$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86/3006b7cf-ec78-3fe6-92e1-04b0843f594e.roa File: 3006b7cf-ec78-3fe6-92e1-04b0843f594e.roa (raw, json) Hash identifier: EOranIsvsZaw6ndPje61B1F1v2lQNFXGrjuS91fyg5U= Subject key identifier: 35:82:93:EC:36:E4:F4:23:0D:B3:79:D8:A0:71:FC:36:3A:8A:04:B7 Certificate issuer: /CN=94543699-4d50-4a37-8000-038c38671a86 Certificate serial: 010D0C9F43285849EA851B8B30A04B06E4460980 Authority key identifier: 03:F9:93:D0:3A:C4:C9:F5:95:7D:21:84:67:FF:6C:5B:D1:56:81:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86/3006b7cf-ec78-3fe6-92e1-04b0843f594e.roa Signing time: Tue 20 May 2025 13:01:05 +0000 ROA not before: Tue 20 May 2025 13:01:05 +0000 ROA not after: Mon 18 Aug 2025 13:01:05 +0000 asID: 40562 IP address blocks: 172.111.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86/94543699-4d50-4a37-8000-038c38671a86.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86/94543699-4d50-4a37-8000-038c38671a86.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ea:85:1b:8b:30:a0:4b:06:e4:46:09:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94543699-4d50-4a37-8000-038c38671a86 Validity Not Before: May 20 13:01:05 2025 GMT Not After : Aug 18 13:01:05 2025 GMT Subject: CN=ab2cc7d7-d2fb-4cde-bf68-334135e62eec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:70:d4:4f:17:ed:da:c5:d7:9d:0e:d5:93:85: 06:56:e8:a7:6a:95:bb:58:7f:13:fa:4c:fd:ee:04: 30:75:61:9b:f9:57:66:88:1e:d2:28:94:97:3f:ee: 0c:a6:8e:b3:98:b7:1b:85:4b:ef:fe:bf:e0:b7:c4: 13:bf:97:86:7b:c2:0d:4c:2f:c3:46:5d:7a:79:26: 34:e3:1f:3c:d8:de:e4:5c:86:19:03:61:d9:c5:4a: f4:3f:6c:d8:11:72:2e:11:fb:4e:10:57:e0:94:b8: c7:3e:e5:dd:a3:03:e6:9f:ac:5f:fa:fd:3c:bb:51: 96:66:a6:b2:50:f8:20:4e:c1:c4:05:d5:bd:1b:39: a9:56:30:b5:98:5c:c3:ea:77:ee:1d:b9:21:f9:86: f6:f1:b1:05:d7:38:90:7b:48:95:b0:81:39:6e:01: 49:cd:bc:7b:6a:d7:bb:04:29:bf:86:10:eb:26:a9: a5:0f:90:fe:ed:ad:08:2c:26:79:cf:b2:2f:16:8f: be:17:fe:17:38:92:8f:6c:93:05:2c:7d:76:d3:f1: f9:63:16:94:48:4a:a7:50:56:d7:5d:ee:df:a9:c7: 13:9d:2f:af:91:85:4a:8d:e6:71:50:57:e6:7a:94: 96:a2:72:37:72:d3:09:3e:16:73:87:08:99:f5:5c: 13:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:82:93:EC:36:E4:F4:23:0D:B3:79:D8:A0:71:FC:36:3A:8A:04:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86/3006b7cf-ec78-3fe6-92e1-04b0843f594e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86/94543699-4d50-4a37-8000-038c38671a86.crl X509v3 Authority Key Identifier: keyid:03:F9:93:D0:3A:C4:C9:F5:95:7D:21:84:67:FF:6C:5B:D1:56:81:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86.cer sbgp-ipAddrBlock: critical IPv4: 172.111.