$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/5537a5d8-b701-3f7a-846f-a3abc4709ea7.roa File: 5537a5d8-b701-3f7a-846f-a3abc4709ea7.roa (raw, json) Hash identifier: 0dzncLbhvMv/nGe8q/rN9GJo2bbbNigOrMpg7T8jS7c= Subject key identifier: B8:FE:9A:89:90:F2:A2:6D:7E:1F:0F:5C:F6:D2:D7:16:D2:A5:51:0B Certificate issuer: /CN=824dfb5f-8580-48ff-b32e-fd393fa7dcc4 Certificate serial: 010D0C9F43285849CE9A527A04A45670A5B66A00 Authority key identifier: D9:84:FC:01:25:1A:F5:E5:ED:9B:B3:69:50:58:31:B7:12:47:29:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/5537a5d8-b701-3f7a-846f-a3abc4709ea7.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 16509 IP address blocks: 170.176.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:52:7a:04:a4:56:70:a5:b6:6a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=824dfb5f-8580-48ff-b32e-fd393fa7dcc4 Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=ba76c2cb-42e6-423e-be1b-6348f9a64e92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:c3:49:1c:0d:8a:11:7a:0d:ce:6a:ed:c7:87: 03:f3:ec:41:9e:5e:f4:cc:35:9f:e7:a3:9a:13:d4: 2f:02:34:94:37:c6:db:69:1d:09:22:23:e0:66:84: e3:5a:fd:5c:f3:75:f7:c0:60:15:3b:a8:37:32:ba: 97:5f:e2:88:26:ee:36:4e:11:72:39:20:15:5c:56: 1e:98:c7:13:d4:a0:b3:69:02:67:54:6d:fc:33:75: 9f:4a:b2:db:fa:c6:55:a3:c2:bb:d3:38:9f:35:ea: 35:20:a4:8e:49:2e:f6:09:fb:ab:94:ea:fa:06:6d: 87:ea:40:d1:a3:4e:c6:3a:9a:12:b9:52:4e:2e:f8: fe:b8:e0:db:4e:7b:eb:96:3a:0a:43:7c:8a:ff:13: 2a:35:2c:ad:95:2a:5b:7a:7f:e4:94:25:75:a7:62: 3f:c4:03:08:a3:5c:de:e7:c5:4f:c8:0f:d2:0c:0c: 6a:12:8e:4c:b7:45:74:e7:6b:83:26:68:6f:04:e4: 82:d0:28:8c:dd:47:8e:c3:79:8d:b8:48:b9:00:95: 0b:30:27:2c:e2:d0:65:b2:06:31:94:27:aa:e7:3c: 99:e6:aa:4f:1e:58:da:c8:e2:22:06:cd:cc:31:57: 4c:28:61:0f:47:35:70:7b:76:9a:3f:26:84:83:9a: 5d:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:FE:9A:89:90:F2:A2:6D:7E:1F:0F:5C:F6:D2:D7:16:D2:A5:51:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/5537a5d8-b701-3f7a-846f-a3abc4709ea7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.crl X509v3 Authority Key Identifier: keyid:D9:84:FC:01:25:1A:F5:E5:ED:9B:B3:69:50:58:31:B7:12:47:29:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer sbgp-ipAddrBlock: critical IPv4: 170.176.