$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51/19c274b3-4227-3816-8fd1-74b230ab94b7.roa File: 19c274b3-4227-3816-8fd1-74b230ab94b7.roa (raw, json) Hash identifier: nMNM5AcS9LbN54e9XBM5pwsVS0XYgo6EirbH15clGc8= Subject key identifier: 99:9E:28:DB:80:7C:30:AC:5B:10:F1:C2:54:31:7C:E2:10:01:23:B9 Certificate issuer: /CN=a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51 Certificate serial: 010D0C9F43285848D6411E2A20DAF8E8EC4B7680 Authority key identifier: B7:57:15:BF:89:DA:5C:E0:31:74:EC:EF:F6:CB:59:B2:F8:B8:3A:40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51/19c274b3-4227-3816-8fd1-74b230ab94b7.roa Signing time: Mon 10 Feb 2025 14:00:52 +0000 ROA not before: Mon 10 Feb 2025 14:00:52 +0000 ROA not after: Sun 11 May 2025 13:00:52 +0000 asID: 399870 IP address blocks: 170.205.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d6:41:1e:2a:20:da:f8:e8:ec:4b:76:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51 Validity Not Before: Feb 10 14:00:52 2025 GMT Not After : May 11 13:00:52 2025 GMT Subject: CN=458732ef-f89d-47f3-81a2-67e8596cc965 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:64:a0:7e:82:ed:aa:ed:3b:db:2e:7e:9c:5e: 51:0e:4b:26:4c:f7:d0:77:95:4c:31:0f:d9:80:b1: 35:59:fc:a7:52:32:d9:b7:87:0b:bd:c8:60:c5:e0: bc:f0:52:58:0f:ec:01:ca:d2:3a:e0:e9:80:75:ac: bc:74:9e:b9:87:45:a6:ee:4e:43:92:87:82:c9:99: ad:25:62:59:61:c1:d6:1b:59:70:2d:f0:0c:31:8e: 9f:2a:3c:c6:5e:92:93:63:cb:52:97:cc:4e:8e:be: 1c:0e:05:0e:3c:d2:6d:ba:25:aa:ee:56:dc:9b:7d: fa:62:0f:1e:25:be:b3:ef:73:bd:f9:2a:4f:9b:04: 2d:25:fb:aa:b6:f9:5e:52:43:8a:72:ea:ce:0d:63: f8:23:ae:9b:af:ab:68:71:2d:97:e0:12:12:8a:b1: 77:e8:ec:82:52:01:a0:e3:c2:d8:38:7c:71:38:23: 7b:cb:ac:e2:8c:6f:66:a7:03:c4:ab:d9:00:ec:a0: 69:b2:e0:a7:c0:63:08:7d:de:b0:30:7e:78:72:c7: 95:fe:f2:b1:47:dc:b3:69:bd:19:e9:7b:22:38:00: 39:9e:ff:6f:cd:db:70:5f:1f:7a:f0:88:5a:ba:3d: 75:c0:96:1b:e8:3a:42:31:3b:78:1a:7c:ab:3b:69: e3:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:9E:28:DB:80:7C:30:AC:5B:10:F1:C2:54:31:7C:E2:10:01:23:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51/19c274b3-4227-3816-8fd1-74b230ab94b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51.crl X509v3 Authority Key Identifier: keyid:B7:57:15:BF:89:DA:5C:E0:31:74:EC:EF:F6:CB:59:B2:F8:B8:3A:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51.cer sbgp-ipAddrBlock: critical IPv4: 170.205.