$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86/70876b56-c403-3345-8194-f6fcf917a625.roa File: 70876b56-c403-3345-8194-f6fcf917a625.roa (raw, json) Hash identifier: LRxOGowpKVUKYSx7X5a/IdU5NpTly55QKOc2M/aUHrk= Subject key identifier: 71:A9:F3:D4:6F:30:92:A7:2B:D6:47:0F:5C:72:76:7E:D8:6B:93:D2 Certificate issuer: /CN=94543699-4d50-4a37-8000-038c38671a86 Certificate serial: 010D0C9F43285849F17FB08D00600B52AF5579C0 Authority key identifier: 03:F9:93:D0:3A:C4:C9:F5:95:7D:21:84:67:FF:6C:5B:D1:56:81:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86/70876b56-c403-3345-8194-f6fcf917a625.roa Signing time: Fri 23 May 2025 01:00:49 +0000 ROA not before: Fri 23 May 2025 01:00:49 +0000 ROA not after: Thu 21 Aug 2025 01:00:49 +0000 asID: 22115 IP address blocks: 172.111.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86/94543699-4d50-4a37-8000-038c38671a86.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86/94543699-4d50-4a37-8000-038c38671a86.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f1:7f:b0:8d:00:60:0b:52:af:55:79:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94543699-4d50-4a37-8000-038c38671a86 Validity Not Before: May 23 01:00:49 2025 GMT Not After : Aug 21 01:00:49 2025 GMT Subject: CN=5429cd3f-af27-4a44-a67c-bb3a5064f83b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:6b:bb:93:1f:bb:f6:d4:2b:4f:ae:ac:a4:b5: 29:b7:55:20:1c:48:41:fa:6c:bf:7e:e2:6a:53:0c: 5d:a2:7b:48:87:61:57:c8:4c:84:1a:47:1d:0d:5f: b8:c6:61:ec:b2:d0:b9:90:69:7f:fd:f2:fa:3b:46: 3d:26:f8:9f:04:a7:40:17:1c:f6:6e:e0:e3:66:4e: 00:5d:4a:7d:97:f4:34:08:c1:2b:d6:80:97:91:1e: 1f:bf:c0:e3:e4:19:e1:10:8b:5e:ce:82:d0:cf:20: 45:9e:bf:78:e9:0c:99:a1:b1:f2:38:11:7b:c5:11: 32:05:3d:48:05:9e:44:8e:a7:e9:33:cf:fb:1f:99: c4:6f:09:32:43:5b:35:2a:3f:47:bd:a1:55:d3:3e: e6:5b:3f:c3:6a:c0:f3:40:af:1b:e6:d6:60:62:a5: 4d:6c:3d:86:c4:bb:05:c6:bb:cd:5b:26:30:44:da: 9a:4e:5b:2c:09:2e:f3:ce:3a:5a:cc:f7:41:77:9b: 26:f4:d6:63:fa:08:1e:cd:a9:7c:2b:b3:2e:89:46: c2:82:1b:34:e2:6e:52:94:4a:f3:96:69:43:89:44: 13:97:f8:cc:be:33:c0:ef:b4:f1:ec:b2:97:bd:83: 02:ed:d1:6f:8c:96:05:62:51:89:25:9c:94:bb:45: 62:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:A9:F3:D4:6F:30:92:A7:2B:D6:47:0F:5C:72:76:7E:D8:6B:93:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86/70876b56-c403-3345-8194-f6fcf917a625.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86/94543699-4d50-4a37-8000-038c38671a86.crl X509v3 Authority Key Identifier: keyid:03:F9:93:D0:3A:C4:C9:F5:95:7D:21:84:67:FF:6C:5B:D1:56:81:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86.cer sbgp-ipAddrBlock: critical IPv4: 172.111.