$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/4deca47a-06dc-30d8-843f-52136e603e18.roa File: 4deca47a-06dc-30d8-843f-52136e603e18.roa (raw, json) Hash identifier: 6kDUs39gCdWZXNlW+9yqI0vpXi/kPBgLXpSm7RXugEY= Subject key identifier: AE:03:45:BA:F8:9F:EB:CD:77:BF:55:AC:B8:36:4C:BB:2B:18:F3:4E Certificate issuer: /CN=8252d812-07cd-4870-b413-e08fb8355928 Certificate serial: 010D0C9F4328584981D456B84B070B8139F5B400 Authority key identifier: 22:F6:B7:89:81:53:28:BF:20:D6:FF:E0:86:EC:A6:DC:6E:1E:F6:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/4deca47a-06dc-30d8-843f-52136e603e18.roa Signing time: Sun 13 Apr 2025 01:00:44 +0000 ROA not before: Sun 13 Apr 2025 01:00:44 +0000 ROA not after: Sat 12 Jul 2025 01:00:44 +0000 asID: 36642 IP address blocks: 170.88.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/8252d812-07cd-4870-b413-e08fb8355928.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/8252d812-07cd-4870-b413-e08fb8355928.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:81:d4:56:b8:4b:07:0b:81:39:f5:b4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8252d812-07cd-4870-b413-e08fb8355928 Validity Not Before: Apr 13 01:00:44 2025 GMT Not After : Jul 12 01:00:44 2025 GMT Subject: CN=88bb2980-9bd8-47b3-9eb1-cffa2fba1fda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:a9:d7:61:e6:af:4b:50:bb:a6:5b:0b:fe:5d: 7d:53:47:5d:10:87:66:1f:35:1c:1c:63:c5:be:12: 98:44:29:24:c9:a0:6e:a6:56:37:25:1e:ef:c7:7d: 9c:9f:f8:0c:85:ec:c4:7d:f0:95:91:16:c8:77:80: 50:48:9e:30:e5:5f:c0:22:53:4f:d5:3e:15:ba:28: fc:e7:67:a7:31:5f:ea:60:0d:b1:f4:ce:22:83:33: 1e:75:84:9e:b0:64:93:ff:99:5e:b7:da:47:eb:13: 26:90:96:f4:90:35:1c:00:16:82:9d:17:11:19:ac: 65:62:7d:4f:1c:2f:39:2f:eb:af:89:cf:38:5b:9d: 3e:55:65:42:ee:67:52:ea:bf:61:ab:3c:ab:16:fd: b9:01:6b:7a:2e:dc:2b:96:c3:66:60:6f:c8:9e:00: 7c:74:da:1d:b7:7b:62:94:e1:59:d1:ee:66:5f:6c: 34:0d:b7:ce:6e:dc:78:12:51:4c:e1:e1:70:64:81: 3f:97:a1:34:4d:ed:4e:35:74:66:81:c8:4a:e7:4f: 5f:3e:ec:6a:b9:f2:10:92:2b:cc:35:12:bf:5b:5c: f6:cc:ab:b5:a5:d5:c5:4f:11:19:35:58:d0:b0:a9: d5:fc:61:95:6a:65:1f:eb:ed:b0:38:93:17:d6:ed: 02:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:03:45:BA:F8:9F:EB:CD:77:BF:55:AC:B8:36:4C:BB:2B:18:F3:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/4deca47a-06dc-30d8-843f-52136e603e18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/8252d812-07cd-4870-b413-e08fb8355928.crl X509v3 Authority Key Identifier: keyid:22:F6:B7:89:81:53:28:BF:20:D6:FF:E0:86:EC:A6:DC:6E:1E:F6:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928.cer sbgp-ipAddrBlock: critical IPv4: 170.88.