$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/6c3485d6-1237-32dd-8713-2aed82f2e07d.roa File: 6c3485d6-1237-32dd-8713-2aed82f2e07d.roa (raw, json) Hash identifier: 3WIo/fXbrM/EIyqll3Ol6wQBlMM5tb52mnw4+56UOLI= Subject key identifier: 7D:A9:F0:97:95:F0:9E:1D:AC:7A:78:91:B8:D5:F3:1C:91:04:75:1C Certificate issuer: /CN=74a9db22-8d49-4938-9c6f-e3fd428c158e Certificate serial: 010D0C9F43285848E59BC0A351173FE8F6DE1480 Authority key identifier: 98:FB:A9:0E:C5:77:6A:E8:69:9A:83:85:57:54:2E:33:A0:1C:26:41 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/6c3485d6-1237-32dd-8713-2aed82f2e07d.roa Signing time: Sun 16 Feb 2025 02:00:40 +0000 ROA not before: Sun 16 Feb 2025 02:00:40 +0000 ROA not after: Sat 17 May 2025 01:00:40 +0000 asID: 396982 IP address blocks: 170.10.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/74a9db22-8d49-4938-9c6f-e3fd428c158e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/74a9db22-8d49-4938-9c6f-e3fd428c158e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e5:9b:c0:a3:51:17:3f:e8:f6:de:14:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74a9db22-8d49-4938-9c6f-e3fd428c158e Validity Not Before: Feb 16 02:00:40 2025 GMT Not After : May 17 01:00:40 2025 GMT Subject: CN=ee24175a-533b-4d43-866c-e33cb2b4fef2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:fd:66:07:0e:05:85:42:ea:a2:94:3a:37:27: f4:83:95:c6:c4:13:69:18:0d:d9:de:d6:9d:00:59: 65:27:42:32:af:f2:c9:89:bb:a7:a4:0b:b3:21:d4: 9f:8f:a4:5f:5c:dc:9c:db:64:3e:21:4b:d3:0f:00: dd:7c:38:0e:7c:ed:45:1d:1f:5f:65:80:48:0a:65: 70:80:f7:15:6f:33:f5:cd:48:78:20:1a:2d:c2:02: 62:6e:7f:0b:c2:eb:2d:88:7f:fa:8c:79:b2:10:2e: dc:28:95:9d:37:2d:1a:b3:2a:ae:bb:01:c4:b9:8d: 2a:2f:6f:4a:96:90:80:bf:da:1a:e5:25:92:d3:58: fa:40:73:0d:7f:50:8c:dd:4e:e4:a9:28:2a:f5:89: 78:f3:81:38:44:14:7b:59:ce:1d:8d:fb:57:99:76: 69:df:1a:53:7a:29:3f:ac:59:c9:14:1c:5f:8c:61: 16:5a:1a:0a:b1:1d:13:29:43:a6:75:83:6f:69:38: 16:18:0a:9f:26:b1:08:4c:c9:28:56:d4:61:9c:2f: c1:39:73:f7:ed:7b:d0:d0:e8:6e:f1:f4:06:8b:8b: 61:43:2f:7e:90:30:0b:79:f6:99:71:2e:68:ec:10: 92:21:07:ac:3d:7f:3f:a8:14:5a:13:71:63:62:24: 8d:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:A9:F0:97:95:F0:9E:1D:AC:7A:78:91:B8:D5:F3:1C:91:04:75:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/6c3485d6-1237-32dd-8713-2aed82f2e07d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/74a9db22-8d49-4938-9c6f-e3fd428c158e.crl X509v3 Authority Key Identifier: keyid:98:FB:A9:0E:C5:77:6A:E8:69:9A:83:85:57:54:2E:33:A0:1C:26:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e.cer sbgp-ipAddrBlock: critical IPv4: 170.10.