$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/a36891e5-8973-313b-a68a-6ede44be3f67.roa File: a36891e5-8973-313b-a68a-6ede44be3f67.roa (raw, json) Hash identifier: 5m0PFVihd8UHWYNZ/GmqdIJ6imFPS0WwhnEK6FDFfFc= Subject key identifier: 85:59:E3:93:FE:59:9E:EA:F2:81:26:07:26:61:1C:00:59:79:4B:C8 Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F43285849A089D55755FB43EA36B4B400 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/a36891e5-8973-313b-a68a-6ede44be3f67.roa Signing time: Thu 24 Apr 2025 01:00:47 +0000 ROA not before: Thu 24 Apr 2025 01:00:47 +0000 ROA not after: Wed 23 Jul 2025 01:00:47 +0000 asID: 931 IP address blocks: 170.39.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a0:89:d5:57:55:fb:43:ea:36:b4:b4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: Apr 24 01:00:47 2025 GMT Not After : Jul 23 01:00:47 2025 GMT Subject: CN=0c90c1cd-4770-498b-97db-74a66a77c8a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:07:a3:0d:6b:b4:36:04:da:8e:6b:3d:00:20: c2:ef:a6:f3:33:02:b1:b8:29:00:fb:89:7f:3d:96: 34:3d:85:25:11:78:5c:3c:78:33:70:46:3a:5a:76: 56:91:a7:3b:89:87:6c:2c:c4:99:e9:d1:4e:b6:bb: 10:54:1d:f8:39:78:2f:8b:57:36:7f:d9:3c:d3:54: d4:58:3b:f4:00:e3:69:a2:f7:0f:99:5c:5d:c6:d9: e6:d7:24:a9:74:cb:b3:fa:a7:9f:24:07:e4:b2:05: b1:4c:ea:f7:c6:93:fd:4c:31:ab:d6:72:5d:28:0e: 2d:6e:20:de:23:59:63:1f:d7:c3:60:13:b2:26:56: ea:51:dc:ac:6f:57:09:ca:19:65:39:6a:d8:6c:6a: ae:d6:2d:1a:00:e2:ee:7d:ee:c7:17:84:03:28:21: 5d:ae:5d:38:f5:13:8f:43:b3:b7:a1:fb:60:6f:c2: 87:12:ea:1f:fa:04:44:bf:1b:89:6f:19:01:e9:c7: 3f:b9:79:08:2d:0f:bf:df:8f:6b:4e:75:be:cb:83: de:6a:16:72:4a:98:e4:21:aa:b1:46:65:7d:e0:f3: 1f:44:0f:4b:d7:08:74:3c:e7:26:93:38:fa:f6:ca: 26:56:29:20:67:94:02:ea:c7:34:e4:51:42:96:e4: bb:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:59:E3:93:FE:59:9E:EA:F2:81:26:07:26:61:1C:00:59:79:4B:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/a36891e5-8973-313b-a68a-6ede44be3f67.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 170.39.186.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:c2:1d:1e:f3:68:78:56:1d:c8:2c:c8:26:29:19:d8:89:04: c8:76:33:8f:e3:1a:ad:50:d8:a3:95:92:a8:72:c4:45:0e:e7: 2e:7c:f0:f7:59:bf:96:41:55:89:33:9b:8d:b8:74:46:82:10: 58:a6:fe:b8:08:ae:03:da:12:a0:5a:32:8c:ee:6c:f8:9e:53: ea:30:65:ae:b8:01:02:86:3d:b9:30:47:bf:cc:3a:db:20:c5: 72:a6:79:3b:ab:45:aa:ee:c1:6f:4b:21:73:11:13:0b:fc:ad: f0:4c:01:4b:39:d7:bb:60:81:0e:f5:fc:06:84:b8:fd:f0:4a: 73:2a:d3:db:f6:dc:a2:d8:4f:d4:18:c8:06:aa:2a:a1:f5:9c: 4d:80:b4:18:fb:ef:42:05:ab:71:ad:3c:ae:9c:6d:9d:97:b8: 52:e0:ef:0e:01:5a:a4:97:a1:44:71:c0:c9:c7:ff:c9:21:63: 01:3e:c0:73:cc:05:83:b6:59:71:c9:a5:35:97:0e:52:41:4a: 20:fe:a4:95:d0:db:cf:ca:83:a0:18:20:6d:16:69:6a:cd:28: 58:98:ee:94:f6:2f:7c:64:23:11:42:e7:cc:f3:e9:66:82:9a: c9:3e:93:91:3b:4f:ef:19:ca:86:d8:4c:4b:88:a6:9a:a1:e2: 46:20:3f:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmgidVXVftD6ja0tAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI1MDQyNDAxMDA0N1oXDTI1MDcyMzAxMDA0N1owLzEtMCsGA1UEAxMk MGM5MGMxY2QtNDc3MC00OThiLTk3ZGItNzRhNjZhNzdjOGEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQejDWu0NgTajms9ACDC76bzMwKxuCkA+4l/ PZY0PYUlEXhcPHgzcEY6WnZWkac7iYdsLMSZ6dFOtrsQVB34OXgvi1c2f9k801TU WDv0AONpovcPmVxdxtnm1ySpdMuz+qefJAfksgWxTOr3xpP9TDGr1nJdKA4tbiDe I1ljH9fDYBOyJlbqUdysb1cJyhllOWrYbGqu1i0aAOLufe7HF4QDKCFdrl049ROP Q7O3oftgb8KHEuof+gREvxuJbxkB6cc/uXkILQ+/349rTnW+y4PeahZySpjkIaqx RmV94PMfRA9L1wh0POcmkzj69somVikgZ5QC6sc05FFCluS7hQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIVZ45P+WZ7q8oEmByZhHABZeUvIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvYTM2ODkxZTUtODk3My0z MTNiLWE2OGEtNmVkZTQ0YmUzZjY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqie6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADbCHR7zaHhWHcgsyCYpGdiJBMh2M4/jGq1Q2KOVkqhyxEUO5y588PdZ v5ZBVYkzm424dEaCEFim/rgIrgPaEqBaMozubPieU+owZa64AQKGPbkwR7/MOtsg xXKmeTurRaruwW9LIXMREwv8rfBMAUs517tggQ71/AaEuP3wSnMq09v23KLYT9QY yAaqKqH1nE2AtBj770IFq3GtPK6cbZ2XuFLg7w4BWqSXoURxwMnH/8khYwE+wHPM BYO2WXHJpTWXDlJBSiD+pJXQ28/Kg6AYIG0WaWrNKFiY7pT2L3xkIxFC58zz6WaC msk+k5E7T+8ZyobYTEuIppqh4kYgP2E= -----END CERTIFICATE-----Generated at Sat Apr 26 16:34:49 2025 by rpki-client