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:12:47:ef:91:3c:9e:57:a9:5a:ca:8e:a8:99:13:60:33:c3: 37:48:c6:36:04:78:80:d5:cb:0e:a7:a5:c5:44:01:68:0f:3e: 1f:91:b2:d8:9c:b8:5d:42:1d:95:71:4c:f2:a9:ad:5b:27:1f: 34:ec:da:88:26:f5:18:54:84:1b:de:67:41:50:af:0a:68:93: 44:8e:bb:eb:b1:be:10:64:a7:2a:81:df:87:aa:53:7a:7a:ff: 35:8f:e5:9b:5a:3e:65:71:33:10:99:73:51:3b:3d:df:56:30: 36:73:e4:b9:d7:6a:a1:12:f5:f1:ff:ca:d5:0b:27:39:ee:c2: 2e:a1:09:c2:1f:dc:6f:43:f4:03:c4:93:bb:28:82:af:48:aa: 38:15:bb:22:2d:df:da:df:ed:9e:31:89:84:99:05:87:37:0a: 4e:06:fa:9b:a7:85:5a:b7:7b:ff:de:0f:52:0d:40:5e:12:88: a2:60:8e:1f:6e:b8:0f:e3:fa:2e:c9:97:bb:2d:56:7d:c5:6f: 51:12:c4:16:58:9f:a9:b2:80:40:ee:81:0b:a8:aa:4c:48:ce: 96:2d:92:48:09:d5:66:4f:a4:b3:ee:46:18:fd:75:e4:05:8c: 74:e1:40:6f:47:7a:a5:53:19:88:54:f5:89:49:b3:41:3c:4e: 9b:c3:c8:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnqhRuLMKBLBuRGCYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTQ1NDM2OTktNGQ1MC00YTM3LTgwMDAtMDM4YzM4Njcx YTg2MB4XDTI1MDUyMDEzMDEwNVoXDTI1MDgxODEzMDEwNVowLzEtMCsGA1UEAxMk YWIyY2M3ZDctZDJmYi00Y2RlLWJmNjgtMzM0MTM1ZTYyZWVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXDUTxft2sXXnQ7Vk4UGVuinapW7WH8T+kz9 7gQwdWGb+VdmiB7SKJSXP+4Mpo6zmLcbhUvv/r/gt8QTv5eGe8INTC/DRl16eSY0 4x882N7kXIYZA2HZxUr0P2zYEXIuEftOEFfglLjHPuXdowPmn6xf+v08u1GWZqay UPggTsHEBdW9GzmpVjC1mFzD6nfuHbkh+Yb28bEF1ziQe0iVsIE5bgFJzbx7ate7 BCm/hhDrJqmlD5D+7a0ILCZ5z7IvFo++F/4XOJKPbJMFLH120/H5YxaUSEqnUFbX Xe7fqccTnS+vkYVKjeZxUFfmepSWonI3ctMJPhZzhwiZ9VwTQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDWCk+w25PQjDbN52KBx/DY6igS3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85NDU0 MzY5OS00ZDUwLTRhMzctODAwMC0wMzhjMzg2NzFhODYvMzAwNmI3Y2YtZWM3OC0z ZmU2LTkyZTEtMDRiMDg0M2Y1OTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOTQ1NDM2OTktNGQ1MC00YTM3LTgw MDAtMDM4YzM4NjcxYTg2Lzk0NTQzNjk5LTRkNTAtNGEzNy04MDAwLTAzOGMzODY3 MWE4Ni5jcmwwHwYDVR0jBBgwFoAUA/mT0DrEyfWVfSGEZ/9sW9FWgeAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85NDU0MzY5OS00ZDUwLTRhMzctODAwMC0wMzhj Mzg2NzFhODYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrG8UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADgSR++RPJ5XqVrKjqiZE2AzwzdIxjYEeIDVyw6npcVEAWgPPh+Rstic uF1CHZVxTPKprVsnHzTs2ogm9RhUhBveZ0FQrwpok0SOu+uxvhBkpyqB34eqU3p6 /zWP5ZtaPmVxMxCZc1E7Pd9WMDZz5LnXaqES9fH/ytULJznuwi6hCcIf3G9D9APE k7sogq9IqjgVuyIt39rf7Z4xiYSZBYc3Ck4G+punhVq3e//eD1INQF4SiKJgjh9u uA/j+i7Jl7stVn3Fb1ESxBZYn6mygEDugQuoqkxIzpYtkkgJ1WZPpLPuRhj9deQF jHThQG9HeqVTGYhU9YlJs0E8TpvDyPk= -----END CERTIFICATE-----Generated at Sun Jun 8 07:16:44 2025 by rpki-client