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:72:54:2d:c5:2c:83:1e:25:2c:23:4a:0a:7d:31:54:35:22: 3c:a2:46:a3:76:86:c5:4d:21:6a:2e:3a:44:07:9c:d5:60:5b: 50:4d:e1:66:55:a3:56:ce:e9:b1:cb:d8:37:f2:2a:de:2c:bc: f7:b0:96:40:5a:15:80:30:5f:dc:01:48:4d:62:2e:07:1e:4a: d1:90:95:eb:4d:4b:9e:70:23:f2:0c:fa:39:01:14:ef:6d:6b: 9a:aa:95:d5:57:98:08:a7:4f:85:fc:f5:e0:cb:73:03:53:48: e8:26:53:8e:88:9a:b1:03:e7:81:8d:d8:30:e1:28:08:7a:fb: 49:c5:28:6a:30:a2:94:1f:c9:63:51:fd:2d:46:0f:2c:a7:e7: 77:24:12:9c:41:d3:5d:96:b3:21:fd:29:43:88:87:ad:7d:67: fc:27:af:88:75:f1:49:9b:65:cd:74:ae:fe:e7:13:2c:35:cb: df:36:29:8a:f7:ff:c9:06:d8:dc:8e:5f:ee:0e:d8:51:a0:ca: 1d:4c:7c:5c:ea:0b:4c:1e:a7:5f:b6:4e:d6:5f:d1:7d:83:5c: 9d:2f:2b:9b:17:0c:61:7b:19:d8:6b:fc:20:2d:e8:db:4c:12: b7:7c:df:76:d3:21:e4:f0:2c:78:3b:a0:17:45:78:4c:1f:0e: 97:64:8d:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjlm8CjURc/6PbeFIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzRhOWRiMjItOGQ0OS00OTM4LTljNmYtZTNmZDQyOGMx NThlMB4XDTI1MDIxNjAyMDA0MFoXDTI1MDUxNzAxMDA0MFowLzEtMCsGA1UEAxMk ZWUyNDE3NWEtNTMzYi00ZDQzLTg2NmMtZTMzY2IyYjRmZWYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0f1mBw4FhULqopQ6Nyf0g5XGxBNpGA3Z3tad AFllJ0Iyr/LJibunpAuzIdSfj6RfXNyc22Q+IUvTDwDdfDgOfO1FHR9fZYBICmVw gPcVbzP1zUh4IBotwgJibn8LwustiH/6jHmyEC7cKJWdNy0asyquuwHEuY0qL29K lpCAv9oa5SWS01j6QHMNf1CM3U7kqSgq9Yl484E4RBR7Wc4djftXmXZp3xpTeik/ rFnJFBxfjGEWWhoKsR0TKUOmdYNvaTgWGAqfJrEITMkoVtRhnC/BOXP37XvQ0Ohu 8fQGi4thQy9+kDALefaZcS5o7BCSIQesPX8/qBRaE3FjYiSN2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH2p8JeV8J4drHp4kbjV8xyRBHUcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NGE5 ZGIyMi04ZDQ5LTQ5MzgtOWM2Zi1lM2ZkNDI4YzE1OGUvNmMzNDg1ZDYtMTIzNy0z MmRkLTg3MTMtMmFlZDgyZjJlMDdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzRhOWRiMjItOGQ0OS00OTM4LTlj NmYtZTNmZDQyOGMxNThlLzc0YTlkYjIyLThkNDktNDkzOC05YzZmLWUzZmQ0Mjhj MTU4ZS5jcmwwHwYDVR0jBBgwFoAUmPupDsV3auhpmoOFV1QuM6AcJkEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NGE5ZGIyMi04ZDQ5LTQ5MzgtOWM2Zi1lM2Zk NDI4YzE1OGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqgreMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABtyVC3FLIMeJSwjSgp9MVQ1IjyiRqN2hsVNIWouOkQHnNVgW1BN4WZV o1bO6bHL2DfyKt4svPewlkBaFYAwX9wBSE1iLgceStGQletNS55wI/IM+jkBFO9t a5qqldVXmAinT4X89eDLcwNTSOgmU46ImrED54GN2DDhKAh6+0nFKGowopQfyWNR /S1GDyyn53ckEpxB012WsyH9KUOIh619Z/wnr4h18UmbZc10rv7nEyw1y982KYr3 /8kG2NyOX+4O2FGgyh1MfFzqC0wep1+2TtZf0X2DXJ0vK5sXDGF7Gdhr/CAt6NtM Erd833bTIeTwLHg7oBdFeEwfDpdkjew= -----END CERTIFICATE-----Generated at Sat Apr 26 20:52:08 2025 by rpki-client