$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/5eda4636-65ba-33d9-aa37-2ae89912698e.roa File: 5eda4636-65ba-33d9-aa37-2ae89912698e.roa (raw, json) Hash identifier: 4P78wvLq/iuadtz/9RxYD2lzsXNQPB3+/Du1B7nnp20= Subject key identifier: B5:31:18:D6:3C:00:F2:0A:43:E3:3D:E5:F8:24:B8:C7:36:02:AB:32 Certificate issuer: /CN=824dfb5f-8580-48ff-b32e-fd393fa7dcc4 Certificate serial: 010D0C9F4328584957F4070DB732C0C054E41F80 Authority key identifier: D9:84:FC:01:25:1A:F5:E5:ED:9B:B3:69:50:58:31:B7:12:47:29:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/5eda4636-65ba-33d9-aa37-2ae89912698e.roa Signing time: Sat 29 Mar 2025 01:00:39 +0000 ROA not before: Sat 29 Mar 2025 01:00:39 +0000 ROA not after: Fri 27 Jun 2025 01:00:39 +0000 asID: 209242 IP address blocks: 170.176.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:57:f4:07:0d:b7:32:c0:c0:54:e4:1f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=824dfb5f-8580-48ff-b32e-fd393fa7dcc4 Validity Not Before: Mar 29 01:00:39 2025 GMT Not After : Jun 27 01:00:39 2025 GMT Subject: CN=4727633d-8437-4afd-8a37-5997ccf69346 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:9e:5e:21:6d:9d:40:63:bb:e2:1c:ff:55:e3: 8a:59:e4:25:aa:55:78:4f:b1:4f:33:68:8f:5d:53: 4b:36:7c:83:5e:da:f6:ae:03:55:65:3b:c0:fd:34: 7d:fc:4c:d8:dc:70:b7:25:46:52:52:f4:09:48:45: 79:30:0d:6a:65:80:43:1d:d8:92:75:c2:55:4f:26: e8:c6:e1:61:e9:d9:6f:d6:d4:3b:69:44:78:ae:44: 3f:86:4d:43:d1:6e:47:5b:1a:5d:36:4e:e8:2e:d8: d3:2f:da:2c:0e:c6:f7:e6:cd:46:ea:89:7b:fb:00: a1:3d:71:a0:23:7d:91:cc:78:7a:dc:53:ac:c0:31: 77:f1:99:ec:81:08:56:94:b5:c6:af:a8:80:69:bf: 1b:fe:10:5c:d7:64:22:f4:75:ac:8b:a8:cd:0b:50: 05:a6:8b:1e:3b:33:9a:d6:39:ba:f6:27:ad:2f:c4: 9f:8b:0c:48:38:14:6b:e6:f1:8b:59:81:7c:b8:50: d4:a2:8d:0c:e2:b3:24:08:de:a9:ec:c4:f9:c3:93: 2e:fa:fc:a1:75:88:8f:0c:d6:6e:da:d5:e4:5b:78: 17:c7:bb:f9:88:ee:56:29:d9:16:6f:ac:c1:8c:70: 2f:7e:61:87:13:56:d4:84:9b:0b:b3:9e:ef:c9:d0: 04:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:31:18:D6:3C:00:F2:0A:43:E3:3D:E5:F8:24:B8:C7:36:02:AB:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/5eda4636-65ba-33d9-aa37-2ae89912698e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.crl X509v3 Authority Key Identifier: keyid:D9:84:FC:01:25:1A:F5:E5:ED:9B:B3:69:50:58:31:B7:12:47:29:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer sbgp-ipAddrBlock: critical IPv4: 170.176.