$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a24a5b45-65e4-3787-acd8-b655e54a2021.roa File: a24a5b45-65e4-3787-acd8-b655e54a2021.roa (raw, json) Hash identifier: 4hHFFXsNkXXBHQUw/HCm9EAK7beKG2VI5MmciBf8AMg= Subject key identifier: B0:82:BF:BC:DD:BA:95:3E:94:4F:C1:7D:BF:C8:D8:6E:8C:E8:54:79 Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F43285848E00661C360DC849127F82F80 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a24a5b45-65e4-3787-acd8-b655e54a2021.roa Signing time: Fri 14 Feb 2025 02:00:39 +0000 ROA not before: Fri 14 Feb 2025 02:00:39 +0000 ROA not after: Thu 15 May 2025 01:00:39 +0000 asID: 20115 IP address blocks: 172.223.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e0:06:61:c3:60:dc:84:91:27:f8:2f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Feb 14 02:00:39 2025 GMT Not After : May 15 01:00:39 2025 GMT Subject: CN=ed80752d-6a8c-42e2-9008-9d8a596882c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:6c:0c:9c:6d:70:90:aa:8e:b3:d3:dd:b6:7a: e7:ed:df:28:12:a6:f1:cb:2f:c8:94:80:5b:85:75: e5:01:45:5e:68:60:91:08:78:c6:ca:4e:91:f3:26: b9:f1:01:17:d5:b7:20:ba:96:b3:d2:5f:52:de:b9: d0:69:e6:e1:0a:a3:86:bb:4f:8b:79:b7:5a:15:c4: 2a:e7:d5:11:97:56:a9:71:a6:3b:03:a3:3a:f6:7f: bb:f7:62:49:ad:56:8f:d7:3a:23:b5:f6:a9:bf:89: 3b:98:5d:46:16:75:85:91:41:0c:0c:53:be:7e:83: 10:8d:74:b5:78:fd:9d:f2:9b:ec:93:a5:63:92:95: e1:e1:17:ae:9f:2b:6a:69:c2:6c:5a:c3:c0:02:3f: 9f:72:64:07:fa:c6:fc:dd:b6:e5:06:28:06:b4:54: a7:a6:2e:2f:76:d0:51:05:f2:20:94:ca:f6:5f:23: 08:6c:c5:a9:a6:c0:11:1b:96:53:27:97:e2:90:32: 86:9b:da:ff:1b:31:ae:3b:ad:3c:26:4d:9f:52:b6: aa:9d:c4:3a:f6:17:4f:e9:1b:de:cf:c9:0f:4c:f7: 9f:56:89:cc:76:1f:3c:1a:df:4f:aa:31:46:bd:0f: 3b:bf:f6:37:bd:a3:43:48:47:da:75:5e:1c:e2:c0: 8b:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:82:BF:BC:DD:BA:95:3E:94:4F:C1:7D:BF:C8:D8:6E:8C:E8:54:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a24a5b45-65e4-3787-acd8-b655e54a2021.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv4: 172.223.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:b7:28:30:9c:7f:9f:f1:0d:09:9e:b3:2a:e7:ed:4a:01:c1: 9f:4f:31:fa:68:ce:6a:34:e8:38:0a:8b:3e:e5:a0:a7:db:b3: 50:53:53:eb:c7:df:a0:41:f6:4c:d1:47:71:a4:b6:1d:19:d4: 9c:b5:5c:ab:96:60:93:64:9b:a1:8b:33:61:c9:12:0a:cb:01: 3c:9d:0f:52:a9:fe:e7:72:d2:6d:11:51:b6:91:b8:0f:bd:97: 70:9c:88:c8:cc:b7:64:da:da:f8:9a:c3:fe:9b:11:82:79:d3: ca:9c:e6:bb:2e:13:9c:b8:90:4d:55:83:da:3f:f0:e0:df:dd: ce:1d:d4:e3:c7:79:44:9b:13:fd:50:84:0a:1f:d1:f2:e6:50: cb:b8:19:45:07:f6:ca:12:9e:aa:ac:1d:c9:fc:bc:98:3d:17: 9a:b9:62:cd:d8:23:66:3b:a9:16:c5:bc:5d:98:fe:70:d7:44: 1e:3f:c7:28:e6:a2:87:fb:01:98:ba:a2:91:e8:c7:e0:fd:0d: 56:21:2c:cd:94:84:87:43:62:a8:0a:c4:c8:38:41:bd:0f:73: e7:99:8f:37:63:74:21:8f:e1:2b:74:a5:75:36:c3:af:8f:ed: c9:e7:62:2d:e0:2b:5b:ab:46:ce:e0:98:ca:b4:6f:d8:04:1c: 47:61:eb:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjgBmHDYNyEkSf4L4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI1MDIxNDAyMDAzOVoXDTI1MDUxNTAxMDAzOVowLzEtMCsGA1UEAxMk ZWQ4MDc1MmQtNmE4Yy00MmUyLTkwMDgtOWQ4YTU5Njg4MmMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWwMnG1wkKqOs9Pdtnrn7d8oEqbxyy/IlIBb hXXlAUVeaGCRCHjGyk6R8ya58QEX1bcgupaz0l9S3rnQaebhCqOGu0+LebdaFcQq 59URl1apcaY7A6M69n+792JJrVaP1zojtfapv4k7mF1GFnWFkUEMDFO+foMQjXS1 eP2d8pvsk6VjkpXh4ReunytqacJsWsPAAj+fcmQH+sb83bblBigGtFSnpi4vdtBR BfIglMr2XyMIbMWppsARG5ZTJ5fikDKGm9r/GzGuO608Jk2fUraqncQ69hdP6Rve z8kPTPefVonMdh88Gt9PqjFGvQ87v/Y3vaNDSEfadV4c4sCLAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLCCv7zdupU+lE/Bfb/I2G6M6FR5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvYTI0YTViNDUtNjVlNC0z Nzg3LWFjZDgtYjY1NWU1NGEyMDIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFrN+AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAC3KDCcf5/xDQmesyrn7UoBwZ9PMfpozmo06DgKiz7loKfbs1BTU+vH 36BB9kzRR3Gkth0Z1Jy1XKuWYJNkm6GLM2HJEgrLATydD1Kp/udy0m0RUbaRuA+9 l3CciMjMt2Ta2viaw/6bEYJ508qc5rsuE5y4kE1Vg9o/8ODf3c4d1OPHeUSbE/1Q hAof0fLmUMu4GUUH9soSnqqsHcn8vJg9F5q5Ys3YI2Y7qRbFvF2Y/nDXRB4/xyjm oof7AZi6opHox+D9DVYhLM2UhIdDYqgKxMg4Qb0Pc+eZjzdjdCGP4St0pXU2w6+P 7cnnYi3gK1urRs7gmMq0b9gEHEdh654= -----END CERTIFICATE-----Generated at Sat Apr 5 03:45:38 2025 by rpki-client