$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/97cac0b7-abb7-43b2-8435-2db8edb2a015/f04fa8ab-3894-36e6-9343-e11c41b48098.roa File: f04fa8ab-3894-36e6-9343-e11c41b48098.roa (raw, json) Hash identifier: QG3tSXw6hRUthTBSDU3dXYdTPwjfwTUmu3G6L0bgFfY= Subject key identifier: D6:9C:00:21:E9:EB:68:91:8B:20:E9:75:20:F9:AC:46:36:50:9B:23 Certificate issuer: /CN=97cac0b7-abb7-43b2-8435-2db8edb2a015 Certificate serial: 010D0C9F432858499829CED554BBE1DB16851780 Authority key identifier: 25:4C:BC:B4:4A:F5:B5:1A:06:D4:CD:E3:A3:9F:B5:07:EF:7B:62:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/97cac0b7-abb7-43b2-8435-2db8edb2a015.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/97cac0b7-abb7-43b2-8435-2db8edb2a015/f04fa8ab-3894-36e6-9343-e11c41b48098.roa Signing time: Mon 21 Apr 2025 01:00:47 +0000 ROA not before: Mon 21 Apr 2025 01:00:47 +0000 ROA not after: Sun 20 Jul 2025 01:00:47 +0000 asID: 62802 IP address blocks: 170.4.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/97cac0b7-abb7-43b2-8435-2db8edb2a015/97cac0b7-abb7-43b2-8435-2db8edb2a015.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/97cac0b7-abb7-43b2-8435-2db8edb2a015/97cac0b7-abb7-43b2-8435-2db8edb2a015.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/97cac0b7-abb7-43b2-8435-2db8edb2a015.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:98:29:ce:d5:54:bb:e1:db:16:85:17:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97cac0b7-abb7-43b2-8435-2db8edb2a015 Validity Not Before: Apr 21 01:00:47 2025 GMT Not After : Jul 20 01:00:47 2025 GMT Subject: CN=1681b6a9-0b75-4635-be61-e482f8d47ac3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:a5:b2:7b:91:46:6d:8a:51:6e:ce:b9:b8:20: 7d:13:7e:d6:ed:dd:95:d3:cc:6c:35:72:c9:f8:b2: a6:94:67:d3:1d:1e:fd:57:85:fe:50:a5:47:89:b2: 62:a7:30:66:67:42:68:36:58:e0:97:17:a9:d2:14: 89:3f:75:46:3d:83:a8:48:4f:84:64:2b:5a:96:95: 76:01:47:3c:f9:c1:99:8e:58:62:f7:86:31:ab:34: f7:82:6c:9f:5e:d4:d3:79:1b:5b:43:f1:a2:21:3b: a5:c6:79:13:64:2d:81:97:ab:a4:62:d1:f6:bb:fb: 59:92:ef:f2:ba:87:3f:d2:4e:33:e3:c1:07:21:e7: 27:25:c9:6a:17:48:8e:67:91:c2:61:e8:d1:e1:53: 96:c4:f2:f6:3c:3e:ac:0a:05:e4:74:2d:44:73:f5: 1c:52:9f:f1:38:85:80:7e:b0:43:e0:00:6a:3a:29: 0d:c0:d0:bc:b1:5e:ef:1f:fb:6c:3d:cc:20:c4:ea: e0:3f:6e:1d:d8:f9:25:9e:d4:a3:14:31:3a:97:13: fe:2e:3b:94:c8:0d:b3:b8:e8:62:89:52:6e:70:73: b6:d0:ef:ff:02:15:cf:ff:36:48:7c:79:95:42:dd: 7b:fe:d2:d7:7a:4d:ee:06:0d:25:69:51:26:68:10: 7c:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:9C:00:21:E9:EB:68:91:8B:20:E9:75:20:F9:AC:46:36:50:9B:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/97cac0b7-abb7-43b2-8435-2db8edb2a015/f04fa8ab-3894-36e6-9343-e11c41b48098.