$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/16bc29f5-43ef-48ab-b3df-a2828f565715/5e381d2c-07d6-3224-a037-e03d46a96114.roa File: 5e381d2c-07d6-3224-a037-e03d46a96114.roa (raw, json) Hash identifier: M3srHUWKcvxvX3HsI3IPOs+tNCYJXN5+vnG/2TK+EII= Subject key identifier: B2:BD:87:C7:61:26:A5:25:49:C5:48:81:0A:A9:18:AE:D2:2A:7E:BE Certificate issuer: /CN=16bc29f5-43ef-48ab-b3df-a2828f565715 Certificate serial: 010D0C9F432858497C3EEC51AF53D79F1147D180 Authority key identifier: 8A:C3:F6:31:6C:78:BE:53:FF:41:22:59:B0:1E:77:6B:86:4F:49:9C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/16bc29f5-43ef-48ab-b3df-a2828f565715.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/16bc29f5-43ef-48ab-b3df-a2828f565715/5e381d2c-07d6-3224-a037-e03d46a96114.roa Signing time: Fri 11 Apr 2025 01:00:48 +0000 ROA not before: Fri 11 Apr 2025 01:00:48 +0000 ROA not after: Thu 10 Jul 2025 01:00:48 +0000 asID: 16942 IP address blocks: 170.117.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/16bc29f5-43ef-48ab-b3df-a2828f565715/16bc29f5-43ef-48ab-b3df-a2828f565715.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/16bc29f5-43ef-48ab-b3df-a2828f565715/16bc29f5-43ef-48ab-b3df-a2828f565715.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/16bc29f5-43ef-48ab-b3df-a2828f565715.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7c:3e:ec:51:af:53:d7:9f:11:47:d1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16bc29f5-43ef-48ab-b3df-a2828f565715 Validity Not Before: Apr 11 01:00:48 2025 GMT Not After : Jul 10 01:00:48 2025 GMT Subject: CN=a2668a12-9a33-499a-a8ed-e8f56de2d020 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:99:e6:22:ba:0e:e3:36:4e:a7:d9:9f:34:f7: 8e:15:a7:9c:a7:02:1c:1e:2f:2d:82:ed:2d:90:8f: 68:03:a4:04:00:47:59:f5:f6:be:e6:bd:f8:16:14: e1:1c:db:7e:23:42:18:dc:32:83:ed:1c:19:3d:b9: 71:cd:9e:2a:ee:e7:c4:4b:98:b7:15:ec:2c:21:26: 1f:32:9d:dd:10:df:a7:b9:c7:d0:a5:b3:26:4f:0e: c1:1e:8d:12:b1:ff:cc:f5:1b:d7:dd:00:77:3a:97: 89:52:28:1b:79:3e:4f:3a:3f:99:c4:c2:ab:af:cd: 03:bf:0e:66:7d:58:cd:d9:2e:5e:8b:f0:ef:ed:fd: 4f:54:f2:82:b9:07:a7:1a:cd:28:b6:76:76:96:ac: 34:89:59:a3:23:a4:3e:5d:aa:a8:51:48:e5:7c:c7: 71:38:98:51:07:9c:d7:e6:7a:1e:4a:d1:b3:66:a2: 4a:e3:cd:2e:36:66:e0:b1:97:48:6f:63:19:3c:d4: 72:cf:75:28:f7:cc:7f:68:60:3a:e5:bd:2c:b6:b0: 5f:db:85:fd:7b:a3:21:ec:3e:59:9a:9c:53:38:15: 4b:5d:4e:34:81:2d:84:ba:bc:82:9c:43:03:6d:e4: 10:e1:73:06:24:d4:62:e7:f9:4a:9b:d6:a1:8d:38: de:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:BD:87:C7:61:26:A5:25:49:C5:48:81:0A:A9:18:AE:D2:2A:7E:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/16bc29f5-43ef-48ab-b3df-a2828f565715/5e381d2c-07d6-3224-a037-e03d46a96114.