$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/ec1b8336-f451-3652-aefc-ff559feaa568.roa File: ec1b8336-f451-3652-aefc-ff559feaa568.roa (raw, json) Hash identifier: iGI7VXg0Qr53spMoaPWLam/E/xFJ3n0kGlOD5h7TTyM= Subject key identifier: 5E:52:0F:25:96:77:FE:39:74:58:B6:7C:FD:54:DB:2C:42:12:C7:7E Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584908EC929AD9EA1E47B6401B80 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/ec1b8336-f451-3652-aefc-ff559feaa568.roa Signing time: Fri 28 Feb 2025 17:36:57 +0000 ROA not before: Fri 28 Feb 2025 17:36:57 +0000 ROA not after: Thu 29 May 2025 16:36:57 +0000 asID: 14618 IP address blocks: 170.85.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:08:ec:92:9a:d9:ea:1e:47:b6:40:1b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Feb 28 17:36:57 2025 GMT Not After : May 29 16:36:57 2025 GMT Subject: CN=f3126861-d2e5-48b1-9d2f-743bf9219b94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:cd:54:09:8b:e6:e7:57:f5:a3:bc:ae:ae:b0: 07:14:9b:d3:0e:75:73:a1:71:8b:79:b7:07:8f:37: 9c:cf:77:cc:96:2a:d1:fa:91:ef:8a:02:76:f4:5b: be:09:87:32:d3:56:32:a3:29:38:39:a5:1f:20:19: b4:88:82:a9:87:05:65:b5:f9:59:eb:95:c5:e5:17: 6a:35:6a:9b:9b:c4:70:e4:22:f3:c0:74:99:3e:48: 2c:a1:3c:6d:d3:d6:31:3b:3d:05:6b:95:5b:9d:2a: cb:59:1c:be:f7:bd:c7:82:34:e9:62:6b:79:5b:98: e9:6e:8d:47:5f:ae:19:75:2d:1c:2a:f4:d4:89:60: cc:94:75:32:b5:ab:e2:e4:7c:02:0d:b6:52:4f:77: 68:b6:10:58:52:14:ac:13:db:9e:70:c5:ba:54:a1: 05:ed:87:45:81:6f:9d:bc:bb:b1:8b:b0:c9:7a:fb: 56:af:cb:31:86:2f:c8:4a:d1:22:4f:da:5b:70:39: 2d:63:74:9b:96:94:6e:50:e0:58:33:71:c8:34:3a: 1e:27:7a:41:17:53:75:0d:c3:f0:2b:34:94:00:68: 2d:02:4f:5a:a3:76:ac:2c:67:db:61:0a:09:55:dc: 7b:97:c6:f0:98:df:90:42:b5:60:29:20:c5:2e:f2: e0:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:52:0F:25:96:77:FE:39:74:58:B6:7C:FD:54:DB:2C:42:12:C7:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/ec1b8336-f451-3652-aefc-ff559feaa568.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:09:13:f2:ea:6e:a4:31:ea:03:1f:1a:27:66:a0:05:fd:b1: 58:21:56:d6:36:9a:1a:23:2e:4b:85:39:46:74:ac:37:2a:28: 02:6e:54:f3:00:1b:91:a2:08:f8:a8:17:65:08:38:d3:01:ee: 5e:2b:ba:1b:18:94:6b:92:37:e7:d3:fe:fe:55:24:05:88:f0: ec:e4:08:50:3c:2d:24:aa:a5:6a:b5:65:13:b7:1a:f2:5f:58: bf:54:56:59:0d:4b:2f:d9:59:34:db:58:16:de:52:80:65:1f: 93:0f:92:a1:8e:8b:ea:07:57:5e:17:59:de:05:6d:00:52:94: 56:34:bb:88:db:fe:7e:8c:a3:93:2c:3f:46:39:e3:cc:d7:3c: 15:49:1e:69:cd:b3:bd:2d:68:ff:31:8b:3f:52:bd:7a:af:38: d9:60:dc:75:b3:ee:29:f2:fa:09:82:25:7d:2b:06:c1:51:93: 6a:a5:d5:6e:af:d2:0e:0a:fc:06:09:f1:d7:95:16:2e:9d:65: a5:59:52:19:75:97:e5:09:92:25:e1:39:20:d7:86:e4:ee:43: 01:c8:5c:cf:78:43:55:29:63:52:06:5f:21:fd:e9:25:ca:14: 79:d6:33:ec:4c:49:06:5d:c4:7d:95:44:4a:47:6d:1e:0d:62: 7e:c0:a6:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkI7JKa2eoeR7ZAG4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MDIyODE3MzY1N1oXDTI1MDUyOTE2MzY1N1owLzEtMCsGA1UEAxMk ZjMxMjY4NjEtZDJlNS00OGIxLTlkMmYtNzQzYmY5MjE5Yjk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgM1UCYvm51f1o7yurrAHFJvTDnVzoXGLebcH jzecz3fMlirR+pHvigJ29Fu+CYcy01Yyoyk4OaUfIBm0iIKphwVltflZ65XF5Rdq NWqbm8Rw5CLzwHSZPkgsoTxt09YxOz0Fa5VbnSrLWRy+973HgjTpYmt5W5jpbo1H X64ZdS0cKvTUiWDMlHUytavi5HwCDbZST3dothBYUhSsE9uecMW6VKEF7YdFgW+d vLuxi7DJevtWr8sxhi/IStEiT9pbcDktY3SblpRuUOBYM3HINDoeJ3pBF1N1DcPw KzSUAGgtAk9ao3asLGfbYQoJVdx7l8bwmN+QQrVgKSDFLvLgkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF5SDyWWd/45dFi2fP1U2yxCEsd+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvZWMxYjgzMzYtZjQ1MS0z NjUyLWFlZmMtZmY1NTlmZWFhNTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqlXUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFAJE/LqbqQx6gMfGidmoAX9sVghVtY2mhojLkuFOUZ0rDcqKAJuVPMA G5GiCPioF2UIONMB7l4ruhsYlGuSN+fT/v5VJAWI8OzkCFA8LSSqpWq1ZRO3GvJf WL9UVlkNSy/ZWTTbWBbeUoBlH5MPkqGOi+oHV14XWd4FbQBSlFY0u4jb/n6Mo5Ms P0Y548zXPBVJHmnNs70taP8xiz9SvXqvONlg3HWz7iny+gmCJX0rBsFRk2ql1W6v 0g4K/AYJ8deVFi6dZaVZUhl1l+UJkiXhOSDXhuTuQwHIXM94Q1UpY1IGXyH96SXK FHnWM+xMSQZdxH2VREpHbR4NYn7Apok= -----END CERTIFICATE-----Generated at Sat Apr 26 13:23:54 2025 by rpki-client