$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/17436076-857b-4889-82e9-22151c59a4b1/2d4d8cd7-4a16-3a5d-ae79-82a919086d58.roa File: 2d4d8cd7-4a16-3a5d-ae79-82a919086d58.roa (raw, json) Hash identifier: qWJQCk4ucqyZjJB/2uWzNthYsK2jTDfOr/U3Sjzv0fs= Subject key identifier: 8C:E8:F2:85:6D:1E:15:13:86:74:39:3B:C1:D7:B0:70:E4:40:04:9F Certificate issuer: /CN=17436076-857b-4889-82e9-22151c59a4b1 Certificate serial: 010D0C9F43285849806F289939AA1A6E91057C80 Authority key identifier: 47:0A:FA:56:B9:09:C9:A7:EE:6D:7E:FE:BA:23:0C:CB:80:18:1D:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/17436076-857b-4889-82e9-22151c59a4b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/17436076-857b-4889-82e9-22151c59a4b1/2d4d8cd7-4a16-3a5d-ae79-82a919086d58.roa Signing time: Sat 12 Apr 2025 13:01:01 +0000 ROA not before: Sat 12 Apr 2025 13:01:01 +0000 ROA not after: Fri 11 Jul 2025 13:01:01 +0000 asID: 46644 IP address blocks: 170.39.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/17436076-857b-4889-82e9-22151c59a4b1/17436076-857b-4889-82e9-22151c59a4b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/17436076-857b-4889-82e9-22151c59a4b1/17436076-857b-4889-82e9-22151c59a4b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/17436076-857b-4889-82e9-22151c59a4b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:80:6f:28:99:39:aa:1a:6e:91:05:7c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17436076-857b-4889-82e9-22151c59a4b1 Validity Not Before: Apr 12 13:01:01 2025 GMT Not After : Jul 11 13:01:01 2025 GMT Subject: CN=f208ffc8-1567-49b4-88d9-9811eb64e95c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:23:08:98:92:bf:c5:e5:61:da:6b:50:8e:f6: 0d:39:27:ac:62:f9:ca:7e:10:98:c8:43:ec:f0:ae: e5:fe:3f:b2:f4:86:c8:f8:1d:b9:71:4e:8d:70:ac: 81:e6:a8:8f:78:da:91:42:2d:ae:b3:34:53:1e:ed: 66:a7:74:22:aa:db:d2:76:7a:6c:87:26:d1:6e:07: f2:68:27:18:c3:1b:7c:b6:ed:d0:7e:b2:38:ed:d7: 50:c2:36:84:06:c9:f2:2a:99:4f:9a:04:c9:c5:53: 9a:40:52:87:51:9d:de:ac:cf:92:f8:f0:11:17:ee: 55:c7:99:e6:c1:41:b9:e6:c9:1a:2e:ab:7a:16:a7: c8:aa:ab:d0:97:6f:1a:2b:80:fd:e3:f0:9a:98:46: 89:0a:f0:4a:05:5d:81:58:30:3f:58:e2:ef:0e:4c: ea:1d:41:0d:4c:44:0a:80:17:33:12:06:4f:c9:dd: 23:54:6b:76:2c:08:f7:3d:81:ab:3b:87:7f:43:12: 92:47:50:06:4a:8d:c1:3a:ba:f8:b2:ef:48:8a:f6: d3:e7:47:c2:90:9a:b4:b0:16:cc:78:6c:02:f8:a7: 07:13:fc:ac:d4:de:1b:78:90:e3:82:26:59:f9:e0: b1:e0:1f:bb:fc:8b:e4:ee:a2:bb:75:c1:11:b2:ac: d7:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:E8:F2:85:6D:1E:15:13:86:74:39:3B:C1:D7:B0:70:E4:40:04:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/17436076-857b-4889-82e9-22151c59a4b1/2d4d8cd7-4a16-3a5d-ae79-82a919086d58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/17436076-857b-4889-82e9-22151c59a4b1/17436076-857b-4889-82e9-22151c59a4b1.crl X509v3 Authority Key Identifier: keyid:47:0A:FA:56:B9:09:C9:A7:EE:6D:7E:FE:BA:23:0C:CB:80:18:1D:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/17436076-857b-4889-82e9-22151c59a4b1.cer sbgp-ipAddrBlock: critical IPv4: 170.39.