$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/f1e0eb8c-a3a0-3b44-9159-f00bd2b4de1e.roa File: f1e0eb8c-a3a0-3b44-9159-f00bd2b4de1e.roa (raw, json) Hash identifier: yp3JmrmK9FhJ8okcAq4q1rxzH2UZidlk+b4NLPNZmUo= Subject key identifier: 84:6C:90:9C:B1:68:42:75:26:DA:0D:D4:34:62:C9:CD:CD:2B:96:26 Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F43285849A089D731B20D60618C3AA080 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/f1e0eb8c-a3a0-3b44-9159-f00bd2b4de1e.roa Signing time: Thu 24 Apr 2025 01:00:47 +0000 ROA not before: Thu 24 Apr 2025 01:00:47 +0000 ROA not after: Wed 23 Jul 2025 01:00:47 +0000 asID: 213122 IP address blocks: 170.39.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a0:89:d7:31:b2:0d:60:61:8c:3a:a0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: Apr 24 01:00:47 2025 GMT Not After : Jul 23 01:00:47 2025 GMT Subject: CN=7c0645dc-3944-4a92-9b33-ed751477e648 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:f0:6f:36:b1:92:c2:06:f0:68:64:82:5d:e8: 64:2c:79:ca:36:1e:7f:61:e1:d8:eb:b3:7b:ea:0e: 18:6a:fc:f9:13:78:e5:83:3d:8b:de:2b:31:5c:e7: f3:da:78:5f:98:d1:f4:12:2c:b9:b5:03:a8:72:8f: e3:74:0f:00:50:71:d4:fe:d7:09:fd:c8:d3:ff:cc: 91:dc:14:d3:ba:3a:6c:af:10:94:cb:f3:44:88:21: 1e:0b:03:03:35:c1:39:16:46:ea:36:9d:58:75:f3: e3:17:46:d0:3b:49:0a:28:fb:89:86:11:11:b9:f8: 2d:3a:7e:51:49:74:c9:1a:80:c6:5c:eb:50:62:ba: 60:90:91:23:f1:3a:54:7e:aa:a5:3d:73:7c:57:5a: e3:62:18:c7:ff:7c:f1:fc:10:d8:76:e6:4c:30:6e: 9f:18:5c:d8:44:50:d1:be:ca:4d:3e:c9:4c:ec:63: 38:eb:99:27:5c:a5:91:58:d5:f7:fa:79:68:38:d6: 30:c9:63:9a:dd:dd:8f:ac:78:a5:55:55:35:8e:02: 16:64:83:22:6a:37:6c:91:8e:68:ea:ab:76:ed:a2: 75:5a:91:f0:c6:0f:a4:16:f0:55:48:49:b7:24:b7: 5e:d2:da:6d:b0:e8:b8:ae:28:f4:be:78:b9:b5:bb: 13:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:6C:90:9C:B1:68:42:75:26:DA:0D:D4:34:62:C9:CD:CD:2B:96:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/f1e0eb8c-a3a0-3b44-9159-f00bd2b4de1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 170.39.186.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:71:20:35:ba:c4:98:98:7f:59:8b:1b:5f:da:e9:4a:ea:ea: fd:9e:f3:08:f0:1f:e9:ea:08:07:55:47:c1:bd:88:d5:39:aa: d4:0c:01:62:10:c8:8a:37:22:e0:89:47:d1:0d:f5:16:1f:b9: 94:da:df:48:41:52:2e:77:48:d8:70:2d:42:45:1a:fa:9a:76: 19:a7:05:6b:5d:cf:30:ce:57:09:bb:98:51:80:9a:e5:d2:c9: a5:ed:31:56:4a:a9:d6:d2:c4:ea:57:ef:6f:5f:3d:d6:6b:53: b5:9b:cc:b2:83:c6:bc:ad:ca:24:6b:ee:58:a6:07:a2:da:e5: ef:93:d7:53:88:3c:11:6a:28:40:c5:34:77:98:2b:d5:38:30: 08:cd:15:3a:c2:6f:9f:79:60:e5:39:e6:c5:f9:83:44:c0:95: 43:7a:78:cc:f9:45:da:1a:b4:2a:dd:c8:7c:d2:d9:50:82:45: 83:86:4a:39:69:a6:4a:9f:dc:13:dc:ff:e8:77:ee:58:4e:4a: 04:84:ba:35:88:52:14:57:fd:49:21:23:ce:a9:06:16:29:9b: 24:de:d1:d6:5b:32:12:07:c8:5c:7a:92:7d:1d:d6:4d:2c:12: 02:2c:b6:43:d2:58:42:06:35:fa:67:1d:f3:0d:0d:fa:5d:8c: ca:22:5d:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmgidcxsg1gYYw6oIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI1MDQyNDAxMDA0N1oXDTI1MDcyMzAxMDA0N1owLzEtMCsGA1UEAxMk N2MwNjQ1ZGMtMzk0NC00YTkyLTliMzMtZWQ3NTE0NzdlNjQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/BvNrGSwgbwaGSCXehkLHnKNh5/YeHY67N7 6g4Yavz5E3jlgz2L3isxXOfz2nhfmNH0Eiy5tQOoco/jdA8AUHHU/tcJ/cjT/8yR 3BTTujpsrxCUy/NEiCEeCwMDNcE5FkbqNp1YdfPjF0bQO0kKKPuJhhERufgtOn5R SXTJGoDGXOtQYrpgkJEj8TpUfqqlPXN8V1rjYhjH/3zx/BDYduZMMG6fGFzYRFDR vspNPslM7GM465knXKWRWNX3+nloONYwyWOa3d2PrHilVVU1jgIWZIMiajdskY5o 6qt27aJ1WpHwxg+kFvBVSEm3JLde0tptsOi4rij0vni5tbsTmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIRskJyxaEJ1JtoN1DRiyc3NK5YmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvZjFlMGViOGMtYTNhMC0z YjQ0LTkxNTktZjAwYmQyYjRkZTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqie6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFhxIDW6xJiYf1mLG1/a6Urq6v2e8wjwH+nqCAdVR8G9iNU5qtQMAWIQ yIo3IuCJR9EN9RYfuZTa30hBUi53SNhwLUJFGvqadhmnBWtdzzDOVwm7mFGAmuXS yaXtMVZKqdbSxOpX729fPdZrU7WbzLKDxrytyiRr7limB6La5e+T11OIPBFqKEDF NHeYK9U4MAjNFTrCb595YOU55sX5g0TAlUN6eMz5RdoatCrdyHzS2VCCRYOGSjlp pkqf3BPc/+h37lhOSgSEujWIUhRX/UkhI86pBhYpmyTe0dZbMhIHyFx6kn0d1k0s EgIstkPSWEIGNfpnHfMNDfpdjMoiXWo= -----END CERTIFICATE-----Generated at Sat Apr 26 21:57:16 2025 by rpki-client