$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/08ad9252-a414-3b87-84d9-259b7e5e27cf.roa File: 08ad9252-a414-3b87-84d9-259b7e5e27cf.roa (raw, json) Hash identifier: AQueaH2k/PglE5NgQAQ87IxTrmfNbXJkD6BIzAuMrwg= Subject key identifier: C6:E5:64:72:E9:0A:DA:F3:5F:CD:B6:8D:24:3D:47:7B:14:B7:03:E3 Certificate issuer: /CN=aa31a4a0-7b77-4f56-8f89-01525b506129 Certificate serial: 010D0C9F43285849C20A249A350C420783ADD9F8 Authority key identifier: 58:89:4D:59:3D:A0:9D:73:D6:96:20:6E:85:EB:9B:B1:BA:9B:66:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/08ad9252-a414-3b87-84d9-259b7e5e27cf.roa Signing time: Tue 06 May 2025 01:00:47 +0000 ROA not before: Tue 06 May 2025 01:00:47 +0000 ROA not after: Mon 04 Aug 2025 01:00:47 +0000 asID: 46687 IP address blocks: 216.119.176.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c2:0a:24:9a:35:0c:42:07:83:ad:d9:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa31a4a0-7b77-4f56-8f89-01525b506129 Validity Not Before: May 6 01:00:47 2025 GMT Not After : Aug 4 01:00:47 2025 GMT Subject: CN=8bba0de0-b25d-46ad-9b5b-4a34de01db50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:8f:38:69:49:45:77:70:7b:cd:fb:0c:5f:5a: 79:6b:80:b6:4b:06:d7:2c:69:c7:a7:ab:a1:2d:06: d1:a5:0f:37:0e:fe:ab:91:14:18:48:60:78:72:27: 2e:61:fa:82:ae:81:52:24:2c:76:22:d3:2d:fb:e1: ef:c5:fd:4b:7b:60:6d:b2:38:b4:cb:85:f2:13:32: bb:3d:4e:3f:f1:2d:71:f9:68:76:2a:35:a6:ea:db: e2:c6:a8:2c:75:72:a6:a4:ee:14:cf:17:92:89:a3: d1:99:a5:5b:11:7c:8b:99:e3:d8:a1:e0:2b:87:8a: 73:fb:01:ae:58:72:1d:a1:3b:34:96:77:ca:6a:eb: 86:8b:c7:4e:5e:a4:5b:be:f3:d8:b8:c1:1c:f2:26: aa:53:0b:a4:5a:5d:cd:24:b6:68:e8:49:4b:fd:10: ff:e2:ab:55:44:e8:4f:2f:e6:b0:02:c2:a5:e9:e8: 6c:d0:b7:cc:2d:55:b5:b7:47:8b:97:20:5a:b1:57: df:97:5c:6a:4f:e8:79:a9:a5:de:fd:ee:a1:e1:69: c3:90:ae:3a:39:fc:ef:b3:f2:c9:54:19:1b:63:82: 8b:7b:30:30:a0:81:32:64:de:a3:a5:6a:9a:23:e1: c9:62:e9:75:41:69:73:89:57:05:85:1a:4c:71:2a: 55:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:E5:64:72:E9:0A:DA:F3:5F:CD:B6:8D:24:3D:47:7B:14:B7:03:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/08ad9252-a414-3b87-84d9-259b7e5e27cf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.crl X509v3 Authority Key Identifier: keyid:58:89:4D:59:3D:A0:9D:73:D6:96:20:6E:85:EB:9B:B1:BA:9B:66:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer sbgp-ipAddrBlock: critical IPv4: 216.119.