$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/b1cee1c2-7b45-36d1-958e-f8797153afd7.roa File: b1cee1c2-7b45-36d1-958e-f8797153afd7.roa (raw, json) Hash identifier: rMHI1LMZysQG+l8J/hB6kUx2ZCEXXj+md/79QOCc11U= Subject key identifier: D7:24:DD:9B:7C:55:9B:AC:A5:32:E1:68:F7:F4:B0:8C:A9:BA:0D:4A Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584908EB8EE21D83DE29C77CDA11 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/b1cee1c2-7b45-36d1-958e-f8797153afd7.roa Signing time: Fri 28 Feb 2025 17:34:55 +0000 ROA not before: Fri 28 Feb 2025 17:34:55 +0000 ROA not after: Thu 29 May 2025 16:34:55 +0000 asID: 14618 IP address blocks: 170.85.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:08:eb:8e:e2:1d:83:de:29:c7:7c:da:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Feb 28 17:34:55 2025 GMT Not After : May 29 16:34:55 2025 GMT Subject: CN=f0b105ec-bda9-4535-8263-27038c807396 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:37:eb:d7:16:28:23:21:af:43:73:e3:92:07: 09:24:5c:50:8c:64:94:52:35:fe:e3:e7:46:00:24: a6:ef:51:e1:c4:8d:65:e8:e5:d1:e9:3c:39:cb:cb: e9:f0:71:4b:67:04:d2:e6:35:8c:ca:b4:e9:1a:66: 5b:88:8d:78:c8:72:78:65:e7:74:3a:2d:d6:d1:0c: 59:d9:1b:01:92:ec:aa:a1:ef:c0:51:6d:a7:3d:0e: a6:81:69:c7:5c:14:ec:75:20:37:11:db:0f:84:b3: 24:87:17:4c:d7:6c:5d:3d:2f:f4:b3:a8:56:51:a3: 42:34:a5:f1:b1:86:37:b9:51:88:33:e6:4a:80:07: 76:51:ae:ad:7b:ce:e7:d8:bc:75:25:08:0b:1f:48: df:9b:0b:e9:29:ab:68:ae:a8:72:a1:0d:6a:81:11: ab:03:db:45:ea:c2:b6:79:b3:8d:80:a7:44:25:e4: 65:bf:b5:17:b3:0d:1b:5c:b2:da:20:22:1b:bb:bb: 1e:dc:8b:d1:d4:76:32:8a:b7:ab:5f:34:2f:05:d9: 84:f6:e2:95:7c:26:eb:fb:f4:af:86:3c:4a:c0:d5: 90:71:60:e2:4d:fc:34:37:ad:0b:6d:c1:fc:50:c4: 6a:cd:e0:a1:d5:da:4f:b1:e7:05:e4:aa:ed:76:e3: ef:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:24:DD:9B:7C:55:9B:AC:A5:32:E1:68:F7:F4:B0:8C:A9:BA:0D:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/b1cee1c2-7b45-36d1-958e-f8797153afd7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.210.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:d5:c3:39:f5:b3:53:e3:09:88:14:4d:34:62:a2:7a:e2:0e: 4e:c5:ff:57:75:08:19:11:04:f3:3c:01:c9:8a:14:76:fc:13: de:1f:ae:5e:5c:44:75:40:63:13:29:c0:b2:8d:1f:2a:3f:6e: 15:43:34:47:54:e9:e2:17:2a:5c:99:64:6a:d6:d3:b2:c9:02: 05:d2:30:60:08:99:e0:35:3c:f4:ff:6e:a1:e5:54:de:2a:b9: 4a:40:86:5f:a8:5e:e2:f7:96:51:97:f5:6c:dd:70:e7:78:b0: b7:58:26:06:ee:db:ed:9a:34:47:1f:f4:13:96:57:10:3b:aa: 2b:6d:6b:79:4a:13:bb:fe:28:72:45:f9:8a:20:da:da:a6:29: 43:19:5c:86:bb:7e:a9:55:8b:fd:40:20:d9:fc:11:d6:bf:97: 9c:ec:0e:72:80:fd:6b:6c:45:82:ef:c0:ab:83:51:42:cc:0e: 21:05:26:60:fc:48:f2:e7:29:cc:93:d6:7e:a8:aa:e8:24:4b: 99:7b:27:0a:63:d3:40:63:a0:a1:a1:75:dc:c0:1d:a6:36:56: d6:f8:4d:c7:13:a0:07:1c:31:79:ed:71:1f:73:a5:22:6f:81: 8c:db:1d:2b:9a:52:90:c5:c5:4d:a3:5d:76:f7:43:29:00:9e: fc:e6:9b:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkI647iHYPeKcd82hEwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MDIyODE3MzQ1NVoXDTI1MDUyOTE2MzQ1NVowLzEtMCsGA1UEAxMk ZjBiMTA1ZWMtYmRhOS00NTM1LTgyNjMtMjcwMzhjODA3Mzk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzfr1xYoIyGvQ3PjkgcJJFxQjGSUUjX+4+dG ACSm71HhxI1l6OXR6Tw5y8vp8HFLZwTS5jWMyrTpGmZbiI14yHJ4Zed0Oi3W0QxZ 2RsBkuyqoe/AUW2nPQ6mgWnHXBTsdSA3EdsPhLMkhxdM12xdPS/0s6hWUaNCNKXx sYY3uVGIM+ZKgAd2Ua6te87n2Lx1JQgLH0jfmwvpKatorqhyoQ1qgRGrA9tF6sK2 ebONgKdEJeRlv7UXsw0bXLLaICIbu7se3IvR1HYyirerXzQvBdmE9uKVfCbr+/Sv hjxKwNWQcWDiTfw0N60LbcH8UMRqzeCh1dpPsecF5KrtduPvHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNck3Zt8VZuspTLhaPf0sIypug1KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvYjFjZWUxYzItN2I0NS0z NmQxLTk1OGUtZjg3OTcxNTNhZmQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqlXSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADPVwzn1s1PjCYgUTTRionriDk7F/1d1CBkRBPM8AcmKFHb8E94frl5c RHVAYxMpwLKNHyo/bhVDNEdU6eIXKlyZZGrW07LJAgXSMGAImeA1PPT/bqHlVN4q uUpAhl+oXuL3llGX9WzdcOd4sLdYJgbu2+2aNEcf9BOWVxA7qitta3lKE7v+KHJF +Yog2tqmKUMZXIa7fqlVi/1AINn8Eda/l5zsDnKA/WtsRYLvwKuDUULMDiEFJmD8 SPLnKcyT1n6oqugkS5l7Jwpj00BjoKGhddzAHaY2Vtb4TccToAccMXntcR9zpSJv gYzbHSuaUpDFxU2jXXb3QykAnvzmm8s= -----END CERTIFICATE-----Generated at Sat Apr 26 13:20:26 2025 by rpki-client