$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/822853fc-bf78-34dd-9c87-72112ff8471a.roa File: 822853fc-bf78-34dd-9c87-72112ff8471a.roa (raw, json) Hash identifier: xVexq5tmFbOQ72Elb1QkVyQUITRkw0Ay2sRNRJ3X+ks= Subject key identifier: ED:19:9D:53:5A:BF:09:EF:D4:F5:49:05:5F:69:2D:99:CB:A5:3E:EC Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F432858499BF8143161BCFE1D54B6CF80 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/822853fc-bf78-34dd-9c87-72112ff8471a.roa Signing time: Tue 22 Apr 2025 09:43:58 +0000 ROA not before: Tue 22 Apr 2025 09:43:58 +0000 ROA not after: Mon 21 Jul 2025 09:43:58 +0000 asID: 32043 IP address blocks: 170.130.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9b:f8:14:31:61:bc:fe:1d:54:b6:cf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Apr 22 09:43:58 2025 GMT Not After : Jul 21 09:43:58 2025 GMT Subject: CN=ed3b65b5-3d04-4b2a-9db7-6c83bb6c8234 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b3:ae:e6:98:d8:dc:dc:fb:05:bb:9b:2b:87: fa:a0:8f:2f:15:fa:1a:4f:9e:60:99:7c:69:b5:e6: a9:d6:52:47:59:7e:8e:23:d1:86:7d:75:1a:f6:37: 28:b1:d8:0c:8f:f8:85:aa:35:9f:ff:c4:c8:a8:c6: cc:05:1a:3e:aa:82:1c:7e:18:72:79:14:df:ba:8f: 68:9e:fc:d1:e0:06:c8:d8:2d:75:7c:9a:c8:dc:89: 61:6a:c3:99:98:39:21:e9:7e:73:b1:03:71:85:3e: 3c:25:75:2f:30:a1:94:f3:23:25:5b:15:71:fb:19: 74:2d:3d:3a:7d:74:ff:e5:d3:db:50:d7:3e:a2:28: 16:78:53:f3:a1:5b:f3:1c:92:d7:25:92:da:6d:c0: 68:35:73:01:31:1b:6a:c4:63:00:b3:59:c6:31:dc: 83:6e:cb:4d:a0:d1:7f:68:5f:a5:e8:fe:bf:1b:94: 62:53:6d:1b:f8:e3:7f:e1:25:71:4f:a5:e9:d4:7c: 2d:79:f7:c9:ce:67:d0:23:67:ff:16:d5:7b:2e:fb: 71:32:3a:1b:c1:0d:10:b8:24:5e:d8:83:13:ac:bc: a8:b7:5d:a5:72:ef:22:ad:5b:78:7d:d5:eb:46:27: b3:06:ca:55:23:94:e6:92:20:c7:c3:82:07:45:3a: e2:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:19:9D:53:5A:BF:09:EF:D4:F5:49:05:5F:69:2D:99:CB:A5:3E:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/822853fc-bf78-34dd-9c87-72112ff8471a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 170.130.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:90:9d:6e:49:23:9f:5e:62:69:16:84:b6:18:dc:6c:44:c0: cb:c1:43:e4:1a:ed:e4:03:e0:d5:cf:d2:cd:f3:a4:ea:b8:21: fd:80:62:a1:6d:c6:e3:0c:19:5d:1f:7d:b6:ee:52:eb:df:60: 72:37:9f:53:f1:e6:9b:aa:ed:22:fa:46:a3:e2:ec:84:51:e7: dc:e2:71:41:41:7f:ed:c9:1b:3f:5b:2c:04:76:29:97:09:4b: f1:4d:b4:c7:3b:e8:a5:29:63:10:de:65:7f:76:08:c9:db:5d: 54:e0:38:c4:ac:80:0d:e3:b2:60:dc:d7:0f:22:96:40:16:5b: fa:96:b7:4c:3f:73:29:41:49:0b:9e:24:48:4b:b5:f8:50:6a: 44:d5:bd:8a:4d:f8:d8:fa:c3:47:d7:02:f1:e8:84:8c:ba:65: 1a:56:81:a4:87:59:5b:91:13:d7:e8:72:50:56:98:64:2e:dd: 18:48:a2:ed:d4:85:10:f3:24:21:ca:b7:90:8d:4e:f4:9e:b1: c7:b9:4f:fc:68:80:e7:42:62:22:99:6a:ee:2d:fc:f4:4a:51: 5d:74:51:88:da:47:f4:33:f1:34:cd:19:f8:0c:d7:cc:1d:91: 6d:ef:1c:a2:c1:06:45:a4:fd:04:d6:00:87:3a:83:6a:83:1e: 3f:e1:3c:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmb+BQxYbz+HVS2z4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI1MDQyMjA5NDM1OFoXDTI1MDcyMTA5NDM1OFowLzEtMCsGA1UEAxMk ZWQzYjY1YjUtM2QwNC00YjJhLTlkYjctNmM4M2JiNmM4MjM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubOu5pjY3Nz7BbubK4f6oI8vFfoaT55gmXxp teap1lJHWX6OI9GGfXUa9jcosdgMj/iFqjWf/8TIqMbMBRo+qoIcfhhyeRTfuo9o nvzR4AbI2C11fJrI3IlhasOZmDkh6X5zsQNxhT48JXUvMKGU8yMlWxVx+xl0LT06 fXT/5dPbUNc+oigWeFPzoVvzHJLXJZLabcBoNXMBMRtqxGMAs1nGMdyDbstNoNF/ aF+l6P6/G5RiU20b+ON/4SVxT6Xp1HwteffJzmfQI2f/FtV7LvtxMjobwQ0QuCRe 2IMTrLyot12lcu8irVt4fdXrRiezBspVI5TmkiDHw4IHRTriywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO0ZnVNavwnv1PVJBV9pLZnLpT7sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvODIyODUzZmMtYmY3OC0z NGRkLTljODctNzIxMTJmZjg0NzFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqoI4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB6QnW5JI59eYmkWhLYY3GxEwMvBQ+Qa7eQD4NXP0s3zpOq4If2AYqFt xuMMGV0ffbbuUuvfYHI3n1Px5puq7SL6RqPi7IRR59zicUFBf+3JGz9bLAR2KZcJ S/FNtMc76KUpYxDeZX92CMnbXVTgOMSsgA3jsmDc1w8ilkAWW/qWt0w/cylBSQue JEhLtfhQakTVvYpN+Nj6w0fXAvHohIy6ZRpWgaSHWVuRE9foclBWmGQu3RhIou3U hRDzJCHKt5CNTvSesce5T/xogOdCYiKZau4t/PRKUV10UYjaR/Qz8TTNGfgM18wd kW3vHKLBBkWk/QTWAIc6g2qDHj/hPE0= -----END CERTIFICATE-----Generated at Tue Apr 29 00:40:14 2025 by rpki-client