$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/445d9dfe-8c66-4b5b-bc81-6ebebd514945/87da4f25-f5c5-376e-a232-31fdb9491bd9.roa File: 87da4f25-f5c5-376e-a232-31fdb9491bd9.roa (raw, json) Hash identifier: FSrsmqsa+kWJdNFcUqHKNFG3DJhYdo9l925AmM0hrto= Subject key identifier: 61:81:E8:F8:A7:19:BC:9A:65:72:9A:36:38:EA:8B:DD:EC:63:E0:31 Certificate issuer: /CN=445d9dfe-8c66-4b5b-bc81-6ebebd514945 Certificate serial: 010D0C9F43285849244E858A50D92E9A72704CC0 Authority key identifier: A7:14:B0:F8:01:52:04:F5:65:D7:EC:99:3F:C9:98:58:BC:85:C2:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/445d9dfe-8c66-4b5b-bc81-6ebebd514945.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/445d9dfe-8c66-4b5b-bc81-6ebebd514945/87da4f25-f5c5-376e-a232-31fdb9491bd9.roa Signing time: Mon 10 Mar 2025 13:00:52 +0000 ROA not before: Mon 10 Mar 2025 13:00:52 +0000 ROA not after: Sun 08 Jun 2025 13:00:52 +0000 asID: 15317 IP address blocks: 162.221.224.0/22 maxlen: 24 162.252.20.0/22 maxlen: 24 173.214.240.0/20 maxlen: 24 192.133.136.0/21 maxlen: 24 199.182.160.0/21 maxlen: 24 216.172.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/445d9dfe-8c66-4b5b-bc81-6ebebd514945/445d9dfe-8c66-4b5b-bc81-6ebebd514945.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/445d9dfe-8c66-4b5b-bc81-6ebebd514945/445d9dfe-8c66-4b5b-bc81-6ebebd514945.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/445d9dfe-8c66-4b5b-bc81-6ebebd514945.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:24:4e:85:8a:50:d9:2e:9a:72:70:4c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=445d9dfe-8c66-4b5b-bc81-6ebebd514945 Validity Not Before: Mar 10 13:00:52 2025 GMT Not After : Jun 8 13:00:52 2025 GMT Subject: CN=7319d806-7659-449c-98e1-127bc6b01701 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:3a:c6:17:54:40:70:94:c2:9c:62:c0:34:9a: fd:81:15:32:7a:ad:09:0e:f0:6b:e1:89:c3:5b:f3: b0:4d:2f:63:03:f3:91:fb:ba:f8:52:e4:da:7b:6f: 9f:f4:a8:db:31:55:0a:b1:3e:5c:9d:36:40:78:10: c3:0a:76:78:e4:24:17:50:c7:9f:88:a4:ef:4c:1f: a3:b9:58:95:5a:3b:fd:41:d6:59:4b:9a:0d:0d:c2: 63:e4:58:4b:e6:c5:a0:a4:da:ee:4a:04:e2:43:08: cb:0b:51:2f:93:4c:4b:44:0f:6f:b1:b3:2f:35:c0: 3d:ca:ca:2c:3a:19:bf:2c:67:db:76:b1:25:9a:9a: 8f:de:f5:a9:af:42:44:13:c4:3b:ce:99:5b:62:af: 1b:57:4e:cc:ba:37:98:a6:a6:5d:1b:fc:c1:73:e8: e2:81:8f:71:bb:e2:f2:07:a8:e3:c5:39:79:cb:2e: 9d:7a:6f:08:d7:c2:e6:5f:7e:60:bb:d4:1b:2a:26: 9e:b2:75:c3:9b:16:32:45:de:b3:d0:b7:dc:3f:60: b8:b7:ed:2a:ba:ea:d3:db:d9:19:65:41:ad:a1:1e: 65:ea:0c:eb:2a:61:32:0e:dd:5d:5d:f5:5d:5f:a0: 5d:c7:79:6e:fc:8a:5b:b7:8e:d8:5c:0c:43:14:9b: 18:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:81:E8:F8:A7:19:BC:9A:65:72:9A:36:38:EA:8B:DD:EC:63:E0:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/445d9dfe-8c66-4b5b-bc81-6ebebd514945/87da4f25-f5c5-376e-a232-31fdb9491bd9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/445d9dfe-8c66-4b5b-bc81-6ebebd514945/445d9dfe-8c66-4b5b-bc81-6ebebd514945.crl X509v3 Authority Key Identifier: keyid:A7:14:B0:F8:01:52:04:F5:65:D7:EC:99:3F:C9:98:58:BC:85:C2:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/445d9dfe-8c66-4b5b-bc81-6ebebd514945.cer sbgp-ipAddrBlock: critical IPv4: 162.221.224.0/22 162.252.20.0/22 173.214.240.0/20 192.133.136.0/21 199.182.160.0/21 216.172.