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:9d:38:47:9f:7a:17:29:14:43:d9:c6:35:1e:60:ec:b5:c5: ab:5b:a4:a5:54:e0:c9:8c:6e:6a:f1:14:fb:13:9e:5d:53:dc: cb:3b:34:43:f7:b4:8a:11:98:39:e3:94:a7:0e:f1:e4:88:23: 4d:7f:32:dc:ea:73:9c:d9:6e:94:ef:7a:ed:3f:b6:cd:08:13: 43:a7:b4:ba:6d:b0:e2:60:f7:ba:80:3d:f0:9b:3a:0b:ff:0a: cf:a5:7f:e7:ff:db:be:0d:fd:fd:f7:de:35:c6:c5:ab:bd:94: 90:6a:ad:69:38:95:75:c0:05:e3:cc:b4:f9:f8:b0:4b:3b:d4: e9:61:94:a9:23:a5:0b:0b:14:9b:b1:7c:42:2d:77:70:d6:23: b8:a4:8b:a9:13:03:05:cc:eb:ae:8c:89:d8:c5:0c:6e:c5:db: c7:9b:f9:1b:90:eb:37:ae:24:21:4d:85:2a:cc:8e:ac:6f:a3: b2:30:42:48:9c:92:fa:e2:7d:66:96:76:53:d2:0b:b3:eb:f6: 39:49:55:bb:31:3c:53:99:92:14:a5:4b:8a:d6:1b:25:c4:72: b3:76:4d:4c:0a:7a:4b:0e:18:08:e7:5b:3a:88:8a:e6:65:64: a7:d3:e3:9f:f0:d5:cb:92:21:1a:d9:cb:58:7e:91:67:1a:6b: 16:66:23:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmB1Fa4SwcLgTn1tAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODI1MmQ4MTItMDdjZC00ODcwLWI0MTMtZTA4ZmI4MzU1 OTI4MB4XDTI1MDQxMzAxMDA0NFoXDTI1MDcxMjAxMDA0NFowLzEtMCsGA1UEAxMk ODhiYjI5ODAtOWJkOC00N2IzLTllYjEtY2ZmYTJmYmExZmRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4KnXYeavS1C7plsL/l19U0ddEIdmHzUcHGPF vhKYRCkkyaBuplY3JR7vx32cn/gMhezEffCVkRbId4BQSJ4w5V/AIlNP1T4Vuij8 52enMV/qYA2x9M4igzMedYSesGST/5let9pH6xMmkJb0kDUcABaCnRcRGaxlYn1P HC85L+uvic84W50+VWVC7mdS6r9hqzyrFv25AWt6LtwrlsNmYG/IngB8dNodt3ti lOFZ0e5mX2w0DbfObtx4ElFM4eFwZIE/l6E0Te1ONXRmgchK509fPuxqufIQkivM NRK/W1z2zKu1pdXFTxEZNVjQsKnV/GGVamUf6+2wOJMX1u0COwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK4DRbr4n+vNd79VrLg2TLsrGPNOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84MjUy ZDgxMi0wN2NkLTQ4NzAtYjQxMy1lMDhmYjgzNTU5MjgvNGRlY2E0N2EtMDZkYy0z MGQ4LTg0M2YtNTIxMzZlNjAzZTE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODI1MmQ4MTItMDdjZC00ODcwLWI0 MTMtZTA4ZmI4MzU1OTI4LzgyNTJkODEyLTA3Y2QtNDg3MC1iNDEzLWUwOGZiODM1 NTkyOC5jcmwwHwYDVR0jBBgwFoAUIva3iYFTKL8g1v/ghuym3G4e9twwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84MjUyZDgxMi0wN2NkLTQ4NzAtYjQxMy1lMDhm YjgzNTU5MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqlhVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIKdOEefehcpFEPZxjUeYOy1xatbpKVU4MmMbmrxFPsTnl1T3Ms7NEP3 tIoRmDnjlKcO8eSII01/Mtzqc5zZbpTveu0/ts0IE0OntLptsOJg97qAPfCbOgv/ Cs+lf+f/274N/f333jXGxau9lJBqrWk4lXXABePMtPn4sEs71OlhlKkjpQsLFJux fEItd3DWI7iki6kTAwXM666MidjFDG7F28eb+RuQ6zeuJCFNhSrMjqxvo7IwQkic kvrifWaWdlPSC7Pr9jlJVbsxPFOZkhSlS4rWGyXEcrN2TUwKeksOGAjnWzqIiuZl ZKfT45/w1cuSIRrZy1h+kWcaaxZmI6w= -----END CERTIFICATE-----Generated at Mon Apr 28 08:36:18 2025 by rpki-client