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/16bc29f5-43ef-48ab-b3df-a2828f565715/16bc29f5-43ef-48ab-b3df-a2828f565715.crl X509v3 Authority Key Identifier: keyid:8A:C3:F6:31:6C:78:BE:53:FF:41:22:59:B0:1E:77:6B:86:4F:49:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/16bc29f5-43ef-48ab-b3df-a2828f565715.cer sbgp-ipAddrBlock: critical IPv4: 170.117.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:02:8f:8a:31:57:d2:2a:b8:79:7f:b8:d4:2b:2a:d1:fb:01: e4:1f:bc:0a:75:95:7a:14:28:59:64:63:ec:a3:2a:27:1c:60: 6e:58:2c:37:80:c4:40:ad:be:39:0a:5e:36:85:bc:90:c2:fd: 3f:e7:92:b0:31:f0:14:c5:65:7f:e8:52:3a:01:2d:3a:06:ac: 6c:df:3b:b9:1f:db:a8:6b:19:0d:e7:68:bd:bc:12:d3:36:29: 75:a4:6a:14:f9:78:3f:5b:3a:41:53:9a:6b:a7:3b:4c:ce:fd: 38:0b:a3:52:49:79:b2:f5:d9:a0:f1:0d:6f:51:cc:d8:08:2d: eb:df:25:d6:56:dc:0d:d4:c8:6d:b1:da:3d:60:f9:28:12:02: 4d:5f:bc:66:d0:27:a1:ff:8d:08:1b:af:1e:d6:7a:f6:6f:15: 24:21:eb:d1:65:7c:e8:21:b5:df:d3:61:eb:00:e6:a9:1f:ee: ce:58:82:46:75:4b:34:23:34:83:07:16:6c:aa:d2:a2:e7:ab: 5c:0f:ef:b6:f2:b7:17:4f:ae:1f:4f:6a:8c:d7:0a:81:59:e6: c0:c0:23:9e:2e:8b:55:2a:01:d6:ed:10:8e:0f:51:01:d9:37: e6:4f:4b:07:40:9f:4c:ef:2e:dc:34:5f:27:60:fc:77:b1:47: e7:41:fb:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl8PuxRr1PXnxFH0YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTZiYzI5ZjUtNDNlZi00OGFiLWIzZGYtYTI4MjhmNTY1 NzE1MB4XDTI1MDQxMTAxMDA0OFoXDTI1MDcxMDAxMDA0OFowLzEtMCsGA1UEAxMk YTI2NjhhMTItOWEzMy00OTlhLWE4ZWQtZThmNTZkZTJkMDIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpnmIroO4zZOp9mfNPeOFaecpwIcHi8tgu0t kI9oA6QEAEdZ9fa+5r34FhThHNt+I0IY3DKD7RwZPblxzZ4q7ufES5i3FewsISYf Mp3dEN+nucfQpbMmTw7BHo0Ssf/M9RvX3QB3OpeJUigbeT5POj+ZxMKrr80Dvw5m fVjN2S5ei/Dv7f1PVPKCuQenGs0otnZ2lqw0iVmjI6Q+XaqoUUjlfMdxOJhRB5zX 5noeStGzZqJK480uNmbgsZdIb2MZPNRyz3Uo98x/aGA65b0strBf24X9e6Mh7D5Z mpxTOBVLXU40gS2EuryCnEMDbeQQ4XMGJNRi5/lKm9ahjTjeRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLK9h8dhJqUlScVIgQqpGK7SKn6+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xNmJj MjlmNS00M2VmLTQ4YWItYjNkZi1hMjgyOGY1NjU3MTUvNWUzODFkMmMtMDdkNi0z MjI0LWEwMzctZTAzZDQ2YTk2MTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMTZiYzI5ZjUtNDNlZi00OGFiLWIz ZGYtYTI4MjhmNTY1NzE1LzE2YmMyOWY1LTQzZWYtNDhhYi1iM2RmLWEyODI4ZjU2 NTcxNS5jcmwwHwYDVR0jBBgwFoAUisP2MWx4vlP/QSJZsB53a4ZPSZwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xNmJjMjlmNS00M2VmLTQ4YWItYjNkZi1hMjgy OGY1NjU3MTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqnXcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADoCj4oxV9IquHl/uNQrKtH7AeQfvAp1lXoUKFlkY+yjKiccYG5YLDeA xECtvjkKXjaFvJDC/T/nkrAx8BTFZX/oUjoBLToGrGzfO7kf26hrGQ3naL28EtM2 KXWkahT5eD9bOkFTmmunO0zO/TgLo1JJebL12aDxDW9RzNgILevfJdZW3A3UyG2x 2j1g+SgSAk1fvGbQJ6H/jQgbrx7WevZvFSQh69FlfOghtd/TYesA5qkf7s5YgkZ1 SzQjNIMHFmyq0qLnq1wP77bytxdPrh9PaozXCoFZ5sDAI54ui1UqAdbtEI4PUQHZ N+ZPSwdAn0zvLtw0Xydg/HexR+dB++M= -----END CERTIFICATE-----Generated at Sat Apr 12 13:37:34 2025 by rpki-client