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:d0:44:9d:31:9d:0b:ab:d9:22:cd:57:71:e7:0c:6f:91:b3: b8:f8:82:2d:49:c1:88:10:42:16:b6:af:bc:87:ba:e5:1f:ab: c0:b3:88:79:87:c1:dc:bf:9f:fa:b3:dd:e1:01:d7:d4:32:95: 60:0f:1e:fd:ae:61:c5:46:18:20:fb:06:af:a9:82:37:01:8b: 61:25:38:84:95:02:ac:4f:34:84:56:f1:c3:1f:0e:fb:ac:80: 21:21:43:b9:36:8d:17:86:7f:27:47:b5:b6:a9:bf:b6:4c:d3: 14:e0:98:a5:ba:c6:27:89:d1:1d:8e:ad:38:0e:16:e2:89:4d: 1e:7e:1d:d2:9e:e9:f4:85:81:56:b9:0b:30:d9:66:f6:1e:3a: e2:3a:fb:bb:ca:74:07:74:9e:d1:40:a9:16:95:51:e8:b6:ac: 11:d1:4a:d1:d5:ff:3b:10:c5:bd:e9:5f:0a:a7:fa:c1:bf:fa: b6:a3:1e:ae:ea:05:a6:5b:32:6c:67:48:61:e1:2e:18:29:ad: 01:a5:f3:45:1b:19:af:cc:53:fd:1b:85:20:45:a5:18:d0:d1: 49:c6:dd:57:77:8b:c3:51:13:39:51:62:9d:4b:46:4a:3b:88: cb:97:55:3d:5a:e3:26:ea:a7:6e:8d:8e:eb:e8:55:ab:70:a4: 14:81:12:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjWQR4qINr46OxLdoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTIyZmRiMjctZTRmZS00ZDgxLTliZjQtZTEzYjFkYWY3 ZjUxMB4XDTI1MDIxMDE0MDA1MloXDTI1MDUxMTEzMDA1MlowLzEtMCsGA1UEAxMk NDU4NzMyZWYtZjg5ZC00N2YzLTgxYTItNjdlODU5NmNjOTY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGSgfoLtqu072y5+nF5RDksmTPfQd5VMMQ/Z gLE1WfynUjLZt4cLvchgxeC88FJYD+wBytI64OmAday8dJ65h0Wm7k5DkoeCyZmt JWJZYcHWG1lwLfAMMY6fKjzGXpKTY8tSl8xOjr4cDgUOPNJtuiWq7lbcm336Yg8e Jb6z73O9+SpPmwQtJfuqtvleUkOKcurODWP4I66br6tocS2X4BISirF36OyCUgGg 48LYOHxxOCN7y6zijG9mpwPEq9kA7KBpsuCnwGMIfd6wMH54cseV/vKxR9yzab0Z 6XsiOAA5nv9vzdtwXx968Ihauj11wJYb6DpCMTt4GnyrO2njZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJmeKNuAfDCsWxDxwlQxfOIQASO5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMjJm ZGIyNy1lNGZlLTRkODEtOWJmNC1lMTNiMWRhZjdmNTEvMTljMjc0YjMtNDIyNy0z ODE2LThmZDEtNzRiMjMwYWI5NGI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTIyZmRiMjctZTRmZS00ZDgxLTli ZjQtZTEzYjFkYWY3ZjUxL2EyMmZkYjI3LWU0ZmUtNGQ4MS05YmY0LWUxM2IxZGFm N2Y1MS5jcmwwHwYDVR0jBBgwFoAUt1cVv4naXOAxdOzv9stZsvi4OkAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMjJmZGIyNy1lNGZlLTRkODEtOWJmNC1lMTNi MWRhZjdmNTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqs0rMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHXQRJ0xnQur2SLNV3HnDG+Rs7j4gi1JwYgQQha2r7yHuuUfq8CziHmH wdy/n/qz3eEB19QylWAPHv2uYcVGGCD7Bq+pgjcBi2ElOISVAqxPNIRW8cMfDvus gCEhQ7k2jReGfydHtbapv7ZM0xTgmKW6xieJ0R2OrTgOFuKJTR5+HdKe6fSFgVa5 CzDZZvYeOuI6+7vKdAd0ntFAqRaVUei2rBHRStHV/zsQxb3pXwqn+sG/+rajHq7q BaZbMmxnSGHhLhgprQGl80UbGa/MU/0bhSBFpRjQ0UnG3Vd3i8NREzlRYp1LRko7 iMuXVT1a4ybqp26NjuvoVatwpBSBEn8= -----END CERTIFICATE-----Generated at Mon Apr 28 06:10:45 2025 by rpki-client