$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/2eb74f13-24dd-32a8-8c5d-9d1f53478499.roa File: 2eb74f13-24dd-32a8-8c5d-9d1f53478499.roa (raw, json) Hash identifier: /tE928YI96tfi44mG7HswPZeTfZgDIFFFdN2JVt1jEw= Subject key identifier: 51:88:A6:C4:D7:24:22:2F:A1:B6:5C:C5:E4:04:FE:B8:6C:88:9E:37 Certificate issuer: /CN=8252d812-07cd-4870-b413-e08fb8355928 Certificate serial: 010D0C9F4328584981D454D06418E661D1B2EA80 Authority key identifier: 22:F6:B7:89:81:53:28:BF:20:D6:FF:E0:86:EC:A6:DC:6E:1E:F6:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/2eb74f13-24dd-32a8-8c5d-9d1f53478499.roa Signing time: Sun 13 Apr 2025 01:00:44 +0000 ROA not before: Sun 13 Apr 2025 01:00:44 +0000 ROA not after: Sat 12 Jul 2025 01:00:44 +0000 asID: 8075 IP address blocks: 170.88.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/8252d812-07cd-4870-b413-e08fb8355928.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/8252d812-07cd-4870-b413-e08fb8355928.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:81:d4:54:d0:64:18:e6:61:d1:b2:ea:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8252d812-07cd-4870-b413-e08fb8355928 Validity Not Before: Apr 13 01:00:44 2025 GMT Not After : Jul 12 01:00:44 2025 GMT Subject: CN=201fbce4-c5e3-4084-9cf8-a70156834697 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:d5:91:e1:95:81:59:fd:70:d3:5f:54:a2:4f: e2:1b:ab:d0:35:1d:3e:bd:96:0c:fe:41:77:4e:f5: 2a:b5:6e:01:92:61:e7:a8:27:74:f2:14:7b:e6:98: 95:1b:51:92:bc:c7:b0:e5:87:ee:03:52:a9:c1:f0: be:e2:59:5d:43:96:89:46:76:81:8b:3d:bb:f3:93: d0:70:0b:c3:3c:cf:23:73:b8:02:c9:d2:a2:f9:53: 24:ac:31:b8:72:87:6f:e9:d9:58:64:31:fe:0f:81: 6f:bd:ba:47:41:02:4a:1a:15:4b:e5:7a:3d:4e:0f: 3b:a4:5a:3d:5d:3d:43:f7:56:83:ca:29:63:14:4a: a1:64:d2:a5:99:92:b5:ea:a6:c6:fb:96:3a:e9:86: ee:c6:9d:d5:33:c3:69:c7:c3:e7:b6:b0:79:8b:61: cf:95:6b:7b:3f:5f:b0:4a:b5:1d:cc:54:8b:e3:fa: 31:07:1a:87:71:62:3b:ec:da:32:d1:b8:8b:07:1a: c8:3f:c2:af:e0:e0:36:58:15:f5:6b:e9:02:e9:5c: 56:5a:36:8e:79:bf:55:a3:5d:1b:c8:0d:83:0e:f6: 51:3a:67:3a:56:ca:e8:ae:6a:50:ff:c4:6f:e6:e9: 49:6c:94:23:60:23:bd:b1:16:68:5e:b9:c4:ff:9b: 5f:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:88:A6:C4:D7:24:22:2F:A1:B6:5C:C5:E4:04:FE:B8:6C:88:9E:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/2eb74f13-24dd-32a8-8c5d-9d1f53478499.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/8252d812-07cd-4870-b413-e08fb8355928.crl X509v3 Authority Key Identifier: keyid:22:F6:B7:89:81:53:28:BF:20:D6:FF:E0:86:EC:A6:DC:6E:1E:F6:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928.cer sbgp-ipAddrBlock: critical IPv4: 170.88.