$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/85befa1b-cd80-3af9-861d-226b5949597f.roa File: 85befa1b-cd80-3af9-861d-226b5949597f.roa (raw, json) Hash identifier: 4FgcpAVuPQt4B3BApDCgOI7xP37phAEMFVF+Xl9vJEE= Subject key identifier: 10:66:5E:37:AA:05:F8:B7:B7:E9:40:D5:7B:3B:9F:4D:61:43:FE:E3 Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F43285849A089D741F1E9EB5B2F9B8E00 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/85befa1b-cd80-3af9-861d-226b5949597f.roa Signing time: Thu 24 Apr 2025 01:00:47 +0000 ROA not before: Thu 24 Apr 2025 01:00:47 +0000 ROA not after: Wed 23 Jul 2025 01:00:47 +0000 asID: 213122 IP address blocks: 170.39.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a0:89:d7:41:f1:e9:eb:5b:2f:9b:8e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: Apr 24 01:00:47 2025 GMT Not After : Jul 23 01:00:47 2025 GMT Subject: CN=d2dab3d8-271e-4ebc-9cc2-5b12792b019f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:a0:a1:69:11:be:b7:82:cb:ab:18:63:db:14: 21:6c:93:44:ce:60:9b:5a:9c:e4:f8:9a:94:1c:8c: c9:77:46:f7:ca:92:f7:64:d3:08:fc:84:cd:bb:a3: 00:85:75:37:61:2e:e0:e3:39:b5:15:87:b3:dd:a5: 67:ba:a7:e9:3f:7a:50:79:c2:e3:1e:4c:5d:4c:2f: 38:e7:6c:bc:8d:65:30:b0:07:23:b0:9d:65:46:34: 25:3d:2b:33:c2:4c:3c:2c:9e:28:11:8d:2c:da:f0: 12:3c:c4:0d:71:24:77:ff:69:21:7c:43:30:77:9d: 88:5f:d9:10:75:fc:22:bd:8f:d5:a0:65:f2:97:6a: 4d:39:5e:b1:00:fe:e6:7c:e7:96:20:01:f4:ce:76: f9:bf:79:58:b3:79:3c:df:a3:8f:f4:20:d0:e7:28: 45:0d:0e:7e:b0:62:92:f2:e3:f7:2a:ca:37:94:8c: 08:f2:6e:34:b9:9c:34:3c:25:c2:87:d7:23:17:42: b5:8b:ad:97:36:ec:8c:6c:b8:a0:3f:b9:1d:ae:e1: 7d:51:26:62:e9:be:a6:11:2b:c7:bb:89:9b:74:90: 3e:86:8a:5a:f6:62:85:3b:c2:b8:68:38:8c:7e:81: 1d:7e:1b:8f:0b:5b:54:65:4e:44:6c:fc:05:fc:25: 0b:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:66:5E:37:AA:05:F8:B7:B7:E9:40:D5:7B:3B:9F:4D:61:43:FE:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/85befa1b-cd80-3af9-861d-226b5949597f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 170.39.187.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:8d:2f:f7:08:d2:b1:0e:04:d3:09:e5:7a:8e:ea:c2:d4:87: f9:e5:40:8f:a1:d5:0f:5d:f8:ba:6f:45:b2:98:f4:4f:89:fc: b1:cd:da:9f:37:6c:40:29:35:37:a5:38:85:4b:41:f5:79:8c: 70:27:ab:12:be:96:07:47:aa:64:be:7a:91:9a:db:5b:63:eb: d1:2b:c6:ef:48:5d:47:f7:44:de:50:e8:61:f2:01:4e:1b:d1: e0:37:85:0c:3d:67:61:fa:42:03:2e:b5:0f:8f:85:b3:a9:03: d0:a0:09:00:a1:82:9b:87:16:6f:ad:32:61:19:6e:47:03:54: f7:ea:54:ee:17:df:02:e8:5f:f1:5c:d7:fb:2c:82:fe:48:4b: 14:92:3d:e4:6c:f9:9f:d6:19:33:72:ff:02:a3:c3:14:df:5d: 13:53:15:38:b2:28:44:74:4c:63:b5:b8:41:bf:3f:53:15:98: f1:47:11:8f:a2:0d:ab:9e:4a:bf:4f:6c:0c:3e:18:71:ca:6c: 50:52:09:96:8f:66:47:0a:44:5d:ee:c0:94:74:e6:03:61:ae: 6a:06:20:52:ec:38:91:29:4d:21:f5:db:8d:6c:3b:d5:b4:f3: 1b:3a:43:43:19:76:cf:92:db:b9:c2:31:5a:a3:cb:2a:3c:71: e4:16:58:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmgiddB8enrWy+bjgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI1MDQyNDAxMDA0N1oXDTI1MDcyMzAxMDA0N1owLzEtMCsGA1UEAxMk ZDJkYWIzZDgtMjcxZS00ZWJjLTljYzItNWIxMjc5MmIwMTlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqChaRG+t4LLqxhj2xQhbJNEzmCbWpzk+JqU HIzJd0b3ypL3ZNMI/ITNu6MAhXU3YS7g4zm1FYez3aVnuqfpP3pQecLjHkxdTC84 52y8jWUwsAcjsJ1lRjQlPSszwkw8LJ4oEY0s2vASPMQNcSR3/2khfEMwd52IX9kQ dfwivY/VoGXyl2pNOV6xAP7mfOeWIAH0znb5v3lYs3k836OP9CDQ5yhFDQ5+sGKS 8uP3Kso3lIwI8m40uZw0PCXCh9cjF0K1i62XNuyMbLigP7kdruF9USZi6b6mESvH u4mbdJA+hopa9mKFO8K4aDiMfoEdfhuPC1tUZU5EbPwF/CULcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBBmXjeqBfi3t+lA1Xs7n01hQ/7jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvODViZWZhMWItY2Q4MC0z YWY5LTg2MWQtMjI2YjU5NDk1OTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqie7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGyNL/cI0rEOBNMJ5XqO6sLUh/nlQI+h1Q9d+LpvRbKY9E+J/LHN2p83 bEApNTelOIVLQfV5jHAnqxK+lgdHqmS+epGa21tj69Erxu9IXUf3RN5Q6GHyAU4b 0eA3hQw9Z2H6QgMutQ+PhbOpA9CgCQChgpuHFm+tMmEZbkcDVPfqVO4X3wLoX/Fc 1/ssgv5ISxSSPeRs+Z/WGTNy/wKjwxTfXRNTFTiyKER0TGO1uEG/P1MVmPFHEY+i DaueSr9PbAw+GHHKbFBSCZaPZkcKRF3uwJR05gNhrmoGIFLsOJEpTSH1241sO9W0 8xs6Q0MZds+S27nCMVqjyyo8ceQWWBw= -----END CERTIFICATE-----Generated at Sat Apr 26 16:41:23 2025 by rpki-client