$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86/ffc4e20c-a6cf-3c3b-9c67-a909a68af906.roa File: ffc4e20c-a6cf-3c3b-9c67-a909a68af906.roa (raw, json) Hash identifier: 55vKCUFYRpyQ6zM9PgXbatJCJKQVi3ljntrr9XpAbe4= Subject key identifier: 91:85:F2:B0:0D:34:B7:4C:30:0A:85:AE:77:88:5A:70:F2:36:5F:68 Certificate issuer: /CN=94543699-4d50-4a37-8000-038c38671a86 Certificate serial: 010D0C9F4328584944693BD810DA37D4FF427200 Authority key identifier: 03:F9:93:D0:3A:C4:C9:F5:95:7D:21:84:67:FF:6C:5B:D1:56:81:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86/ffc4e20c-a6cf-3c3b-9c67-a909a68af906.roa Signing time: Sat 22 Mar 2025 01:00:40 +0000 ROA not before: Sat 22 Mar 2025 01:00:40 +0000 ROA not after: Fri 20 Jun 2025 01:00:40 +0000 asID: 6939 IP address blocks: 172.111.22.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86/94543699-4d50-4a37-8000-038c38671a86.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86/94543699-4d50-4a37-8000-038c38671a86.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:44:69:3b:d8:10:da:37:d4:ff:42:72:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94543699-4d50-4a37-8000-038c38671a86 Validity Not Before: Mar 22 01:00:40 2025 GMT Not After : Jun 20 01:00:40 2025 GMT Subject: CN=be8a7e9d-dca1-4a76-bafd-630b2e675ebb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:16:b4:f3:af:47:68:8c:61:b7:78:90:af:6f: 12:62:9e:64:29:18:dd:29:51:bb:b7:a1:e9:be:24: 42:74:94:6e:70:b7:fc:e8:eb:da:fd:5c:36:31:2d: 00:22:12:d2:91:bd:c4:80:33:03:26:e7:8c:66:a0: d5:73:2d:12:db:b5:8c:47:a1:0d:59:b2:92:77:b9: 82:20:a9:ae:c0:73:4e:ea:10:ff:11:bc:2d:15:e1: e8:be:b4:6c:5a:6f:47:dc:da:7c:ec:88:8e:63:98: fd:8d:c9:ac:eb:67:57:96:5f:f2:2c:59:0f:50:2c: 1f:64:f0:c1:85:75:17:f8:ce:a0:86:9e:30:7e:1c: af:fc:3b:b7:1d:a1:82:8e:08:7a:08:62:5d:66:62: fc:d7:8e:bc:2c:85:53:67:55:20:6d:39:69:90:6d: db:51:1a:b0:7b:5c:93:40:ae:59:d1:4e:d3:52:6d: 3c:44:a0:35:16:f9:15:ad:d9:bd:ae:bb:51:57:fa: f5:42:4b:4d:eb:32:35:ee:2c:1e:6c:66:5e:d6:3b: 56:a2:8d:0a:7b:ed:b7:1f:45:b4:89:79:ca:6d:b6: c4:d9:0a:f3:9f:f1:b1:ad:a9:8a:00:5c:5c:5f:a2: cb:dd:03:90:4f:31:53:d5:72:35:a4:a1:3a:40:b1: 31:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:85:F2:B0:0D:34:B7:4C:30:0A:85:AE:77:88:5A:70:F2:36:5F:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86/ffc4e20c-a6cf-3c3b-9c67-a909a68af906.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86/94543699-4d50-4a37-8000-038c38671a86.crl X509v3 Authority Key Identifier: keyid:03:F9:93:D0:3A:C4:C9:F5:95:7D:21:84:67:FF:6C:5B:D1:56:81:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86.cer sbgp-ipAddrBlock: critical IPv4: 172.111.22.