$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/30f8881a-7d17-3ea7-a77f-2b0e42f8b0f5.roa File: 30f8881a-7d17-3ea7-a77f-2b0e42f8b0f5.roa (raw, json) Hash identifier: QeL+a/OXNRsvn+mMbMN5PWvynNkHIQU0ER5o8bOU6Ck= Subject key identifier: C5:D6:DE:81:04:C2:01:31:4A:96:56:AD:9D:D5:14:06:E1:C4:24:77 Certificate issuer: /CN=824dfb5f-8580-48ff-b32e-fd393fa7dcc4 Certificate serial: 010D0C9F432858491ED6D6F110E7B39378B500D8 Authority key identifier: D9:84:FC:01:25:1A:F5:E5:ED:9B:B3:69:50:58:31:B7:12:47:29:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/30f8881a-7d17-3ea7-a77f-2b0e42f8b0f5.roa Signing time: Sat 08 Mar 2025 14:00:52 +0000 ROA not before: Sat 08 Mar 2025 14:00:52 +0000 ROA not after: Fri 06 Jun 2025 13:00:52 +0000 asID: 16509 IP address blocks: 170.176.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1e:d6:d6:f1:10:e7:b3:93:78:b5:00:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=824dfb5f-8580-48ff-b32e-fd393fa7dcc4 Validity Not Before: Mar 8 14:00:52 2025 GMT Not After : Jun 6 13:00:52 2025 GMT Subject: CN=675caf1b-75ed-43a6-b62c-54923a07e89d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:3c:d8:e1:9e:6f:e9:af:7e:45:d9:6c:75:6a: 79:7d:a0:e7:4f:ca:ef:96:3f:d4:24:60:e9:32:45: bf:b5:bf:97:fe:6e:b1:b2:2f:6b:2c:04:c3:6e:8d: d3:84:7b:81:db:e1:65:28:55:a3:8d:9c:4d:12:03: 07:6c:97:76:46:32:8e:c3:fd:14:39:08:23:e2:7f: ca:66:bb:b8:be:1e:c3:34:01:2f:74:18:e6:c2:89: 9a:4f:53:5e:c6:e9:9e:34:17:1a:27:cf:26:53:98: 11:02:58:55:c9:8d:21:aa:4a:f3:55:19:74:79:93: 56:72:7d:17:9e:43:bd:31:dc:e1:03:af:25:a0:08: ae:98:28:24:d8:c9:a5:63:5d:30:11:1b:3e:ab:80: e9:b7:48:b0:70:fa:1f:bf:7f:89:61:8e:5d:d3:7f: 31:70:ed:03:ec:18:f1:60:10:31:ea:c8:32:1d:f9: 8c:ce:07:8a:bf:51:47:6d:f3:cf:c8:f2:1f:a8:bb: fe:7b:65:2a:02:0e:80:5c:2c:87:15:22:15:39:37: 21:f2:8c:b4:28:8a:a8:8e:48:57:6b:ab:61:3d:20: 69:41:87:70:fa:ca:ca:ca:c3:f8:66:b3:ef:3c:ab: 0b:78:69:17:e9:52:95:fa:b5:31:73:67:d8:97:b8: f0:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:D6:DE:81:04:C2:01:31:4A:96:56:AD:9D:D5:14:06:E1:C4:24:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/30f8881a-7d17-3ea7-a77f-2b0e42f8b0f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.crl X509v3 Authority Key Identifier: keyid:D9:84:FC:01:25:1A:F5:E5:ED:9B:B3:69:50:58:31:B7:12:47:29:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer sbgp-ipAddrBlock: critical IPv4: 170.176.