$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/ed6e47d8-81bc-3bf3-9729-0c390af61b2f.roa File: ed6e47d8-81bc-3bf3-9729-0c390af61b2f.roa (raw, json) Hash identifier: 9wEYnVJc5eXc1iL7h+6eFB1emfd4F5AByr55Fwh/XHE= Subject key identifier: B2:4B:24:E7:C9:DB:5E:3C:62:7D:86:33:B0:B0:D1:61:85:7A:09:AE Certificate issuer: /CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Certificate serial: 010D0C9F432858495529520649CA5FB42D9EB7E0 Authority key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/ed6e47d8-81bc-3bf3-9729-0c390af61b2f.roa Signing time: Fri 28 Mar 2025 01:00:41 +0000 ROA not before: Fri 28 Mar 2025 01:00:41 +0000 ROA not after: Thu 26 Jun 2025 01:00:41 +0000 asID: 4540 IP address blocks: 170.89.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:55:29:52:06:49:ca:5f:b4:2d:9e:b7:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Validity Not Before: Mar 28 01:00:41 2025 GMT Not After : Jun 26 01:00:41 2025 GMT Subject: CN=663a0615-a3d6-47d3-96a0-9668d102f515 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:80:8a:45:7a:f6:32:3c:cd:ef:a3:fc:1d:32: 73:87:ff:61:55:12:c6:3c:b0:8e:76:f5:12:5c:68: f1:bf:86:47:03:78:9d:d7:c1:0b:4b:7d:5d:9e:9c: 68:63:d8:57:b2:d7:b0:07:8a:e1:22:e0:38:4c:f3: 87:ef:6e:d7:8e:2a:b3:60:f0:d1:72:92:35:bd:d6: 2e:6d:c7:ae:6e:f3:66:ba:b3:c9:82:a7:99:19:ea: d1:56:c5:de:f7:c4:06:b3:68:c2:88:4e:9f:b7:60: 52:31:de:b7:7c:db:ca:28:cf:35:32:e1:ef:89:c9: e2:c0:0a:f5:3d:20:7f:1d:1f:88:af:68:fb:f6:4a: 27:50:f4:e1:32:d0:6a:7e:8b:ff:22:95:0e:b9:66: cc:2f:01:86:8e:e6:dc:9e:fe:4c:ab:76:5b:30:4a: b4:c9:51:e5:6a:7e:9f:9f:f7:8d:bc:4e:39:b8:33: 04:e5:8b:34:17:a5:61:95:dd:e8:aa:13:b5:e6:b3: 5a:ab:5c:e4:96:51:62:0d:67:50:e9:1a:5d:65:73: 39:ac:61:a9:0f:b4:c7:13:9a:43:28:b9:3f:a2:f1: b6:86:20:f2:2e:ac:57:bd:fc:d5:59:df:7d:a1:c9: d0:47:1f:9f:9f:f5:5e:4a:c4:30:9a:ad:a9:ed:9e: ca:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:4B:24:E7:C9:DB:5E:3C:62:7D:86:33:B0:B0:D1:61:85:7A:09:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/ed6e47d8-81bc-3bf3-9729-0c390af61b2f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl X509v3 Authority Key Identifier: keyid:D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer sbgp-ipAddrBlock: critical IPv4: 170.89.