$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/e3efcc8d-473c-3337-a7b3-91ccf2cbd2e6.roa File: e3efcc8d-473c-3337-a7b3-91ccf2cbd2e6.roa (raw, json) Hash identifier: Rk5lWyssEZ/bTZdMyeg/eQUJCoK/g4dymocVeLQi1xU= Subject key identifier: 7C:87:45:8B:54:83:64:D3:BD:52:0E:05:79:5B:AA:E9:00:C9:D6:B5 Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F43285849A089D5352F88D082299CEE80 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/e3efcc8d-473c-3337-a7b3-91ccf2cbd2e6.roa Signing time: Thu 24 Apr 2025 01:00:47 +0000 ROA not before: Thu 24 Apr 2025 01:00:47 +0000 ROA not after: Wed 23 Jul 2025 01:00:47 +0000 asID: 931 IP address blocks: 170.39.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a0:89:d5:35:2f:88:d0:82:29:9c:ee:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: Apr 24 01:00:47 2025 GMT Not After : Jul 23 01:00:47 2025 GMT Subject: CN=1bf48969-2fd9-445c-97e5-a6e7c1bfc43d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:e2:31:4c:54:4a:d6:9e:b5:2a:7a:13:e0:17: 01:c5:3e:a1:ae:e9:0a:eb:59:2c:f5:36:e6:30:ce: cf:9d:40:bf:23:42:df:3d:98:41:c4:14:6d:85:e3: cc:e0:74:46:33:44:1a:b5:b1:b2:80:39:e7:b9:83: b1:f9:db:51:ad:c1:a5:b7:d1:d5:38:c6:8a:c4:2a: ad:bd:b2:1f:9c:71:c2:1a:de:4e:62:dc:2f:c7:75: ee:eb:71:98:0c:0b:85:4f:a0:00:3d:3d:72:7f:23: 7c:96:81:6a:d8:0a:6e:c3:10:cc:32:96:8b:4a:54: d5:b8:04:b1:9d:00:05:73:95:85:db:b3:99:1b:77: 93:ee:1b:b9:60:6d:56:dd:eb:6c:c7:46:6b:08:d4: 5e:ce:fa:7a:0b:31:76:1a:fe:f1:a0:82:fe:ee:68: cd:88:b2:a6:6d:c2:b7:76:d6:96:d1:d7:6f:19:4b: e3:65:96:2c:f7:2e:8b:72:f3:62:9a:4b:15:50:e1: 49:22:67:ee:6a:7f:f3:c5:c9:34:c0:9b:fd:5c:02: c3:eb:19:25:89:ee:15:d4:f6:a3:ee:fc:8e:32:72: 93:51:61:5b:87:f4:35:5a:68:a6:3d:94:98:38:6b: b7:7c:65:e5:94:02:04:37:4d:6b:69:12:e0:96:2a: ce:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:87:45:8B:54:83:64:D3:BD:52:0E:05:79:5B:AA:E9:00:C9:D6:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/e3efcc8d-473c-3337-a7b3-91ccf2cbd2e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 170.39.185.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:08:03:d1:34:c4:c2:ed:a3:9d:9c:7e:9d:83:42:f2:59:76: d6:99:15:2e:50:06:0e:40:72:99:b8:75:de:01:b7:c2:8c:1e: 11:86:31:dc:55:d6:38:75:8f:37:1d:b6:b3:69:63:b0:29:70: 2c:7a:1f:3a:52:9b:4c:ea:9d:fa:fc:68:4f:15:83:83:25:fd: fa:37:26:90:4f:bb:98:2c:80:39:a1:8c:84:02:91:b0:65:c0: ad:d0:cd:bc:ee:0c:e6:af:83:14:62:79:cd:93:83:45:f9:54: 9d:1e:88:fa:7c:35:74:fe:5f:a4:6e:1f:2c:86:9a:a0:2d:50: 7c:40:47:f8:6c:09:8d:e8:93:ba:38:fb:11:1a:f6:f3:ac:63: 8e:97:96:f8:e5:65:3e:48:7e:52:54:d2:95:9e:e2:a7:e2:27: 09:8a:97:c9:02:95:15:72:f0:ce:89:72:e0:6e:69:5d:15:0e: 5e:bc:c9:1d:ca:9a:05:40:f3:14:68:e0:6f:79:83:0a:24:39: f1:8f:cf:bc:95:79:72:bb:c6:27:cf:29:a1:a3:1d:37:e3:ed: 30:af:9d:57:49:5c:80:75:09:d6:a5:5c:a1:01:69:fc:78:9f: ee:76:10:55:a9:a8:31:19:47:5d:9c:12:26:fc:ed:d3:bc:dd: b1:74:e4:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmgidU1L4jQgimc7oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI1MDQyNDAxMDA0N1oXDTI1MDcyMzAxMDA0N1owLzEtMCsGA1UEAxMk MWJmNDg5NjktMmZkOS00NDVjLTk3ZTUtYTZlN2MxYmZjNDNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAluIxTFRK1p61KnoT4BcBxT6hrukK61ks9Tbm MM7PnUC/I0LfPZhBxBRthePM4HRGM0QatbGygDnnuYOx+dtRrcGlt9HVOMaKxCqt vbIfnHHCGt5OYtwvx3Xu63GYDAuFT6AAPT1yfyN8loFq2ApuwxDMMpaLSlTVuASx nQAFc5WF27OZG3eT7hu5YG1W3etsx0ZrCNRezvp6CzF2Gv7xoIL+7mjNiLKmbcK3 dtaW0ddvGUvjZZYs9y6LcvNimksVUOFJImfuan/zxck0wJv9XALD6xklie4V1Paj 7vyOMnKTUWFbh/Q1WmimPZSYOGu3fGXllAIEN01raRLglirOrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHyHRYtUg2TTvVIOBXlbqukAyda1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvZTNlZmNjOGQtNDczYy0z MzM3LWE3YjMtOTFjY2YyY2JkMmU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqie5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACAIA9E0xMLto52cfp2DQvJZdtaZFS5QBg5Acpm4dd4Bt8KMHhGGMdxV 1jh1jzcdtrNpY7ApcCx6HzpSm0zqnfr8aE8Vg4Ml/fo3JpBPu5gsgDmhjIQCkbBl wK3QzbzuDOavgxRiec2Tg0X5VJ0eiPp8NXT+X6RuHyyGmqAtUHxAR/hsCY3ok7o4 +xEa9vOsY46XlvjlZT5IflJU0pWe4qfiJwmKl8kClRVy8M6JcuBuaV0VDl68yR3K mgVA8xRo4G95gwokOfGPz7yVeXK7xifPKaGjHTfj7TCvnVdJXIB1CdalXKEBafx4 n+52EFWpqDEZR12cEib87dO83bF05FU= -----END CERTIFICATE-----Generated at Sat Apr 26 19:27:01 2025 by rpki-client