$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/ec1b8336-f451-3652-aefc-ff559feaa568.roa File: ec1b8336-f451-3652-aefc-ff559feaa568.roa (raw, json) Hash identifier: wISCn2HBfGIivl8p7IQxwRFjzzJSk6C0lBlmyV1fb08= Subject key identifier: AF:35:2F:C6:07:AC:4E:DB:15:22:17:9F:AB:2F:E2:12:47:C1:3F:5B Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F43285849E91F9B1144469887EF8F4000 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/ec1b8336-f451-3652-aefc-ff559feaa568.roa Signing time: Tue 20 May 2025 01:00:49 +0000 ROA not before: Tue 20 May 2025 01:00:49 +0000 ROA not after: Mon 18 Aug 2025 01:00:49 +0000 asID: 14618 IP address blocks: 170.85.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e9:1f:9b:11:44:46:98:87:ef:8f:40:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: May 20 01:00:49 2025 GMT Not After : Aug 18 01:00:49 2025 GMT Subject: CN=ff4c5b4e-fa92-42be-acd9-452b7bad1825 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:da:1e:2e:cd:f0:e8:5d:4c:a1:31:0d:3f:f1: 8d:5f:fe:a0:6a:ec:59:ea:bc:c1:31:32:a2:d0:4b: 6c:a7:32:ee:e3:e2:56:b4:e2:34:4a:16:e7:70:56: e2:ba:45:94:8c:05:7e:b5:0e:24:7d:cd:a8:b0:7a: d3:a7:8e:a3:59:e3:19:a1:db:25:51:17:19:34:48: 58:b6:22:fd:cf:f2:e1:9b:20:5a:b4:67:8a:93:5d: 8c:1b:ac:2c:24:ae:7a:ec:05:20:96:fd:b7:19:3a: 6f:86:e6:4e:3d:5b:ed:d7:8b:36:a5:34:d1:84:1b: dd:ad:04:69:15:76:43:f2:fa:45:29:f4:08:33:ab: 20:b6:3d:d5:c3:f7:d8:a5:30:da:1d:a4:5e:1f:72: 4d:c2:7a:67:bb:4f:01:84:13:54:28:eb:f2:f5:26: dc:bf:e7:b6:4d:b7:74:f0:27:6f:ba:7d:92:5b:63: 31:a0:56:9b:6b:f0:d0:06:c1:2b:df:bc:ce:c1:c4: 85:aa:30:38:59:1a:e8:9e:88:12:ce:0a:fa:0a:c2: e6:38:e9:82:86:43:c3:11:c9:a7:e6:cc:fd:fb:dc: 36:5d:b9:28:52:21:0e:ef:40:6c:81:bc:65:ca:c0: 28:95:79:d6:f6:6e:df:0f:99:77:89:c4:0d:81:49: ad:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:35:2F:C6:07:AC:4E:DB:15:22:17:9F:AB:2F:E2:12:47:C1:3F:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/ec1b8336-f451-3652-aefc-ff559feaa568.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:68:19:10:1f:fe:e0:29:0d:e4:78:fd:c9:28:94:43:ba:5e: 9e:64:c4:70:e7:02:f9:5a:0a:22:94:8f:38:1d:72:a3:13:e6: 47:1d:f8:c0:7e:5f:8a:d5:28:1b:69:b6:69:2b:8b:07:29:30: 37:77:7f:1c:4b:0b:8f:76:31:2b:97:4e:cc:c0:b1:c9:2b:1d: 8d:5a:0a:a2:65:8c:76:8b:c0:6c:2e:3f:4e:96:35:5c:b1:01: a4:67:fe:8a:42:e2:25:90:e0:c4:e2:11:f2:0f:cd:b5:36:e7: 6f:29:9e:4d:6d:fd:64:b0:23:f6:7c:8a:cb:4d:ba:47:0a:a9: 02:ec:37:a8:0a:21:87:1e:5d:86:5b:18:12:1c:f9:8c:87:3b: cf:92:61:98:4c:a1:7a:d0:35:c8:a9:64:81:99:2a:66:88:50: bb:e4:80:2b:54:1b:01:a6:61:68:91:94:fe:d5:28:e8:21:31: 2b:5f:73:ca:9d:06:78:9a:6e:75:d5:e7:ea:67:f6:17:74:c8: fd:b0:57:0a:87:f7:12:1b:6d:4c:6b:43:a3:84:4c:25:46:bf: 15:1a:59:c4:40:0d:a6:af:dd:1a:50:b4:5c:02:e4:e8:3e:6e: 46:82:85:73:0a:cc:6a:c2:6b:f1:22:fd:ab:f6:c3:ab:54:c2: b0:dc:b9:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnpH5sRREaYh++PQAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MDUyMDAxMDA0OVoXDTI1MDgxODAxMDA0OVowLzEtMCsGA1UEAxMk ZmY0YzViNGUtZmE5Mi00MmJlLWFjZDktNDUyYjdiYWQxODI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAktoeLs3w6F1MoTENP/GNX/6gauxZ6rzBMTKi 0EtspzLu4+JWtOI0ShbncFbiukWUjAV+tQ4kfc2osHrTp46jWeMZodslURcZNEhY tiL9z/LhmyBatGeKk12MG6wsJK567AUglv23GTpvhuZOPVvt14s2pTTRhBvdrQRp FXZD8vpFKfQIM6sgtj3Vw/fYpTDaHaReH3JNwnpnu08BhBNUKOvy9Sbcv+e2Tbd0 8Cdvun2SW2MxoFaba/DQBsEr37zOwcSFqjA4WRronogSzgr6CsLmOOmChkPDEcmn 5sz9+9w2XbkoUiEO70BsgbxlysAolXnW9m7fD5l3icQNgUmtEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK81L8YHrE7bFSIXn6sv4hJHwT9bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvZWMxYjgzMzYtZjQ1MS0z NjUyLWFlZmMtZmY1NTlmZWFhNTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqlXUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKRoGRAf/uApDeR4/ckolEO6Xp5kxHDnAvlaCiKUjzgdcqMT5kcd+MB+ X4rVKBtptmkriwcpMDd3fxxLC492MSuXTszAsckrHY1aCqJljHaLwGwuP06WNVyx AaRn/opC4iWQ4MTiEfIPzbU2528pnk1t/WSwI/Z8istNukcKqQLsN6gKIYceXYZb GBIc+YyHO8+SYZhMoXrQNcipZIGZKmaIULvkgCtUGwGmYWiRlP7VKOghMStfc8qd BniabnXV5+pn9hd0yP2wVwqH9xIbbUxrQ6OETCVGvxUaWcRADaav3RpQtFwC5Og+ bkaChXMKzGrCa/Ei/av2w6tUwrDcuQY= -----END CERTIFICATE-----Generated at Sun Jun 15 00:35:16 2025 by rpki-client