$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7a5ea33b-ee80-42d8-8255-b0c61f28b06f/2fc97616-433c-34a4-a801-399ce469f872.roa File: 2fc97616-433c-34a4-a801-399ce469f872.roa (raw, json) Hash identifier: ek4lEl9TVnqWN3XGOcA5VLSrqND+f2FXn87Pz/+ylKQ= Subject key identifier: 79:18:94:97:50:72:CA:F6:26:CD:52:63:E4:29:5F:97:8F:15:35:03 Certificate issuer: /CN=7a5ea33b-ee80-42d8-8255-b0c61f28b06f Certificate serial: 010D0C9F43285849403947B076E46E0B784ECF80 Authority key identifier: ED:CE:21:14:DF:3C:FC:0C:9B:AC:DB:57:D2:7B:BC:B3:D4:52:B2:0F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7a5ea33b-ee80-42d8-8255-b0c61f28b06f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7a5ea33b-ee80-42d8-8255-b0c61f28b06f/2fc97616-433c-34a4-a801-399ce469f872.roa Signing time: Thu 20 Mar 2025 13:00:53 +0000 ROA not before: Thu 20 Mar 2025 13:00:53 +0000 ROA not after: Wed 18 Jun 2025 13:00:53 +0000 asID: 1299 IP address blocks: 162.222.20.0/22 maxlen: 22 192.40.220.0/22 maxlen: 22 198.241.12.0/22 maxlen: 22 2606:8c80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7a5ea33b-ee80-42d8-8255-b0c61f28b06f/7a5ea33b-ee80-42d8-8255-b0c61f28b06f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7a5ea33b-ee80-42d8-8255-b0c61f28b06f/7a5ea33b-ee80-42d8-8255-b0c61f28b06f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7a5ea33b-ee80-42d8-8255-b0c61f28b06f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:40:39:47:b0:76:e4:6e:0b:78:4e:cf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a5ea33b-ee80-42d8-8255-b0c61f28b06f Validity Not Before: Mar 20 13:00:53 2025 GMT Not After : Jun 18 13:00:53 2025 GMT Subject: CN=705dc142-f8f3-4832-bb5a-a0bed4a0db4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:2f:3c:ec:63:61:d1:d9:55:70:aa:28:21:13: d3:da:bb:ef:2e:a3:a8:f2:13:27:6a:8d:2e:c3:7b: 45:99:72:f0:60:9f:ea:4d:59:a8:40:f5:65:17:a3: 58:60:6e:46:d3:42:db:f9:63:f3:8b:b6:df:8a:51: 18:d9:8b:a7:a2:72:fa:5f:b6:3b:e9:ec:6b:4c:ad: cb:38:64:6b:1d:0d:fc:fd:a3:e3:80:5c:ab:be:32: 17:ea:6c:24:ba:e1:12:ec:d0:d5:fb:29:a1:21:4c: 8c:b5:82:dd:91:92:58:5a:54:a1:05:9e:bd:b6:d6: 5b:09:25:42:a6:a3:12:8e:25:7e:13:d7:3e:19:72: 94:56:76:11:3f:dc:47:02:fe:e5:b2:35:af:c6:cd: e7:cb:62:21:0f:97:ac:db:eb:90:c8:ef:da:24:45: 2c:2b:89:be:50:ec:8e:3a:d5:81:5a:bb:84:01:6a: 93:ff:7d:0d:b7:f3:5e:3c:8f:67:bd:bc:36:f7:fc: 8d:c1:89:78:71:af:07:b2:69:b9:e4:91:7d:82:bf: cc:f6:91:58:0b:4e:d4:d3:46:4c:d4:66:d2:5f:b1: 95:b7:b2:13:c0:01:69:4b:3b:ca:bf:10:d8:28:70: 41:e9:2a:c8:32:06:c9:63:02:6a:c6:b5:47:2d:eb: 2c:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:18:94:97:50:72:CA:F6:26:CD:52:63:E4:29:5F:97:8F:15:35:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7a5ea33b-ee80-42d8-8255-b0c61f28b06f/2fc97616-433c-34a4-a801-399ce469f872.