$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/9040d02d-778a-3b95-8393-591a4376d574.roa File: 9040d02d-778a-3b95-8393-591a4376d574.roa (raw, json) Hash identifier: UVCvK/xpuUd0qf3SzhWFAukHdqIH3LJIlLYZ+GDODjM= Subject key identifier: 61:C6:AC:A4:3D:26:6E:F3:BA:AF:08:30:6E:A4:FD:C1:B9:35:CF:EF Certificate issuer: /CN=7daa4589-66d8-4675-8538-e075ba80ecd3 Certificate serial: 010D0C9F432858498FC9C0FCE3857F49BCA9A400 Authority key identifier: BF:D4:FE:F7:0A:A9:40:EC:B8:54:09:F4:36:9B:34:3F:86:5A:0A:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/9040d02d-778a-3b95-8393-591a4376d574.roa Signing time: Fri 18 Apr 2025 01:00:47 +0000 ROA not before: Fri 18 Apr 2025 01:00:47 +0000 ROA not after: Thu 17 Jul 2025 01:00:47 +0000 asID: 7018 IP address blocks: 170.39.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/7daa4589-66d8-4675-8538-e075ba80ecd3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/7daa4589-66d8-4675-8538-e075ba80ecd3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8f:c9:c0:fc:e3:85:7f:49:bc:a9:a4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7daa4589-66d8-4675-8538-e075ba80ecd3 Validity Not Before: Apr 18 01:00:47 2025 GMT Not After : Jul 17 01:00:47 2025 GMT Subject: CN=d954f04f-79e6-4fc2-9b0f-d25f88c5e5ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ab:6a:a4:84:13:8d:a3:bb:66:e9:f5:2f:44: 59:28:be:37:a6:aa:5d:d2:14:4a:e2:3a:14:aa:9f: fe:a3:58:bd:f2:25:1f:fa:3d:e7:3a:d0:79:ee:76: 43:d2:59:54:05:86:46:29:7e:32:fa:dd:e1:5a:88: 49:e0:a8:88:fb:4f:9a:0b:04:76:dc:0e:e2:ed:d3: 80:5d:91:c0:98:ab:fe:11:25:89:69:a1:c8:e8:5f: bf:14:ca:af:b8:f1:16:fe:c8:be:37:7a:2c:d1:3a: 88:47:e5:28:bd:21:c9:e1:7c:cd:ae:5a:3a:eb:3b: cf:42:ae:3c:c5:57:16:87:e9:71:e5:97:ca:a1:90: b7:27:65:95:78:c3:d4:cd:28:8a:73:4c:09:28:ae: d3:f3:e6:f1:f6:46:56:a6:fe:3b:9d:00:e8:0a:6d: 94:39:14:0f:a3:45:c7:ab:f5:8e:ce:60:09:7e:c8: c8:dc:eb:d8:98:27:77:3e:5c:8b:ae:ac:15:c0:63: 78:93:6c:45:7b:9d:95:2c:8b:26:ae:24:90:e5:5c: 2c:eb:e1:32:7e:d7:93:a2:10:09:24:6b:71:0a:2a: 4b:cb:2f:b3:d9:0b:89:f1:02:b6:74:e8:52:95:c5: 02:35:6d:a9:59:3a:0a:a6:dd:d3:00:c7:ed:f0:f1: 26:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:C6:AC:A4:3D:26:6E:F3:BA:AF:08:30:6E:A4:FD:C1:B9:35:CF:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/9040d02d-778a-3b95-8393-591a4376d574.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/7daa4589-66d8-4675-8538-e075ba80ecd3.crl X509v3 Authority Key Identifier: keyid:BF:D4:FE:F7:0A:A9:40:EC:B8:54:09:F4:36:9B:34:3F:86:5A:0A:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3.cer sbgp-ipAddrBlock: critical IPv4: 170.39.164.