$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/748884b0-2456-4700-984f-d893a56dbcdd/afde5cdc-3c5d-342d-a648-49b9232529c6.roa File: afde5cdc-3c5d-342d-a648-49b9232529c6.roa (raw, json) Hash identifier: UgIZBqNai3NELL+xYkt1p/dXh9ivW8k00xhNtz4Q7SM= Subject key identifier: 1D:67:D6:30:EC:0C:F5:0D:6A:6C:4C:17:A4:10:83:7A:9B:CF:BD:69 Certificate issuer: /CN=748884b0-2456-4700-984f-d893a56dbcdd Certificate serial: 010D0C9F43285849C36F7D1DAC05160B67A1E580 Authority key identifier: E2:B1:73:CA:CC:4D:2F:9D:D2:C5:6A:A9:F8:AE:2A:E3:9F:12:60:A5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/748884b0-2456-4700-984f-d893a56dbcdd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/748884b0-2456-4700-984f-d893a56dbcdd/afde5cdc-3c5d-342d-a648-49b9232529c6.roa Signing time: Tue 06 May 2025 13:01:01 +0000 ROA not before: Tue 06 May 2025 13:01:01 +0000 ROA not after: Mon 04 Aug 2025 13:01:01 +0000 asID: 393844 IP address blocks: 167.160.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/748884b0-2456-4700-984f-d893a56dbcdd/748884b0-2456-4700-984f-d893a56dbcdd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/748884b0-2456-4700-984f-d893a56dbcdd/748884b0-2456-4700-984f-d893a56dbcdd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/748884b0-2456-4700-984f-d893a56dbcdd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c3:6f:7d:1d:ac:05:16:0b:67:a1:e5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=748884b0-2456-4700-984f-d893a56dbcdd Validity Not Before: May 6 13:01:01 2025 GMT Not After : Aug 4 13:01:01 2025 GMT Subject: CN=46ca9054-cbf7-4458-92d4-ce595c85b566 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:06:26:cd:38:91:8f:59:2a:22:13:93:eb:6d: a2:92:56:fa:32:b1:6c:f3:ce:8d:d1:9d:b2:31:a5: d3:dc:cc:0d:fd:29:b3:d3:46:18:a2:ea:36:e4:6b: 84:35:d5:76:6f:4e:33:13:a9:bf:83:79:06:e4:e5: 5b:6c:d3:b5:5b:f4:94:71:17:52:d9:0c:ac:55:5f: 64:11:bf:c3:31:c1:e4:a4:d5:46:35:1f:ca:69:9b: f8:98:16:c6:4f:57:fb:44:07:b4:94:ab:8d:24:c1: 3e:79:97:cb:89:c4:b9:0a:b1:2e:de:b2:93:59:9a: cc:b4:41:aa:ab:54:84:e2:25:aa:b9:0d:58:20:bc: 0f:9a:ad:f2:83:01:67:a1:65:86:8e:db:92:2c:a0: 0c:e6:89:be:6b:0b:2f:1d:24:3e:09:03:ee:24:f6: 1c:19:06:44:8c:27:31:c5:69:88:ad:74:6a:d7:61: 26:a4:da:c7:c2:3a:f2:2e:9b:42:d7:04:82:34:f3: 41:c1:75:d3:71:d9:fd:ee:06:7d:3b:eb:50:ca:73: c2:69:95:3b:37:04:39:a9:2d:af:bc:de:9b:b3:b7: b9:4c:5f:db:1f:a3:f8:65:a6:a5:04:70:4b:71:be: 49:74:77:3d:64:d1:25:41:69:95:01:6a:5e:92:0d: c5:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:67:D6:30:EC:0C:F5:0D:6A:6C:4C:17:A4:10:83:7A:9B:CF:BD:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/748884b0-2456-4700-984f-d893a56dbcdd/afde5cdc-3c5d-342d-a648-49b9232529c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/748884b0-2456-4700-984f-d893a56dbcdd/748884b0-2456-4700-984f-d893a56dbcdd.crl X509v3 Authority Key Identifier: keyid:E2:B1:73:CA:CC:4D:2F:9D:D2:C5:6A:A9:F8:AE:2A:E3:9F:12:60:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/748884b0-2456-4700-984f-d893a56dbcdd.cer sbgp-ipAddrBlock: critical IPv4: 167.160.