$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/685e5fb0-74b7-3641-bd89-1132b33d3635.roa File: 685e5fb0-74b7-3641-bd89-1132b33d3635.roa (raw, json) Hash identifier: 1Fh8BEb/X2XqUiM1KbJOXxfo7GPysBhBw++nxIMuAew= Subject key identifier: 9A:63:DC:C7:88:E6:53:2F:72:CF:F7:37:67:2E:EC:75:EE:28:9F:32 Certificate issuer: /CN=b5f49734-696b-4966-8db9-1388a58a153f Certificate serial: 010D0C9F432858492184136DD7AB8D917FBE89E0 Authority key identifier: 0C:B2:6F:FE:3D:27:27:33:F0:C0:69:0E:C9:2C:2E:A7:85:2D:59:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/685e5fb0-74b7-3641-bd89-1132b33d3635.roa Signing time: Sun 09 Mar 2025 13:00:52 +0000 ROA not before: Sun 09 Mar 2025 13:00:52 +0000 ROA not after: Sat 07 Jun 2025 13:00:52 +0000 asID: 17055 IP address blocks: 204.99.160.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/b5f49734-696b-4966-8db9-1388a58a153f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/b5f49734-696b-4966-8db9-1388a58a153f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:21:84:13:6d:d7:ab:8d:91:7f:be:89:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5f49734-696b-4966-8db9-1388a58a153f Validity Not Before: Mar 9 13:00:52 2025 GMT Not After : Jun 7 13:00:52 2025 GMT Subject: CN=5d069373-968b-452b-8f14-774fc1535e9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:b8:5a:d0:fc:af:27:09:78:84:32:92:fc:20: 0f:6b:9b:2c:f7:6f:c0:03:ef:00:17:6e:2c:1e:e3: 02:e1:02:3d:f9:bf:ca:c8:1f:22:d6:d5:06:24:de: 68:88:47:5b:01:b2:7f:7d:59:c3:b9:0f:2a:6d:a9: 04:01:97:a6:f7:47:fb:9d:46:3f:02:83:97:ed:3e: 4d:64:5c:4f:5c:fd:28:4a:1c:c6:78:c7:30:83:8f: 05:cd:93:52:dd:77:d9:09:7c:25:c3:48:fe:37:9b: a2:04:e1:65:31:96:16:cf:d0:f2:0f:4a:07:a7:46: 58:29:4a:a3:b0:88:6c:3f:48:0b:db:03:d3:78:10: ab:45:0b:ec:5a:85:9f:c1:7a:ff:09:5d:01:6b:c8: 53:d6:99:a5:52:d4:cf:6c:5a:1c:23:ae:0b:cd:c9: 85:bf:84:b4:a3:55:06:be:c2:61:26:d8:39:29:db: 39:ea:96:68:68:88:aa:5e:45:b0:f5:96:31:9a:54: da:42:a7:f3:08:c9:10:00:2d:fb:af:aa:20:3c:d1: 08:a8:21:56:7e:80:fd:0c:e8:da:cb:02:3f:9a:a0: 21:68:dc:f6:92:d2:05:fb:72:1b:13:36:39:68:2d: 23:7a:71:e2:92:5e:f6:06:0e:61:17:42:37:fa:2a: b8:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:63:DC:C7:88:E6:53:2F:72:CF:F7:37:67:2E:EC:75:EE:28:9F:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/685e5fb0-74b7-3641-bd89-1132b33d3635.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/b5f49734-696b-4966-8db9-1388a58a153f.crl X509v3 Authority Key Identifier: keyid:0C:B2:6F:FE:3D:27:27:33:F0:C0:69:0E:C9:2C:2E:A7:85:2D:59:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f.cer sbgp-ipAddrBlock: critical IPv4: 204.99.