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:e2:71:0c:bf:d1:fa:41:bb:f3:56:b2:bf:b7:b7:b1:54:02: ff:96:b1:58:32:d5:c7:49:94:07:df:b0:19:10:26:4a:39:4e: 5c:54:92:df:b6:36:39:34:2f:c6:11:c4:d3:60:95:51:dd:fd: 56:76:68:7c:c3:ff:e3:37:01:78:38:01:22:71:9c:6c:8e:12: 75:71:94:c9:94:59:64:aa:53:40:78:58:ba:94:98:50:cf:ae: 9e:c3:b9:21:d2:fa:26:73:ff:76:1b:75:a5:00:ef:46:6c:67: 4f:11:7b:60:ba:e5:8a:32:7b:98:5a:63:2e:e8:24:40:34:be: d3:d3:9c:fd:5b:e6:4c:f3:ad:f8:a2:9a:95:c2:66:fe:18:57: 17:bb:f9:e8:6f:5a:9b:bb:fb:82:9a:c5:56:e5:8a:3a:c6:1f: ec:e9:26:c2:d1:22:c3:84:65:ad:d5:ae:09:89:f1:05:76:98: 13:05:73:a4:b1:23:01:09:2c:d7:0b:42:6b:2f:37:0c:ac:4c: 35:00:54:c0:37:0a:0e:84:f5:cc:3f:ba:07:57:00:66:b0:6a: d1:37:b4:f4:60:83:04:0a:2d:85:5d:7c:13:47:13:fc:8a:a1: f0:36:b6:9d:c4:a5:22:b3:fa:c9:f3:e8:32:67:8c:8e:89:be: a2:65:62:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnOmlJ6BKRWcKW2agAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODI0ZGZiNWYtODU4MC00OGZmLWIzMmUtZmQzOTNmYTdk Y2M0MB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk YmE3NmMyY2ItNDJlNi00MjNlLWJlMWItNjM0OGY5YTY0ZTkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8NJHA2KEXoNzmrtx4cD8+xBnl70zDWf56Oa E9QvAjSUN8bbaR0JIiPgZoTjWv1c83X3wGAVO6g3MrqXX+KIJu42ThFyOSAVXFYe mMcT1KCzaQJnVG38M3WfSrLb+sZVo8K70zifNeo1IKSOSS72CfurlOr6Bm2H6kDR o07GOpoSuVJOLvj+uODbTnvrljoKQ3yK/xMqNSytlSpben/klCV1p2I/xAMIo1ze 58VPyA/SDAxqEo5Mt0V052uDJmhvBOSC0CiM3UeOw3mNuEi5AJULMCcs4tBlsgYx lCeq5zyZ5qpPHljayOIiBs3MMVdMKGEPRzVwe3aaPyaEg5pdxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLj+momQ8qJtfh8PXPbS1xbSpVELMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84MjRk ZmI1Zi04NTgwLTQ4ZmYtYjMyZS1mZDM5M2ZhN2RjYzQvNTUzN2E1ZDgtYjcwMS0z ZjdhLTg0NmYtYTNhYmM0NzA5ZWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODI0ZGZiNWYtODU4MC00OGZmLWIz MmUtZmQzOTNmYTdkY2M0LzgyNGRmYjVmLTg1ODAtNDhmZi1iMzJlLWZkMzkzZmE3 ZGNjNC5jcmwwHwYDVR0jBBgwFoAU2YT8ASUa9eXtm7NpUFgxtxJHKZYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84MjRkZmI1Zi04NTgwLTQ4ZmYtYjMyZS1mZDM5 M2ZhN2RjYzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqrCcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAHicQy/0fpBu/NWsr+3t7FUAv+WsVgy1cdJlAffsBkQJko5TlxUkt+2 Njk0L8YRxNNglVHd/VZ2aHzD/+M3AXg4ASJxnGyOEnVxlMmUWWSqU0B4WLqUmFDP rp7DuSHS+iZz/3YbdaUA70ZsZ08Re2C65Yoye5haYy7oJEA0vtPTnP1b5kzzrfii mpXCZv4YVxe7+ehvWpu7+4KaxVblijrGH+zpJsLRIsOEZa3VrgmJ8QV2mBMFc6Sx IwEJLNcLQmsvNwysTDUAVMA3Cg6E9cw/ugdXAGawatE3tPRggwQKLYVdfBNHE/yK ofA2tp3EpSKz+snz6DJnjI6JvqJlYp4= -----END CERTIFICATE-----Generated at Sat Jun 14 06:14:12 2025 by rpki-client