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:a0:50:a0:4a:9f:4d:72:48:52:f4:5d:3a:93:82:3d:90:55: a9:63:e9:a7:f5:24:5d:03:8e:27:0d:fc:e9:88:85:bc:a8:23: 2c:2d:b2:48:28:db:5a:7d:fe:48:23:51:8c:fc:94:02:ec:97: 71:e7:09:f4:b5:2d:9d:83:2d:86:1a:6e:86:66:44:3d:75:30: de:19:9b:3e:17:1b:ec:68:f5:c3:1d:3c:4a:70:ba:91:4b:89: 37:93:3f:97:79:f9:bb:e9:5a:49:3c:c0:33:8a:a7:63:a3:57: 79:47:d1:7a:e8:90:45:f4:81:34:b1:90:02:49:39:37:3e:13: 3e:0d:23:39:e6:4c:d6:77:8b:c5:e9:18:05:81:1e:be:dc:b7: 67:c4:1b:0e:fe:7c:85:61:7c:48:3c:67:e6:c3:04:43:e5:37: 15:db:fa:20:c0:8f:8e:be:78:a5:a6:e9:ea:72:0d:94:8d:a2: 19:40:ed:de:62:f2:96:46:1b:5b:95:ba:e5:f5:05:d0:30:e8: 92:ae:50:ab:10:20:63:b7:b1:ae:62:d2:86:8e:91:47:9c:20: 91:ce:d6:00:04:f2:c0:41:78:1a:fb:39:79:ab:42:70:91:5c: a4:b6:3c:db:d0:0b:0d:a2:35:9a:78:d0:f3:38:9d:e3:49:33: 7e:4a:df:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmB1FTQZBjmYdGy6oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODI1MmQ4MTItMDdjZC00ODcwLWI0MTMtZTA4ZmI4MzU1 OTI4MB4XDTI1MDQxMzAxMDA0NFoXDTI1MDcxMjAxMDA0NFowLzEtMCsGA1UEAxMk MjAxZmJjZTQtYzVlMy00MDg0LTljZjgtYTcwMTU2ODM0Njk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntWR4ZWBWf1w019Uok/iG6vQNR0+vZYM/kF3 TvUqtW4BkmHnqCd08hR75piVG1GSvMew5YfuA1KpwfC+4lldQ5aJRnaBiz2785PQ cAvDPM8jc7gCydKi+VMkrDG4codv6dlYZDH+D4FvvbpHQQJKGhVL5Xo9Tg87pFo9 XT1D91aDyiljFEqhZNKlmZK16qbG+5Y66Ybuxp3VM8Npx8PntrB5i2HPlWt7P1+w SrUdzFSL4/oxBxqHcWI77Noy0biLBxrIP8Kv4OA2WBX1a+kC6VxWWjaOeb9Vo10b yA2DDvZROmc6VsrormpQ/8Rv5ulJbJQjYCO9sRZoXrnE/5tfEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFGIpsTXJCIvobZcxeQE/rhsiJ43MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84MjUy ZDgxMi0wN2NkLTQ4NzAtYjQxMy1lMDhmYjgzNTU5MjgvMmViNzRmMTMtMjRkZC0z MmE4LThjNWQtOWQxZjUzNDc4NDk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODI1MmQ4MTItMDdjZC00ODcwLWI0 MTMtZTA4ZmI4MzU1OTI4LzgyNTJkODEyLTA3Y2QtNDg3MC1iNDEzLWUwOGZiODM1 NTkyOC5jcmwwHwYDVR0jBBgwFoAUIva3iYFTKL8g1v/ghuym3G4e9twwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84MjUyZDgxMi0wN2NkLTQ4NzAtYjQxMy1lMDhm YjgzNTU5MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqlhVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB6gUKBKn01ySFL0XTqTgj2QValj6af1JF0DjicN/OmIhbyoIywtskgo 21p9/kgjUYz8lALsl3HnCfS1LZ2DLYYaboZmRD11MN4Zmz4XG+xo9cMdPEpwupFL iTeTP5d5+bvpWkk8wDOKp2OjV3lH0XrokEX0gTSxkAJJOTc+Ez4NIznmTNZ3i8Xp GAWBHr7ct2fEGw7+fIVhfEg8Z+bDBEPlNxXb+iDAj46+eKWm6epyDZSNohlA7d5i 8pZGG1uVuuX1BdAw6JKuUKsQIGO3sa5i0oaOkUecIJHO1gAE8sBBeBr7OXmrQnCR XKS2PNvQCw2iNZp40PM4neNJM35K3zY= -----END CERTIFICATE-----Generated at Sun Apr 27 23:52:57 2025 by rpki-client