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:3d:21:83:8a:44:15:ef:e3:d0:e2:a1:1a:48:fa:8d:a9:47: 6b:94:33:67:dd:0f:46:c1:c1:61:81:5d:bf:dc:e0:e4:e7:6f: eb:b7:3f:82:2b:e8:4b:47:2d:18:47:00:79:84:d0:57:cb:f0: f6:4a:5d:ff:a8:ee:dd:c5:86:a9:a3:04:cd:f1:85:68:1b:ad: 39:d6:e2:42:08:f2:3b:95:12:66:d6:a5:80:31:c5:cd:4b:6f: 5d:66:e5:4e:f8:c7:f8:a5:c7:4f:d4:ba:a9:40:2c:6d:ba:99: 86:a3:cc:fe:9a:ef:6c:32:b7:79:c1:1e:ec:d7:87:f8:d1:bf: d2:ca:d6:be:28:82:e9:63:9b:3b:e6:bf:49:e9:71:ba:41:a3: f4:7f:74:43:22:63:44:3e:6f:3b:a0:9a:47:45:88:6f:1d:fe: eb:3b:06:6b:71:f5:bd:7f:7e:68:f0:d8:5f:ae:f4:e9:91:85: 0e:1a:fd:c2:fc:2e:31:68:e3:c2:7f:b2:e0:cd:f6:4c:23:21: 56:bd:e8:c7:2d:ce:de:9f:b4:39:14:08:7c:67:01:c3:46:d5: 79:fd:2f:bc:36:36:a6:cc:83:71:62:48:35:a4:17:41:54:e5: 21:98:2c:d1:db:81:1b:e1:6e:4a:c0:6d:9f:88:ae:c4:63:20: 91:0a:0a:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnCCiSaNQxCB4Ot2fgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEzMWE0YTAtN2I3Ny00ZjU2LThmODktMDE1MjViNTA2 MTI5MB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk OGJiYTBkZTAtYjI1ZC00NmFkLTliNWItNGEzNGRlMDFkYjUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAio84aUlFd3B7zfsMX1p5a4C2SwbXLGnHp6uh LQbRpQ83Dv6rkRQYSGB4cicuYfqCroFSJCx2ItMt++Hvxf1Le2Btsji0y4XyEzK7 PU4/8S1x+Wh2KjWm6tvixqgsdXKmpO4UzxeSiaPRmaVbEXyLmePYoeArh4pz+wGu WHIdoTs0lnfKauuGi8dOXqRbvvPYuMEc8iaqUwukWl3NJLZo6ElL/RD/4qtVROhP L+awAsKl6ehs0LfMLVW1t0eLlyBasVffl1xqT+h5qaXe/e6h4WnDkK46Ofzvs/LJ VBkbY4KLezAwoIEyZN6jpWqaI+HJYul1QWlziVcFhRpMcSpVCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMblZHLpCtrzX822jSQ9R3sUtwPjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYTMx YTRhMC03Yjc3LTRmNTYtOGY4OS0wMTUyNWI1MDYxMjkvMDhhZDkyNTItYTQxNC0z Yjg3LTg0ZDktMjU5YjdlNWUyN2NmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWEzMWE0YTAtN2I3Ny00ZjU2LThm ODktMDE1MjViNTA2MTI5L2FhMzFhNGEwLTdiNzctNGY1Ni04Zjg5LTAxNTI1YjUw NjEyOS5jcmwwHwYDVR0jBBgwFoAUWIlNWT2gnXPWliBuheubsbqbZj0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYTMxYTRhMC03Yjc3LTRmNTYtOGY4OS0wMTUy NWI1MDYxMjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2HewMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJo9IYOKRBXv49DioRpI+o2pR2uUM2fdD0bBwWGBXb/c4OTnb+u3P4Ir 6EtHLRhHAHmE0FfL8PZKXf+o7t3FhqmjBM3xhWgbrTnW4kII8juVEmbWpYAxxc1L b11m5U74x/ilx0/UuqlALG26mYajzP6a72wyt3nBHuzXh/jRv9LK1r4oguljmzvm v0npcbpBo/R/dEMiY0Q+bzugmkdFiG8d/us7Bmtx9b1/fmjw2F+u9OmRhQ4a/cL8 LjFo48J/suDN9kwjIVa96Mctzt6ftDkUCHxnAcNG1Xn9L7w2NqbMg3FiSDWkF0FU 5SGYLNHbgRvhbkrAbZ+IrsRjIJEKChw= -----END CERTIFICATE-----Generated at Mon May 12 03:56:59 2025 by rpki-client