32:60:ab:10: f4:b1:fc:44:12:72:96:13:7e:5d:f7:b0:85:e4:df:90:70:4c: 49:61:b1:08:4b:82:ab:d0:65:91:23:64:bd:df:e7:15:76:e7: 46:71:45:32:42:b2:12:a5:33:85:73:c4:62:41:09:24:70:f3: d5:5a:fa:83:05:48:ba:8a:74:d1:cf:e5:f5:50:36:7c:1c:7a: 53:b0:d5:f2:18:7f:4e:e1:cb:33:e7:54:c6:af:21:5f:79:c8: 21:5b:7d:37:24:95:44:c5:53:52:ef:a4:10:7b:8d:98:27:04: bb:f4:5a:f9:5f:47:c6:89:a2:87:5e:d7:24:64:b6:84:2c:e2: 7e:b3:9b:fb -----BEGIN CERTIFICATE----- MIIGXzCCBUegAwIBAgIUAQ0Mn0MoWEpeQZj0awc5B/krw4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWFkMDg2NWUtNzc4Ni00YzY2LTlmOTEtYmMxZjQ2ZjJj MzRmMB4XDTI1MDUzMTAxMDA1MFoXDTI1MDgyOTAxMDA1MFowLzEtMCsGA1UEAxMk MjZiMDU4MjQtNmUzMy00ZWMwLWE4NGEtNDQ2OTA3YzhlMWYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkzO14ESEskEHrAcbPgKaTMg1k0hzHYsdh9EQ jVUmDLAxWoN5gbWdRR8PH/jV8J04/Jp66+p0tYSAcjllTeJXMfC3xv2v7gZLiD/M YnFftzGkFzLt7DubmMlDjnMY7Dq22WeoTZm1oLr9i+N+zNxI71zRyyppEKAIcVMd 2iwFfAGtyo9psMWPsjB+E4eYtlJRLZt6qxrjBloz8ybUalTXsk7sLw4uw99Me71P G5d1nps9qj0WncvZf5k2zG9tYdq+rMUHkILJTbcM6M9GDD+C7waols3B0bPc6x6a O8FsMMUAqFCzfQL1Nl7TSuY0q0sGYzF5b9L/CSjvlyAYLEaY/QIDAQABo4IDcTCC A20wHQYDVR0OBBYEFFvI1NrhOndsK13X96pBSh1QtAhjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy81YWQw ODY1ZS03Nzg2LTRjNjYtOWY5MS1iYzFmNDZmMmMzNGYvNDYwYTA3MGQtMmRlZC0z ZTg2LTk3MzUtNDc1MzljZjhiNTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNWFkMDg2NWUtNzc4Ni00YzY2LTlm OTEtYmMxZjQ2ZjJjMzRmLzVhZDA4NjVlLTc3ODYtNGM2Ni05ZjkxLWJjMWY0NmYy YzM0Zi5jcmwwHwYDVR0jBBgwFoAUOq+U75raoImJh13K6GCGyUDjDbgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy81YWQwODY1ZS03Nzg2LTRjNjYtOWY5MS1iYzFm NDZmMmMzNGYuY2VyMDsGCCsGAQUFBwEHAQH/BCwwKjAMBAIAATAGAwQCxh0QMBoE AgACMBQwEgMHBSYC+ecAIAMHAiYC+ecAKDBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBW8PCVyh6RemSSTev9 Xw0bKDEIdlvlpZEQijOre48NerqSMPoKp8IIW6eNnosBRoey2Dwmk3FuNYp73HSi upkOpCac+0Gvn/7YY5eidjhP1F9qs0XMqHEAZ7Pzt5wO0Vu4QncQdtbHdHZbUNGy vYZTGV55JZyEBNvXwzJgqxD0sfxEEnKWE35d97CF5N+QcExJYbEIS4Kr0GWRI2S9 3+cVdudGcUUyQrISpTOFc8RiQQkkcPPVWvqDBUi6inTRz+X1UDZ8HHpTsNXyGH9O 4csz51TGryFfecghW303JJVExVNS76QQe42YJwS79Fr5X0fGiaKHXtckZLaELOJ+ s5v7 -----END CERTIFICATE-----Generated at Tue Jul 1 19:12:24 2025 by rpki-client