$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7054e196-fda1-4988-82d5-4d2f5013150d/efb22e9b-1db1-3239-b2d3-65e0df4abd83.roa File: efb22e9b-1db1-3239-b2d3-65e0df4abd83.roa (raw, json) Hash identifier: cAigaG/mSRHNdcQL8Smn3L6dUpBOhe5eacLLB7XtzkQ= Subject key identifier: 61:CB:42:05:2E:87:63:79:7D:DC:0C:CD:1B:D5:DA:B3:57:38:BE:80 Certificate issuer: /CN=7054e196-fda1-4988-82d5-4d2f5013150d Certificate serial: 010D0C9F432858490E16C10C059F149258F23100 Authority key identifier: 52:46:E6:08:EF:68:90:03:56:03:88:76:FC:E9:A7:67:C1:E4:B4:AC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7054e196-fda1-4988-82d5-4d2f5013150d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7054e196-fda1-4988-82d5-4d2f5013150d/efb22e9b-1db1-3239-b2d3-65e0df4abd83.roa Signing time: Sun 02 Mar 2025 14:00:52 +0000 ROA not before: Sun 02 Mar 2025 14:00:52 +0000 ROA not after: Sat 31 May 2025 13:00:52 +0000 asID: 14648 IP address blocks: 170.39.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7054e196-fda1-4988-82d5-4d2f5013150d/7054e196-fda1-4988-82d5-4d2f5013150d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7054e196-fda1-4988-82d5-4d2f5013150d/7054e196-fda1-4988-82d5-4d2f5013150d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7054e196-fda1-4988-82d5-4d2f5013150d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0e:16:c1:0c:05:9f:14:92:58:f2:31:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7054e196-fda1-4988-82d5-4d2f5013150d Validity Not Before: Mar 2 14:00:52 2025 GMT Not After : May 31 13:00:52 2025 GMT Subject: CN=dbd0588b-3374-471a-b2c9-f5211e09c6de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:94:e2:da:c8:d4:1c:9d:04:7e:5d:37:76:02: 1a:c7:fe:67:31:b7:eb:c0:b9:f6:6a:5e:8b:69:b9: e0:45:10:33:7a:e3:81:f2:71:9e:71:7b:72:6a:f2: 66:d7:4c:29:cf:06:81:44:1c:33:3c:8c:84:07:46: d0:25:d4:d5:bd:66:f7:40:c1:d6:30:17:4e:eb:ef: 1c:e7:64:18:12:51:88:a8:13:f0:28:69:f7:30:72: 11:98:3a:10:b1:33:bb:cc:95:15:d4:9a:c6:37:50: 5a:73:3f:04:91:24:0a:65:a3:bb:c5:68:d3:ee:8a: 5e:f2:0e:57:d5:8e:51:af:9d:59:2a:e4:86:d9:86: 9d:a2:34:ac:15:82:d2:66:a2:34:23:2f:5c:67:a1: cc:12:32:9e:a3:42:7a:a3:d2:e9:2e:8f:05:42:56: bb:0d:f0:f7:a0:f3:03:07:b4:36:13:b9:49:de:44: 0c:e8:93:19:9c:bc:88:d9:ea:69:a7:d9:de:68:d7: 90:06:67:fa:95:cd:cf:f7:b3:8d:02:10:ea:3a:5f: df:6d:28:1c:9e:ac:a4:4a:7f:d5:b4:79:f5:ad:22: e4:54:b9:e1:b6:5a:c2:0c:3b:4e:de:7c:6c:17:03: ae:3a:a2:f5:21:9d:2a:e4:09:45:ed:cc:62:2c:c9: cc:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:CB:42:05:2E:87:63:79:7D:DC:0C:CD:1B:D5:DA:B3:57:38:BE:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7054e196-fda1-4988-82d5-4d2f5013150d/efb22e9b-1db1-3239-b2d3-65e0df4abd83.