$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/c4106caf-a2e7-3e4c-91b3-b1e887c6a9c7.roa File: c4106caf-a2e7-3e4c-91b3-b1e887c6a9c7.roa (raw, json) Hash identifier: p8jjnGs+ix7I9RDTXH8yz/wKXX1tIk8RKVVOYw9VKYs= Subject key identifier: F0:7B:83:E3:E7:54:90:9D:43:AC:C3:68:71:F7:78:85:78:62:70:36 Certificate issuer: /CN=21adcbb8-b500-460f-90cb-bca0525aabcb Certificate serial: 010D0C9F432858497C3EEC815CB73A9C6CA105A0 Authority key identifier: 62:2B:0A:1E:7B:53:D2:E2:2B:6B:5A:FF:1D:C1:AA:ED:0A:06:69:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/c4106caf-a2e7-3e4c-91b3-b1e887c6a9c7.roa Signing time: Fri 11 Apr 2025 01:00:48 +0000 ROA not before: Fri 11 Apr 2025 01:00:48 +0000 ROA not after: Thu 10 Jul 2025 01:00:48 +0000 asID: 396982 IP address blocks: 170.176.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/21adcbb8-b500-460f-90cb-bca0525aabcb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/21adcbb8-b500-460f-90cb-bca0525aabcb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7c:3e:ec:81:5c:b7:3a:9c:6c:a1:05:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21adcbb8-b500-460f-90cb-bca0525aabcb Validity Not Before: Apr 11 01:00:48 2025 GMT Not After : Jul 10 01:00:48 2025 GMT Subject: CN=08ad0d0c-4c7d-4ee0-840f-c04c1c5fe1b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:05:46:50:38:95:e0:c0:06:b8:46:29:96:5b: e0:32:d8:ba:3b:c4:ad:fb:0a:6b:4b:6f:d9:f3:2d: c3:d7:e1:2c:9c:e6:9a:e3:20:80:fd:29:e6:05:fd: e0:5e:aa:69:d3:fd:23:72:7e:6b:5d:e4:e4:f5:fb: cc:6f:bd:39:bf:67:50:25:ca:25:12:31:4c:f6:4a: f4:78:0c:d7:b4:da:21:0a:46:1e:69:ad:75:3f:b7: 79:e7:c0:e2:f6:43:7c:f8:df:c0:df:31:3d:d0:76: e2:82:80:af:59:43:b6:48:ae:b9:5a:61:43:6b:55: b2:3d:e0:f1:94:05:a8:60:1c:1d:fc:d8:63:df:e1: f0:30:dd:b4:31:c5:62:e9:13:5d:25:9b:e8:90:09: 2a:dc:35:40:67:83:1f:3c:27:c9:e7:64:fc:53:5f: ba:31:69:c4:84:51:07:7b:66:83:2a:ac:09:bd:43: 4d:2d:a6:b6:29:08:4b:be:25:c6:b8:9c:77:a4:c7: 3d:c4:dd:d0:54:e8:e8:d8:7f:ef:77:58:c9:a2:d4: 0a:5f:70:b4:2c:2a:7a:7a:88:86:a3:55:fd:11:63: 55:c9:7e:ee:31:f6:49:ae:66:2b:fb:68:b3:0a:56: 98:8f:a8:82:1d:5d:3c:0e:29:6c:d3:fe:1c:0a:ad: 86:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:7B:83:E3:E7:54:90:9D:43:AC:C3:68:71:F7:78:85:78:62:70:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/c4106caf-a2e7-3e4c-91b3-b1e887c6a9c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/21adcbb8-b500-460f-90cb-bca0525aabcb.crl X509v3 Authority Key Identifier: keyid:62:2B:0A:1E:7B:53:D2:E2:2B:6B:5A:FF:1D:C1:AA:ED:0A:06:69:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb.cer sbgp-ipAddrBlock: critical IPv4: 170.176.