$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/baff8d84-b104-358b-982d-5d770c0aa824.roa File: baff8d84-b104-358b-982d-5d770c0aa824.roa (raw, json) Hash identifier: 4SI6zD7WDqdmoZJwphwJoVZ5D+OKkiR4onughBd8fzM= Subject key identifier: D7:A9:F5:C3:8E:50:8A:7E:4D:3A:BD:B3:2B:E0:5C:8B:B9:EF:D9:83 Certificate issuer: /CN=cc3ad4cd-0893-42fc-a743-e36058983069 Certificate serial: 010D0C9F43285849F9DFCE591820EF7A98DF3780 Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/baff8d84-b104-358b-982d-5d770c0aa824.roa Signing time: Mon 26 May 2025 01:00:50 +0000 ROA not before: Mon 26 May 2025 01:00:50 +0000 ROA not after: Sun 24 Aug 2025 01:00:50 +0000 asID: 15290 IP address blocks: 216.13.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Jun 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f9:df:ce:59:18:20:ef:7a:98:df:37:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069 Validity Not Before: May 26 01:00:50 2025 GMT Not After : Aug 24 01:00:50 2025 GMT Subject: CN=0ea8e43d-7e5e-4a9e-a5b6-16dd058c7767 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:34:56:6d:02:8f:26:f2:6a:c2:aa:37:07:b3: b6:1b:0d:6e:0d:94:ab:58:79:62:70:98:9b:65:f3: 21:e2:25:74:b2:ff:cf:53:ad:19:6b:09:ca:a7:d1: b2:c7:3c:8a:a1:0b:d4:f2:7b:63:9d:35:57:f4:c9: f8:2d:6b:85:f6:c4:36:c8:68:78:91:8e:a4:8e:ff: 72:4a:7d:bf:9a:9a:75:76:18:df:be:3a:1d:5b:d2: c4:23:bb:37:68:82:0e:d2:7b:44:bf:15:ac:14:bb: 0a:ef:8d:39:1d:7a:86:9b:42:f3:45:c5:3e:f7:66: 14:55:ee:9a:60:21:fb:64:f4:9b:f5:d9:c8:7a:be: 97:55:a9:ed:6c:e9:0a:b2:f4:77:c5:28:2d:99:d6: 46:8a:52:7b:b5:ac:5c:a8:09:fe:37:c1:87:4c:2b: e2:20:19:96:79:a5:23:e2:ea:bb:f7:3b:78:a1:e8: fb:12:0b:68:2d:39:dc:64:40:d4:35:1b:44:fa:1e: d3:cd:b0:b6:b4:42:87:70:71:f6:66:4a:35:09:41: 73:22:76:40:ad:0c:f1:0a:c8:f7:d2:3d:7d:11:8a: eb:5d:2a:01:a0:16:7e:e0:a1:e2:82:68:b4:9d:40: 75:cd:a6:62:32:7b:50:36:91:21:14:68:40:cd:78: 18:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:A9:F5:C3:8E:50:8A:7E:4D:3A:BD:B3:2B:E0:5C:8B:B9:EF:D9:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/baff8d84-b104-358b-982d-5d770c0aa824.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl X509v3 Authority Key Identifier: keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer sbgp-ipAddrBlock: critical IPv4: 216.13.