$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9281adc0-928e-432b-8a28-e77e9cddfcfe/c38a686c-1237-3b63-8f94-0581beb86b44.roa File: c38a686c-1237-3b63-8f94-0581beb86b44.roa (raw, json) Hash identifier: V+TJg6EVSMQpFyJWMLoFRDUN9Ng5bkXOcm3w3dfOkUg= Subject key identifier: 7F:CA:35:79:DE:D3:51:02:5B:3C:18:BD:32:46:76:99:96:B4:B6:45 Certificate issuer: /CN=9281adc0-928e-432b-8a28-e77e9cddfcfe Certificate serial: 010D0C9F43285849C0A4D1D584557D6DEB5AD7D0 Authority key identifier: B3:77:E6:CF:59:C6:E8:99:D4:E7:EB:1B:5B:A1:4C:8B:14:10:50:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9281adc0-928e-432b-8a28-e77e9cddfcfe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9281adc0-928e-432b-8a28-e77e9cddfcfe/c38a686c-1237-3b63-8f94-0581beb86b44.roa Signing time: Mon 05 May 2025 13:01:00 +0000 ROA not before: Mon 05 May 2025 13:01:00 +0000 ROA not after: Sun 03 Aug 2025 13:01:00 +0000 asID: 13543 IP address blocks: 162.253.96.0/22 maxlen: 24 2620:f4:c000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9281adc0-928e-432b-8a28-e77e9cddfcfe/9281adc0-928e-432b-8a28-e77e9cddfcfe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9281adc0-928e-432b-8a28-e77e9cddfcfe/9281adc0-928e-432b-8a28-e77e9cddfcfe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9281adc0-928e-432b-8a28-e77e9cddfcfe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c0:a4:d1:d5:84:55:7d:6d:eb:5a:d7:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9281adc0-928e-432b-8a28-e77e9cddfcfe Validity Not Before: May 5 13:01:00 2025 GMT Not After : Aug 3 13:01:00 2025 GMT Subject: CN=02cb6248-fdb2-43e9-baff-6125818eb605 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:da:42:b2:1f:16:d1:df:c3:06:61:31:cf:7d: 49:c9:7e:1f:d7:d3:9c:f3:1a:7b:0b:52:28:6c:0e: 29:14:5b:cb:be:28:a0:73:f7:dc:87:06:73:24:c0: 0b:c3:2e:75:f8:22:fe:91:dc:50:ea:17:e5:b2:c4: 89:5d:59:98:99:3f:92:ce:f9:e9:25:11:f3:ef:ec: e5:64:55:83:ec:dc:ba:8e:70:c7:b6:9c:c5:ff:45: 9e:e6:b0:1d:92:90:5f:4a:3b:62:64:e9:3a:19:61: b1:b3:82:86:f4:33:7c:2a:f9:64:e2:2f:50:26:3c: 9e:47:66:a7:3f:10:96:cd:24:75:c9:9e:b2:f1:2f: a4:1a:34:5f:61:7c:d7:49:0b:02:77:8f:76:0b:12: d6:b8:bb:f4:1e:59:2d:c1:2c:e4:f7:a5:77:88:69: 32:73:96:c3:57:8c:79:82:4b:29:d4:0a:28:13:ae: 7a:72:d4:32:16:6c:0e:f4:26:b7:25:77:e1:7c:e7: 75:f3:fb:e6:c0:df:af:31:97:39:da:e9:e5:83:d2: 3a:13:57:db:bf:99:d5:a1:9c:1e:51:1e:3b:f5:a2: e1:a5:48:86:b8:6b:25:47:eb:8e:ca:f6:20:75:ab: 63:45:4e:e5:18:9e:a4:d0:66:99:07:27:aa:39:6f: 1b:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:CA:35:79:DE:D3:51:02:5B:3C:18:BD:32:46:76:99:96:B4:B6:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9281adc0-928e-432b-8a28-e77e9cddfcfe/c38a686c-1237-3b63-8f94-0581beb86b44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9281adc0-928e-432b-8a28-e77e9cddfcfe/9281adc0-928e-432b-8a28-e77e9cddfcfe.crl X509v3 Authority Key Identifier: keyid:B3:77:E6:CF:59:C6:E8:99:D4:E7:EB:1B:5B:A1:4C:8B:14:10:50:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9281adc0-928e-432b-8a28-e77e9cddfcfe.cer sbgp-ipAddrBlock: critical IPv4: 162.253.96.0/22 IPv6: 2620:f4:c000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:96:8e:8e:39:1e:3c:bf:34:a1:a3:dc:72:2e:cc:79:e6:71: 1d:e1:ae:d3:5c:90:37:8c:79:d4:ee:4c:82:1f:f2:88:a8:65: 5c:e1:5d:aa:47:94:88:24:0a:05:19:7c:48:89:e9:9c:26:e4: 1d:89:cc:86:38:2b:08:3e:80:77:bc:d0:b5:c1:cc:5a:f7:c2: ea:52:40:58:81:26:5c:7d:83:b7:d6:00:4a:8b:1d:da:4f:9a: 45:fb:7a:2a:e3:d7:3b:91:58:b4:aa:f8:07:57:37:25:5a:fd: 0a:bb:60:5d:ce:da:95:75:04:05:4f:23:16:c1:e4:75:1b:96: f1:6f:65:ba:42:d7:7e:de:6b:65:1e:21:15:76:c1:00:23:30: c2:6f:ef:b5:ac:bd:9b:9e:4c:a3:7b:43:18:ea:5d:12:38:a6: 61:21:b5:87:87:6f:dc:85:19:9c:01:7a:fa:3c:0e:be:4e:cd: 12:b9:ba:53:74:12:63:79:8c:06:89:71:bc:d0:e4:77:96:60: 32:0b:25:5b:66:c5:c5:07:9b:93:0a:4b:a1:1c:5a:5a:52:ff: 23:af:1e:e7:75:5c:2d:86:b4:a7:d8:73:34:21:e0:0d:78:10: ce:88:eb:53:14:a0:d0:a1:18:e0:f5:89:7d:63:d2:bb:83:77: e7:d6:c7:5a -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEnApNHVhFV9beta19AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTI4MWFkYzAtOTI4ZS00MzJiLThhMjgtZTc3ZTljZGRm Y2ZlMB4XDTI1MDUwNTEzMDEwMFoXDTI1MDgwMzEzMDEwMFowLzEtMCsGA1UEAxMk MDJjYjYyNDgtZmRiMi00M2U5LWJhZmYtNjEyNTgxOGViNjA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzNpCsh8W0d/DBmExz31JyX4f19Oc8xp7C1Io bA4pFFvLviigc/fchwZzJMALwy51+CL+kdxQ6hflssSJXVmYmT+SzvnpJRHz7+zl ZFWD7Ny6jnDHtpzF/0We5rAdkpBfSjtiZOk6GWGxs4KG9DN8Kvlk4i9QJjyeR2an PxCWzSR1yZ6y8S+kGjRfYXzXSQsCd492CxLWuLv0HlktwSzk96V3iGkyc5bDV4x5 gksp1AooE656ctQyFmwO9Ca3JXfhfOd18/vmwN+vMZc52unlg9I6E1fbv5nVoZwe UR479aLhpUiGuGslR+uOyvYgdatjRU7lGJ6k0GaZByeqOW8bbQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFH/KNXne01ECWzwYvTJGdpmWtLZFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85Mjgx YWRjMC05MjhlLTQzMmItOGEyOC1lNzdlOWNkZGZjZmUvYzM4YTY4NmMtMTIzNy0z YjYzLThmOTQtMDU4MWJlYjg2YjQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOTI4MWFkYzAtOTI4ZS00MzJiLThh MjgtZTc3ZTljZGRmY2ZlLzkyODFhZGMwLTkyOGUtNDMyYi04YTI4LWU3N2U5Y2Rk ZmNmZS5jcmwwHwYDVR0jBBgwFoAUs3fmz1nG6JnU5+sbW6FMixQQUCswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85MjgxYWRjMC05MjhlLTQzMmItOGEyOC1lNzdl OWNkZGZjZmUuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCov1gMA8E AgACMAkDBwAmIAD0wAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEACpaOjjkePL80oaPcci7MeeZxHeGu01yQ N4x51O5Mgh/yiKhlXOFdqkeUiCQKBRl8SInpnCbkHYnMhjgrCD6Ad7zQtcHMWvfC 6lJAWIEmXH2Dt9YASosd2k+aRft6KuPXO5FYtKr4B1c3JVr9CrtgXc7alXUEBU8j FsHkdRuW8W9lukLXft5rZR4hFXbBACMwwm/vtay9m55Mo3tDGOpdEjimYSG1h4dv 3IUZnAF6+jwOvk7NErm6U3QSY3mMBolxvNDkd5ZgMgslW2bFxQebkwpLoRxaWlL/ I68e53VcLYa0p9hzNCHgDXgQzojrUxSg0KEY4PWJfWPSu4N359bHWg== -----END CERTIFICATE-----Generated at Sat May 10 08:37:32 2025 by rpki-client