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:54:3f:28:5f:9f:4a:0c:23:c6:09:14:73:64:3d:2d:29:ec: d5:88:72:2b:6e:13:5c:19:ab:77:f9:51:24:fa:c9:d9:d0:3e: ec:81:07:30:ac:4b:80:b1:c4:4b:bd:ca:4e:81:38:1b:f7:e2: b2:c9:e4:1c:53:a9:fb:84:3f:40:8d:59:88:76:c5:75:c6:80: 12:e6:9f:61:10:4c:13:31:46:48:ab:5e:e2:53:7e:d7:8b:e8: ff:7b:76:eb:9d:84:c1:9b:d9:2e:d2:16:0c:9a:68:ac:98:d1: b1:49:fb:d4:3f:d5:bd:63:74:02:d6:72:1b:ea:33:16:72:ef: 0c:6f:03:37:49:91:05:97:f0:c6:06:0b:78:14:f3:ce:9b:98: 2f:fe:b5:9b:c6:0a:8f:3d:43:b4:0f:e9:ad:47:73:12:1a:a3: 75:0b:b9:2f:1f:73:39:7e:4f:2b:f0:25:8a:bb:02:97:db:1a: 1c:32:a0:f1:10:a7:35:2f:74:25:ac:bb:a7:cd:29:76:16:59: 8c:84:94:b2:78:8c:ad:ea:93:98:79:2f:87:7f:c8:04:b4:c0: e5:02:37:ea:40:03:90:1a:a9:ed:ae:96:2a:33:05:41:80:02: 96:7e:95:81:f8:25:2c:ab:f1:87:03:0f:c5:e8:0a:80:78:e1: e3:d1:8e:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEke1tbxEOezk3i1ANgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODI0ZGZiNWYtODU4MC00OGZmLWIzMmUtZmQzOTNmYTdk Y2M0MB4XDTI1MDMwODE0MDA1MloXDTI1MDYwNjEzMDA1MlowLzEtMCsGA1UEAxMk Njc1Y2FmMWItNzVlZC00M2E2LWI2MmMtNTQ5MjNhMDdlODlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjzY4Z5v6a9+RdlsdWp5faDnT8rvlj/UJGDp MkW/tb+X/m6xsi9rLATDbo3ThHuB2+FlKFWjjZxNEgMHbJd2RjKOw/0UOQgj4n/K Zru4vh7DNAEvdBjmwomaT1NexumeNBcaJ88mU5gRAlhVyY0hqkrzVRl0eZNWcn0X nkO9MdzhA68loAiumCgk2MmlY10wERs+q4Dpt0iwcPofv3+JYY5d038xcO0D7Bjx YBAx6sgyHfmMzgeKv1FHbfPPyPIfqLv+e2UqAg6AXCyHFSIVOTch8oy0KIqojkhX a6thPSBpQYdw+srKysP4ZrPvPKsLeGkX6VKV+rUxc2fYl7jwWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMXW3oEEwgExSpZWrZ3VFAbhxCR3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84MjRk ZmI1Zi04NTgwLTQ4ZmYtYjMyZS1mZDM5M2ZhN2RjYzQvMzBmODg4MWEtN2QxNy0z ZWE3LWE3N2YtMmIwZTQyZjhiMGY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODI0ZGZiNWYtODU4MC00OGZmLWIz MmUtZmQzOTNmYTdkY2M0LzgyNGRmYjVmLTg1ODAtNDhmZi1iMzJlLWZkMzkzZmE3 ZGNjNC5jcmwwHwYDVR0jBBgwFoAU2YT8ASUa9eXtm7NpUFgxtxJHKZYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84MjRkZmI1Zi04NTgwLTQ4ZmYtYjMyZS1mZDM5 M2ZhN2RjYzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqrCBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALZUPyhfn0oMI8YJFHNkPS0p7NWIcituE1wZq3f5UST6ydnQPuyBBzCs S4CxxEu9yk6BOBv34rLJ5BxTqfuEP0CNWYh2xXXGgBLmn2EQTBMxRkirXuJTfteL 6P97duudhMGb2S7SFgyaaKyY0bFJ+9Q/1b1jdALWchvqMxZy7wxvAzdJkQWX8MYG C3gU886bmC/+tZvGCo89Q7QP6a1HcxIao3ULuS8fczl+TyvwJYq7ApfbGhwyoPEQ pzUvdCWsu6fNKXYWWYyElLJ4jK3qk5h5L4d/yAS0wOUCN+pAA5Aaqe2uliozBUGA ApZ+lYH4JSyr8YcDD8XoCoB44ePRjqA= -----END CERTIFICATE-----Generated at Sat Apr 26 18:29:55 2025 by rpki-client