$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/43efa9da-f2bc-3983-a912-86d2468191e3.roa File: 43efa9da-f2bc-3983-a912-86d2468191e3.roa (raw, json) Hash identifier: Q/+a7rgh4rakRgTi7WVjJjCM4EPeENyGtZ0BHAh9A/E= Subject key identifier: 5C:3E:2E:F7:6A:1D:F7:2B:29:B4:90:33:ED:49:8A:5B:B6:F6:4C:E1 Certificate issuer: /CN=b0d6fd50-b543-4e97-a7f3-0d6a5908ca38 Certificate serial: 010D0C9F43285849F2E535B8D1D81986AF632B80 Authority key identifier: B8:2D:73:8E:4B:5A:99:ED:25:54:55:58:EF:D1:33:51:15:68:F4:FF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/43efa9da-f2bc-3983-a912-86d2468191e3.roa Signing time: Fri 23 May 2025 13:01:03 +0000 ROA not before: Fri 23 May 2025 13:01:03 +0000 ROA not after: Thu 21 Aug 2025 13:01:03 +0000 asID: 1239 IP address blocks: 65.181.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f2:e5:35:b8:d1:d8:19:86:af:63:2b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0d6fd50-b543-4e97-a7f3-0d6a5908ca38 Validity Not Before: May 23 13:01:03 2025 GMT Not After : Aug 21 13:01:03 2025 GMT Subject: CN=cfc22278-ec38-4b5c-ac42-d3d675be1846 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:c6:3a:32:27:08:2a:cf:24:df:c3:1a:d2:61: 35:0a:b6:62:3a:38:6f:11:27:01:bf:85:aa:06:cf: 83:ed:6e:84:01:93:a0:a6:2d:c5:00:2c:4c:9a:b7: a9:d4:00:91:83:68:62:db:f8:03:72:df:13:1c:15: b1:3d:26:da:c2:c1:7b:38:3d:e8:15:90:87:07:0d: 31:d3:4a:ba:94:25:25:b6:a1:6e:23:0c:7a:2d:97: 45:f4:93:9b:79:82:92:01:b7:cd:d2:a4:33:56:d3: d0:4a:b3:64:9c:82:7e:f0:eb:2b:c2:44:81:f5:94: 89:1e:95:f2:46:ba:ba:2a:c1:d6:ea:d2:a2:71:ff: 5b:8b:57:4f:e0:88:4a:1f:4f:1b:d5:08:ee:b4:c7: da:93:8f:cc:ad:e3:36:91:7a:ed:11:9b:77:c8:7c: 25:c0:1e:92:46:0b:d3:0f:da:b6:2d:53:52:55:b4: 56:66:20:e7:01:31:48:e4:6d:3d:91:c4:f8:62:80: d1:fb:7d:c6:e7:fc:0c:f0:53:ed:17:74:83:26:17: d5:06:0a:c1:8b:39:0e:ae:13:a5:4f:18:5f:0c:c2: 60:3d:18:85:0e:84:ae:43:e2:e6:bf:d6:81:c5:b2: 31:e5:40:da:25:27:68:47:df:5f:7f:d0:74:f0:56: 70:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:3E:2E:F7:6A:1D:F7:2B:29:B4:90:33:ED:49:8A:5B:B6:F6:4C:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/43efa9da-f2bc-3983-a912-86d2468191e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.crl X509v3 Authority Key Identifier: keyid:B8:2D:73:8E:4B:5A:99:ED:25:54:55:58:EF:D1:33:51:15:68:F4:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.cer sbgp-ipAddrBlock: critical IPv4: 65.181.