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:9a:23:3f:be:e9:87:3c:11:8d:59:3e:56:26:7f:9d:c6:e1: e2:51:8b:d6:f3:fe:26:01:67:e0:a6:31:94:16:d0:ad:d6:d5: 56:96:3b:72:1c:b1:83:b1:d9:38:48:bf:4c:e6:a5:39:c8:45: c6:67:1f:af:a5:a6:b3:81:76:6d:57:ac:58:44:8d:b6:ab:7b: ec:b0:66:a7:2e:ca:5b:44:59:cc:e3:16:c7:96:22:c7:5d:10: 02:c5:56:ed:bf:b8:ac:f6:af:de:9d:30:ae:91:96:b8:6a:70: 72:69:38:18:21:1f:b0:82:83:44:02:0f:c8:dd:0d:54:1d:8f: f1:9d:13:f7:9a:ad:39:08:3c:55:4a:35:11:c2:f6:26:da:6d: 9a:c2:d1:77:1f:91:ab:28:7c:f2:3b:76:0c:0a:8d:d6:e7:6d: 42:8f:c9:2c:ab:95:22:3e:97:c1:ec:92:2f:0e:6d:6b:24:e4: d5:7f:a7:1c:a8:aa:4b:f3:15:46:b0:d5:77:59:ac:b9:96:4e: a0:dd:08:c8:f5:a6:07:53:63:d2:fb:76:2e:29:37:a3:da:a8: 3f:4b:cf:c4:eb:bc:d8:e9:f8:7a:73:08:69:8b:7b:d9:44:03: 24:bc:52:28:d1:1b:ea:9e:fb:58:26:53:45:0e:b4:dc:52:59: 22:9e:5f:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElVKVIGScpftC2et+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODUxMWI4ZGMtNzRiYS00N2U1LWFmNGEtN2M0ZTZiNzc3 ZDkyMB4XDTI1MDMyODAxMDA0MVoXDTI1MDYyNjAxMDA0MVowLzEtMCsGA1UEAxMk NjYzYTA2MTUtYTNkNi00N2QzLTk2YTAtOTY2OGQxMDJmNTE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyICKRXr2MjzN76P8HTJzh/9hVRLGPLCOdvUS XGjxv4ZHA3id18ELS31dnpxoY9hXstewB4rhIuA4TPOH727XjiqzYPDRcpI1vdYu bceubvNmurPJgqeZGerRVsXe98QGs2jCiE6ft2BSMd63fNvKKM81MuHvicniwAr1 PSB/HR+Ir2j79konUPThMtBqfov/IpUOuWbMLwGGjubcnv5Mq3ZbMEq0yVHlan6f n/eNvE45uDME5Ys0F6Vhld3oqhO15rNaq1zkllFiDWdQ6RpdZXM5rGGpD7THE5pD KLk/ovG2hiDyLqxXvfzVWd99ocnQRx+fn/VeSsQwmq2p7Z7K4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLJLJOfJ2148Yn2GM7Cw0WGFegmuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84NTEx YjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRlNmI3NzdkOTIvZWQ2ZTQ3ZDgtODFiYy0z YmYzLTk3MjktMGMzOTBhZjYxYjJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODUxMWI4ZGMtNzRiYS00N2U1LWFm NGEtN2M0ZTZiNzc3ZDkyLzg1MTFiOGRjLTc0YmEtNDdlNS1hZjRhLTdjNGU2Yjc3 N2Q5Mi5jcmwwHwYDVR0jBBgwFoAU1/PfqfdA8CtR2EIn8tzC4d9gdQ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS84NTExYjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRl NmI3NzdkOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqlnwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ6aIz++6Yc8EY1ZPlYmf53G4eJRi9bz/iYBZ+CmMZQW0K3W1VaWO3Ic sYOx2ThIv0zmpTnIRcZnH6+lprOBdm1XrFhEjbare+ywZqcuyltEWczjFseWIsdd EALFVu2/uKz2r96dMK6RlrhqcHJpOBghH7CCg0QCD8jdDVQdj/GdE/earTkIPFVK NRHC9ibabZrC0XcfkasofPI7dgwKjdbnbUKPySyrlSI+l8Hski8ObWsk5NV/pxyo qkvzFUaw1XdZrLmWTqDdCMj1pgdTY9L7di4pN6PaqD9Lz8TrvNjp+HpzCGmLe9lE AyS8UijRG+qe+1gmU0UOtNxSWSKeX2k= -----END CERTIFICATE-----Generated at Tue Apr 29 09:22:09 2025 by rpki-client