$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/5c3108b3-4900-35c3-86a1-e25092452588.roa File: 5c3108b3-4900-35c3-86a1-e25092452588.roa (raw, json) Hash identifier: TSp5+KZjAsUvzKXMF/9Aei8cN/ohPnloiwdvIhUelqs= Subject key identifier: BD:06:99:26:C0:B4:2E:8E:54:F8:1D:7E:2D:CD:F9:93:EC:D7:AF:19 Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F43285849A089D56D026BBAF6DD375C80 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/5c3108b3-4900-35c3-86a1-e25092452588.roa Signing time: Thu 24 Apr 2025 01:00:47 +0000 ROA not before: Thu 24 Apr 2025 01:00:47 +0000 ROA not after: Wed 23 Jul 2025 01:00:47 +0000 asID: 931 IP address blocks: 170.39.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a0:89:d5:6d:02:6b:ba:f6:dd:37:5c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: Apr 24 01:00:47 2025 GMT Not After : Jul 23 01:00:47 2025 GMT Subject: CN=dcd2de31-2dcc-42a6-97f2-8304eda92488 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:80:21:a9:de:77:b7:83:5f:63:b9:e4:fa:ea: 84:76:e9:87:c6:6d:13:95:cd:e6:5b:51:9f:8e:90: 8f:0b:5a:5c:07:39:c6:68:5a:67:70:3f:48:61:83: 1a:bc:d1:10:0d:88:79:14:04:c0:49:99:9d:c0:4b: f1:cd:3c:4f:e9:e5:b8:db:82:9a:50:9e:0d:78:89: ff:07:ec:88:06:d0:8b:68:da:99:ff:da:5c:ed:c8: 72:18:ab:61:80:f1:a2:44:d1:23:58:75:63:40:54: f4:47:fe:22:37:56:a6:6d:97:65:14:e8:33:da:2d: 5b:71:7c:05:cb:2c:c7:04:fd:bf:35:e6:29:7f:28: 8f:68:87:b9:ee:fc:a0:64:2f:cc:85:6d:db:7c:5b: 10:75:81:4b:d7:d3:87:fa:3a:4d:06:cc:c5:d1:6a: 83:b9:17:02:eb:b3:4d:b5:b9:71:b3:f7:ca:fb:08: 66:b1:ef:39:a5:e0:61:71:6e:7a:c3:56:7f:8c:0e: 86:de:25:88:8f:13:04:fd:cc:46:a4:60:1c:f4:ea: ba:cb:39:d4:b9:b8:32:2a:a1:f2:db:1c:fe:88:4a: 16:a0:bf:5e:4c:ff:ff:38:75:88:6b:5b:db:37:6a: bd:84:c5:8b:07:19:64:f6:bd:39:67:ba:b9:fb:7f: b6:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:06:99:26:C0:B4:2E:8E:54:F8:1D:7E:2D:CD:F9:93:EC:D7:AF:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/5c3108b3-4900-35c3-86a1-e25092452588.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 170.39.187.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:d5:1a:f3:37:78:1e:d9:ea:57:5b:a9:ee:97:4f:46:ce:89: 79:99:cc:67:8e:47:57:04:93:98:29:f0:db:5a:92:4c:fe:9e: 2f:b0:57:39:67:4a:b5:c4:5e:d6:f5:95:49:73:fa:8c:16:a3: 15:9d:cd:b5:90:4c:2e:39:e7:0f:65:e7:ff:d1:33:35:05:63: 98:77:22:81:27:d1:13:cb:86:b0:1e:7a:18:b3:bb:94:17:48: 5e:5c:96:f1:0e:d0:42:9b:51:37:23:b8:2c:1f:49:8d:da:32: e9:bc:fc:a1:c3:d6:98:d6:ec:99:b3:ce:03:b1:d6:6f:db:ed: 46:06:c5:3c:95:39:2b:cc:9e:f2:84:18:7a:35:1a:0e:8b:32: 8b:3f:fb:32:8f:03:ed:a6:f7:6f:af:1c:44:75:51:b6:b0:a1: e6:f5:a6:ee:ab:0d:b4:bc:24:1e:a2:82:52:a3:33:33:52:d9: f3:9a:18:28:d5:59:59:62:1c:61:6d:38:cd:31:d3:b8:4d:98: 94:c2:da:cf:3f:2a:4b:3d:cf:45:dc:03:f8:2b:bb:56:50:8a: 39:c0:33:7c:7c:ae:d3:4d:1b:42:ef:cd:73:b7:22:6e:ca:3b: b4:fa:10:6c:a8:c8:cd:25:dc:9f:be:04:0c:e7:cc:81:cf:2f: f4:77:24:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmgidVtAmu69t03XIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI1MDQyNDAxMDA0N1oXDTI1MDcyMzAxMDA0N1owLzEtMCsGA1UEAxMk ZGNkMmRlMzEtMmRjYy00MmE2LTk3ZjItODMwNGVkYTkyNDg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4Ahqd53t4NfY7nk+uqEdumHxm0Tlc3mW1Gf jpCPC1pcBznGaFpncD9IYYMavNEQDYh5FATASZmdwEvxzTxP6eW424KaUJ4NeIn/ B+yIBtCLaNqZ/9pc7chyGKthgPGiRNEjWHVjQFT0R/4iN1ambZdlFOgz2i1bcXwF yyzHBP2/NeYpfyiPaIe57vygZC/MhW3bfFsQdYFL19OH+jpNBszF0WqDuRcC67NN tblxs/fK+whmse85peBhcW56w1Z/jA6G3iWIjxME/cxGpGAc9Oq6yznUubgyKqHy 2xz+iEoWoL9eTP//OHWIa1vbN2q9hMWLBxlk9r05Z7q5+3+2rQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL0GmSbAtC6OVPgdfi3N+ZPs168ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvNWMzMTA4YjMtNDkwMC0z NWMzLTg2YTEtZTI1MDkyNDUyNTg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqie7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHrVGvM3eB7Z6ldbqe6XT0bOiXmZzGeOR1cEk5gp8Ntakkz+ni+wVzln SrXEXtb1lUlz+owWoxWdzbWQTC455w9l5//RMzUFY5h3IoEn0RPLhrAeehizu5QX SF5clvEO0EKbUTcjuCwfSY3aMum8/KHD1pjW7JmzzgOx1m/b7UYGxTyVOSvMnvKE GHo1Gg6LMos/+zKPA+2m92+vHER1Ubawoeb1pu6rDbS8JB6iglKjMzNS2fOaGCjV WVliHGFtOM0x07hNmJTC2s8/Kks9z0XcA/gru1ZQijnAM3x8rtNNG0LvzXO3Im7K O7T6EGyoyM0l3J++BAznzIHPL/R3JCA= -----END CERTIFICATE-----Generated at Sat Apr 26 16:51:44 2025 by rpki-client