$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/5a7f92be-66b2-3204-8a8f-751f364e7c5f.roa File: 5a7f92be-66b2-3204-8a8f-751f364e7c5f.roa (raw, json) Hash identifier: 7KrKcmT4WfplCWlMjUeDyWbNAhomNRD5sSKwbzUXjew= Subject key identifier: 93:E2:DB:3C:8C:95:BF:BE:78:6B:71:BE:3F:15:46:07:7C:8C:33:FC Certificate issuer: /CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279 Certificate serial: 010D0C9F4328584957F402580EE184103732F9E0 Authority key identifier: E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/5a7f92be-66b2-3204-8a8f-751f364e7c5f.roa Signing time: Sat 29 Mar 2025 01:00:39 +0000 ROA not before: Sat 29 Mar 2025 01:00:39 +0000 ROA not after: Fri 27 Jun 2025 01:00:39 +0000 asID: 16509 IP address blocks: 170.225.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:57:f4:02:58:0e:e1:84:10:37:32:f9:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279 Validity Not Before: Mar 29 01:00:39 2025 GMT Not After : Jun 27 01:00:39 2025 GMT Subject: CN=d07cae9e-823b-43b7-af42-07b5e958dc37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:34:fc:7a:1e:42:bd:07:47:a3:60:3e:db:02: 86:c4:69:fb:c8:dd:f6:46:d7:24:c7:cc:8a:41:bf: e1:84:a5:4b:bf:bd:d6:b1:5c:76:7a:92:32:69:ab: f8:2c:b4:53:8e:5a:0b:b7:ec:43:71:2b:4c:1e:0c: 72:4b:d2:0a:e2:8b:d6:c7:e7:d3:9b:8c:56:36:c6: 32:ed:e6:7c:e3:7a:57:d2:bb:77:af:7c:02:51:4e: e2:49:32:a1:a5:e1:c0:77:26:b2:cc:78:69:77:ea: 83:5c:1c:42:a5:7d:dc:21:c7:4c:5b:65:21:58:30: 1b:7f:b1:7c:a0:fc:c6:4b:ec:fa:11:03:c1:a8:8f: 44:70:9d:24:fe:ec:41:61:dc:dd:bd:5a:74:bd:ed: 51:8d:b2:f8:1a:4b:e7:0c:93:37:51:00:79:82:b0: 20:87:9a:f5:6a:2f:5d:9f:e9:1b:a8:b1:6f:69:e6: 58:63:f1:69:c2:19:a3:ab:78:18:27:48:83:12:76: eb:1c:df:b6:39:43:2b:4f:04:a0:69:45:c2:5c:e2: 43:9b:87:92:bf:42:2f:c7:7a:c4:73:65:6a:61:ff: 7f:61:c1:34:d4:66:49:08:51:80:4d:81:80:0c:c0: 45:cb:47:8b:53:d2:09:4a:d5:41:a7:38:3f:23:da: c5:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:E2:DB:3C:8C:95:BF:BE:78:6B:71:BE:3F:15:46:07:7C:8C:33:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/5a7f92be-66b2-3204-8a8f-751f364e7c5f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl X509v3 Authority Key Identifier: keyid:E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer sbgp-ipAddrBlock: critical IPv4: 170.225.