$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/d89b7b74-799b-350f-8511-b393fb6156e2.roa File: d89b7b74-799b-350f-8511-b393fb6156e2.roa (raw, json) Hash identifier: k9im0NsBKjKi+3XbU9CMkuICUxC4rnUrlK1laM7w3GI= Subject key identifier: 28:89:A8:D9:78:D8:78:9A:23:53:5D:04:7E:31:33:55:D7:B3:47:B1 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F432858492CAE8B548DBAF7D27457FF30 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/d89b7b74-799b-350f-8511-b393fb6156e2.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 16509 IP address blocks: 170.85.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:ae:8b:54:8d:ba:f7:d2:74:57:ff:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=bb8b7a90-6217-4b10-86a0-0b13d2dfdeae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:4d:c3:56:88:ed:4f:0b:64:a1:95:d7:00:63: a6:ea:e0:58:90:3a:c6:1c:f3:82:1e:55:af:d6:d7: 48:ea:2d:06:77:8d:ce:f1:fb:7a:70:ed:0e:c9:8c: 53:55:6b:95:e7:a7:6f:09:ec:4c:ba:86:99:3a:30: cb:b8:18:5a:d5:79:50:61:24:b0:1b:67:a7:b5:00: ab:c0:c6:ca:85:78:41:d7:0f:cd:e3:d7:02:1b:50: 3c:43:76:19:38:12:0c:56:13:be:04:f0:56:e1:05: 05:00:58:11:6f:b6:bc:89:75:24:cf:c2:d4:03:d3: da:46:7f:dc:46:d5:e2:b8:84:2e:1c:1e:f4:fa:de: ed:d7:0d:2e:f9:49:5f:9b:0f:a2:24:82:99:bd:01: c5:ee:aa:cb:12:cb:f8:69:38:a8:d8:a7:cb:10:a4: 2f:80:fb:bb:4b:fd:45:6d:71:25:d7:eb:a3:da:03: 6a:99:36:e9:7d:f7:2d:c5:bf:84:5a:09:06:71:b9: 00:36:5e:c3:5f:57:dd:0f:41:37:73:fc:ce:e1:a1: 78:3c:4e:e6:ea:df:ac:e0:3d:39:c1:70:18:d9:34: ff:87:45:0c:95:03:1e:0f:b1:0b:e5:ca:5b:fe:97: 98:07:e9:fa:43:21:70:c2:9c:23:91:ca:f6:bb:ae: 93:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:89:A8:D9:78:D8:78:9A:23:53:5D:04:7E:31:33:55:D7:B3:47:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/d89b7b74-799b-350f-8511-b393fb6156e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:e3:51:2f:ad:e1:f4:0a:79:f0:49:79:8f:3c:02:5e:4b:05: c2:91:12:d4:33:42:7a:d2:88:bd:8b:1d:ab:9a:aa:25:33:1c: 76:79:95:8e:d7:ea:fc:18:5b:cc:f5:f1:f0:a3:ff:95:84:df: 14:75:1d:13:6e:34:5b:50:7c:79:3e:af:13:cb:cd:ae:0e:2a: eb:79:e1:46:5e:48:d9:61:bf:3c:5f:73:21:14:76:2c:09:23: 4a:ad:e6:6f:6a:55:a5:27:fb:62:88:69:81:be:51:01:f1:99: 24:43:08:8f:cb:54:6d:4b:30:9b:0d:bb:dd:dc:ee:f9:d5:f6: af:00:2b:94:c3:30:61:85:19:6b:f3:c7:1d:c5:d5:56:0d:f9: c5:6c:dc:75:06:33:f8:a8:a4:90:9c:a3:cb:76:90:99:5b:7d: f8:d5:c6:39:b9:6d:cc:a9:cf:3a:96:59:04:1e:19:3b:e5:fe: 30:05:5f:65:49:9d:66:ac:79:fe:a8:c8:99:c3:09:6a:a6:c7: e3:ac:62:15:e6:f9:0b:87:58:e2:a2:d3:a8:f8:15:d7:45:d8: 4e:92:52:b9:a5:2c:b1:6c:b7:37:80:95:62:bc:94:4d:da:88: e6:75:df:76:7c:f5:a8:35:de:92:13:7c:b7:0a:78:6b:92:a4: ca:c3:b9:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksrotUjbr30nRX/zAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk YmI4YjdhOTAtNjIxNy00YjEwLTg2YTAtMGIxM2QyZGZkZWFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh03DVojtTwtkoZXXAGOm6uBYkDrGHPOCHlWv 1tdI6i0Gd43O8ft6cO0OyYxTVWuV56dvCexMuoaZOjDLuBha1XlQYSSwG2entQCr wMbKhXhB1w/N49cCG1A8Q3YZOBIMVhO+BPBW4QUFAFgRb7a8iXUkz8LUA9PaRn/c RtXiuIQuHB70+t7t1w0u+Ulfmw+iJIKZvQHF7qrLEsv4aTio2KfLEKQvgPu7S/1F bXEl1+uj2gNqmTbpffctxb+EWgkGcbkANl7DX1fdD0E3c/zO4aF4PE7m6t+s4D05 wXAY2TT/h0UMlQMeD7EL5cpb/peYB+n6QyFwwpwjkcr2u66TEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCiJqNl42HiaI1NdBH4xM1XXs0exMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvZDg5YjdiNzQtNzk5Yi0z NTBmLTg1MTEtYjM5M2ZiNjE1NmUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqlU0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGPjUS+t4fQKefBJeY88Al5LBcKREtQzQnrSiL2LHauaqiUzHHZ5lY7X 6vwYW8z18fCj/5WE3xR1HRNuNFtQfHk+rxPLza4OKut54UZeSNlhvzxfcyEUdiwJ I0qt5m9qVaUn+2KIaYG+UQHxmSRDCI/LVG1LMJsNu93c7vnV9q8AK5TDMGGFGWvz xx3F1VYN+cVs3HUGM/iopJCco8t2kJlbffjVxjm5bcypzzqWWQQeGTvl/jAFX2VJ nWasef6oyJnDCWqmx+OsYhXm+QuHWOKi06j4FddF2E6SUrmlLLFstzeAlWK8lE3a iOZ133Z89ag13pITfLcKeGuSpMrDuQ4= -----END CERTIFICATE-----Generated at Sat Apr 26 14:52:08 2025 by rpki-client