$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/872d4d84-ef45-3f24-82b1-08082aba7e34.roa File: 872d4d84-ef45-3f24-82b1-08082aba7e34.roa (raw, json) Hash identifier: Vb/gMs5pr+xZcODvPSru4xxbVqIz4mW2pqsWZZQijLo= Subject key identifier: 78:BF:1F:96:0A:CF:46:27:51:38:06:F0:C7:40:5E:58:3F:5A:03:0C Certificate issuer: /CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Certificate serial: 010D0C9F4328584955295213D9CBAEAB70F7E740 Authority key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/872d4d84-ef45-3f24-82b1-08082aba7e34.roa Signing time: Fri 28 Mar 2025 01:00:41 +0000 ROA not before: Fri 28 Mar 2025 01:00:41 +0000 ROA not after: Thu 26 Jun 2025 01:00:41 +0000 asID: 4540 IP address blocks: 170.89.248.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:55:29:52:13:d9:cb:ae:ab:70:f7:e7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Validity Not Before: Mar 28 01:00:41 2025 GMT Not After : Jun 26 01:00:41 2025 GMT Subject: CN=8b2d303d-09cb-4b39-a71d-75a539be2ff8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:71:53:27:3b:9e:ee:65:b9:31:35:6c:be:9b: ea:cd:53:a1:2c:9f:a7:bc:fa:aa:77:4c:5e:74:0a: b2:0f:32:8a:56:5a:b5:b7:1b:ec:e4:f5:72:c4:d3: be:f6:34:f4:ae:2e:60:1e:86:8b:05:ac:e5:ef:4d: 29:68:74:c1:c1:e8:1d:32:4c:42:1b:77:4b:31:1b: 14:b9:6c:8f:d6:4f:a9:99:45:0e:dc:1e:7b:7a:fd: a9:3e:bf:6e:af:97:50:f0:a0:fe:cd:3c:16:0a:75: d5:4a:32:2e:65:c5:82:df:af:e4:03:ee:b2:03:86: 86:e3:ea:21:33:a5:ec:58:40:67:66:a5:a1:2c:b9: e6:97:8b:6d:e4:f8:4f:87:d5:af:93:48:f9:b5:84: 14:8d:4a:a7:56:c6:c3:bc:c4:44:f1:18:71:4d:d9: db:43:9f:79:23:2f:b0:a9:25:d1:60:75:ee:82:bc: 45:5e:f0:da:1f:c9:c9:66:7a:49:cd:55:57:6c:63: 5a:f3:94:79:c5:74:4f:60:ed:1f:aa:dc:fc:94:6e: b6:8c:67:e2:00:69:75:f2:ce:25:c3:c7:51:72:33: 30:60:5d:b2:0f:ad:3a:cf:0b:60:6f:72:9b:a7:c2: ba:96:69:1f:16:7f:b2:63:1c:43:12:0f:31:59:a6: cb:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:BF:1F:96:0A:CF:46:27:51:38:06:F0:C7:40:5E:58:3F:5A:03:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/872d4d84-ef45-3f24-82b1-08082aba7e34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl X509v3 Authority Key Identifier: keyid:D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer sbgp-ipAddrBlock: critical IPv4: 170.89.248.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:ce:39:c1:64:94:c0:2f:e7:ae:50:5e:60:e0:5c:be:f4:8e: b0:50:09:42:eb:fa:9f:56:ba:0e:82:51:4d:26:73:16:e9:0f: d6:6d:fe:81:e6:47:e2:a0:8f:4e:45:d8:32:05:97:5f:6e:67: 07:1d:c1:3c:47:3d:93:41:58:51:21:03:f6:09:7e:84:96:47: 6c:56:e9:a9:7b:ba:22:d2:87:bd:c7:39:12:53:71:48:f8:c9: 72:28:79:17:b7:aa:f6:0e:11:28:7b:45:39:ab:c6:7a:67:5c: fa:9b:94:1d:bd:ac:54:6e:05:d8:89:3d:d2:6f:e6:08:cf:99: bf:e5:a5:5b:62:bc:9d:b4:45:3e:8b:bd:d7:6d:cb:ee:4a:c4: f9:bc:36:57:8e:79:4d:2f:af:4e:75:4c:29:48:cc:68:83:95: 56:b3:8c:61:fd:c0:42:be:dd:09:bf:d9:65:c4:af:18:cb:03: 6a:00:95:47:4f:c7:69:6e:5e:3a:e6:c4:49:8c:02:bf:ae:68: 7b:b0:5f:f6:b1:70:cd:0b:d5:80:a6:5a:e3:69:e7:3d:37:6a: 07:67:ac:25:da:79:f8:d6:de:11:6d:3b:5d:fb:94:32:c8:62: 37:e1:63:b5:a7:3c:b8:d9:dd:fd:7e:fb:7a:d3:f9:b4:82:05: f2:0d:a4:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElVKVIT2cuuq3D350AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODUxMWI4ZGMtNzRiYS00N2U1LWFmNGEtN2M0ZTZiNzc3 ZDkyMB4XDTI1MDMyODAxMDA0MVoXDTI1MDYyNjAxMDA0MVowLzEtMCsGA1UEAxMk OGIyZDMwM2QtMDljYi00YjM5LWE3MWQtNzVhNTM5YmUyZmY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3FTJzue7mW5MTVsvpvqzVOhLJ+nvPqqd0xe dAqyDzKKVlq1txvs5PVyxNO+9jT0ri5gHoaLBazl700paHTBwegdMkxCG3dLMRsU uWyP1k+pmUUO3B57ev2pPr9ur5dQ8KD+zTwWCnXVSjIuZcWC36/kA+6yA4aG4+oh M6XsWEBnZqWhLLnml4tt5PhPh9Wvk0j5tYQUjUqnVsbDvMRE8RhxTdnbQ595Iy+w qSXRYHXugrxFXvDaH8nJZnpJzVVXbGNa85R5xXRPYO0fqtz8lG62jGfiAGl18s4l w8dRcjMwYF2yD606zwtgb3Kbp8K6lmkfFn+yYxxDEg8xWabLpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHi/H5YKz0YnUTgG8MdAXlg/WgMMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84NTEx YjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRlNmI3NzdkOTIvODcyZDRkODQtZWY0NS0z ZjI0LTgyYjEtMDgwODJhYmE3ZTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODUxMWI4ZGMtNzRiYS00N2U1LWFm NGEtN2M0ZTZiNzc3ZDkyLzg1MTFiOGRjLTc0YmEtNDdlNS1hZjRhLTdjNGU2Yjc3 N2Q5Mi5jcmwwHwYDVR0jBBgwFoAU1/PfqfdA8CtR2EIn8tzC4d9gdQ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS84NTExYjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRl NmI3NzdkOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqln4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHXOOcFklMAv565QXmDgXL70jrBQCULr+p9Wug6CUU0mcxbpD9Zt/oHm R+Kgj05F2DIFl19uZwcdwTxHPZNBWFEhA/YJfoSWR2xW6al7uiLSh73HORJTcUj4 yXIoeRe3qvYOESh7RTmrxnpnXPqblB29rFRuBdiJPdJv5gjPmb/lpVtivJ20RT6L vddty+5KxPm8NleOeU0vr051TClIzGiDlVazjGH9wEK+3Qm/2WXErxjLA2oAlUdP x2luXjrmxEmMAr+uaHuwX/axcM0L1YCmWuNp5z03agdnrCXaefjW3hFtO137lDLI YjfhY7WnPLjZ3f1++3rT+bSCBfINpPM= -----END CERTIFICATE-----Generated at Tue Apr 29 11:58:10 2025 by rpki-client