$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/20daa57e-6e7f-3026-95b0-e7896bc91c38.roa File: 20daa57e-6e7f-3026-95b0-e7896bc91c38.roa (raw, json) Hash identifier: yQhJ2TKq2teUGn6EeCj+gVO/9jaRCPp6dUChQ51W2fY= Subject key identifier: DF:B5:0F:36:D0:40:84:9B:9B:00:A3:FD:59:E8:7C:79:3B:E0:64:5F Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F43285848E006894182EB8EAD5E1FCB6E Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/20daa57e-6e7f-3026-95b0-e7896bc91c38.roa Signing time: Fri 14 Feb 2025 02:00:39 +0000 ROA not before: Fri 14 Feb 2025 02:00:39 +0000 ROA not after: Thu 15 May 2025 01:00:39 +0000 asID: 20115 IP address blocks: 172.220.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e0:06:89:41:82:eb:8e:ad:5e:1f:cb:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Feb 14 02:00:39 2025 GMT Not After : May 15 01:00:39 2025 GMT Subject: CN=e3969767-d56a-444d-8a4c-23f8c38bb904 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:2c:f6:f0:88:f7:51:97:f6:7e:f9:2a:87:44: 65:ac:00:99:4a:8e:51:d7:97:b1:9f:dc:2f:01:a4: 16:37:40:05:a9:cb:6a:67:8a:59:58:38:c7:5e:65: 3e:87:17:f7:42:55:9a:43:90:f9:dd:c5:f8:d6:f1: 57:ad:1e:50:65:c6:f3:40:30:91:84:bd:c8:11:b0: ed:45:28:91:17:23:8e:85:2f:b7:9f:8c:fd:f1:d3: 7d:8b:6f:57:f3:fa:4f:a8:84:c4:5f:40:1e:94:47: 91:a2:54:01:a9:eb:a4:5f:b2:0b:53:4e:19:a7:2c: 4a:76:6b:9e:12:de:75:77:88:d4:a5:67:11:63:a2: ed:ce:39:d1:81:96:46:d5:1c:f4:de:3b:f6:9f:2e: ff:43:12:7a:c7:ba:e5:f7:69:fb:f3:2b:a0:49:a9: 27:04:30:e5:90:0d:b6:fc:73:a6:d5:2f:49:2a:ab: 38:e5:44:01:71:3c:52:af:f9:3b:35:aa:11:ad:11: e1:99:24:76:ed:95:b0:55:2a:03:93:cf:f2:74:fd: b0:c3:4f:6c:66:6f:bc:da:48:0b:8d:65:96:57:44: 0f:b3:57:2e:ce:75:e5:cb:df:8f:67:54:fb:7f:3b: 1b:a9:ae:8a:dc:71:4e:eb:67:10:db:c2:b3:1c:d3: 7b:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:B5:0F:36:D0:40:84:9B:9B:00:A3:FD:59:E8:7C:79:3B:E0:64:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/20daa57e-6e7f-3026-95b0-e7896bc91c38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv4: 172.220.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:99:ff:91:d5:4f:70:ab:d6:dc:6d:8a:4d:72:86:4e:40:a1: 8a:cb:8a:b7:ce:59:ae:f1:eb:06:c9:20:99:e6:aa:a1:39:ce: 45:2f:f8:bd:f3:3f:48:cb:2b:81:08:83:89:cb:0a:0d:0c:7d: a1:2a:14:d2:dd:44:58:88:3c:4d:29:4d:76:ee:cf:ab:03:a0: 25:0a:f7:e7:de:df:14:b4:d4:b2:cb:ea:e5:81:6a:e5:d6:95: 84:b1:64:59:4f:af:74:fb:78:85:b4:b1:e5:6f:d9:28:51:bb: 2f:e1:2e:12:48:fb:32:be:9d:a3:4c:7d:aa:21:3f:c2:23:55: be:58:07:99:63:ce:27:46:e2:5e:c4:3c:ce:94:bd:b8:90:8d: 70:51:1e:dd:ce:c1:5b:19:6f:97:f4:f6:c8:4f:73:23:e0:71: e1:93:fb:58:3f:59:06:d1:65:61:aa:7a:23:54:df:e6:27:6f: b3:de:45:e4:e6:db:c4:d6:ca:dc:17:82:ee:90:8f:d4:a1:cf: d2:d7:16:60:59:c1:71:b1:38:aa:f1:97:fb:a6:dd:8e:f5:c2: db:91:50:08:35:94:b3:8c:52:7d:ff:68:df:d1:ec:a2:d9:5d: 2d:7a:d1:aa:74:d8:58:db:f0:ae:db:2b:db:d5:21:00:ac:b1: 15:2b:2b:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjgBolBguuOrV4fy24wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI1MDIxNDAyMDAzOVoXDTI1MDUxNTAxMDAzOVowLzEtMCsGA1UEAxMk ZTM5Njk3NjctZDU2YS00NDRkLThhNGMtMjNmOGMzOGJiOTA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwiz28Ij3UZf2fvkqh0RlrACZSo5R15exn9wv AaQWN0AFqctqZ4pZWDjHXmU+hxf3QlWaQ5D53cX41vFXrR5QZcbzQDCRhL3IEbDt RSiRFyOOhS+3n4z98dN9i29X8/pPqITEX0AelEeRolQBqeukX7ILU04ZpyxKdmue Et51d4jUpWcRY6LtzjnRgZZG1Rz03jv2ny7/QxJ6x7rl92n78yugSaknBDDlkA22 /HOm1S9JKqs45UQBcTxSr/k7NaoRrRHhmSR27ZWwVSoDk8/ydP2ww09sZm+82kgL jWWWV0QPs1cuznXly9+PZ1T7fzsbqa6K3HFO62cQ28KzHNN70wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN+1DzbQQISbmwCj/VnofHk74GRfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvMjBkYWE1N2UtNmU3Zi0z MDI2LTk1YjAtZTc4OTZiYzkxYzM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGrNyAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJmZ/5HVT3Cr1txtik1yhk5AoYrLirfOWa7x6wbJIJnmqqE5zkUv+L3z P0jLK4EIg4nLCg0MfaEqFNLdRFiIPE0pTXbuz6sDoCUK9+fe3xS01LLL6uWBauXW lYSxZFlPr3T7eIW0seVv2ShRuy/hLhJI+zK+naNMfaohP8IjVb5YB5ljzidG4l7E PM6UvbiQjXBRHt3OwVsZb5f09shPcyPgceGT+1g/WQbRZWGqeiNU3+Ynb7PeReTm 28TWytwXgu6Qj9Shz9LXFmBZwXGxOKrxl/um3Y71wtuRUAg1lLOMUn3/aN/R7KLZ XS160ap02Fjb8K7bK9vVIQCssRUrK5Y= -----END CERTIFICATE-----Generated at Sat Apr 5 03:42:35 2025 by rpki-client