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:4a:63:28:2d:f1:62:ce:51:4d:01:22:ca:e5:f9:8c:8c:28: f6:3e:4e:6f:c5:31:d6:1d:46:50:d0:29:6a:04:48:c4:e3:96: 4a:54:b5:23:a8:13:a0:9f:54:29:b1:72:db:6d:b8:78:32:8f: 77:7f:44:b8:f8:21:66:c1:f8:09:42:2b:ed:d3:dc:86:9f:35: 45:3c:af:99:ae:ab:5d:63:e5:d5:97:67:15:6d:0c:01:d6:81: b5:54:f5:33:7c:22:ea:53:00:67:bf:43:f6:9b:ce:bf:dc:c4: 8c:6f:98:25:6b:a0:54:de:0d:df:e7:83:8e:f1:52:41:b0:35: 35:df:fb:83:53:65:37:9b:63:ec:c3:32:69:1f:3e:e6:c9:de: 58:29:68:76:de:29:9f:02:e9:3c:b1:5c:4d:79:57:67:6c:c8: 94:6f:e4:26:18:79:ff:2b:f9:62:1d:df:30:91:37:a7:02:65: 28:8d:58:31:2b:98:ac:a5:63:79:fe:bf:fe:70:52:b6:16:70: 31:90:16:05:a8:14:9a:4e:f1:a2:e4:c4:fb:e3:8f:d3:4e:98: 96:1a:2a:ed:6f:85:28:a3:7f:00:4c:57:0c:8c:4b:b9:2d:e3: bd:ed:3d:8b:f9:64:a6:2a:bc:4b:48:6a:fa:fc:eb:73:d8:1f: 96:21:11:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElX9AcNtzLAwFTkH4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODI0ZGZiNWYtODU4MC00OGZmLWIzMmUtZmQzOTNmYTdk Y2M0MB4XDTI1MDMyOTAxMDAzOVoXDTI1MDYyNzAxMDAzOVowLzEtMCsGA1UEAxMk NDcyNzYzM2QtODQzNy00YWZkLThhMzctNTk5N2NjZjY5MzQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi55eIW2dQGO74hz/VeOKWeQlqlV4T7FPM2iP XVNLNnyDXtr2rgNVZTvA/TR9/EzY3HC3JUZSUvQJSEV5MA1qZYBDHdiSdcJVTybo xuFh6dlv1tQ7aUR4rkQ/hk1D0W5HWxpdNk7oLtjTL9osDsb35s1G6ol7+wChPXGg I32RzHh63FOswDF38ZnsgQhWlLXGr6iAab8b/hBc12Qi9HWsi6jNC1AFposeOzOa 1jm69ietL8SfiwxIOBRr5vGLWYF8uFDUoo0M4rMkCN6p7MT5w5Mu+vyhdYiPDNZu 2tXkW3gXx7v5iO5WKdkWb6zBjHAvfmGHE1bUhJsLs57vydAEwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLUxGNY8APIKQ+M95fgkuMc2AqsyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84MjRk ZmI1Zi04NTgwLTQ4ZmYtYjMyZS1mZDM5M2ZhN2RjYzQvNWVkYTQ2MzYtNjViYS0z M2Q5LWFhMzctMmFlODk5MTI2OThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODI0ZGZiNWYtODU4MC00OGZmLWIz MmUtZmQzOTNmYTdkY2M0LzgyNGRmYjVmLTg1ODAtNDhmZi1iMzJlLWZkMzkzZmE3 ZGNjNC5jcmwwHwYDVR0jBBgwFoAU2YT8ASUa9eXtm7NpUFgxtxJHKZYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84MjRkZmI1Zi04NTgwLTQ4ZmYtYjMyZS1mZDM5 M2ZhN2RjYzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqrCYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF5KYygt8WLOUU0BIsrl+YyMKPY+Tm/FMdYdRlDQKWoESMTjlkpUtSOo E6CfVCmxctttuHgyj3d/RLj4IWbB+AlCK+3T3IafNUU8r5muq11j5dWXZxVtDAHW gbVU9TN8IupTAGe/Q/abzr/cxIxvmCVroFTeDd/ng47xUkGwNTXf+4NTZTebY+zD MmkfPubJ3lgpaHbeKZ8C6TyxXE15V2dsyJRv5CYYef8r+WId3zCRN6cCZSiNWDEr mKylY3n+v/5wUrYWcDGQFgWoFJpO8aLkxPvjj9NOmJYaKu1vhSijfwBMVwyMS7kt 473tPYv5ZKYqvEtIavr863PYH5YhEXs= -----END CERTIFICATE-----Generated at Sun Apr 27 01:01:37 2025 by rpki-client