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:69:d0:af:04:8a:a1:90:e7:00:97:9c:e8:f8:92:c1:28:c8: 9c:03:fc:00:99:b0:3e:e8:f3:53:3e:54:38:03:01:93:d8:13: 7b:70:e9:0c:0c:83:4b:2e:c3:07:9a:8c:02:b9:43:87:3a:66: d4:63:1a:ca:9d:59:25:89:65:9f:73:50:c9:95:44:00:24:20: 05:44:48:7c:2e:f8:c6:ef:e8:2d:2e:16:a1:33:a8:f4:37:cc: c3:0a:82:39:af:12:da:e6:f1:09:e0:ae:3d:95:64:9e:67:84: 5d:e4:f3:9a:d0:fb:63:42:93:7f:8a:cf:dc:72:6f:83:5c:20: e4:c4:7b:ea:d7:f9:21:f7:5d:9a:03:99:3e:ae:25:b0:75:a9: 6a:61:81:c4:43:6a:23:54:df:89:88:28:b8:78:39:74:6b:78: 2d:16:08:bd:b8:ff:dc:03:01:8b:dc:fd:df:5c:c5:75:82:fc: db:04:13:a5:aa:a0:22:33:c9:fb:e8:47:9c:cb:76:6e:97:69: 73:0d:a5:a3:c9:eb:1f:84:26:f7:d2:95:be:bd:70:e7:cc:b8: 31:77:1f:0d:38:5c:77:b4:1a:4f:04:86:f4:1f:e8:b6:7f:40: c8:87:e9:5d:3a:78:52:04:85:73:7d:ae:22:24:f6:af:e5:a4: 64:9c:49:39 -----BEGIN CERTIFICATE----- MIIGYTCCBUmgAwIBAgIUAQ0Mn0MoWEkkToWKUNkumnJwTMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDQ1ZDlkZmUtOGM2Ni00YjViLWJjODEtNmViZWJkNTE0 OTQ1MB4XDTI1MDMxMDEzMDA1MloXDTI1MDYwODEzMDA1MlowLzEtMCsGA1UEAxMk NzMxOWQ4MDYtNzY1OS00NDljLTk4ZTEtMTI3YmM2YjAxNzAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1zrGF1RAcJTCnGLANJr9gRUyeq0JDvBr4YnD W/OwTS9jA/OR+7r4UuTae2+f9KjbMVUKsT5cnTZAeBDDCnZ45CQXUMefiKTvTB+j uViVWjv9QdZZS5oNDcJj5FhL5sWgpNruSgTiQwjLC1Evk0xLRA9vsbMvNcA9ysos Ohm/LGfbdrElmpqP3vWpr0JEE8Q7zplbYq8bV07MujeYpqZdG/zBc+jigY9xu+Ly B6jjxTl5yy6dem8I18LmX35gu9QbKiaesnXDmxYyRd6z0LfcP2C4t+0quurT29kZ ZUGtoR5l6gzrKmEyDt1dXfVdX6Bdx3lu/Ipbt47YXAxDFJsYFwIDAQABo4IDczCC A28wHQYDVR0OBBYEFGGB6PinGbyaZXKaNjjqi93sY+AxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80NDVk OWRmZS04YzY2LTRiNWItYmM4MS02ZWJlYmQ1MTQ5NDUvODdkYTRmMjUtZjVjNS0z NzZlLWEyMzItMzFmZGI5NDkxYmQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNDQ1ZDlkZmUtOGM2Ni00YjViLWJj ODEtNmViZWJkNTE0OTQ1LzQ0NWQ5ZGZlLThjNjYtNGI1Yi1iYzgxLTZlYmViZDUx NDk0NS5jcmwwHwYDVR0jBBgwFoAUpxSw+AFSBPVl1+yZP8mYWLyFwmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC80NDVkOWRmZS04YzY2LTRiNWItYmM4MS02ZWJl YmQ1MTQ5NDUuY2VyMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQCot3gAwQC ovwUAwQErdbwAwQDwIWIAwQDx7agAwQE2KwwMFQGA1UdIAEB/wRKMEgwRgYIKwYB BQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3Vy Y2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAABp0K8EiqGQ5wCX nOj4ksEoyJwD/ACZsD7o81M+VDgDAZPYE3tw6QwMg0suwweajAK5Q4c6ZtRjGsqd WSWJZZ9zUMmVRAAkIAVESHwu+Mbv6C0uFqEzqPQ3zMMKgjmvEtrm8Qngrj2VZJ5n hF3k85rQ+2NCk3+Kz9xyb4NcIOTEe+rX+SH3XZoDmT6uJbB1qWphgcRDaiNU34mI KLh4OXRreC0WCL24/9wDAYvc/d9cxXWC/NsEE6WqoCIzyfvoR5zLdm6XaXMNpaPJ 6x+EJvfSlb69cOfMuDF3Hw04XHe0Gk8EhvQf6LZ/QMiH6V06eFIEhXN9riIk9q/l pGScSTk= -----END CERTIFICATE-----Generated at Sat Apr 12 00:52:45 2025 by rpki-client