$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/d490b4ec-a37d-3473-800b-69852b5ca56d.roa File: d490b4ec-a37d-3473-800b-69852b5ca56d.roa (raw, json) Hash identifier: eaHq93FRbG/Cjku3FhAVFz9OHqBfwsr4bE6tbJ+qoqQ= Subject key identifier: 4F:23:A0:8D:D6:60:92:58:8F:E3:3A:86:33:17:23:FB:C4:D7:1C:59 Certificate issuer: /CN=824dfb5f-8580-48ff-b32e-fd393fa7dcc4 Certificate serial: 010D0C9F43285848EF615C150CAE6DFDBAE3F480 Authority key identifier: D9:84:FC:01:25:1A:F5:E5:ED:9B:B3:69:50:58:31:B7:12:47:29:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/d490b4ec-a37d-3473-800b-69852b5ca56d.roa Signing time: Wed 19 Feb 2025 14:00:52 +0000 ROA not before: Wed 19 Feb 2025 14:00:52 +0000 ROA not after: Tue 20 May 2025 13:00:52 +0000 asID: 14618 IP address blocks: 170.176.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ef:61:5c:15:0c:ae:6d:fd:ba:e3:f4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=824dfb5f-8580-48ff-b32e-fd393fa7dcc4 Validity Not Before: Feb 19 14:00:52 2025 GMT Not After : May 20 13:00:52 2025 GMT Subject: CN=876a03c1-9c29-4905-9e50-bcf26d38193b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:ae:a1:ab:3f:1d:0a:93:14:c0:e0:99:0d:56: d7:af:1c:e5:99:5e:1a:9d:8c:fc:21:09:06:2e:50: fd:51:83:e6:14:03:b1:d1:aa:cd:b6:9f:52:38:3a: e3:a3:8c:21:3a:b0:4a:a1:11:ba:66:a6:5d:2c:f9: 1e:d5:c6:a6:61:6d:21:42:d5:b6:c0:13:95:75:51: bd:e5:bb:b3:40:02:45:4d:7c:ce:58:22:92:25:76: 17:42:ee:2d:b9:78:94:6c:73:fb:a3:13:17:d6:73: 29:55:a0:e9:c5:70:bf:e6:4a:13:af:7c:29:5c:b1: b0:71:94:d8:f3:c7:20:87:7b:8c:de:6f:8b:af:ef: 94:54:7c:83:dc:a6:1a:7c:f8:37:11:a6:3e:78:39: c5:97:ea:93:c1:9a:21:70:29:9d:bf:83:11:53:93: cc:53:63:e2:32:13:a9:58:86:c0:a6:db:83:08:0c: 52:7f:ec:63:70:95:c6:4a:03:64:99:76:83:ce:ea: f5:e5:47:57:b9:b6:6a:b3:79:0d:e4:03:43:62:38: 77:9b:ac:40:f4:95:32:1f:02:17:60:45:92:db:91: 8c:46:3b:f9:92:58:cc:d1:6e:ba:cf:28:d7:d8:20: 9a:26:e6:3c:32:39:8b:17:b9:7a:20:4b:a4:7a:73: c4:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:23:A0:8D:D6:60:92:58:8F:E3:3A:86:33:17:23:FB:C4:D7:1C:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/d490b4ec-a37d-3473-800b-69852b5ca56d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.crl X509v3 Authority Key Identifier: keyid:D9:84:FC:01:25:1A:F5:E5:ED:9B:B3:69:50:58:31:B7:12:47:29:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer sbgp-ipAddrBlock: critical IPv4: 170.176.160.