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:36:0a:95:8b:ce:25:f8:f5:98:8e:a3:6b:6f:42:6b:f1:ed: 05:d6:b2:81:07:4c:17:87:d8:46:e0:5a:d0:84:1c:1f:f5:0b: a0:f6:51:30:d9:1f:fa:be:bb:b2:93:75:14:b0:ea:62:a6:2c: 68:4f:b6:ad:9c:19:f0:49:ac:92:4b:4d:11:5e:a0:b2:95:0c: e2:b4:c1:64:c5:7b:ea:eb:c6:76:76:f4:e5:8a:df:d3:ce:7a: 0d:40:a4:91:20:cf:66:78:4b:35:d1:0f:6f:1e:cd:b2:b0:a7: 11:f9:dd:da:68:f7:79:5e:47:d0:f7:db:0b:41:21:27:92:45: f7:b3:fc:76:40:ae:45:dd:ad:f5:7a:d1:c2:39:53:a8:ad:ab: 10:d1:82:09:0f:b3:d5:7b:7a:88:fe:ff:f2:8d:00:12:be:4b: 80:39:89:cc:ec:70:7c:4d:b0:c1:17:be:5a:70:ef:ac:a4:b2: 0e:75:79:2e:7f:6f:ec:5f:23:4c:6d:a0:3b:10:59:60:a7:87: 5a:94:ad:e9:d7:60:d1:ae:a6:6f:ca:8f:0d:d7:07:d2:ae:e6: 8d:43:8a:fa:b1:fe:9a:4f:cc:b4:80:30:ee:30:dd:40:ca:5a: 1e:bb:32:90:13:4f:54:d3:cb:2d:31:ed:76:9e:95:f1:26:9e: f9:37:7a:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn5385ZGCDvepjfN4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2MzYWQ0Y2QtMDg5My00MmZjLWE3NDMtZTM2MDU4OTgz MDY5MB4XDTI1MDUyNjAxMDA1MFoXDTI1MDgyNDAxMDA1MFowLzEtMCsGA1UEAxMk MGVhOGU0M2QtN2U1ZS00YTllLWE1YjYtMTZkZDA1OGM3NzY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxjRWbQKPJvJqwqo3B7O2Gw1uDZSrWHlicJib ZfMh4iV0sv/PU60ZawnKp9GyxzyKoQvU8ntjnTVX9Mn4LWuF9sQ2yGh4kY6kjv9y Sn2/mpp1dhjfvjodW9LEI7s3aIIO0ntEvxWsFLsK7405HXqGm0LzRcU+92YUVe6a YCH7ZPSb9dnIer6XVantbOkKsvR3xSgtmdZGilJ7taxcqAn+N8GHTCviIBmWeaUj 4uq79zt4oej7EgtoLTncZEDUNRtE+h7TzbC2tEKHcHH2Zko1CUFzInZArQzxCsj3 0j19EYrrXSoBoBZ+4KHigmi0nUB1zaZiMntQNpEhFGhAzXgYAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNep9cOOUIp+TTq9syvgXIu579mDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jYzNh ZDRjZC0wODkzLTQyZmMtYTc0My1lMzYwNTg5ODMwNjkvYmFmZjhkODQtYjEwNC0z NThiLTk4MmQtNWQ3NzBjMGFhODI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2MzYWQ0Y2QtMDg5My00MmZjLWE3 NDMtZTM2MDU4OTgzMDY5L2NjM2FkNGNkLTA4OTMtNDJmYy1hNzQzLWUzNjA1ODk4 MzA2OS5jcmwwHwYDVR0jBBgwFoAU0BkzYCA5uLEoc26e1umhhrVK+64wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jYzNhZDRjZC0wODkzLTQyZmMtYTc0My1lMzYw NTg5ODMwNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2A14MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAU2CpWLziX49ZiOo2tvQmvx7QXWsoEHTBeH2EbgWtCEHB/1C6D2UTDZ H/q+u7KTdRSw6mKmLGhPtq2cGfBJrJJLTRFeoLKVDOK0wWTFe+rrxnZ29OWK39PO eg1ApJEgz2Z4SzXRD28ezbKwpxH53dpo93leR9D32wtBISeSRfez/HZArkXdrfV6 0cI5U6itqxDRggkPs9V7eoj+//KNABK+S4A5iczscHxNsMEXvlpw76yksg51eS5/ b+xfI0xtoDsQWWCnh1qUrenXYNGupm/Kjw3XB9Ku5o1Divqx/ppPzLSAMO4w3UDK Wh67MpATT1TTyy0x7XaelfEmnvk3eqQ= -----END CERTIFICATE-----Generated at Mon Jun 2 16:46:09 2025 by rpki-client