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/97cac0b7-abb7-43b2-8435-2db8edb2a015/97cac0b7-abb7-43b2-8435-2db8edb2a015.crl X509v3 Authority Key Identifier: keyid:25:4C:BC:B4:4A:F5:B5:1A:06:D4:CD:E3:A3:9F:B5:07:EF:7B:62:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/97cac0b7-abb7-43b2-8435-2db8edb2a015.cer sbgp-ipAddrBlock: critical IPv4: 170.4.192.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:6f:71:79:5a:0e:9a:72:20:eb:32:b3:40:62:bf:a6:20:10: 2f:16:d3:bd:a5:54:14:3b:f2:3b:b9:29:48:0a:77:4b:b6:08: 61:15:ae:6e:81:96:3d:95:c8:69:76:b1:55:32:ad:1a:e3:58: 6a:c9:09:d1:dd:56:2f:19:b6:71:f6:e4:d4:e1:ee:58:e3:8d: ff:2f:6d:01:b6:df:3e:e3:f5:2b:ec:f3:88:51:b1:8f:1f:66: 7d:46:5f:e8:ad:07:b5:e3:82:38:ae:e6:0d:39:19:4b:96:b4: 1f:bd:0f:d5:06:f8:8a:a4:fe:b9:29:1d:6f:18:7d:e6:ed:37: 5a:93:40:80:df:a6:71:39:6d:59:54:97:83:0d:ce:89:c5:ac: c4:55:e8:57:66:a4:b6:44:08:13:c6:85:3e:bc:d9:e5:6c:32: 3b:da:30:33:0c:fd:80:1e:37:de:b7:41:54:ea:39:1f:fd:94: cc:8e:c0:c4:c4:a9:5a:f3:f2:21:95:76:38:ae:92:7e:c3:a4: 25:71:da:3b:04:31:07:54:d9:3c:1d:88:ca:da:4b:4c:4c:03: d3:ec:eb:4a:c0:b3:65:36:6e:8d:b9:c0:6b:49:d5:42:fc:1e: 9c:b3:62:03:53:b5:ec:e8:78:e1:d9:16:db:fa:6e:6d:22:34: 66:32:16:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmYKc7VVLvh2xaFF4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTdjYWMwYjctYWJiNy00M2IyLTg0MzUtMmRiOGVkYjJh MDE1MB4XDTI1MDQyMTAxMDA0N1oXDTI1MDcyMDAxMDA0N1owLzEtMCsGA1UEAxMk MTY4MWI2YTktMGI3NS00NjM1LWJlNjEtZTQ4MmY4ZDQ3YWMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjKWye5FGbYpRbs65uCB9E37W7d2V08xsNXLJ +LKmlGfTHR79V4X+UKVHibJipzBmZ0JoNljglxep0hSJP3VGPYOoSE+EZCtalpV2 AUc8+cGZjlhi94YxqzT3gmyfXtTTeRtbQ/GiITulxnkTZC2Bl6ukYtH2u/tZku/y uoc/0k4z48EHIecnJclqF0iOZ5HCYejR4VOWxPL2PD6sCgXkdC1Ec/UcUp/xOIWA frBD4ABqOikNwNC8sV7vH/tsPcwgxOrgP24d2PklntSjFDE6lxP+LjuUyA2zuOhi iVJucHO20O//AhXP/zZIfHmVQt17/tLXek3uBg0laVEmaBB8EwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNacACHp62iRiyDpdSD5rEY2UJsjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85N2Nh YzBiNy1hYmI3LTQzYjItODQzNS0yZGI4ZWRiMmEwMTUvZjA0ZmE4YWItMzg5NC0z NmU2LTkzNDMtZTExYzQxYjQ4MDk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTdjYWMwYjctYWJiNy00M2IyLTg0 MzUtMmRiOGVkYjJhMDE1Lzk3Y2FjMGI3LWFiYjctNDNiMi04NDM1LTJkYjhlZGIy YTAxNS5jcmwwHwYDVR0jBBgwFoAUJUy8tEr1tRoG1M3jo5+1B+97YukwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi85N2NhYzBiNy1hYmI3LTQzYjItODQzNS0yZGI4 ZWRiMmEwMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqgTAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHlvcXlaDppyIOsys0Biv6YgEC8W072lVBQ78ju5KUgKd0u2CGEVrm6B lj2VyGl2sVUyrRrjWGrJCdHdVi8ZtnH25NTh7ljjjf8vbQG23z7j9Svs84hRsY8f Zn1GX+itB7Xjgjiu5g05GUuWtB+9D9UG+Iqk/rkpHW8YfebtN1qTQIDfpnE5bVlU l4MNzonFrMRV6FdmpLZECBPGhT682eVsMjvaMDMM/YAeN963QVTqOR/9lMyOwMTE qVrz8iGVdjiukn7DpCVx2jsEMQdU2TwdiMraS0xMA9Ps60rAs2U2bo25wGtJ1UL8 HpyzYgNTtezoeOHZFtv6bm0iNGYyFnc= -----END CERTIFICATE-----Generated at Sun Apr 27 15:40:51 2025 by rpki-client