$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/587fa17e-6074-36b9-a166-4b4cac46f9a8.roa File: 587fa17e-6074-36b9-a166-4b4cac46f9a8.roa (raw, json) Hash identifier: y7/J8IBZl48FJkBioHnydcXjWJaMOY2UWghVtfjHvy8= Subject key identifier: 39:5A:9C:B4:9F:B0:01:4F:2E:2A:AC:6F:99:BE:64:2C:15:E1:42:CB Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F43285849A089D721EED6AFD162864000 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/587fa17e-6074-36b9-a166-4b4cac46f9a8.roa Signing time: Thu 24 Apr 2025 01:00:47 +0000 ROA not before: Thu 24 Apr 2025 01:00:47 +0000 ROA not after: Wed 23 Jul 2025 01:00:47 +0000 asID: 213122 IP address blocks: 170.39.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a0:89:d7:21:ee:d6:af:d1:62:86:40:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: Apr 24 01:00:47 2025 GMT Not After : Jul 23 01:00:47 2025 GMT Subject: CN=9821cd80-73f0-44f4-aca8-b2403c0cfc12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:81:a0:d2:77:53:d5:79:7a:ab:9c:12:75:6f: 35:4e:d3:ec:44:50:3a:e3:c5:c4:34:69:07:08:13: 3b:95:1c:f6:4d:79:54:fb:46:9f:a1:82:f3:c5:04: 93:87:f2:19:1d:ce:6a:30:67:83:fd:68:82:af:e7: 46:25:3e:27:f7:24:85:bf:14:d4:f4:38:a2:b9:30: f9:e5:da:68:a3:8e:9a:71:5f:82:f6:d2:d1:96:1b: f3:4d:35:e2:d0:05:12:53:41:75:d3:00:61:6f:ea: 7d:f6:f6:fa:1b:2a:30:d3:57:1f:4f:8f:c9:47:43: 43:57:fb:3f:48:07:76:78:71:d1:5c:4a:fb:0b:b8: fa:98:4c:54:6e:e9:0d:61:7b:21:e9:15:d3:99:2c: af:ff:1f:b1:37:c4:8d:24:20:80:c2:08:9a:a3:c8: de:95:3b:c3:47:58:86:24:d5:26:5a:64:8d:b8:0b: 68:56:32:29:24:d7:10:25:e3:86:ad:60:9e:c6:0b: d8:70:0d:38:44:4e:fc:a6:d5:54:fe:5f:5b:ca:b3: c7:1f:9e:6f:37:ca:a5:9b:0e:4e:d4:8d:d6:92:26: 29:6b:fe:bf:d4:d0:63:cf:54:48:08:d9:a2:3a:e5: 9a:87:c8:aa:73:f6:89:69:f7:c7:9f:3f:7a:57:0a: f3:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:5A:9C:B4:9F:B0:01:4F:2E:2A:AC:6F:99:BE:64:2C:15:E1:42:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/587fa17e-6074-36b9-a166-4b4cac46f9a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 170.39.185.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:61:8b:ab:64:97:71:de:18:53:8f:44:02:9e:e7:30:04:2c: 45:64:ff:ce:6d:00:40:00:1d:cd:c3:3b:04:1d:ab:98:79:1e: 0d:94:68:26:cb:76:84:4f:5c:50:e6:bb:5c:a5:ea:60:e1:68: 32:73:61:ae:e8:8a:a9:f9:8d:3a:ff:c1:bc:73:1f:8e:6c:2e: 7f:66:7f:ee:f1:04:87:bf:95:67:53:72:b8:b8:14:2c:4a:12: 8c:88:6d:a4:96:ad:06:c7:f1:aa:0d:f8:42:b2:79:1f:41:e0: f0:1b:6f:4a:eb:70:bf:03:d4:3a:cf:9b:9b:aa:cb:a2:d5:47: 33:2c:9f:ef:a6:5b:65:b6:4f:a0:51:fa:fc:59:aa:4f:a3:b8: 5f:fe:c0:4b:ac:9c:e1:3e:1a:e8:3d:75:9f:68:96:78:8e:28: 46:ca:28:97:f0:87:ce:92:32:a2:0a:24:eb:fb:38:76:1c:b1: c5:58:6b:0f:fb:2c:43:dd:75:61:b4:3d:e1:c3:6a:a1:14:ab: 1a:9b:04:04:c1:46:32:9a:e6:3f:22:05:0d:cb:e8:bb:fc:58: fc:e9:03:3a:45:4e:d1:5f:3c:22:2b:31:97:ce:50:b7:d6:50: d9:43:13:a8:6a:87:38:01:3a:c0:9f:01:27:2f:1f:06:01:b3: 74:d5:75:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmgidch7tav0WKGQAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI1MDQyNDAxMDA0N1oXDTI1MDcyMzAxMDA0N1owLzEtMCsGA1UEAxMk OTgyMWNkODAtNzNmMC00NGY0LWFjYTgtYjI0MDNjMGNmYzEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1YGg0ndT1Xl6q5wSdW81TtPsRFA648XENGkH CBM7lRz2TXlU+0afoYLzxQSTh/IZHc5qMGeD/WiCr+dGJT4n9ySFvxTU9DiiuTD5 5dpoo46acV+C9tLRlhvzTTXi0AUSU0F10wBhb+p99vb6Gyow01cfT4/JR0NDV/s/ SAd2eHHRXEr7C7j6mExUbukNYXsh6RXTmSyv/x+xN8SNJCCAwgiao8jelTvDR1iG JNUmWmSNuAtoVjIpJNcQJeOGrWCexgvYcA04RE78ptVU/l9byrPHH55vN8qlmw5O 1I3WkiYpa/6/1NBjz1RICNmiOuWah8iqc/aJaffHnz96VwrzCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDlanLSfsAFPLiqsb5m+ZCwV4ULLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvNTg3ZmExN2UtNjA3NC0z NmI5LWExNjYtNGI0Y2FjNDZmOWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqie5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABZhi6tkl3HeGFOPRAKe5zAELEVk/85tAEAAHc3DOwQdq5h5Hg2UaCbL doRPXFDmu1yl6mDhaDJzYa7oiqn5jTr/wbxzH45sLn9mf+7xBIe/lWdTcri4FCxK EoyIbaSWrQbH8aoN+EKyeR9B4PAbb0rrcL8D1DrPm5uqy6LVRzMsn++mW2W2T6BR +vxZqk+juF/+wEusnOE+Gug9dZ9olniOKEbKKJfwh86SMqIKJOv7OHYcscVYaw/7 LEPddWG0PeHDaqEUqxqbBATBRjKa5j8iBQ3L6Lv8WPzpAzpFTtFfPCIrMZfOULfW UNlDE6hqhzgBOsCfAScvHwYBs3TVdSs= -----END CERTIFICATE-----Generated at Sat Apr 26 19:25:21 2025 by rpki-client