$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/30696268-5078-3dbd-8376-a7af67b37ef8.roa File: 30696268-5078-3dbd-8376-a7af67b37ef8.roa (raw, json) Hash identifier: 1GimwYlvthFc3wQ3HA6+d9mL9tvWTgAQ9QFPtqX+Y3A= Subject key identifier: A6:28:38:21:38:C5:C1:59:AD:90:52:E8:2C:97:44:E8:05:8F:C2:44 Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F43285848E00689162BB973C5E1DBBD00 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/30696268-5078-3dbd-8376-a7af67b37ef8.roa Signing time: Fri 14 Feb 2025 02:00:39 +0000 ROA not before: Fri 14 Feb 2025 02:00:39 +0000 ROA not after: Thu 15 May 2025 01:00:39 +0000 asID: 20115 IP address blocks: 172.223.160.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e0:06:89:16:2b:b9:73:c5:e1:db:bd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Feb 14 02:00:39 2025 GMT Not After : May 15 01:00:39 2025 GMT Subject: CN=0796c327-b80e-46d5-9cab-5e946d8de55c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d0:0e:72:d4:1b:dd:d1:0f:01:80:05:9b:20: e9:bb:be:31:0b:da:1a:68:9b:86:ee:be:cb:8d:a3: 01:6d:4f:54:49:d8:14:69:0f:fe:5a:77:68:06:d1: 33:a7:8c:e7:09:29:ce:d8:ad:cc:8c:0d:79:a2:06: 43:a4:71:f0:8b:81:c7:33:09:00:af:13:0f:98:09: e4:ff:6e:02:57:1f:c3:b8:29:56:a8:71:9f:59:55: 10:3b:bb:12:48:8f:f0:54:5c:22:42:0e:5c:d7:c7: 5e:42:c3:e8:e2:03:44:12:32:8b:ca:4c:9a:01:a0: bc:cf:3b:fe:cb:26:9d:bb:a9:38:e3:67:6c:66:be: 74:2a:dc:7a:59:24:09:2f:af:73:6f:35:e9:e3:e4: d5:1d:a7:69:83:3f:54:a7:17:7a:e8:d0:3b:78:db: b0:b6:2a:bf:cf:bd:05:e2:5e:74:8f:a6:d7:c4:b1: da:dc:b8:9a:84:c0:98:f6:c6:f7:b1:c0:20:5c:8e: f7:4e:fa:46:39:db:7a:ba:b1:89:52:d2:e5:50:d0: d9:a2:52:3a:c0:a1:10:a4:1a:d5:20:74:77:55:30: 6e:77:3a:0e:32:76:ae:5c:4f:d9:7a:a8:4b:60:99: 1d:90:96:b1:e8:5b:43:ff:0a:a1:ef:5f:5e:bc:1d: e4:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:28:38:21:38:C5:C1:59:AD:90:52:E8:2C:97:44:E8:05:8F:C2:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/30696268-5078-3dbd-8376-a7af67b37ef8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv4: 172.223.160.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:39:e1:42:05:f8:5b:c6:00:db:bf:25:7c:41:3a:60:98:46: 47:82:24:84:56:d9:eb:9f:81:3a:b8:b9:ee:fd:3a:4e:44:fb: ab:d0:93:cb:61:d1:3f:85:56:36:77:c4:b5:04:b9:bf:b5:2b: fc:43:0e:22:91:26:05:90:ac:ae:ed:44:aa:36:56:1d:05:dd: 70:57:f7:25:71:e9:1e:17:e6:93:9f:1f:3c:8a:3e:9e:b5:5f: 87:80:72:5a:d8:21:cf:3d:66:aa:22:d3:f8:af:ef:54:8d:20: 7a:0a:3f:6c:e5:cc:6b:c2:7f:de:1e:83:f8:60:ea:ff:85:f5: 6e:8d:8b:02:ff:2f:92:a1:56:9b:a4:12:51:50:53:02:c2:ea: 9c:77:39:04:fa:c6:d5:cd:2d:32:91:00:0b:e6:25:e1:36:b5: ba:33:23:8c:fc:15:16:84:1d:51:95:8d:ca:8d:d5:fe:d6:02: ca:8b:f9:7c:65:65:54:3a:78:10:73:96:61:84:b1:5b:98:cd: 31:32:77:c3:bd:bf:24:57:08:97:47:e5:67:f3:be:01:a4:ba: c4:2a:06:3c:33:ab:9d:a3:a5:2d:0d:7a:ce:1e:6d:27:42:07: 01:b0:0d:93:9c:fe:47:9f:8f:3f:2f:23:4b:3c:bd:1d:86:bb: 05:9e:1c:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjgBokWK7lzxeHbvQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI1MDIxNDAyMDAzOVoXDTI1MDUxNTAxMDAzOVowLzEtMCsGA1UEAxMk MDc5NmMzMjctYjgwZS00NmQ1LTljYWItNWU5NDZkOGRlNTVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdAOctQb3dEPAYAFmyDpu74xC9oaaJuG7r7L jaMBbU9USdgUaQ/+WndoBtEzp4znCSnO2K3MjA15ogZDpHHwi4HHMwkArxMPmAnk /24CVx/DuClWqHGfWVUQO7sSSI/wVFwiQg5c18deQsPo4gNEEjKLykyaAaC8zzv+ yyadu6k442dsZr50Ktx6WSQJL69zbzXp4+TVHadpgz9Upxd66NA7eNuwtiq/z70F 4l50j6bXxLHa3LiahMCY9sb3scAgXI73TvpGOdt6urGJUtLlUNDZolI6wKEQpBrV IHR3VTBudzoOMnauXE/ZeqhLYJkdkJax6FtD/wqh719evB3kJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKYoOCE4xcFZrZBS6CyXROgFj8JEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvMzA2OTYyNjgtNTA3OC0z ZGJkLTgzNzYtYTdhZjY3YjM3ZWY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFrN+gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHo54UIF+FvGANu/JXxBOmCYRkeCJIRW2eufgTq4ue79Ok5E+6vQk8th 0T+FVjZ3xLUEub+1K/xDDiKRJgWQrK7tRKo2Vh0F3XBX9yVx6R4X5pOfHzyKPp61 X4eAclrYIc89Zqoi0/iv71SNIHoKP2zlzGvCf94eg/hg6v+F9W6NiwL/L5KhVpuk ElFQUwLC6px3OQT6xtXNLTKRAAvmJeE2tbozI4z8FRaEHVGVjcqN1f7WAsqL+Xxl ZVQ6eBBzlmGEsVuYzTEyd8O9vyRXCJdH5WfzvgGkusQqBjwzq52jpS0Nes4ebSdC BwGwDZOc/kefjz8vI0s8vR2GuwWeHKE= -----END CERTIFICATE-----Generated at Sat Apr 5 03:48:34 2025 by rpki-client