$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/2ffe7fa3-e3e9-3e92-b90e-270471a89f9f.roa File: 2ffe7fa3-e3e9-3e92-b90e-270471a89f9f.roa (raw, json) Hash identifier: Fbt/S3KQ6gl+bmFJJhc4738OP3in8LPjNdfJbHnNQRk= Subject key identifier: 15:6A:9A:94:9D:B8:15:97:0C:DF:D7:E4:B1:85:BA:88:4F:61:52:4F Certificate issuer: /CN=3a8d6c4c-eb82-43f1-80cc-884c560bd0bd Certificate serial: 010D0C9F432858494731755700C8AB6CBBDC8300 Authority key identifier: 6E:8B:F4:7D:E4:DB:28:26:29:13:4D:8E:C3:9D:0A:17:DC:6A:B2:01 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/2ffe7fa3-e3e9-3e92-b90e-270471a89f9f.roa Signing time: Sun 23 Mar 2025 00:55:52 +0000 ROA not before: Sun 23 Mar 2025 00:55:52 +0000 ROA not after: Sat 21 Jun 2025 00:55:52 +0000 asID: 17044 IP address blocks: 170.200.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:47:31:75:57:00:c8:ab:6c:bb:dc:83:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a8d6c4c-eb82-43f1-80cc-884c560bd0bd Validity Not Before: Mar 23 00:55:52 2025 GMT Not After : Jun 21 00:55:52 2025 GMT Subject: CN=2ecff86f-0631-45b2-9ef2-f5cf1f52bdb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:1e:55:8b:37:30:bb:98:da:7a:78:e2:5b:9d: e1:55:64:6a:91:56:c2:a4:54:39:69:2b:2c:7d:67: 43:ba:76:06:b6:16:4c:b7:32:81:73:25:b2:9a:7d: bf:2b:af:87:63:a8:b5:8c:93:82:a3:c1:c9:54:76: d7:68:34:a5:1c:fb:5f:59:6a:85:2c:a5:3c:0d:e1: 37:20:3e:bc:3f:d6:29:a6:df:f0:00:42:bf:c3:8e: cd:dc:fe:cc:81:6c:11:2c:12:b4:a7:1a:11:76:78: 04:b9:15:a4:ce:4a:51:b4:83:ef:b0:be:8a:c7:b2: b8:42:b0:9c:84:45:a8:47:fb:4d:b8:c1:05:83:7f: 42:a3:7b:35:b5:a4:17:a3:1a:9b:47:75:aa:9c:c5: 7a:82:01:5e:86:07:e4:a1:38:99:3d:dc:5b:ac:49: 64:3f:73:44:61:61:f3:bc:22:bb:4e:ad:1a:f4:8a: 56:6c:e7:74:03:f9:2f:83:35:4c:ac:48:b6:15:55: 73:1d:c4:1a:9e:55:7b:b8:67:04:ba:68:77:2c:8d: a2:44:05:68:3c:e0:06:de:56:1b:65:eb:c0:05:08: 30:a3:e6:ea:e0:1c:5d:c5:cf:93:98:bb:25:d5:ad: d0:8a:95:99:a5:0d:4e:e9:ad:7a:48:35:b7:67:4a: 19:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:6A:9A:94:9D:B8:15:97:0C:DF:D7:E4:B1:85:BA:88:4F:61:52:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/2ffe7fa3-e3e9-3e92-b90e-270471a89f9f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.crl X509v3 Authority Key Identifier: keyid:6E:8B:F4:7D:E4:DB:28:26:29:13:4D:8E:C3:9D:0A:17:DC:6A:B2:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.cer sbgp-ipAddrBlock: critical IPv4: 170.200.48.