$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/2d4c767d-7fe0-30d7-b77f-d3364d34d8c5.roa File: 2d4c767d-7fe0-30d7-b77f-d3364d34d8c5.roa (raw, json) Hash identifier: oI1sPvaNbWJ4OiOGT/18CjweH8AXT4H0XEYfJ6xP8uM= Subject key identifier: FB:2D:D5:39:34:67:F9:F0:D2:09:44:20:5A:93:6B:AF:DC:13:E2:4B Certificate issuer: /CN=5fab6378-e15d-4471-b01f-be15fc5bfa04 Certificate serial: 010D0C9F432858494CC9464BFA414BA628E81D40 Authority key identifier: 61:40:43:BF:E2:50:B3:47:64:FC:D1:73:0F:62:98:03:50:32:18:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/2d4c767d-7fe0-30d7-b77f-d3364d34d8c5.roa Signing time: Tue 25 Mar 2025 01:00:40 +0000 ROA not before: Tue 25 Mar 2025 01:00:40 +0000 ROA not after: Mon 23 Jun 2025 01:00:40 +0000 asID: 7018 IP address blocks: 207.170.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/5fab6378-e15d-4471-b01f-be15fc5bfa04.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/5fab6378-e15d-4471-b01f-be15fc5bfa04.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4c:c9:46:4b:fa:41:4b:a6:28:e8:1d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5fab6378-e15d-4471-b01f-be15fc5bfa04 Validity Not Before: Mar 25 01:00:40 2025 GMT Not After : Jun 23 01:00:40 2025 GMT Subject: CN=530f04d2-57cd-4399-af76-91642a6de4cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:65:67:4a:a7:9e:f9:8e:ee:18:3e:06:0e:09: f6:6f:64:29:c7:fe:5c:90:6a:39:6e:b6:cf:e2:ad: ec:61:25:38:01:2f:74:42:20:d6:a6:46:79:6e:37: c1:0f:93:ad:df:2a:32:f2:a7:63:70:4e:ed:45:b2: f0:ed:2b:85:a1:e0:de:0b:58:63:b9:a8:81:73:1d: 51:98:95:04:72:6d:93:56:62:e1:86:12:93:66:7f: ba:66:e6:9e:19:6b:5c:d6:8e:00:c7:6e:8b:ca:c2: 71:53:67:26:fa:9e:0f:0f:c1:21:9f:a2:81:08:82: c3:ec:be:e8:77:73:07:0d:c7:30:bf:32:ce:d3:33: f5:06:e5:8b:ca:0b:2f:23:f4:9e:24:1c:b5:8a:de: e6:74:97:c8:d6:25:2a:88:cf:03:19:f8:a7:d1:76: d2:e9:0d:77:94:4e:c7:3c:be:21:aa:3c:85:2f:ae: 62:57:e0:12:b9:dd:46:67:60:94:d1:44:56:86:f5: 94:4a:e9:1a:2f:cc:3f:e6:23:5b:c0:86:3e:73:7f: 7c:5e:7b:d6:72:0b:38:26:ed:72:a6:7c:e1:99:8c: 67:52:18:69:98:2a:9d:29:0f:fe:c4:3f:c3:52:6c: d8:83:7f:08:44:43:6f:5f:eb:01:2b:69:40:0d:0a: 3e:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:2D:D5:39:34:67:F9:F0:D2:09:44:20:5A:93:6B:AF:DC:13:E2:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/2d4c767d-7fe0-30d7-b77f-d3364d34d8c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/5fab6378-e15d-4471-b01f-be15fc5bfa04.crl X509v3 Authority Key Identifier: keyid:61:40:43:BF:E2:50:B3:47:64:FC:D1:73:0F:62:98:03:50:32:18:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04.cer sbgp-ipAddrBlock: critical IPv4: 207.170.174.