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:74:ff:78:0e:32:dc:f5:85:cc:f4:fb:e0:41:4e:97:b7:fa: d5:aa:14:7f:a1:a2:0a:a1:80:13:7e:67:60:54:90:2f:42:df: ae:7b:86:f1:97:a9:38:b3:27:59:b8:5d:5d:73:5f:19:01:88: e7:b7:e1:e3:8d:f2:95:0f:ff:5f:ca:33:0e:45:c3:67:48:ea: 5e:f1:71:37:7e:31:f9:49:2a:1c:f0:96:c3:c2:a4:5d:24:d1: c2:7e:c0:2b:3e:c2:1d:c2:dc:64:f1:77:a9:ef:31:8b:c0:c9: b0:3e:34:1c:82:be:38:a1:4d:48:a1:88:cb:e7:b3:a6:89:b0: d7:1f:29:5a:82:8a:27:6b:da:83:ad:91:0c:21:1c:6c:8e:da: 87:c2:12:39:77:4b:49:44:81:1c:d6:16:d8:76:7f:b7:20:ed: b8:fb:ee:4b:eb:f2:7c:a0:36:1a:f4:15:bb:19:98:d5:00:c5: 25:ed:36:76:a9:ba:4d:f3:0c:7c:a7:e6:e3:1b:2b:4c:30:f8: 83:a8:44:35:c3:99:f9:05:57:61:b0:36:c5:35:40:9c:3b:8a: bf:95:8a:97:06:ef:70:ed:99:d8:e1:0c:29:c9:77:67:a1:4b: 16:95:b6:f8:bf:f0:01:85:46:f8:bc:32:4f:b8:4e:7a:ff:35: 8e:8e:be:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmAbyiZOaoabpEFfIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTc0MzYwNzYtODU3Yi00ODg5LTgyZTktMjIxNTFjNTlh NGIxMB4XDTI1MDQxMjEzMDEwMVoXDTI1MDcxMTEzMDEwMVowLzEtMCsGA1UEAxMk ZjIwOGZmYzgtMTU2Ny00OWI0LTg4ZDktOTgxMWViNjRlOTVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSMImJK/xeVh2mtQjvYNOSesYvnKfhCYyEPs 8K7l/j+y9IbI+B25cU6NcKyB5qiPeNqRQi2uszRTHu1mp3QiqtvSdnpshybRbgfy aCcYwxt8tu3QfrI47ddQwjaEBsnyKplPmgTJxVOaQFKHUZ3erM+S+PARF+5Vx5nm wUG55skaLqt6FqfIqqvQl28aK4D94/CamEaJCvBKBV2BWDA/WOLvDkzqHUENTEQK gBczEgZPyd0jVGt2LAj3PYGrO4d/QxKSR1AGSo3BOrr4su9IivbT50fCkJq0sBbM eGwC+KcHE/ys1N4beJDjgiZZ+eCx4B+7/Ivk7qK7dcERsqzXjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIzo8oVtHhUThnQ5O8HXsHDkQASfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xNzQz NjA3Ni04NTdiLTQ4ODktODJlOS0yMjE1MWM1OWE0YjEvMmQ0ZDhjZDctNGExNi0z YTVkLWFlNzktODJhOTE5MDg2ZDU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMTc0MzYwNzYtODU3Yi00ODg5LTgy ZTktMjIxNTFjNTlhNGIxLzE3NDM2MDc2LTg1N2ItNDg4OS04MmU5LTIyMTUxYzU5 YTRiMS5jcmwwHwYDVR0jBBgwFoAURwr6VrkJyafubX7+uiMMy4AYHR0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8xNzQzNjA3Ni04NTdiLTQ4ODktODJlOS0yMjE1 MWM1OWE0YjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqifkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA50/3gOMtz1hcz0++BBTpe3+tWqFH+hogqhgBN+Z2BUkC9C3657hvGX qTizJ1m4XV1zXxkBiOe34eON8pUP/1/KMw5Fw2dI6l7xcTd+MflJKhzwlsPCpF0k 0cJ+wCs+wh3C3GTxd6nvMYvAybA+NByCvjihTUihiMvns6aJsNcfKVqCiidr2oOt kQwhHGyO2ofCEjl3S0lEgRzWFth2f7cg7bj77kvr8nygNhr0FbsZmNUAxSXtNnap uk3zDHyn5uMbK0ww+IOoRDXDmfkFV2GwNsU1QJw7ir+VipcG73DtmdjhDCnJd2eh SxaVtvi/8AGFRvi8Mk+4Tnr/NY6Ovns= -----END CERTIFICATE-----Generated at Mon Apr 28 08:38:25 2025 by rpki-client