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7054e196-fda1-4988-82d5-4d2f5013150d/7054e196-fda1-4988-82d5-4d2f5013150d.crl X509v3 Authority Key Identifier: keyid:52:46:E6:08:EF:68:90:03:56:03:88:76:FC:E9:A7:67:C1:E4:B4:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7054e196-fda1-4988-82d5-4d2f5013150d.cer sbgp-ipAddrBlock: critical IPv4: 170.39.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:a9:aa:a0:2f:5d:31:ba:ba:93:15:98:66:52:f7:33:9e:0b: 70:79:ec:f8:bd:26:0b:c8:f3:58:d8:00:67:f7:2a:80:fb:33: e4:31:e6:1f:8d:5f:54:16:bd:17:e9:26:66:c4:63:05:fa:f8: 3e:7a:e3:25:54:88:c4:f2:2e:55:4f:8f:67:8d:cf:77:d8:95: ac:d6:60:e5:0c:da:e8:13:02:fe:07:2e:25:e3:21:07:6b:ef: b1:f1:fb:5e:e9:fa:be:06:08:61:e1:7f:e7:7d:69:8e:d4:c3: f2:22:7e:44:46:2a:73:3b:6c:38:3c:57:87:cd:eb:cb:90:2b: 87:f2:a9:46:2c:cf:aa:31:3f:01:76:a3:85:87:7a:8e:9b:29: 22:68:1a:cf:52:f2:8f:67:53:49:e0:55:08:bb:7d:1e:8a:10: 54:d5:21:fa:1e:49:97:f6:38:d9:eb:08:4d:a1:26:51:4c:39: 18:ed:49:d7:58:ac:d4:5f:a5:3a:82:60:5e:3a:38:48:c5:9f: b3:18:ff:5f:bc:17:42:23:a4:8c:f2:3c:35:1a:10:ab:78:f6: 85:ad:5b:67:33:9e:17:78:0c:fa:d0:98:91:80:7d:52:36:85: 67:20:00:0a:ca:ee:1a:c6:48:3c:37:92:67:13:b6:c4:34:b7: c5:18:0e:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkOFsEMBZ8UkljyMQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzA1NGUxOTYtZmRhMS00OTg4LTgyZDUtNGQyZjUwMTMx NTBkMB4XDTI1MDMwMjE0MDA1MloXDTI1MDUzMTEzMDA1MlowLzEtMCsGA1UEAxMk ZGJkMDU4OGItMzM3NC00NzFhLWIyYzktZjUyMTFlMDljNmRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkpTi2sjUHJ0Efl03dgIax/5nMbfrwLn2al6L abngRRAzeuOB8nGecXtyavJm10wpzwaBRBwzPIyEB0bQJdTVvWb3QMHWMBdO6+8c 52QYElGIqBPwKGn3MHIRmDoQsTO7zJUV1JrGN1Bacz8EkSQKZaO7xWjT7ope8g5X 1Y5Rr51ZKuSG2YadojSsFYLSZqI0Iy9cZ6HMEjKeo0J6o9LpLo8FQla7DfD3oPMD B7Q2E7lJ3kQM6JMZnLyI2eppp9neaNeQBmf6lc3P97ONAhDqOl/fbSgcnqykSn/V tHn1rSLkVLnhtlrCDDtO3nxsFwOuOqL1IZ0q5AlF7cxiLMnMzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGHLQgUuh2N5fdwMzRvV2rNXOL6AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83MDU0 ZTE5Ni1mZGExLTQ5ODgtODJkNS00ZDJmNTAxMzE1MGQvZWZiMjJlOWItMWRiMS0z MjM5LWIyZDMtNjVlMGRmNGFiZDgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzA1NGUxOTYtZmRhMS00OTg4LTgy ZDUtNGQyZjUwMTMxNTBkLzcwNTRlMTk2LWZkYTEtNDk4OC04MmQ1LTRkMmY1MDEz MTUwZC5jcmwwHwYDVR0jBBgwFoAUUkbmCO9okANWA4h2/OmnZ8HktKwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83MDU0ZTE5Ni1mZGExLTQ5ODgtODJkNS00ZDJm NTAxMzE1MGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqieJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAepqqAvXTG6upMVmGZS9zOeC3B57Pi9JgvI81jYAGf3KoD7M+Qx5h+N X1QWvRfpJmbEYwX6+D564yVUiMTyLlVPj2eNz3fYlazWYOUM2ugTAv4HLiXjIQdr 77Hx+17p+r4GCGHhf+d9aY7Uw/IifkRGKnM7bDg8V4fN68uQK4fyqUYsz6oxPwF2 o4WHeo6bKSJoGs9S8o9nU0ngVQi7fR6KEFTVIfoeSZf2ONnrCE2hJlFMORjtSddY rNRfpTqCYF46OEjFn7MY/1+8F0IjpIzyPDUaEKt49oWtW2cznhd4DPrQmJGAfVI2 hWcgAArK7hrGSDw3kmcTtsQ0t8UYDmU= -----END CERTIFICATE-----Generated at Sun Apr 27 04:20:36 2025 by rpki-client