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:a3:b6:83:af:4a:8f:c5:71:11:b6:33:49:cf:bd:59:22:dc: ba:16:00:d7:30:5b:6e:c4:14:5e:bb:f0:07:4a:74:ef:2b:00: 20:fa:6f:20:d1:53:15:36:c8:54:70:f4:39:f2:44:70:7a:25: 0e:04:08:b7:08:4f:fc:94:0d:8f:a1:60:1e:26:c1:4a:cd:79: 1c:c7:1c:ad:56:f6:1b:37:b0:68:65:cc:58:03:b0:e5:82:51: e2:f7:1d:47:b1:38:81:08:70:8d:cd:10:b4:96:d3:ee:a2:22: 1c:49:39:27:51:47:22:3c:4e:d9:ec:87:5e:6b:bb:bc:e0:2f: 6e:c6:72:bb:99:fa:65:e0:3c:2d:b9:42:e1:fd:36:7f:be:5b: 24:1a:b3:ae:0a:a1:62:8e:e6:c5:f6:13:28:63:2c:3c:b1:06: 12:91:2a:b8:0b:db:cb:3b:2e:11:15:e8:9f:27:59:b8:17:84: 11:82:62:42:54:c2:c2:7a:4b:b9:e7:06:bf:4a:f3:5e:81:52: be:b2:8d:4c:fe:fe:55:41:1a:a9:a7:74:90:50:42:bb:3d:af: 23:42:24:5a:34:ae:46:6c:70:b2:87:7e:68:25:f9:85:83:03: 7d:d3:65:72:6a:a4:2b:29:b1:14:42:68:d8:4a:20:e5:e0:16: e5:fe:d8:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElX9AJYDuGEEDcy+eAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGNjOTdkOTYtNTJkMC00OGE3LWE5ZWEtYTc3NDlkYzA4 Mjc5MB4XDTI1MDMyOTAxMDAzOVoXDTI1MDYyNzAxMDAzOVowLzEtMCsGA1UEAxMk ZDA3Y2FlOWUtODIzYi00M2I3LWFmNDItMDdiNWU5NThkYzM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTT8eh5CvQdHo2A+2wKGxGn7yN32Rtckx8yK Qb/hhKVLv73WsVx2epIyaav4LLRTjloLt+xDcStMHgxyS9IK4ovWx+fTm4xWNsYy 7eZ843pX0rt3r3wCUU7iSTKhpeHAdyayzHhpd+qDXBxCpX3cIcdMW2UhWDAbf7F8 oPzGS+z6EQPBqI9EcJ0k/uxBYdzdvVp0ve1RjbL4GkvnDJM3UQB5grAgh5r1ai9d n+kbqLFvaeZYY/Fpwhmjq3gYJ0iDEnbrHN+2OUMrTwSgaUXCXOJDm4eSv0Ivx3rE c2VqYf9/YcE01GZJCFGATYGADMBFy0eLU9IJStVBpzg/I9rFNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJPi2zyMlb++eGtxvj8VRgd8jDP8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Y2M5 N2Q5Ni01MmQwLTQ4YTctYTllYS1hNzc0OWRjMDgyNzkvNWE3ZjkyYmUtNjZiMi0z MjA0LThhOGYtNzUxZjM2NGU3YzVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGNjOTdkOTYtNTJkMC00OGE3LWE5 ZWEtYTc3NDlkYzA4Mjc5LzRjYzk3ZDk2LTUyZDAtNDhhNy1hOWVhLWE3NzQ5ZGMw ODI3OS5jcmwwHwYDVR0jBBgwFoAU4vrUb8NLZY1545Z6Y6GWz7mMjdUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80Y2M5N2Q5Ni01MmQwLTQ4YTctYTllYS1hNzc0 OWRjMDgyNzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAquHYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADujtoOvSo/FcRG2M0nPvVki3LoWANcwW27EFF678AdKdO8rACD6byDR UxU2yFRw9DnyRHB6JQ4ECLcIT/yUDY+hYB4mwUrNeRzHHK1W9hs3sGhlzFgDsOWC UeL3HUexOIEIcI3NELSW0+6iIhxJOSdRRyI8Ttnsh15ru7zgL27GcruZ+mXgPC25 QuH9Nn++WyQas64KoWKO5sX2EyhjLDyxBhKRKrgL28s7LhEV6J8nWbgXhBGCYkJU wsJ6S7nnBr9K816BUr6yjUz+/lVBGqmndJBQQrs9ryNCJFo0rkZscLKHfmgl+YWD A33TZXJqpCspsRRCaNhKIOXgFuX+2Ik= -----END CERTIFICATE-----Generated at Sat Apr 26 19:24:08 2025 by rpki-client