$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/f00191ea-7649-3395-af77-d4da4f50995c.roa File: f00191ea-7649-3395-af77-d4da4f50995c.roa (raw, json) Hash identifier: e44Qft0/ca+FcqFgIbCJDQ5zcAQ2rxDKX1VC8nquZZE= Subject key identifier: 03:A4:E5:BD:BC:6C:8B:9B:E6:DB:7F:5B:DE:EA:8A:1B:92:5E:D6:2F Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584908EC45A5D2C835248687C300 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/f00191ea-7649-3395-af77-d4da4f50995c.roa Signing time: Fri 28 Feb 2025 17:36:21 +0000 ROA not before: Fri 28 Feb 2025 17:36:21 +0000 ROA not after: Thu 29 May 2025 16:36:21 +0000 asID: 16509 IP address blocks: 170.85.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:08:ec:45:a5:d2:c8:35:24:86:87:c3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Feb 28 17:36:21 2025 GMT Not After : May 29 16:36:21 2025 GMT Subject: CN=f4b693f4-852a-45d8-9778-4c0e9e02423c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:58:de:6b:7d:07:80:fb:9b:ff:51:0c:74:8e: fc:7c:8a:89:6e:33:0d:e9:28:57:03:3e:92:ea:02: e5:05:9d:c1:a9:1e:d9:fc:b3:51:c3:e5:86:e0:20: cd:5b:6f:62:2a:b0:45:7c:e5:d1:91:5c:3c:0c:e9: 06:de:74:21:d8:30:25:c8:48:5d:2f:b6:d2:c4:f0: f6:00:75:7b:8d:10:d8:f2:73:81:b7:23:e3:97:d3: 8a:27:30:65:b2:8a:f4:89:73:aa:15:65:24:a2:f9: c2:73:19:d2:7f:f0:22:7c:80:e7:f6:ad:2d:a0:55: 6b:0b:d1:c2:79:33:d9:98:9d:f4:19:cc:64:3f:6d: 30:ff:f4:be:78:4c:43:65:c8:99:1c:4e:50:3f:e2: 2a:9e:2d:d0:33:7f:bd:0d:31:31:af:d9:a4:ca:de: 85:a7:99:31:c7:cb:15:36:83:d1:6e:f3:7d:91:0a: 19:8c:53:7b:9c:80:8e:74:94:70:8c:5d:96:8e:be: b7:df:ef:14:fd:12:92:7f:b0:47:ed:76:f3:a8:13: 12:4e:81:af:27:4b:1c:0e:80:6e:b8:37:be:60:da: 00:09:6d:87:d1:92:1f:9b:f9:6a:a3:95:e7:e0:e9: 68:b7:7a:37:1f:86:31:3f:8f:21:97:54:90:ad:f0: fc:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:A4:E5:BD:BC:6C:8B:9B:E6:DB:7F:5B:DE:EA:8A:1B:92:5E:D6:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/f00191ea-7649-3395-af77-d4da4f50995c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:6e:a2:3d:31:14:bc:5b:db:95:32:9e:2c:75:2f:fd:d6:1d: 0d:38:2d:8d:91:0a:e5:dd:c1:1e:54:d4:32:58:24:18:0a:4a: 98:a1:b5:0f:19:31:cb:d3:9a:c0:ca:b8:49:41:43:35:7c:15: 25:09:ab:de:f4:81:ed:29:d4:ae:fe:88:92:4b:73:4a:1d:04: 16:c0:a6:e8:7c:bc:47:84:d7:e5:c1:27:5a:50:4e:30:c8:b8: f0:39:0e:fc:c0:47:2c:03:68:f7:ff:ad:26:51:3b:a3:c8:e2: 83:38:c4:a6:80:0a:04:91:1d:aa:ad:44:1d:94:3b:2c:c3:11: fe:da:2e:64:10:6a:0c:5b:29:d9:bb:9c:8a:29:66:99:c5:ab: cb:e1:d2:e1:c4:33:c9:61:55:31:ee:a8:2e:78:60:9f:26:f8: d2:f8:a8:b9:39:b7:fa:91:0d:be:6a:2c:a5:a0:6f:36:16:34: ff:6b:fd:d2:13:51:bc:d1:b8:4e:48:fe:ee:da:8b:b1:66:22: ac:26:74:df:d7:82:4f:13:ba:2d:05:5f:d3:9a:00:4c:53:2d: a9:ee:58:a9:99:04:ac:bf:6d:c4:87:b0:87:35:d6:38:36:52: 57:b9:cd:83:e8:51:a9:56:28:27:75:bb:87:7c:6c:86:74:c9: 21:ae:e1:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkI7EWl0sg1JIaHwwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MDIyODE3MzYyMVoXDTI1MDUyOTE2MzYyMVowLzEtMCsGA1UEAxMk ZjRiNjkzZjQtODUyYS00NWQ4LTk3NzgtNGMwZTllMDI0MjNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy1jea30HgPub/1EMdI78fIqJbjMN6ShXAz6S 6gLlBZ3BqR7Z/LNRw+WG4CDNW29iKrBFfOXRkVw8DOkG3nQh2DAlyEhdL7bSxPD2 AHV7jRDY8nOBtyPjl9OKJzBlsor0iXOqFWUkovnCcxnSf/AifIDn9q0toFVrC9HC eTPZmJ30GcxkP20w//S+eExDZciZHE5QP+Iqni3QM3+9DTExr9mkyt6Fp5kxx8sV NoPRbvN9kQoZjFN7nICOdJRwjF2Wjr633+8U/RKSf7BH7XbzqBMSToGvJ0scDoBu uDe+YNoACW2H0ZIfm/lqo5Xn4Olot3o3H4YxP48hl1SQrfD8gQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAOk5b28bIub5tt/W97qihuSXtYvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvZjAwMTkxZWEtNzY0OS0z Mzk1LWFmNzctZDRkYTRmNTA5OTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqlXTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABVuoj0xFLxb25Uynix1L/3WHQ04LY2RCuXdwR5U1DJYJBgKSpihtQ8Z McvTmsDKuElBQzV8FSUJq970ge0p1K7+iJJLc0odBBbApuh8vEeE1+XBJ1pQTjDI uPA5DvzARywDaPf/rSZRO6PI4oM4xKaACgSRHaqtRB2UOyzDEf7aLmQQagxbKdm7 nIopZpnFq8vh0uHEM8lhVTHuqC54YJ8m+NL4qLk5t/qRDb5qLKWgbzYWNP9r/dIT UbzRuE5I/u7ai7FmIqwmdN/Xgk8Tui0FX9OaAExTLanuWKmZBKy/bcSHsIc11jg2 Ule5zYPoUalWKCd1u4d8bIZ0ySGu4Uw= -----END CERTIFICATE-----Generated at Sat Apr 26 14:55:37 2025 by rpki-client