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:13:d0:55:8e:17:18:a2:fa:bd:5a:27:69:57:7a:05:4b:74: 1a:8c:a1:0b:d1:0c:1a:aa:e5:83:38:9e:c3:c2:bd:cd:c2:92: 54:ed:45:30:91:15:16:44:1a:2a:86:75:01:02:5b:99:bf:38: 6a:93:d8:81:1e:fd:3b:03:df:b6:01:05:de:f1:69:bc:3c:50: f5:5b:bf:74:e7:12:65:32:ab:4a:bc:9f:80:9f:16:2d:e5:28: 79:1b:b2:14:09:ff:89:9b:14:b2:28:bb:02:74:79:c7:1b:af: 70:0f:87:91:f5:fa:35:b9:17:e8:b1:ce:58:9a:59:fe:31:5a: db:12:42:7a:1f:14:a2:ca:be:34:2c:b1:04:79:bc:8b:98:e7: 77:0d:88:16:ce:32:b2:45:4c:6e:38:42:53:82:2c:3e:1c:f5: a6:92:99:9f:8d:33:2f:81:9c:59:fc:f1:cb:d5:32:31:08:e3: 57:8b:ae:0d:27:44:e8:d9:21:08:dd:12:7a:3f:b9:63:ea:3a: cd:09:fa:3e:2e:a5:5e:8c:fb:04:04:73:24:3f:29:91:48:ad: c8:e9:a4:6e:4d:09:c9:c7:ee:ab:ee:7e:c3:20:f7:fe:1c:d7: 8c:ab:85:52:63:3e:21:8f:7e:3e:73:50:fd:d5:f8:e7:c0:81: 2b:9d:2f:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjvYVwVDK5t/brj9IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODI0ZGZiNWYtODU4MC00OGZmLWIzMmUtZmQzOTNmYTdk Y2M0MB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk ODc2YTAzYzEtOWMyOS00OTA1LTllNTAtYmNmMjZkMzgxOTNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg66hqz8dCpMUwOCZDVbXrxzlmV4anYz8IQkG LlD9UYPmFAOx0arNtp9SODrjo4whOrBKoRG6ZqZdLPke1camYW0hQtW2wBOVdVG9 5buzQAJFTXzOWCKSJXYXQu4tuXiUbHP7oxMX1nMpVaDpxXC/5koTr3wpXLGwcZTY 88cgh3uM3m+Lr++UVHyD3KYafPg3EaY+eDnFl+qTwZohcCmdv4MRU5PMU2PiMhOp WIbAptuDCAxSf+xjcJXGSgNkmXaDzur15UdXubZqs3kN5ANDYjh3m6xA9JUyHwIX YEWS25GMRjv5kljM0W66zyjX2CCaJuY8MjmLF7l6IEukenPEoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE8joI3WYJJYj+M6hjMXI/vE1xxZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84MjRk ZmI1Zi04NTgwLTQ4ZmYtYjMyZS1mZDM5M2ZhN2RjYzQvZDQ5MGI0ZWMtYTM3ZC0z NDczLTgwMGItNjk4NTJiNWNhNTZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODI0ZGZiNWYtODU4MC00OGZmLWIz MmUtZmQzOTNmYTdkY2M0LzgyNGRmYjVmLTg1ODAtNDhmZi1iMzJlLWZkMzkzZmE3 ZGNjNC5jcmwwHwYDVR0jBBgwFoAU2YT8ASUa9eXtm7NpUFgxtxJHKZYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84MjRkZmI1Zi04NTgwLTQ4ZmYtYjMyZS1mZDM5 M2ZhN2RjYzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqrCgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGcT0FWOFxii+r1aJ2lXegVLdBqMoQvRDBqq5YM4nsPCvc3CklTtRTCR FRZEGiqGdQECW5m/OGqT2IEe/TsD37YBBd7xabw8UPVbv3TnEmUyq0q8n4CfFi3l KHkbshQJ/4mbFLIouwJ0eccbr3APh5H1+jW5F+ixzliaWf4xWtsSQnofFKLKvjQs sQR5vIuY53cNiBbOMrJFTG44QlOCLD4c9aaSmZ+NMy+BnFn88cvVMjEI41eLrg0n ROjZIQjdEno/uWPqOs0J+j4upV6M+wQEcyQ/KZFIrcjppG5NCcnH7qvufsMg9/4c 14yrhVJjPiGPfj5zUP3V+OfAgSudLzs= -----END CERTIFICATE-----Generated at Sat Apr 26 13:18:15 2025 by rpki-client