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:1b:3a:59:08:9c:0b:c9:c5:2d:4b:9e:03:9d:53:70:00:ce: 35:fe:ab:44:81:03:c1:58:27:6c:5b:ad:86:9f:a3:33:df:45: 1d:47:c5:0f:d7:b8:f3:ae:8e:58:92:5b:26:04:d7:0c:09:3e: 79:14:e6:d2:09:40:0a:5e:0e:e1:ad:02:09:51:d8:0e:a1:e7: dd:02:ab:1f:64:64:46:b8:12:11:8b:3f:db:81:0a:12:ca:99: 98:24:f7:46:96:db:00:b6:e0:17:11:4f:11:32:09:26:22:ca: 42:59:61:83:c8:3f:0f:60:31:5f:02:ef:8a:ec:0c:fd:ec:63: 10:27:ef:c2:8c:79:c7:67:c1:40:f5:2d:93:f7:1e:dd:1e:0e: af:7a:0a:c9:3d:4d:2a:3a:6f:e0:95:fd:cb:bb:ef:de:14:a7: b3:f7:34:c8:1f:45:7c:07:fd:cb:7d:20:28:5a:22:f5:aa:db: fe:1f:a7:c9:da:cc:0c:71:22:9d:62:a7:6d:b3:95:c2:18:8e: c1:21:06:f8:4a:ff:65:5d:68:a5:fc:b5:e6:9d:1b:b9:e0:9d: 77:a0:17:c6:07:d5:98:cb:e9:e6:c7:7e:28:33:5d:52:07:63: 8b:93:ba:e7:12:e4:03:45:47:97:cc:85:56:0a:36:44:14:46: 44:f2:83:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkhhBNt16uNkX++ieAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVmNDk3MzQtNjk2Yi00OTY2LThkYjktMTM4OGE1OGEx NTNmMB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk NWQwNjkzNzMtOTY4Yi00NTJiLThmMTQtNzc0ZmMxNTM1ZTlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg7ha0PyvJwl4hDKS/CAPa5ss92/AA+8AF24s HuMC4QI9+b/KyB8i1tUGJN5oiEdbAbJ/fVnDuQ8qbakEAZem90f7nUY/AoOX7T5N ZFxPXP0oShzGeMcwg48FzZNS3XfZCXwlw0j+N5uiBOFlMZYWz9DyD0oHp0ZYKUqj sIhsP0gL2wPTeBCrRQvsWoWfwXr/CV0Ba8hT1pmlUtTPbFocI64LzcmFv4S0o1UG vsJhJtg5Kds56pZoaIiqXkWw9ZYxmlTaQqfzCMkQAC37r6ogPNEIqCFWfoD9DOja ywI/mqAhaNz2ktIF+3IbEzY5aC0jenHikl72Bg5hF0I3+iq4yQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJpj3MeI5lMvcs/3N2cu7HXuKJ8yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iNWY0 OTczNC02OTZiLTQ5NjYtOGRiOS0xMzg4YTU4YTE1M2YvNjg1ZTVmYjAtNzRiNy0z NjQxLWJkODktMTEzMmIzM2QzNjM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYjVmNDk3MzQtNjk2Yi00OTY2LThk YjktMTM4OGE1OGExNTNmL2I1ZjQ5NzM0LTY5NmItNDk2Ni04ZGI5LTEzODhhNThh MTUzZi5jcmwwHwYDVR0jBBgwFoAUDLJv/j0nJzPwwGkOySwup4UtWSUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9iNWY0OTczNC02OTZiLTQ5NjYtOGRiOS0xMzg4 YTU4YTE1M2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEzGOgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACobOlkInAvJxS1LngOdU3AAzjX+q0SBA8FYJ2xbrYafozPfRR1HxQ/X uPOujliSWyYE1wwJPnkU5tIJQApeDuGtAglR2A6h590Cqx9kZEa4EhGLP9uBChLK mZgk90aW2wC24BcRTxEyCSYiykJZYYPIPw9gMV8C74rsDP3sYxAn78KMecdnwUD1 LZP3Ht0eDq96Csk9TSo6b+CV/cu7794Up7P3NMgfRXwH/ct9IChaIvWq2/4fp8na zAxxIp1ip22zlcIYjsEhBvhK/2VdaKX8teadG7ngnXegF8YH1ZjL6ebHfigzXVIH Y4uTuucS5ANFR5fMhVYKNkQURkTyg7A= -----END CERTIFICATE-----Generated at Sat Apr 12 14:54:11 2025 by rpki-client