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:27:c9:e9:14:14:d5:49:8e:a3:ca:b3:13:8e:d7:8e:13:d8: b5:28:ec:83:1d:a0:72:a2:44:70:3f:31:17:5f:85:1c:ee:9a: 62:d2:01:3d:62:10:d8:b5:6f:b1:4b:76:aa:6b:fd:5b:c4:2f: d4:44:a8:ba:b3:86:de:30:ea:42:33:ca:3f:12:2a:10:f3:bc: 1f:4e:68:c7:97:24:2d:09:2b:a8:4d:de:08:f0:13:bf:c4:89: 40:8b:64:62:7f:63:27:03:f8:0d:26:c0:b2:92:27:34:45:01: 84:91:7a:c0:5f:e7:c2:52:02:98:b8:e2:83:30:b9:73:5a:66: 95:58:a8:59:95:fd:4b:fe:82:c0:df:e2:99:42:e6:8b:39:4d: ea:80:5c:3d:69:d8:e5:a8:ae:d1:cc:04:a2:5e:46:27:a4:a7: 22:1e:c7:26:03:d3:b1:b8:6b:37:61:ab:a6:f6:78:37:e4:b5: 03:eb:05:94:b8:be:45:5a:8d:47:18:22:a6:22:da:a5:02:0b: b5:88:2c:fe:22:30:bc:d7:e1:3f:e7:ac:66:ce:8f:cb:fa:bd: 80:13:1d:ca:b3:7e:98:1c:fa:53:fe:bd:f1:5d:bb:c8:b4:44: 85:46:3e:1f:8d:57:b4:7e:24:0e:2f:9e:d9:86:53:61:90:6b: 1a:eb:48:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnxf7CNAGALUq9VecAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTQ1NDM2OTktNGQ1MC00YTM3LTgwMDAtMDM4YzM4Njcx YTg2MB4XDTI1MDUyMzAxMDA0OVoXDTI1MDgyMTAxMDA0OVowLzEtMCsGA1UEAxMk NTQyOWNkM2YtYWYyNy00YTQ0LWE2N2MtYmIzYTUwNjRmODNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2u7kx+79tQrT66spLUpt1UgHEhB+my/fuJq UwxdontIh2FXyEyEGkcdDV+4xmHsstC5kGl//fL6O0Y9JvifBKdAFxz2buDjZk4A XUp9l/Q0CMEr1oCXkR4fv8Dj5BnhEItezoLQzyBFnr946QyZobHyOBF7xREyBT1I BZ5EjqfpM8/7H5nEbwkyQ1s1Kj9HvaFV0z7mWz/DasDzQK8b5tZgYqVNbD2GxLsF xrvNWyYwRNqaTlssCS7zzjpazPdBd5sm9NZj+ggezal8K7MuiUbCghs04m5SlErz lmlDiUQTl/jMvjPA77Tx7LKXvYMC7dFvjJYFYlGJJZyUu0ViJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHGp89RvMJKnK9ZHD1xydn7Ya5PSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85NDU0 MzY5OS00ZDUwLTRhMzctODAwMC0wMzhjMzg2NzFhODYvNzA4NzZiNTYtYzQwMy0z MzQ1LTgxOTQtZjZmY2Y5MTdhNjI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOTQ1NDM2OTktNGQ1MC00YTM3LTgw MDAtMDM4YzM4NjcxYTg2Lzk0NTQzNjk5LTRkNTAtNGEzNy04MDAwLTAzOGMzODY3 MWE4Ni5jcmwwHwYDVR0jBBgwFoAUA/mT0DrEyfWVfSGEZ/9sW9FWgeAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85NDU0MzY5OS00ZDUwLTRhMzctODAwMC0wMzhj Mzg2NzFhODYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrG8UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAonyekUFNVJjqPKsxOO144T2LUo7IMdoHKiRHA/MRdfhRzummLSAT1i ENi1b7FLdqpr/VvEL9REqLqzht4w6kIzyj8SKhDzvB9OaMeXJC0JK6hN3gjwE7/E iUCLZGJ/YycD+A0mwLKSJzRFAYSResBf58JSApi44oMwuXNaZpVYqFmV/Uv+gsDf 4plC5os5TeqAXD1p2OWortHMBKJeRiekpyIexyYD07G4azdhq6b2eDfktQPrBZS4 vkVajUcYIqYi2qUCC7WILP4iMLzX4T/nrGbOj8v6vYATHcqzfpgc+lP+vfFdu8i0 RIVGPh+NV7R+JA4vntmGU2GQaxrrSLQ= -----END CERTIFICATE-----Generated at Sun Jun 8 11:08:31 2025 by rpki-client