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:f8:d4:a9:93:05:73:c7:8e:e0:f5:34:e4:7e:31:ff:d3:b3: 37:46:03:ab:37:d8:1c:04:f2:b0:79:f1:0a:97:36:e1:73:78: cf:20:0d:9e:1f:5d:e5:94:51:34:5c:a0:81:f1:59:06:1d:5d: 5e:94:a0:18:fa:6a:e8:af:16:65:2e:a9:28:ea:d8:88:26:47: 3e:50:13:dd:5d:13:8c:fc:dc:d4:b5:58:b7:2d:49:c0:ae:5c: a5:71:a4:c3:1b:1c:11:e0:31:cd:ea:ae:ba:da:be:e7:85:e7: 0e:25:75:8c:fe:e2:20:c8:be:ab:5d:d9:0e:62:98:4d:fc:91: 66:cd:70:d5:ab:ba:7d:8b:fc:51:0b:76:c4:8f:de:c0:c0:31: e6:2a:b8:b9:41:d6:47:4b:05:68:72:77:1f:8a:4f:0d:1f:31: c9:4e:c0:51:02:5f:eb:b2:bd:b8:9a:38:5c:74:42:af:95:84: 0f:ef:eb:32:29:c8:25:06:e9:b8:28:fd:0e:a1:c1:92:86:af: 57:9d:f3:95:12:e4:5e:ef:bf:dc:a7:c5:f1:87:d1:c3:9e:61: 2b:d0:e7:f8:29:42:57:fa:89:fb:cd:4f:f1:49:d2:50:bb:25: 80:36:df:e2:8f:9a:89:77:71:9a:98:96:44:2a:7a:e2:60:a2: 5e:e5:de:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElEaTvYENo31P9CcgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTQ1NDM2OTktNGQ1MC00YTM3LTgwMDAtMDM4YzM4Njcx YTg2MB4XDTI1MDMyMjAxMDA0MFoXDTI1MDYyMDAxMDA0MFowLzEtMCsGA1UEAxMk YmU4YTdlOWQtZGNhMS00YTc2LWJhZmQtNjMwYjJlNjc1ZWJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBa0869HaIxht3iQr28SYp5kKRjdKVG7t6Hp viRCdJRucLf86Ova/Vw2MS0AIhLSkb3EgDMDJueMZqDVcy0S27WMR6ENWbKSd7mC IKmuwHNO6hD/EbwtFeHovrRsWm9H3Np87IiOY5j9jcms62dXll/yLFkPUCwfZPDB hXUX+M6ghp4wfhyv/Du3HaGCjgh6CGJdZmL81468LIVTZ1UgbTlpkG3bURqwe1yT QK5Z0U7TUm08RKA1FvkVrdm9rrtRV/r1QktN6zI17iwebGZe1jtWoo0Ke+23H0W0 iXnKbbbE2Qrzn/GxramKAFxcX6LL3QOQTzFT1XI1pKE6QLEx9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJGF8rANNLdMMAqFrneIWnDyNl9oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85NDU0 MzY5OS00ZDUwLTRhMzctODAwMC0wMzhjMzg2NzFhODYvZmZjNGUyMGMtYTZjZi0z YzNiLTljNjctYTkwOWE2OGFmOTA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOTQ1NDM2OTktNGQ1MC00YTM3LTgw MDAtMDM4YzM4NjcxYTg2Lzk0NTQzNjk5LTRkNTAtNGEzNy04MDAwLTAzOGMzODY3 MWE4Ni5jcmwwHwYDVR0jBBgwFoAUA/mT0DrEyfWVfSGEZ/9sW9FWgeAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85NDU0MzY5OS00ZDUwLTRhMzctODAwMC0wMzhj Mzg2NzFhODYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrG8WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE341KmTBXPHjuD1NOR+Mf/TszdGA6s32BwE8rB58QqXNuFzeM8gDZ4f XeWUUTRcoIHxWQYdXV6UoBj6auivFmUuqSjq2IgmRz5QE91dE4z83NS1WLctScCu XKVxpMMbHBHgMc3qrrravueF5w4ldYz+4iDIvqtd2Q5imE38kWbNcNWrun2L/FEL dsSP3sDAMeYquLlB1kdLBWhydx+KTw0fMclOwFECX+uyvbiaOFx0Qq+VhA/v6zIp yCUG6bgo/Q6hwZKGr1ed85US5F7vv9ynxfGH0cOeYSvQ5/gpQlf6ifvNT/FJ0lC7 JYA23+KPmol3cZqYlkQqeuJgol7l3q0= -----END CERTIFICATE-----Generated at Sat Apr 12 01:59:58 2025 by rpki-client