$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/fed4d553-b226-3992-8d8c-3294f2fe7668.roa File: fed4d553-b226-3992-8d8c-3294f2fe7668.roa (raw, json) Hash identifier: 5Ka5tVdmsNtFfE+8uxs9BCxEo8VIN3w1wnh1GpsJG24= Subject key identifier: 2F:94:2F:49:23:69:32:D4:AE:7B:A5:17:34:C7:F5:BD:09:5E:61:7B Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584908ED27BF8B8A5822865CC5C0 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/fed4d553-b226-3992-8d8c-3294f2fe7668.roa Signing time: Fri 28 Feb 2025 17:38:08 +0000 ROA not before: Fri 28 Feb 2025 17:38:08 +0000 ROA not after: Thu 29 May 2025 16:38:08 +0000 asID: 14618 IP address blocks: 170.85.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:08:ed:27:bf:8b:8a:58:22:86:5c:c5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Feb 28 17:38:08 2025 GMT Not After : May 29 16:38:08 2025 GMT Subject: CN=9ead3cc9-d1dc-4059-99e5-b25fee380115 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:3d:c9:69:db:a6:25:c5:03:a5:17:73:46:95: 2d:78:fa:ff:e0:8d:01:74:38:ab:c6:27:7b:8a:a6: 36:a1:4b:dd:86:44:5f:d5:09:ac:54:ac:ed:eb:8d: ce:b9:9a:a3:84:6e:5d:39:88:ff:30:7b:7b:c7:5f: 88:7b:41:f1:98:3a:31:51:80:be:1f:84:dd:89:c4: 8a:19:66:6a:ef:7a:df:33:13:fb:2a:f8:69:7c:ea: 49:c1:df:a9:2d:a2:b5:66:cb:d7:da:5c:7b:c0:49: 25:5b:36:07:3e:16:2d:86:3c:76:2f:6a:d4:2b:01: af:61:cc:9e:d9:3f:c4:6e:f2:5e:d2:86:3f:5d:01: 30:c1:dd:a6:e0:cf:c1:6f:13:c0:1c:7b:63:b0:d9: 99:e9:fb:13:0a:f4:0e:96:93:89:48:48:cd:b0:c6: 2b:6c:fc:50:5a:18:c9:8f:ea:95:f2:01:4f:6e:4e: b7:b3:da:c6:42:fb:32:0d:18:f2:d5:0f:be:9b:96: 4b:df:d6:57:d7:d6:f4:ff:70:fa:44:95:af:6e:49: 1d:3a:18:6e:50:ad:61:65:2e:8e:00:ef:fa:55:90: c6:66:35:46:9f:5e:89:81:7d:b7:15:39:a6:14:bb: ca:77:e0:12:20:fe:1b:25:ea:91:9d:7c:84:2d:93: 97:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:94:2F:49:23:69:32:D4:AE:7B:A5:17:34:C7:F5:BD:09:5E:61:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/fed4d553-b226-3992-8d8c-3294f2fe7668.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:a9:36:48:63:3a:0d:6f:a5:de:50:4d:96:7e:1b:84:c4:b9: 3e:a9:ce:30:20:70:b4:39:df:62:81:bc:4b:bd:ef:6f:9b:9a: fe:c5:57:d1:fa:33:81:30:bc:ae:89:16:5f:68:3f:0c:cf:6d: 8a:96:a4:12:f6:7d:cc:2f:25:b4:38:bc:10:19:ee:59:68:7d: 2a:75:06:f6:c3:36:10:6e:65:cb:83:35:2d:d2:71:c7:74:c0: e2:29:c7:9b:91:30:aa:56:30:7c:f7:b6:49:4e:b5:38:d2:4c: ad:69:7c:84:65:d2:d5:f4:15:5b:0a:b9:db:6d:bd:c6:26:37: 97:30:7c:8f:1e:35:8d:de:81:24:20:c0:d3:7c:d0:71:ce:47: 73:7f:2b:05:5d:8d:bf:cb:94:25:cd:39:05:cd:af:d9:66:f5: 69:04:9e:69:d7:0d:fa:33:d2:47:0c:3b:cf:79:d0:03:3e:d6: c1:30:29:cd:e7:7d:4f:57:c7:b5:17:3a:27:72:04:ac:81:e6: b4:6f:9a:60:52:89:f5:2a:82:9b:a3:39:43:bc:1e:9a:07:13: e0:37:47:11:40:61:fe:0a:ed:0a:f5:b4:70:3f:0b:c0:c9:a5: 1c:6c:c9:f3:e1:fd:18:fd:61:ad:5a:f8:67:b4:31:58:05:9d: b4:2d:08:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkI7Se/i4pYIoZcxcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MDIyODE3MzgwOFoXDTI1MDUyOTE2MzgwOFowLzEtMCsGA1UEAxMk OWVhZDNjYzktZDFkYy00MDU5LTk5ZTUtYjI1ZmVlMzgwMTE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArT3JadumJcUDpRdzRpUtePr/4I0BdDirxid7 iqY2oUvdhkRf1QmsVKzt643OuZqjhG5dOYj/MHt7x1+Ie0HxmDoxUYC+H4TdicSK GWZq73rfMxP7KvhpfOpJwd+pLaK1ZsvX2lx7wEklWzYHPhYthjx2L2rUKwGvYcye 2T/EbvJe0oY/XQEwwd2m4M/BbxPAHHtjsNmZ6fsTCvQOlpOJSEjNsMYrbPxQWhjJ j+qV8gFPbk63s9rGQvsyDRjy1Q++m5ZL39ZX19b0/3D6RJWvbkkdOhhuUK1hZS6O AO/6VZDGZjVGn16JgX23FTmmFLvKd+ASIP4bJeqRnXyELZOXJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC+UL0kjaTLUrnulFzTH9b0JXmF7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvZmVkNGQ1NTMtYjIyNi0z OTkyLThkOGMtMzI5NGYyZmU3NjY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqlXVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAepNkhjOg1vpd5QTZZ+G4TEuT6pzjAgcLQ532KBvEu972+bmv7FV9H6 M4EwvK6JFl9oPwzPbYqWpBL2fcwvJbQ4vBAZ7llofSp1BvbDNhBuZcuDNS3Sccd0 wOIpx5uRMKpWMHz3tklOtTjSTK1pfIRl0tX0FVsKudttvcYmN5cwfI8eNY3egSQg wNN80HHOR3N/KwVdjb/LlCXNOQXNr9lm9WkEnmnXDfoz0kcMO8950AM+1sEwKc3n fU9Xx7UXOidyBKyB5rRvmmBSifUqgpujOUO8HpoHE+A3RxFAYf4K7Qr1tHA/C8DJ pRxsyfPh/Rj9Ya1a+Ge0MVgFnbQtCBI= -----END CERTIFICATE-----Generated at Sat Apr 26 13:30:32 2025 by rpki-client