$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/a6a73e55-bfaf-383e-b044-b9d0120ce4f9.roa File: a6a73e55-bfaf-383e-b044-b9d0120ce4f9.roa (raw, json) Hash identifier: tzk8DoblimT1gRch0hJNMTsrf+74D87au7ntAibQKRs= Subject key identifier: 30:4E:9B:40:1E:18:A4:43:FF:D0:74:D3:C4:82:1F:F8:4A:AA:38:9F Certificate issuer: /CN=b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1 Certificate serial: 010D0C9F43285849ABB4A810C5488E13C2393600 Authority key identifier: DD:F6:09:95:17:8B:B7:4A:6E:9C:AA:DF:B0:69:85:38:26:70:0B:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/a6a73e55-bfaf-383e-b044-b9d0120ce4f9.roa Signing time: Mon 28 Apr 2025 01:00:48 +0000 ROA not before: Mon 28 Apr 2025 01:00:48 +0000 ROA not after: Sun 27 Jul 2025 01:00:48 +0000 asID: 398203 IP address blocks: 169.150.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ab:b4:a8:10:c5:48:8e:13:c2:39:36:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1 Validity Not Before: Apr 28 01:00:48 2025 GMT Not After : Jul 27 01:00:48 2025 GMT Subject: CN=ec8e5f9c-8a2c-4526-a8c6-16ebfd2945cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d7:55:38:41:54:53:46:9c:eb:1d:ba:7d:90: 68:83:46:04:d6:02:4b:50:0c:e5:5d:c0:d4:9c:f9: e2:83:c7:47:37:7c:8e:ac:67:d0:bb:43:8f:1f:98: b4:e6:a9:a7:33:b3:18:97:d2:1d:2f:fd:3c:df:71: 92:02:46:63:76:ff:94:a0:3f:82:30:b6:35:69:43: 4e:05:28:ce:b5:68:ad:fc:39:a8:c6:ca:23:ef:52: 54:78:54:e6:2e:89:03:b4:b0:e9:56:81:e1:3d:17: 96:27:69:c0:8c:e2:7e:a5:3b:7a:dd:94:1f:fc:f5: 17:95:86:fc:b0:d7:2b:51:fc:47:45:41:43:2c:73: ff:c5:54:ae:3f:4f:ba:95:1e:c0:b8:eb:30:25:47: c8:57:7e:8e:d1:89:9f:e8:1b:eb:46:65:b1:2e:50: 69:81:fa:9a:63:fe:6c:14:45:ad:99:ae:54:19:56: 30:f9:86:dc:51:f3:75:7d:91:d9:3e:ee:3e:b6:46: 35:8d:05:dc:ef:91:5d:88:84:d1:a7:71:3a:86:7b: 61:ed:0b:dd:8a:aa:22:e8:dc:5d:22:be:cd:ab:4b: d8:bd:1d:f5:2b:0b:5b:88:08:d8:05:e7:54:f5:07: 5f:70:cc:4f:59:00:de:ae:3e:90:ec:7a:09:10:5c: b3:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:4E:9B:40:1E:18:A4:43:FF:D0:74:D3:C4:82:1F:F8:4A:AA:38:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/a6a73e55-bfaf-383e-b044-b9d0120ce4f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.crl X509v3 Authority Key Identifier: keyid:DD:F6:09:95:17:8B:B7:4A:6E:9C:AA:DF:B0:69:85:38:26:70:0B:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.cer sbgp-ipAddrBlock: critical IPv4: 169.150.