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:ee:94:c4:c8:bb:02:a9:b6:2a:5f:6f:76:b3:fd:8a:1b:9e: b1:49:62:10:a3:c3:30:84:94:af:52:29:3d:06:c3:dc:44:06: 54:af:a8:83:7b:32:b3:f0:6e:a6:92:71:e6:6e:67:b5:c8:5f: aa:cd:da:6b:65:67:60:a7:10:2e:2b:8b:09:63:4d:77:72:45: 1a:79:66:77:86:4e:71:af:86:05:4c:7d:58:62:21:9c:4f:59: 10:1d:f0:72:ac:89:27:e4:38:7e:18:db:2c:85:bd:26:d2:7c: 51:3e:02:e2:96:b9:ce:ad:2d:33:65:eb:02:5e:06:98:f8:50: 27:7e:71:df:98:db:74:2d:25:e6:ea:d2:5f:8e:db:00:b1:23: 8d:28:66:4d:b4:4c:27:bb:6e:97:00:ef:1c:cb:a5:70:3c:ea: 3d:11:5c:28:8b:13:81:a8:52:e1:b7:97:92:f2:18:57:9e:da: 6d:51:59:64:86:24:0c:c8:1a:16:5f:f7:a4:5b:2a:43:dc:4c: d0:dd:4c:16:b3:2c:fb:64:6a:25:9b:90:26:12:cd:1f:ae:03: e6:9d:81:22:c8:bf:45:13:f1:81:8e:69:cf:2d:96:bb:4b:14: bb:20:06:fa:c7:01:9b:4e:e6:4f:1b:3d:65:42:b5:6f:27:b4: 7d:3a:20:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl8PuyBXLc6nGyhBaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFhZGNiYjgtYjUwMC00NjBmLTkwY2ItYmNhMDUyNWFh YmNiMB4XDTI1MDQxMTAxMDA0OFoXDTI1MDcxMDAxMDA0OFowLzEtMCsGA1UEAxMk MDhhZDBkMGMtNGM3ZC00ZWUwLTg0MGYtYzA0YzFjNWZlMWIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnAVGUDiV4MAGuEYpllvgMti6O8St+wprS2/Z 8y3D1+EsnOaa4yCA/SnmBf3gXqpp0/0jcn5rXeTk9fvMb705v2dQJcolEjFM9kr0 eAzXtNohCkYeaa11P7d558Di9kN8+N/A3zE90HbigoCvWUO2SK65WmFDa1WyPeDx lAWoYBwd/Nhj3+HwMN20McVi6RNdJZvokAkq3DVAZ4MfPCfJ52T8U1+6MWnEhFEH e2aDKqwJvUNNLaa2KQhLviXGuJx3pMc9xN3QVOjo2H/vd1jJotQKX3C0LCp6eoiG o1X9EWNVyX7uMfZJrmYr+2izClaYj6iCHV08Dils0/4cCq2GUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPB7g+PnVJCdQ6zDaHH3eIV4YnA2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yMWFk Y2JiOC1iNTAwLTQ2MGYtOTBjYi1iY2EwNTI1YWFiY2IvYzQxMDZjYWYtYTJlNy0z ZTRjLTkxYjMtYjFlODg3YzZhOWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjFhZGNiYjgtYjUwMC00NjBmLTkw Y2ItYmNhMDUyNWFhYmNiLzIxYWRjYmI4LWI1MDAtNDYwZi05MGNiLWJjYTA1MjVh YWJjYi5jcmwwHwYDVR0jBBgwFoAUYisKHntT0uIra1r/HcGq7QoGaT0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yMWFkY2JiOC1iNTAwLTQ2MGYtOTBjYi1iY2Ew NTI1YWFiY2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqrDJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABfulMTIuwKptipfb3az/YobnrFJYhCjwzCElK9SKT0Gw9xEBlSvqIN7 MrPwbqaSceZuZ7XIX6rN2mtlZ2CnEC4riwljTXdyRRp5ZneGTnGvhgVMfVhiIZxP WRAd8HKsiSfkOH4Y2yyFvSbSfFE+AuKWuc6tLTNl6wJeBpj4UCd+cd+Y23QtJebq 0l+O2wCxI40oZk20TCe7bpcA7xzLpXA86j0RXCiLE4GoUuG3l5LyGFee2m1RWWSG JAzIGhZf96RbKkPcTNDdTBazLPtkaiWbkCYSzR+uA+adgSLIv0UT8YGOac8tlrtL FLsgBvrHAZtO5k8bPWVCtW8ntH06IJQ= -----END CERTIFICATE-----Generated at Sat Apr 26 17:41:32 2025 by rpki-client