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7a5ea33b-ee80-42d8-8255-b0c61f28b06f/7a5ea33b-ee80-42d8-8255-b0c61f28b06f.crl X509v3 Authority Key Identifier: keyid:ED:CE:21:14:DF:3C:FC:0C:9B:AC:DB:57:D2:7B:BC:B3:D4:52:B2:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7a5ea33b-ee80-42d8-8255-b0c61f28b06f.cer sbgp-ipAddrBlock: critical IPv4: 162.222.20.0/22 192.40.220.0/22 198.241.12.0/22 IPv6: 2606:8c80::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:5f:d6:c4:fe:2d:52:49:cd:4d:d5:aa:53:bb:5f:46:43:05: b3:ac:b0:96:ab:5f:97:9e:1a:42:8f:93:e8:0c:6a:d7:78:89: e1:d9:be:e1:4e:e9:7c:11:73:75:15:16:b2:d3:fd:b0:20:52: 24:24:01:c2:85:b1:be:2d:41:84:c2:b5:f2:ca:52:90:fe:72: 08:69:1c:5b:e0:f9:c8:83:33:b4:58:17:3f:6b:bf:c0:08:5d: 44:1c:29:e8:d3:97:cc:81:f5:36:f7:bf:5e:20:0c:95:6f:d9: 4f:29:b3:47:a6:7d:9a:e7:37:69:92:13:b6:ba:ec:17:ee:76: fe:d6:4e:d6:8f:35:32:6e:44:bf:13:58:a7:b2:f3:11:7e:2a: 52:4a:56:f8:00:6b:8b:02:13:49:f7:dc:22:8f:24:62:d5:1f: a6:4a:02:87:53:93:a0:b5:b4:78:84:49:cb:ea:e0:69:52:75: 10:a8:25:d5:f2:98:9e:11:4a:35:3f:16:64:cb:38:f4:9d:53: 28:59:d1:65:bc:3d:d6:d2:69:e6:6a:a9:dd:63:f6:fa:ab:15: 6c:9b:93:ff:db:6c:cc:75:7e:10:6c:bc:d5:88:5f:1f:64:2d: 3f:c3:10:ad:c7:47:44:2d:e0:a9:ae:4b:8f:70:34:21:76:64: 9b:60:73:87 -----BEGIN CERTIFICATE----- MIIGXjCCBUagAwIBAgIUAQ0Mn0MoWElAOUewduRuC3hOz4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2E1ZWEzM2ItZWU4MC00MmQ4LTgyNTUtYjBjNjFmMjhi MDZmMB4XDTI1MDMyMDEzMDA1M1oXDTI1MDYxODEzMDA1M1owLzEtMCsGA1UEAxMk NzA1ZGMxNDItZjhmMy00ODMyLWJiNWEtYTBiZWQ0YTBkYjRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAki887GNh0dlVcKooIRPT2rvvLqOo8hMnao0u w3tFmXLwYJ/qTVmoQPVlF6NYYG5G00Lb+WPzi7bfilEY2YunonL6X7Y76exrTK3L OGRrHQ38/aPjgFyrvjIX6mwkuuES7NDV+ymhIUyMtYLdkZJYWlShBZ69ttZbCSVC pqMSjiV+E9c+GXKUVnYRP9xHAv7lsjWvxs3ny2IhD5es2+uQyO/aJEUsK4m+UOyO OtWBWruEAWqT/30Nt/NePI9nvbw29/yNwYl4ca8Hsmm55JF9gr/M9pFYC07U00ZM 1GbSX7GVt7ITwAFpSzvKvxDYKHBB6SrIMgbJYwJqxrVHLess8QIDAQABo4IDcDCC A2wwHQYDVR0OBBYEFHkYlJdQcsr2Js1SY+QpX5ePFTUDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83YTVl YTMzYi1lZTgwLTQyZDgtODI1NS1iMGM2MWYyOGIwNmYvMmZjOTc2MTYtNDMzYy0z NGE0LWE4MDEtMzk5Y2U0NjlmODcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvN2E1ZWEzM2ItZWU4MC00MmQ4LTgy NTUtYjBjNjFmMjhiMDZmLzdhNWVhMzNiLWVlODAtNDJkOC04MjU1LWIwYzYxZjI4 YjA2Zi5jcmwwHwYDVR0jBBgwFoAU7c4hFN88/AybrNtX0nu8s9RSsg8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi83YTVlYTMzYi1lZTgwLTQyZDgtODI1NS1iMGM2 MWYyOGIwNmYuY2VyMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCot4UAwQC wCjcAwQCxvEMMA0EAgACMAcDBQAmBoyAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAHxf1sT+LVJJzU3VqlO7 X0ZDBbOssJarX5eeGkKPk+gMatd4ieHZvuFO6XwRc3UVFrLT/bAgUiQkAcKFsb4t QYTCtfLKUpD+cghpHFvg+ciDM7RYFz9rv8AIXUQcKejTl8yB9Tb3v14gDJVv2U8p s0emfZrnN2mSE7a67Bfudv7WTtaPNTJuRL8TWKey8xF+KlJKVvgAa4sCE0n33CKP JGLVH6ZKAodTk6C1tHiEScvq4GlSdRCoJdXymJ4RSjU/FmTLOPSdUyhZ0WW8PdbS aeZqqd1j9vqrFWybk//bbMx1fhBsvNWIXx9kLT/DEK3HR0Qt4KmuS49wNCF2ZJtg c4c= -----END CERTIFICATE-----Generated at Sun Apr 6 12:05:53 2025 by rpki-client