$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/80e96d3f-650e-3ca7-b9f9-15492a817e57.roa File: 80e96d3f-650e-3ca7-b9f9-15492a817e57.roa (raw, json) Hash identifier: Ojz6BWeUBRrYwa682k8gP8rL2uQqe/GEGWAeS5ys9Rw= Subject key identifier: 07:3F:84:14:A6:E1:F6:B7:FF:D4:36:B0:B5:C1:98:FB:F3:FB:A1:26 Certificate issuer: /CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Certificate serial: 010D0C9F43285849552951E5C860223AACDCE180 Authority key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/80e96d3f-650e-3ca7-b9f9-15492a817e57.roa Signing time: Fri 28 Mar 2025 01:00:41 +0000 ROA not before: Fri 28 Mar 2025 01:00:41 +0000 ROA not after: Thu 26 Jun 2025 01:00:41 +0000 asID: 4540 IP address blocks: 170.89.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:55:29:51:e5:c8:60:22:3a:ac:dc:e1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Validity Not Before: Mar 28 01:00:41 2025 GMT Not After : Jun 26 01:00:41 2025 GMT Subject: CN=4cebeca7-9ebc-420b-9c5a-3480e651dc43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a1:c0:0d:6d:ac:76:65:3a:56:e5:2b:da:35: a8:39:c6:1a:75:43:07:3a:1c:20:5d:8a:54:76:e4: c8:27:9f:3e:18:0b:74:44:37:57:29:f5:91:29:a5: 33:32:53:a5:47:22:34:80:7d:4b:ad:13:36:bc:68: 65:d0:cd:d1:ab:f6:b8:e4:37:36:57:3d:15:7d:df: 98:1a:04:6f:ec:2a:d7:27:ac:48:88:07:91:04:dc: db:3c:15:10:2c:85:f9:53:08:15:bb:b6:02:8d:08: ae:d7:43:47:54:f8:fd:12:fb:fa:d2:33:5c:5d:e5: a8:90:f2:04:47:2b:66:76:04:45:ec:6e:2f:87:d6: f0:db:f7:a2:86:22:97:a6:bc:84:de:4a:15:bd:67: d3:b1:ec:da:ff:80:85:f0:c0:30:50:01:df:4b:8f: ab:cd:be:62:8b:93:bb:6c:ce:1c:18:51:9d:8c:e6: 28:64:67:4b:e4:35:2b:a2:37:05:5f:f5:e5:7b:e2: 30:ad:4a:a9:60:f2:89:81:82:d4:90:25:b4:12:0c: 5a:7b:97:56:e0:d9:1c:9a:5f:e7:33:54:de:97:bf: 9f:ea:cb:a0:98:7d:86:1d:71:6b:05:df:0e:19:21: ce:b3:ef:5b:8b:43:f4:11:f2:50:c3:27:ce:cf:9f: fc:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:3F:84:14:A6:E1:F6:B7:FF:D4:36:B0:B5:C1:98:FB:F3:FB:A1:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/80e96d3f-650e-3ca7-b9f9-15492a817e57.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl X509v3 Authority Key Identifier: keyid:D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer sbgp-ipAddrBlock: critical IPv4: 170.89.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:1d:00:60:ba:e0:1b:ef:56:a5:f4:a4:48:45:78:ac:56:78: 74:03:b9:f6:e3:58:24:c4:37:36:26:33:1e:aa:1c:70:f3:72: 2a:d4:de:5b:a2:89:f2:00:5e:30:6b:42:e3:39:68:2b:22:8e: 7d:f7:25:b1:0c:6a:0c:b5:d9:0d:3f:3f:83:bd:de:7d:b2:1e: 6e:4a:a1:18:c8:e9:f6:bf:fa:f1:f0:1f:c7:8b:21:e0:20:fb: 42:b4:5f:49:44:23:9a:e3:b7:84:41:bd:77:19:85:fc:a0:be: 69:92:57:f1:42:11:82:dc:eb:9d:18:73:18:4a:10:02:b3:ca: 80:e8:0a:a7:76:a7:70:df:14:10:04:58:7b:77:54:77:f5:f1: 70:eb:61:10:3e:17:f7:44:26:22:a8:93:0f:3a:81:71:39:e6: 24:30:26:87:f5:d6:db:b6:18:35:71:b4:dc:ac:a1:91:68:a9: 9b:70:9b:d8:ae:1a:93:f0:ac:3a:a5:69:ec:af:ce:79:37:f3: 35:46:e0:c2:41:32:4c:41:bd:39:c3:27:b8:05:b4:a5:af:dc: 83:80:9c:45:cd:90:b5:73:4a:41:48:7f:81:7c:74:e8:21:2f: c1:60:04:02:60:f6:59:f7:a0:06:1d:b1:5b:ef:6c:cb:f5:de: b3:28:4f:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElVKVHlyGAiOqzc4YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODUxMWI4ZGMtNzRiYS00N2U1LWFmNGEtN2M0ZTZiNzc3 ZDkyMB4XDTI1MDMyODAxMDA0MVoXDTI1MDYyNjAxMDA0MVowLzEtMCsGA1UEAxMk NGNlYmVjYTctOWViYy00MjBiLTljNWEtMzQ4MGU2NTFkYzQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqHADW2sdmU6VuUr2jWoOcYadUMHOhwgXYpU duTIJ58+GAt0RDdXKfWRKaUzMlOlRyI0gH1LrRM2vGhl0M3Rq/a45Dc2Vz0Vfd+Y GgRv7CrXJ6xIiAeRBNzbPBUQLIX5UwgVu7YCjQiu10NHVPj9Evv60jNcXeWokPIE RytmdgRF7G4vh9bw2/eihiKXpryE3koVvWfTseza/4CF8MAwUAHfS4+rzb5ii5O7 bM4cGFGdjOYoZGdL5DUrojcFX/Xle+IwrUqpYPKJgYLUkCW0Egxae5dW4Nkcml/n M1Tel7+f6sugmH2GHXFrBd8OGSHOs+9bi0P0EfJQwyfOz5/8vQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAc/hBSm4fa3/9Q2sLXBmPvz+6EmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84NTEx YjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRlNmI3NzdkOTIvODBlOTZkM2YtNjUwZS0z Y2E3LWI5ZjktMTU0OTJhODE3ZTU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODUxMWI4ZGMtNzRiYS00N2U1LWFm NGEtN2M0ZTZiNzc3ZDkyLzg1MTFiOGRjLTc0YmEtNDdlNS1hZjRhLTdjNGU2Yjc3 N2Q5Mi5jcmwwHwYDVR0jBBgwFoAU1/PfqfdA8CtR2EIn8tzC4d9gdQ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS84NTExYjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRl NmI3NzdkOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqlngMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHMdAGC64BvvVqX0pEhFeKxWeHQDufbjWCTENzYmMx6qHHDzcirU3lui ifIAXjBrQuM5aCsijn33JbEMagy12Q0/P4O93n2yHm5KoRjI6fa/+vHwH8eLIeAg +0K0X0lEI5rjt4RBvXcZhfygvmmSV/FCEYLc650YcxhKEAKzyoDoCqd2p3DfFBAE WHt3VHf18XDrYRA+F/dEJiKokw86gXE55iQwJof11tu2GDVxtNysoZFoqZtwm9iu GpPwrDqlaeyvznk38zVG4MJBMkxBvTnDJ7gFtKWv3IOAnEXNkLVzSkFIf4F8dOgh L8FgBAJg9ln3oAYdsVvvbMv13rMoT+4= -----END CERTIFICATE-----Generated at Wed Apr 30 03:41:46 2025 by rpki-client