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:50:d1:56:98:cd:68:3d:b7:b9:07:f0:8b:c0:0d:be:0d:61: 83:3b:c9:34:bf:8c:4e:0c:62:b0:42:a0:7c:16:6e:9f:c5:11: 42:c9:7b:cd:72:6b:89:0e:73:a7:a9:4c:43:67:9b:b7:00:68: 56:94:d5:aa:09:b0:3f:1c:e2:e5:49:b9:a7:60:09:60:ef:85: e0:fd:c9:40:b1:37:05:85:56:00:30:4f:f3:8f:ea:0c:d9:83: 18:82:f0:e2:95:36:32:83:38:c4:db:ec:83:06:d8:c7:15:58: 51:5a:fa:a8:13:1d:b9:f5:eb:55:58:01:85:b0:52:6a:33:46: 93:94:16:a4:5f:b8:f5:b8:fb:7c:41:b3:bf:34:ac:1e:a9:a6: 19:1e:05:9b:cb:ad:b5:c5:aa:5e:60:53:0b:38:f0:39:06:d2: 41:b0:e6:01:2e:cd:f6:3a:d2:1b:72:8e:b8:68:82:ec:0e:3e: 26:72:e7:46:cb:91:3e:21:63:34:59:9c:cf:16:23:1d:c7:2e: b2:28:84:c9:a3:40:85:d1:f0:5c:ab:71:bf:f1:f6:3a:70:9f: 26:38:17:cf:9c:2e:3d:3f:43:89:cc:63:98:8f:6e:a2:e9:0b: 58:53:31:f0:21:d3:e2:1b:79:e8:d7:75:80:04:e4:d7:81:0c: 1f:c0:eb:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElMyUZL+kFLpijoHUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWZhYjYzNzgtZTE1ZC00NDcxLWIwMWYtYmUxNWZjNWJm YTA0MB4XDTI1MDMyNTAxMDA0MFoXDTI1MDYyMzAxMDA0MFowLzEtMCsGA1UEAxMk NTMwZjA0ZDItNTdjZC00Mzk5LWFmNzYtOTE2NDJhNmRlNGNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3GVnSqee+Y7uGD4GDgn2b2Qpx/5ckGo5brbP 4q3sYSU4AS90QiDWpkZ5bjfBD5Ot3yoy8qdjcE7tRbLw7SuFoeDeC1hjuaiBcx1R mJUEcm2TVmLhhhKTZn+6ZuaeGWtc1o4Ax26LysJxU2cm+p4PD8Ehn6KBCILD7L7o d3MHDccwvzLO0zP1BuWLygsvI/SeJBy1it7mdJfI1iUqiM8DGfin0XbS6Q13lE7H PL4hqjyFL65iV+ASud1GZ2CU0URWhvWUSukaL8w/5iNbwIY+c398XnvWcgs4Ju1y pnzhmYxnUhhpmCqdKQ/+xD/DUmzYg38IRENvX+sBK2lADQo+OwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPst1Tk0Z/nw0glEIFqTa6/cE+JLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS81ZmFi NjM3OC1lMTVkLTQ0NzEtYjAxZi1iZTE1ZmM1YmZhMDQvMmQ0Yzc2N2QtN2ZlMC0z MGQ3LWI3N2YtZDMzNjRkMzRkOGM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNWZhYjYzNzgtZTE1ZC00NDcxLWIw MWYtYmUxNWZjNWJmYTA0LzVmYWI2Mzc4LWUxNWQtNDQ3MS1iMDFmLWJlMTVmYzVi ZmEwNC5jcmwwHwYDVR0jBBgwFoAUYUBDv+JQs0dk/NFzD2KYA1AyGNIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS81ZmFiNjM3OC1lMTVkLTQ0NzEtYjAxZi1iZTE1 ZmM1YmZhMDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz6quMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIpQ0VaYzWg9t7kH8IvADb4NYYM7yTS/jE4MYrBCoHwWbp/FEULJe81y a4kOc6epTENnm7cAaFaU1aoJsD8c4uVJuadgCWDvheD9yUCxNwWFVgAwT/OP6gzZ gxiC8OKVNjKDOMTb7IMG2McVWFFa+qgTHbn161VYAYWwUmozRpOUFqRfuPW4+3xB s780rB6pphkeBZvLrbXFql5gUws48DkG0kGw5gEuzfY60htyjrhoguwOPiZy50bL kT4hYzRZnM8WIx3HLrIohMmjQIXR8Fyrcb/x9jpwnyY4F8+cLj0/Q4nMY5iPbqLp C1hTMfAh0+IbeejXdYAE5NeBDB/A61w= -----END CERTIFICATE-----Generated at Sat Apr 26 15:55:38 2025 by rpki-client