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:db:dd:6d:47:63:d1:48:ba:b1:c8:e0:94:2f:e7:bb:b3:55: 69:cb:31:b7:a1:41:3e:75:87:e6:e8:e3:dc:33:10:b7:ec:7c: 7f:44:08:69:df:82:1e:74:64:ab:fa:38:d7:b5:77:c7:18:61: de:78:69:6c:5a:e6:05:84:4e:49:32:f8:6b:20:4f:51:25:2c: 9d:c8:75:a0:09:1f:3e:a3:a2:5a:a0:dc:6c:46:65:70:4a:85: 3d:58:fa:8a:d1:a5:15:b4:0c:c3:70:d6:28:9b:90:ba:4b:0d: a8:ce:cd:cb:d4:2e:8e:1a:c1:86:28:0c:be:87:8a:a2:d7:a3: 81:e8:9f:7f:b7:87:97:6d:3d:7c:4d:4a:84:67:e3:e5:8f:9a: de:ac:fe:3c:c2:19:42:b1:5d:8e:c5:3c:eb:2e:3d:35:9d:02: 10:58:29:8e:8d:cd:e4:e7:ce:ca:e1:68:1c:bc:cf:fc:95:a8: 81:28:b1:72:3f:be:d9:0a:8b:87:e3:17:c2:29:e5:24:a8:14: 24:6c:12:0e:32:88:fc:92:6c:99:4e:38:cb:2d:3d:40:57:14: e3:ed:52:f2:67:2b:90:d3:0d:30:c4:d5:7e:4e:a4:95:fb:5c: 52:da:4d:84:04:6a:30:a6:c9:e3:f8:68:9b:03:e1:ba:9d:0f: 79:85:32:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEny5TW40dgZhq9jK4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjBkNmZkNTAtYjU0My00ZTk3LWE3ZjMtMGQ2YTU5MDhj YTM4MB4XDTI1MDUyMzEzMDEwM1oXDTI1MDgyMTEzMDEwM1owLzEtMCsGA1UEAxMk Y2ZjMjIyNzgtZWMzOC00YjVjLWFjNDItZDNkNjc1YmUxODQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiMY6MicIKs8k38Ma0mE1CrZiOjhvEScBv4Wq Bs+D7W6EAZOgpi3FACxMmrep1ACRg2hi2/gDct8THBWxPSbawsF7OD3oFZCHBw0x 00q6lCUltqFuIwx6LZdF9JObeYKSAbfN0qQzVtPQSrNknIJ+8OsrwkSB9ZSJHpXy Rrq6KsHW6tKicf9bi1dP4IhKH08b1QjutMfak4/MreM2kXrtEZt3yHwlwB6SRgvT D9q2LVNSVbRWZiDnATFI5G09kcT4YoDR+33G5/wM8FPtF3SDJhfVBgrBizkOrhOl TxhfDMJgPRiFDoSuQ+Lmv9aBxbIx5UDaJSdoR99ff9B08FZwuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFw+LvdqHfcrKbSQM+1Jilu29kzhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iMGQ2 ZmQ1MC1iNTQzLTRlOTctYTdmMy0wZDZhNTkwOGNhMzgvNDNlZmE5ZGEtZjJiYy0z OTgzLWE5MTItODZkMjQ2ODE5MWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYjBkNmZkNTAtYjU0My00ZTk3LWE3 ZjMtMGQ2YTU5MDhjYTM4L2IwZDZmZDUwLWI1NDMtNGU5Ny1hN2YzLTBkNmE1OTA4 Y2EzOC5jcmwwHwYDVR0jBBgwFoAUuC1zjktame0lVFVY79EzURVo9P8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9iMGQ2ZmQ1MC1iNTQzLTRlOTctYTdmMy0wZDZh NTkwOGNhMzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQbWgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGXb3W1HY9FIurHI4JQv57uzVWnLMbehQT51h+bo49wzELfsfH9ECGnf gh50ZKv6ONe1d8cYYd54aWxa5gWETkky+GsgT1ElLJ3IdaAJHz6jolqg3GxGZXBK hT1Y+orRpRW0DMNw1iibkLpLDajOzcvULo4awYYoDL6HiqLXo4Hon3+3h5dtPXxN SoRn4+WPmt6s/jzCGUKxXY7FPOsuPTWdAhBYKY6NzeTnzsrhaBy8z/yVqIEosXI/ vtkKi4fjF8Ip5SSoFCRsEg4yiPySbJlOOMstPUBXFOPtUvJnK5DTDTDE1X5OpJX7 XFLaTYQEajCmyeP4aJsD4bqdD3mFMnM= -----END CERTIFICATE-----Generated at Tue Jun 3 03:32:28 2025 by rpki-client