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:01:46:89:d8:20:52:2f:e0:77:f6:0d:94:ad:dc:a8:8a:68: 0e:a9:de:5e:32:75:eb:f4:94:7f:f0:17:92:54:48:b0:09:b4: 4c:3b:53:94:71:6b:a5:04:c5:8b:de:30:4a:36:8f:94:fe:e7: ea:13:43:54:35:34:1a:2c:93:a1:c1:97:cf:e3:8e:cf:c0:4e: 94:77:97:d4:79:83:32:3e:92:9b:8c:ef:3f:05:fd:c3:c8:cf: 5b:44:d7:39:61:8c:77:97:05:cf:cb:65:d2:66:96:ab:65:a5: 6e:34:bb:b5:6a:bf:33:76:e9:33:52:1a:5a:db:58:f4:68:09: c5:e0:04:37:00:4e:57:aa:a8:99:63:11:3c:ae:8a:da:32:36: ee:5b:e6:dc:87:a4:d6:78:8b:63:50:4d:c1:1d:05:a5:de:4c: f5:05:e2:4d:38:e2:f9:2e:37:ec:12:de:85:4f:04:6b:62:15: b3:6e:d9:9f:71:ca:1f:c9:e7:87:0d:3b:b0:9b:2c:79:52:17: 83:bd:98:6f:79:b6:de:69:c9:f4:98:12:66:28:46:fb:cb:3d: 1c:dd:8b:df:57:ce:1f:31:7d:0c:9f:08:0e:46:b3:59:56:c5: ff:2a:5a:ee:0f:9a:f3:55:84:19:11:1c:62:6c:42:e9:25:b4: 7b:b3:26:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmrtKgQxUiOE8I5NgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg2YTRlYzMtYTNiNS00ZDcyLWJlZTItZjU4YzNjZGUw MWExMB4XDTI1MDQyODAxMDA0OFoXDTI1MDcyNzAxMDA0OFowLzEtMCsGA1UEAxMk ZWM4ZTVmOWMtOGEyYy00NTI2LWE4YzYtMTZlYmZkMjk0NWNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApddVOEFUU0ac6x26fZBog0YE1gJLUAzlXcDU nPnig8dHN3yOrGfQu0OPH5i05qmnM7MYl9IdL/0833GSAkZjdv+UoD+CMLY1aUNO BSjOtWit/Dmoxsoj71JUeFTmLokDtLDpVoHhPReWJ2nAjOJ+pTt63ZQf/PUXlYb8 sNcrUfxHRUFDLHP/xVSuP0+6lR7AuOswJUfIV36O0Ymf6BvrRmWxLlBpgfqaY/5s FEWtma5UGVYw+YbcUfN1fZHZPu4+tkY1jQXc75FdiITRp3E6hnth7Qvdiqoi6Nxd Ir7Nq0vYvR31KwtbiAjYBedU9QdfcMxPWQDerj6Q7HoJEFyzcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDBOm0AeGKRD/9B008SCH/hKqjifMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iODZh NGVjMy1hM2I1LTRkNzItYmVlMi1mNThjM2NkZTAxYTEvYTZhNzNlNTUtYmZhZi0z ODNlLWIwNDQtYjlkMDEyMGNlNGY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjg2YTRlYzMtYTNiNS00ZDcyLWJl ZTItZjU4YzNjZGUwMWExL2I4NmE0ZWMzLWEzYjUtNGQ3Mi1iZWUyLWY1OGMzY2Rl MDFhMS5jcmwwHwYDVR0jBBgwFoAU3fYJlReLt0punKrfsGmFOCZwCxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iODZhNGVjMy1hM2I1LTRkNzItYmVlMi1mNThj M2NkZTAxYTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEqZaQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFMBRonYIFIv4Hf2DZSt3KiKaA6p3l4ydev0lH/wF5JUSLAJtEw7U5Rx a6UExYveMEo2j5T+5+oTQ1Q1NBosk6HBl8/jjs/ATpR3l9R5gzI+kpuM7z8F/cPI z1tE1zlhjHeXBc/LZdJmlqtlpW40u7VqvzN26TNSGlrbWPRoCcXgBDcATleqqJlj ETyuitoyNu5b5tyHpNZ4i2NQTcEdBaXeTPUF4k044vkuN+wS3oVPBGtiFbNu2Z9x yh/J54cNO7CbLHlSF4O9mG95tt5pyfSYEmYoRvvLPRzdi99Xzh8xfQyfCA5Gs1lW xf8qWu4PmvNVhBkRHGJsQukltHuzJh4= -----END CERTIFICATE-----Generated at Tue May 6 07:31:26 2025 by rpki-client