$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/faabd4d2-d007-47ce-aeb1-098f9db2cc81/fdcd414c-826c-3f5e-8299-d8b8c09ffb2b.roa File: fdcd414c-826c-3f5e-8299-d8b8c09ffb2b.roa (raw, json) Hash identifier: x3QBqXmozNYINOvuQvy1H9iDJ7pzyUGjIRERs7G4UpU= Subject key identifier: 53:AC:C2:5C:6D:22:55:49:35:01:33:58:B8:A9:E6:62:25:2C:58:FE Certificate issuer: /CN=faabd4d2-d007-47ce-aeb1-098f9db2cc81 Certificate serial: 010D0C9F43285849CE9A5634A832C889E6288680 Authority key identifier: C5:47:D5:4C:44:B0:70:3E:68:55:8F:06:AE:EB:D2:FC:2D:D0:69:AC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/faabd4d2-d007-47ce-aeb1-098f9db2cc81.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/faabd4d2-d007-47ce-aeb1-098f9db2cc81/fdcd414c-826c-3f5e-8299-d8b8c09ffb2b.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 62695 IP address blocks: 170.39.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/faabd4d2-d007-47ce-aeb1-098f9db2cc81/faabd4d2-d007-47ce-aeb1-098f9db2cc81.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/faabd4d2-d007-47ce-aeb1-098f9db2cc81/faabd4d2-d007-47ce-aeb1-098f9db2cc81.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/faabd4d2-d007-47ce-aeb1-098f9db2cc81.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:56:34:a8:32:c8:89:e6:28:86:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=faabd4d2-d007-47ce-aeb1-098f9db2cc81 Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=a43c9234-0871-4e41-9be9-4e6e0f1942cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:76:19:c3:29:dd:1d:9e:9c:01:3f:0e:bd:b3: 18:06:de:f2:f2:91:94:aa:91:d5:d4:95:0e:8a:eb: 96:21:4e:bf:35:f2:69:03:21:d1:c6:fa:e6:2e:dc: ba:75:e4:51:cf:79:b0:9e:a6:29:62:3e:a3:cc:c5: b8:1d:c9:f9:21:4d:3e:e5:47:4f:85:0e:da:b0:1c: 1d:01:f4:d6:40:d2:7f:da:8b:84:42:89:ea:5a:6a: ca:6e:c8:96:05:82:36:80:a0:79:23:7a:6b:71:72: 6c:4c:19:09:e6:70:9e:14:fb:46:0c:05:a7:a1:79: ae:fd:b2:c2:95:93:0c:af:8d:02:9f:79:2f:d8:d0: 70:41:b8:57:43:d0:78:a8:f1:68:db:95:dd:ad:2e: e9:e6:15:0b:83:e5:db:fe:39:e5:ff:ec:8e:54:53: 0b:4b:2e:34:b6:d3:f0:7b:36:6c:f2:67:7d:f5:2a: c6:76:62:58:06:31:09:83:eb:06:aa:29:11:8a:10: be:31:72:57:75:c8:0f:c5:9d:b7:dc:31:32:01:a8: b3:27:28:f4:f0:47:08:ce:b8:cb:36:ed:31:87:6c: 1c:87:5c:80:b7:17:a3:90:81:b5:0f:92:8d:09:af: 09:f1:aa:10:ee:c6:11:79:8e:e8:18:48:c2:38:02: ee:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:AC:C2:5C:6D:22:55:49:35:01:33:58:B8:A9:E6:62:25:2C:58:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/faabd4d2-d007-47ce-aeb1-098f9db2cc81/fdcd414c-826c-3f5e-8299-d8b8c09ffb2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/faabd4d2-d007-47ce-aeb1-098f9db2cc81/faabd4d2-d007-47ce-aeb1-098f9db2cc81.crl X509v3 Authority Key Identifier: keyid:C5:47:D5:4C:44:B0:70:3E:68:55:8F:06:AE:EB:D2:FC:2D:D0:69:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/faabd4d2-d007-47ce-aeb1-098f9db2cc81.cer sbgp-ipAddrBlock: critical IPv4: 170.39.