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:a0:b5:7a:99:83:fd:36:7d:78:f8:83:d1:5b:10:3a:ad:c0: fd:65:53:65:ca:ae:e4:d8:d1:40:69:72:0d:d2:6d:33:4f:8e: b6:6b:19:42:a7:4d:b1:20:bb:28:8f:01:b5:f1:88:e1:9e:75: f6:c8:92:64:af:47:31:ac:e8:a9:44:eb:cc:76:84:67:fd:6e: 63:80:e9:2a:bf:e6:d3:16:c8:ca:36:be:fd:04:48:86:33:44: cf:dd:98:81:7b:f8:fa:fd:fa:51:24:46:8e:cd:0f:84:2e:11: 0d:3c:91:65:60:0c:3e:bc:cc:9b:15:c2:0e:23:13:c9:61:db: 3d:d1:01:c5:35:22:0d:93:60:ee:92:99:42:80:07:0f:81:91: d0:27:4a:90:bb:96:6e:e3:83:63:0f:be:fa:42:db:9c:0a:b6: 0f:20:d8:fc:6b:15:20:8e:f7:7e:32:61:6a:ed:8d:05:21:02: e1:04:10:97:85:21:1a:aa:a8:29:2c:8f:6b:c2:d2:9c:57:1f: 13:18:f1:75:63:c4:80:01:c4:87:e0:56:c7:40:2b:fa:c0:6b: 6a:92:5c:89:dc:c7:d7:f3:e9:3c:ef:e2:78:61:0a:8a:b8:09: 6e:76:0a:81:83:23:14:41:45:64:32:56:41:75:1f:b9:d6:e5: cf:d8:84:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnDb30drAUWC2eh5YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ4ODg0YjAtMjQ1Ni00NzAwLTk4NGYtZDg5M2E1NmRi Y2RkMB4XDTI1MDUwNjEzMDEwMVoXDTI1MDgwNDEzMDEwMVowLzEtMCsGA1UEAxMk NDZjYTkwNTQtY2JmNy00NDU4LTkyZDQtY2U1OTVjODViNTY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswYmzTiRj1kqIhOT622iklb6MrFs886N0Z2y MaXT3MwN/Smz00YYouo25GuENdV2b04zE6m/g3kG5OVbbNO1W/SUcRdS2QysVV9k Eb/DMcHkpNVGNR/KaZv4mBbGT1f7RAe0lKuNJME+eZfLicS5CrEu3rKTWZrMtEGq q1SE4iWquQ1YILwPmq3ygwFnoWWGjtuSLKAM5om+awsvHSQ+CQPuJPYcGQZEjCcx xWmIrXRq12EmpNrHwjryLptC1wSCNPNBwXXTcdn97gZ9O+tQynPCaZU7NwQ5qS2v vN6bs7e5TF/bH6P4ZaalBHBLcb5JdHc9ZNElQWmVAWpekg3FgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB1n1jDsDPUNamxMF6QQg3qbz71pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi83NDg4 ODRiMC0yNDU2LTQ3MDAtOTg0Zi1kODkzYTU2ZGJjZGQvYWZkZTVjZGMtM2M1ZC0z NDJkLWE2NDgtNDliOTIzMjUyOWM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNzQ4ODg0YjAtMjQ1Ni00NzAwLTk4 NGYtZDg5M2E1NmRiY2RkLzc0ODg4NGIwLTI0NTYtNDcwMC05ODRmLWQ4OTNhNTZk YmNkZC5jcmwwHwYDVR0jBBgwFoAU4rFzysxNL53SxWqp+K4q458SYKUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi83NDg4ODRiMC0yNDU2LTQ3MDAtOTg0Zi1kODkz YTU2ZGJjZGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFp6DgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACKgtXqZg/02fXj4g9FbEDqtwP1lU2XKruTY0UBpcg3SbTNPjrZrGUKn TbEguyiPAbXxiOGedfbIkmSvRzGs6KlE68x2hGf9bmOA6Sq/5tMWyMo2vv0ESIYz RM/dmIF7+Pr9+lEkRo7ND4QuEQ08kWVgDD68zJsVwg4jE8lh2z3RAcU1Ig2TYO6S mUKABw+BkdAnSpC7lm7jg2MPvvpC25wKtg8g2PxrFSCO934yYWrtjQUhAuEEEJeF IRqqqCksj2vC0pxXHxMY8XVjxIABxIfgVsdAK/rAa2qSXIncx9fz6Tzv4nhhCoq4 CW52CoGDIxRBRWQyVkF1H7nW5c/YhG4= -----END CERTIFICATE-----Generated at Sun May 11 12:51:25 2025 by rpki-client