$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/5f0737ef-201e-3548-8d30-4e093fcd9974.roa File: 5f0737ef-201e-3548-8d30-4e093fcd9974.roa (raw, json) Hash identifier: tXvkCcpsOMcVpJyecUAjCmD3EbFigVwTpPzqfT+3iTQ= Subject key identifier: 2F:FE:4E:CC:96:2A:8B:B8:A5:85:8B:1E:BD:25:05:11:94:FB:AE:11 Certificate issuer: /CN=21adcbb8-b500-460f-90cb-bca0525aabcb Certificate serial: 010D0C9F432858491D7177E6F252350C27BAA300 Authority key identifier: 62:2B:0A:1E:7B:53:D2:E2:2B:6B:5A:FF:1D:C1:AA:ED:0A:06:69:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/5f0737ef-201e-3548-8d30-4e093fcd9974.roa Signing time: Sat 08 Mar 2025 02:00:39 +0000 ROA not before: Sat 08 Mar 2025 02:00:39 +0000 ROA not after: Fri 06 Jun 2025 01:00:39 +0000 asID: 16509 IP address blocks: 170.176.222.0/24 maxlen: 24 170.176.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/21adcbb8-b500-460f-90cb-bca0525aabcb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/21adcbb8-b500-460f-90cb-bca0525aabcb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1d:71:77:e6:f2:52:35:0c:27:ba:a3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21adcbb8-b500-460f-90cb-bca0525aabcb Validity Not Before: Mar 8 02:00:39 2025 GMT Not After : Jun 6 01:00:39 2025 GMT Subject: CN=4877a16c-9a9c-45dc-8b56-400db35fa086 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:d9:0e:42:a7:63:5b:d4:b2:08:d5:82:a9:6f: f9:81:5b:80:b0:e5:18:f0:99:8d:9d:c9:bf:51:04: 48:3f:56:9f:39:c4:b2:8f:97:68:b6:3f:c8:5d:25: eb:13:eb:71:85:61:06:47:80:27:f5:c7:a7:ed:e3: 8d:04:67:c6:63:27:3f:0d:ae:fa:44:81:1d:56:55: 33:25:a7:f9:f1:08:6b:c1:d2:8d:e8:79:34:da:e9: d8:33:37:9f:4f:fd:60:96:2b:54:f9:b0:a8:b5:33: f0:d3:02:dd:70:ad:a9:da:7e:49:71:49:6e:e2:45: de:18:70:c2:46:d6:13:ec:a4:f3:12:53:e4:f3:b3: 49:af:5e:48:0d:68:dd:15:ae:fa:2b:e6:f7:bb:70: f0:e1:46:3c:68:ff:f3:20:e7:88:4d:7b:09:f0:b2: ae:ee:2c:48:15:86:ab:39:af:f9:64:1f:8d:51:e9: b2:bb:c4:f8:d3:7f:be:8e:4f:f6:ae:d2:30:66:6a: 21:26:46:f1:31:a9:56:e4:cf:6f:5f:c5:34:7b:3c: 89:87:c2:34:de:28:58:c7:46:ca:88:08:0e:39:aa: b8:72:9b:61:81:b5:83:f4:19:98:d7:d6:47:aa:c3: 0f:40:59:94:d1:04:6e:d9:36:2a:fa:88:17:0d:f0: 85:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:FE:4E:CC:96:2A:8B:B8:A5:85:8B:1E:BD:25:05:11:94:FB:AE:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/5f0737ef-201e-3548-8d30-4e093fcd9974.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/21adcbb8-b500-460f-90cb-bca0525aabcb.crl X509v3 Authority Key Identifier: keyid:62:2B:0A:1E:7B:53:D2:E2:2B:6B:5A:FF:1D:C1:AA:ED:0A:06:69:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb.cer sbgp-ipAddrBlock: critical IPv4: 170.176.222.