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:94:05:37:de:55:78:ca:e3:bd:36:9e:89:ff:6d:b6:6d:b5: 40:3e:20:02:83:3b:92:b7:78:ad:56:d9:82:ba:7c:97:b1:26: 17:60:3a:4d:4c:9d:d3:e9:93:84:bd:58:8e:f2:44:5b:6e:62: ab:63:4c:82:e5:54:20:80:13:6d:e2:7b:a6:1b:ae:7a:93:5a: 29:cb:00:89:6e:65:ec:6b:c5:3e:c5:9b:ea:cc:cc:68:69:e6: 42:32:65:63:a4:4a:10:68:c7:8f:1b:26:d8:74:95:34:95:40: ef:cd:5b:e0:45:dc:c2:5c:8d:30:b8:b9:c1:02:a0:2e:a4:9d: 14:ff:41:d7:ee:e8:83:b7:54:47:24:7c:cb:e9:6e:e1:23:57: e5:47:71:d0:93:1f:e6:52:e9:bf:b3:9e:b8:b3:65:f9:70:31: c5:a8:25:73:45:47:ba:e8:72:3b:a4:3b:13:a6:21:4c:ea:8d: 3e:ca:10:e3:10:b5:80:37:27:00:39:cc:6a:d8:4b:f0:db:a0: d4:f4:2c:2c:47:a9:63:16:dd:5e:0a:1d:99:7f:09:44:33:55: 86:59:54:52:a7:c1:ff:f6:7b:f3:94:60:9c:a1:9c:4d:ac:41: 2b:f3:1f:80:1d:39:1a:4d:c8:a7:5c:46:86:c4:be:79:62:f5: 3d:f3:5f:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnOmlY0qDLIieYohoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmFhYmQ0ZDItZDAwNy00N2NlLWFlYjEtMDk4ZjlkYjJj YzgxMB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk YTQzYzkyMzQtMDg3MS00ZTQxLTliZTktNGU2ZTBmMTk0MmNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi3YZwyndHZ6cAT8OvbMYBt7y8pGUqpHV1JUO iuuWIU6/NfJpAyHRxvrmLty6deRRz3mwnqYpYj6jzMW4Hcn5IU0+5UdPhQ7asBwd AfTWQNJ/2ouEQonqWmrKbsiWBYI2gKB5I3prcXJsTBkJ5nCeFPtGDAWnoXmu/bLC lZMMr40Cn3kv2NBwQbhXQ9B4qPFo25XdrS7p5hULg+Xb/jnl/+yOVFMLSy40ttPw ezZs8md99SrGdmJYBjEJg+sGqikRihC+MXJXdcgPxZ233DEyAaizJyj08EcIzrjL Nu0xh2wch1yAtxejkIG1D5KNCa8J8aoQ7sYReY7oGEjCOALuKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFOswlxtIlVJNQEzWLip5mIlLFj+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mYWFi ZDRkMi1kMDA3LTQ3Y2UtYWViMS0wOThmOWRiMmNjODEvZmRjZDQxNGMtODI2Yy0z ZjVlLTgyOTktZDhiOGMwOWZmYjJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZmFhYmQ0ZDItZDAwNy00N2NlLWFl YjEtMDk4ZjlkYjJjYzgxL2ZhYWJkNGQyLWQwMDctNDdjZS1hZWIxLTA5OGY5ZGIy Y2M4MS5jcmwwHwYDVR0jBBgwFoAUxUfVTESwcD5oVY8GruvS/C3QaawwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9mYWFiZDRkMi1kMDA3LTQ3Y2UtYWViMS0wOThm OWRiMmNjODEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqieLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAISUBTfeVXjK4702non/bbZttUA+IAKDO5K3eK1W2YK6fJexJhdgOk1M ndPpk4S9WI7yRFtuYqtjTILlVCCAE23ie6YbrnqTWinLAIluZexrxT7Fm+rMzGhp 5kIyZWOkShBox48bJth0lTSVQO/NW+BF3MJcjTC4ucECoC6knRT/Qdfu6IO3VEck fMvpbuEjV+VHcdCTH+ZS6b+znrizZflwMcWoJXNFR7rocjukOxOmIUzqjT7KEOMQ tYA3JwA5zGrYS/DboNT0LCxHqWMW3V4KHZl/CUQzVYZZVFKnwf/2e/OUYJyhnE2s QSvzH4AdORpNyKdcRobEvnli9T3zX6s= -----END CERTIFICATE-----Generated at Mon Jun 16 17:40:35 2025 by rpki-client