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:5e:60:ab:bf:c2:8d:ab:58:19:5d:03:3f:96:f1:2e:81:a3: c3:9e:f8:82:d9:59:7a:f5:0b:90:c1:de:5d:a8:ee:ef:42:cb: e0:8b:a8:4e:b6:4f:f2:6c:60:56:07:f8:df:63:cd:7f:84:45: e0:0a:d3:9d:cf:00:82:be:cd:f7:36:5c:f2:d5:bd:a1:ec:79: 22:32:d3:ec:c1:8e:4b:ad:65:1a:d5:59:0e:84:27:81:c0:25: 4c:b5:ba:0f:34:12:c9:d7:5c:6f:17:3f:e9:95:04:df:15:19: 64:ee:c2:8a:36:02:3d:35:41:bd:60:b0:99:66:0c:f0:e7:a5: 38:26:2b:d0:68:1c:e5:46:fa:4a:c1:2f:a2:52:01:0d:1b:56: 42:2b:ed:55:7d:0f:2e:83:49:4b:4f:2c:42:c6:17:e0:7c:83: 55:78:23:40:97:1e:0f:61:61:e1:64:3a:02:c4:ad:1e:7d:ff: 93:21:cb:95:1e:ef:43:86:3b:9e:3e:49:a5:24:5c:4d:a3:b3: 76:e8:fb:39:45:ec:84:ce:c5:6e:e8:dd:6d:78:d1:0c:51:b7: 7d:b9:0b:c2:b2:e0:d9:f4:d8:26:60:16:ef:96:d7:f4:1c:e2: 64:1a:9d:ca:f8:ca:a0:b4:8b:91:0c:9f:7f:ee:43:c5:b3:9e: e0:8d:2e:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElHMXVXAMirbLvcgwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2E4ZDZjNGMtZWI4Mi00M2YxLTgwY2MtODg0YzU2MGJk MGJkMB4XDTI1MDMyMzAwNTU1MloXDTI1MDYyMTAwNTU1MlowLzEtMCsGA1UEAxMk MmVjZmY4NmYtMDYzMS00NWIyLTllZjItZjVjZjFmNTJiZGIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkR5Vizcwu5jaenjiW53hVWRqkVbCpFQ5aSss fWdDunYGthZMtzKBcyWymn2/K6+HY6i1jJOCo8HJVHbXaDSlHPtfWWqFLKU8DeE3 ID68P9Yppt/wAEK/w47N3P7MgWwRLBK0pxoRdngEuRWkzkpRtIPvsL6Kx7K4QrCc hEWoR/tNuMEFg39Co3s1taQXoxqbR3WqnMV6ggFehgfkoTiZPdxbrElkP3NEYWHz vCK7Tq0a9IpWbOd0A/kvgzVMrEi2FVVzHcQanlV7uGcEumh3LI2iRAVoPOAG3lYb ZevABQgwo+bq4Bxdxc+TmLsl1a3QipWZpQ1O6a16SDW3Z0oZiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBVqmpSduBWXDN/X5LGFuohPYVJPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zYThk NmM0Yy1lYjgyLTQzZjEtODBjYy04ODRjNTYwYmQwYmQvMmZmZTdmYTMtZTNlOS0z ZTkyLWI5MGUtMjcwNDcxYTg5ZjlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvM2E4ZDZjNGMtZWI4Mi00M2YxLTgw Y2MtODg0YzU2MGJkMGJkLzNhOGQ2YzRjLWViODItNDNmMS04MGNjLTg4NGM1NjBi ZDBiZC5jcmwwHwYDVR0jBBgwFoAUbov0feTbKCYpE02Ow50KF9xqsgEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zYThkNmM0Yy1lYjgyLTQzZjEtODBjYy04ODRj NTYwYmQwYmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqsgwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEleYKu/wo2rWBldAz+W8S6Bo8Oe+ILZWXr1C5DB3l2o7u9Cy+CLqE62 T/JsYFYH+N9jzX+EReAK053PAIK+zfc2XPLVvaHseSIy0+zBjkutZRrVWQ6EJ4HA JUy1ug80EsnXXG8XP+mVBN8VGWTuwoo2Aj01Qb1gsJlmDPDnpTgmK9BoHOVG+krB L6JSAQ0bVkIr7VV9Dy6DSUtPLELGF+B8g1V4I0CXHg9hYeFkOgLErR59/5Mhy5Ue 70OGO54+SaUkXE2js3bo+zlF7ITOxW7o3W140QxRt325C8Ky4Nn02CZgFu+W1/Qc 4mQancr4yqC0i5EMn3/uQ8WznuCNLpU= -----END CERTIFICATE-----Generated at Mon Apr 28 00:27:14 2025 by rpki-client