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:e7:46:fa:34:5b:92:d8:2e:1b:26:4a:87:25:32:b2:7e:04: 28:7a:cd:f8:e9:93:aa:0f:ec:f9:bc:47:e6:60:c2:18:70:8f: 51:83:99:6d:82:c3:15:3e:60:64:43:8e:c9:45:29:5e:a3:fb: 6f:c8:f8:37:9c:41:d0:60:5e:a1:de:3d:d6:da:61:8d:1e:5f: af:c3:10:56:9e:f3:7c:d0:01:e9:e2:bb:2c:dd:6d:db:f9:90: eb:d3:51:49:26:ac:87:46:7f:77:47:69:18:5e:82:c7:7d:e0: 00:39:c0:77:3d:42:8e:e6:cc:6e:f8:13:53:f5:50:b7:cb:47: 0d:4e:58:b2:74:dc:4d:ad:28:51:4a:56:97:45:dc:d0:10:00: 5a:60:66:f8:19:c6:80:07:98:f2:34:df:24:a6:68:52:0f:b7: e0:b4:8c:76:bd:aa:d1:24:2d:91:b2:8f:e4:9c:75:fe:90:a9: 28:42:31:dd:47:fb:3a:9c:25:53:05:1c:d5:70:3b:0b:59:ac: b9:9b:2c:27:6d:a6:c5:98:7d:99:f9:9c:f5:e6:fa:9e:87:de: ee:e9:69:f0:3f:63:96:e2:dd:10:6a:c8:39:14:22:3e:b1:9d: ec:1c:17:9a:56:cf:58:b2:a5:55:48:fc:78:3a:76:62:43:a3: fb:8d:71:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmPycD844V/SbyppAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2RhYTQ1ODktNjZkOC00Njc1LTg1MzgtZTA3NWJhODBl Y2QzMB4XDTI1MDQxODAxMDA0N1oXDTI1MDcxNzAxMDA0N1owLzEtMCsGA1UEAxMk ZDk1NGYwNGYtNzllNi00ZmMyLTliMGYtZDI1Zjg4YzVlNWVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqtqpIQTjaO7Zun1L0RZKL43pqpd0hRK4joU qp/+o1i98iUf+j3nOtB57nZD0llUBYZGKX4y+t3hWohJ4KiI+0+aCwR23A7i7dOA XZHAmKv+ESWJaaHI6F+/FMqvuPEW/si+N3os0TqIR+UovSHJ4XzNrlo66zvPQq48 xVcWh+lx5ZfKoZC3J2WVeMPUzSiKc0wJKK7T8+bx9kZWpv47nQDoCm2UORQPo0XH q/WOzmAJfsjI3OvYmCd3PlyLrqwVwGN4k2xFe52VLIsmriSQ5Vws6+EyfteTohAJ JGtxCipLyy+z2QuJ8QK2dOhSlcUCNW2pWToKpt3TAMft8PEmNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGHGrKQ9Jm7zuq8IMG6k/cG5Nc/vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83ZGFh NDU4OS02NmQ4LTQ2NzUtODUzOC1lMDc1YmE4MGVjZDMvOTA0MGQwMmQtNzc4YS0z Yjk1LTgzOTMtNTkxYTQzNzZkNTc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvN2RhYTQ1ODktNjZkOC00Njc1LTg1 MzgtZTA3NWJhODBlY2QzLzdkYWE0NTg5LTY2ZDgtNDY3NS04NTM4LWUwNzViYTgw ZWNkMy5jcmwwHwYDVR0jBBgwFoAUv9T+9wqpQOy4VAn0Nps0P4ZaCgIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC83ZGFhNDU4OS02NmQ4LTQ2NzUtODUzOC1lMDc1 YmE4MGVjZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqiekMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADnnRvo0W5LYLhsmSoclMrJ+BCh6zfjpk6oP7Pm8R+Zgwhhwj1GDmW2C wxU+YGRDjslFKV6j+2/I+DecQdBgXqHePdbaYY0eX6/DEFae83zQAeniuyzdbdv5 kOvTUUkmrIdGf3dHaRhegsd94AA5wHc9Qo7mzG74E1P1ULfLRw1OWLJ03E2tKFFK VpdF3NAQAFpgZvgZxoAHmPI03ySmaFIPt+C0jHa9qtEkLZGyj+Scdf6QqShCMd1H +zqcJVMFHNVwOwtZrLmbLCdtpsWYfZn5nPXm+p6H3u7pafA/Y5bi3RBqyDkUIj6x newcF5pWz1iypVVI/Hg6dmJDo/uNcTI= -----END CERTIFICATE-----Generated at Sat Apr 26 16:49:41 2025 by rpki-client