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:16:cf:ff:58:22:ab:7b:d9:13:24:54:8d:e6:2d:1e:1c:51: 6e:e3:10:76:92:14:c1:74:d1:34:38:0f:5d:c1:84:7e:be:a9: d8:9d:92:1c:8f:d6:89:67:3e:71:1a:3b:e3:0a:ff:48:df:27: 2e:2a:2a:8d:71:15:b9:12:97:0f:ea:69:e3:23:a7:28:5c:d5: 97:74:e2:a1:9a:1f:ee:f1:ab:4d:e8:1d:04:35:81:48:be:61: 22:f8:9c:ee:54:f1:15:cd:34:fa:ee:90:c3:fb:9c:c1:7f:11: 9c:75:08:bb:b6:eb:67:bc:bb:6e:19:f2:f7:6e:e9:fc:af:f9: 78:15:4b:68:55:69:e3:73:f5:e9:09:2d:d5:51:4f:f1:03:66: f3:37:1f:ef:0e:05:d2:9d:0b:b3:d4:0e:d4:54:61:57:e6:62: b1:0d:9d:bf:6b:60:dd:a5:8b:46:29:d3:aa:35:50:45:50:c1: 0e:69:ed:7d:db:76:6a:4f:42:5f:04:3a:70:c4:93:3b:9c:92: 57:8b:bd:6e:c3:e2:f7:4e:f7:ab:ec:ca:0b:2c:eb:f4:8f:5c: c5:0a:9e:e1:e9:ed:55:c1:fa:06:c5:de:20:06:e2:dd:56:ac: c5:9f:5f:ea:85:c5:32:7d:d8:b8:99:3f:e8:24:c2:2f:ea:5f: 38:58:19:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkdcXfm8lI1DCe6owAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFhZGNiYjgtYjUwMC00NjBmLTkwY2ItYmNhMDUyNWFh YmNiMB4XDTI1MDMwODAyMDAzOVoXDTI1MDYwNjAxMDAzOVowLzEtMCsGA1UEAxMk NDg3N2ExNmMtOWE5Yy00NWRjLThiNTYtNDAwZGIzNWZhMDg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9kOQqdjW9SyCNWCqW/5gVuAsOUY8JmNncm/ UQRIP1afOcSyj5dotj/IXSXrE+txhWEGR4An9cen7eONBGfGYyc/Da76RIEdVlUz Jaf58QhrwdKN6Hk02unYMzefT/1glitU+bCotTPw0wLdcK2p2n5JcUlu4kXeGHDC RtYT7KTzElPk87NJr15IDWjdFa76K+b3u3Dw4UY8aP/zIOeITXsJ8LKu7ixIFYar Oa/5ZB+NUemyu8T403++jk/2rtIwZmohJkbxMalW5M9vX8U0ezyJh8I03ihYx0bK iAgOOaq4cpthgbWD9BmY19ZHqsMPQFmU0QRu2TYq+ogXDfCFdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC/+TsyWKou4pYWLHr0lBRGU+64RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yMWFk Y2JiOC1iNTAwLTQ2MGYtOTBjYi1iY2EwNTI1YWFiY2IvNWYwNzM3ZWYtMjAxZS0z NTQ4LThkMzAtNGUwOTNmY2Q5OTc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjFhZGNiYjgtYjUwMC00NjBmLTkw Y2ItYmNhMDUyNWFhYmNiLzIxYWRjYmI4LWI1MDAtNDYwZi05MGNiLWJjYTA1MjVh YWJjYi5jcmwwHwYDVR0jBBgwFoAUYisKHntT0uIra1r/HcGq7QoGaT0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yMWFkY2JiOC1iNTAwLTQ2MGYtOTBjYi1iY2Ew NTI1YWFiY2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqrDeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALEWz/9YIqt72RMkVI3mLR4cUW7jEHaSFMF00TQ4D13BhH6+qdidkhyP 1olnPnEaO+MK/0jfJy4qKo1xFbkSlw/qaeMjpyhc1Zd04qGaH+7xq03oHQQ1gUi+ YSL4nO5U8RXNNPrukMP7nMF/EZx1CLu262e8u24Z8vdu6fyv+XgVS2hVaeNz9ekJ LdVRT/EDZvM3H+8OBdKdC7PUDtRUYVfmYrENnb9rYN2li0Yp06o1UEVQwQ5p7X3b dmpPQl8EOnDEkzuckleLvW7D4vdO96vsygss6/SPXMUKnuHp7VXB+gbF3iAG4t1W rMWfX+qFxTJ92LiZP+gkwi/qXzhYGdM= -----END CERTIFICATE-----Generated at Sat Apr 26 19:11:17 2025 by rpki-client