$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/9a9050dd-bc10-31b1-8c2b-5309ec1147ce.roa File: 9a9050dd-bc10-31b1-8c2b-5309ec1147ce.roa (raw, json) Hash identifier: G/z3sc4+5HrOAkYjgCekxR+oM+tuLt7IDFuLhPeLTR4= Subject key identifier: 8A:6F:C9:53:F2:7E:8F:BD:D0:53:CA:D5:03:BE:1C:B0:38:23:90:83 Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Certificate serial: 010D0C9F43285849A4BB74633F6525F4233C2D80 Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/9a9050dd-bc10-31b1-8c2b-5309ec1147ce.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 172.110.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:74:63:3f:65:25:f4:23:3c:2d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=8d761328-0c47-41c7-a886-957ea63501ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:e9:47:ad:5f:1a:e7:d0:df:64:06:84:46:2e: d1:63:ae:c2:e2:38:69:c1:fb:f9:74:40:a7:67:7b: 62:54:4b:d7:b1:24:64:9c:ce:8c:6f:16:b2:63:54: ce:4c:ba:97:3c:c0:ce:c5:e7:51:12:65:ea:51:d2: 2e:f8:3d:c8:73:4d:f3:dd:45:33:14:89:48:0b:e4: da:b1:2f:92:30:5e:cc:20:42:ca:76:2d:75:bd:0d: bf:5c:91:e8:05:36:24:2c:6a:30:5e:f2:d8:b1:a5: a6:0c:d8:ad:21:6f:15:fd:e7:c1:b0:b9:58:ea:2b: 10:6a:04:87:da:cd:e5:16:c3:78:27:7f:56:63:b0: 54:9e:00:7c:f0:29:12:cc:d3:01:56:c5:db:bc:6d: 33:41:15:83:5b:a3:f5:20:8b:c2:5f:ce:09:3b:7a: c4:62:47:14:49:6b:b7:fa:1b:19:4f:91:a1:07:69: 3b:f9:83:53:e0:cc:32:4d:c7:64:81:ef:ef:5e:02: f4:0f:b4:b5:32:e3:4a:a4:86:10:f7:55:bb:48:16: fd:09:05:f9:5e:51:cf:e0:d1:20:e4:b5:e4:30:31: 74:49:ae:f5:6e:32:2f:a4:a3:aa:cc:3d:c7:00:00: a8:bf:13:00:96:d4:7c:6c:e7:90:fe:1b:6b:32:0d: ab:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:6F:C9:53:F2:7E:8F:BD:D0:53:CA:D5:03:BE:1C:B0:38:23:90:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/9a9050dd-bc10-31b1-8c2b-5309ec1147ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl X509v3 Authority Key Identifier: keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer sbgp-ipAddrBlock: critical IPv4: 172.110.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:e3:c0:9a:9f:24:ac:cf:52:a2:6a:35:46:c5:0a:ba:99:36: 83:fb:be:c0:24:75:c1:db:22:48:8c:b2:39:e1:27:f8:2d:f6: 58:8f:ad:d8:82:e4:bf:34:bb:96:d2:87:eb:bb:ab:d5:a4:85: 98:cc:6b:0a:d7:df:f4:f6:cf:e8:3d:a1:f0:36:36:3e:c8:21: d3:3b:ec:b5:69:da:c5:39:fc:c3:0e:d1:3a:ec:3b:9f:00:1c: 7b:87:30:a3:de:37:93:af:f3:9d:35:2e:7a:81:01:18:40:42: 9f:d1:d1:8a:b7:28:34:c3:e9:40:98:0d:16:6c:35:7b:03:d5: 3f:f3:68:8a:5b:4a:ca:76:37:90:b6:10:67:54:03:33:8b:f7: ef:6d:30:fb:c0:a0:9a:f2:8b:fe:61:42:6b:01:60:2a:9b:5f: ac:9a:dc:34:31:25:54:28:83:d0:a8:db:af:42:9c:e2:70:ec: d9:51:5b:6a:df:36:86:2e:6d:fd:b9:84:df:db:b7:65:f6:fd: cc:70:b9:31:a0:4f:b1:48:ea:36:49:48:4f:a9:27:24:50:77: 8f:75:ce:02:8e:20:36:dd:5e:ce:d6:73:a6:8a:c5:be:16:70: e2:c9:f8:f9:de:85:5d:ef:94:b4:04:56:c3:29:88:5a:7a:71: f1:23:9c:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku3RjP2Ul9CM8LYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh ZWEyMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk OGQ3NjEzMjgtMGM0Ny00MWM3LWE4ODYtOTU3ZWE2MzUwMWVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzulHrV8a59DfZAaERi7RY67C4jhpwfv5dECn Z3tiVEvXsSRknM6MbxayY1TOTLqXPMDOxedREmXqUdIu+D3Ic03z3UUzFIlIC+Ta sS+SMF7MIELKdi11vQ2/XJHoBTYkLGowXvLYsaWmDNitIW8V/efBsLlY6isQagSH 2s3lFsN4J39WY7BUngB88CkSzNMBVsXbvG0zQRWDW6P1IIvCX84JO3rEYkcUSWu3 +hsZT5GhB2k7+YNT4MwyTcdkge/vXgL0D7S1MuNKpIYQ91W7SBb9CQX5XlHP4NEg 5LXkMDF0Sa71bjIvpKOqzD3HAACovxMAltR8bOeQ/htrMg2rtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIpvyVPyfo+90FPK1QO+HLA4I5CDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2 Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvOWE5MDUwZGQtYmMxMC0z MWIxLThjMmItNTMwOWVjMTE0N2NlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4 ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2 MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrG4gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAArjwJqfJKzPUqJqNUbFCrqZNoP7vsAkdcHbIkiMsjnhJ/gt9liPrdiC 5L80u5bSh+u7q9WkhZjMawrX3/T2z+g9ofA2Nj7IIdM77LVp2sU5/MMO0TrsO58A HHuHMKPeN5Ov8501LnqBARhAQp/R0Yq3KDTD6UCYDRZsNXsD1T/zaIpbSsp2N5C2 EGdUAzOL9+9tMPvAoJryi/5hQmsBYCqbX6ya3DQxJVQog9Co269CnOJw7NlRW2rf NoYubf25hN/bt2X2/cxwuTGgT7FI6jZJSE+pJyRQd491zgKOIDbdXs7Wc6aKxb4W cOLJ+PnehV3vlLQEVsMpiFp6cfEjnH0= -----END CERTIFICATE-----Generated at Sun Apr 27 09:52:56 2025 by rpki-client