$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/01844c74-2602-37e4-ab14-a01f52a17442.roa File: 01844c74-2602-37e4-ab14-a01f52a17442.roa (raw, json) Hash identifier: 6pmzKvUKbKZJWr/FYnkpHroeg+kMNeFhPNM4JYFGBXQ= Subject key identifier: 50:7B:59:8F:B4:45:F3:FE:FF:4D:A4:D6:0F:61:0A:E1:78:6E:75:42 Certificate issuer: /CN=be3ff10d-9ac5-46a9-8eb4-823027607ca1 Certificate serial: 010D0C9F4328584953C40D934B7343DA136FA340 Authority key identifier: C5:FD:6F:CD:D2:74:9A:00:05:9F:45:D5:49:E1:47:AE:5D:95:65:C6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/01844c74-2602-37e4-ab14-a01f52a17442.roa Signing time: Thu 27 Mar 2025 13:00:52 +0000 ROA not before: Thu 27 Mar 2025 13:00:52 +0000 ROA not after: Wed 25 Jun 2025 13:00:52 +0000 asID: 16509 IP address blocks: 170.89.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/be3ff10d-9ac5-46a9-8eb4-823027607ca1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/be3ff10d-9ac5-46a9-8eb4-823027607ca1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:53:c4:0d:93:4b:73:43:da:13:6f:a3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be3ff10d-9ac5-46a9-8eb4-823027607ca1 Validity Not Before: Mar 27 13:00:52 2025 GMT Not After : Jun 25 13:00:52 2025 GMT Subject: CN=d8d56c6c-f7e9-4885-a447-2f45072c2765 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:0b:ad:50:cf:1c:88:dc:76:7b:ac:25:57:58: 60:62:1e:33:16:3b:67:79:23:f2:3d:9e:09:59:f8: e8:4b:de:de:2e:c0:0f:c5:0d:40:50:33:d7:ff:bd: c5:7e:e0:8a:42:c8:b5:13:2c:5c:e1:da:00:3c:8d: 07:d6:29:90:9c:a8:f2:d9:f7:ee:03:fd:05:da:a8: 8e:92:bb:66:88:b3:34:ad:3e:52:38:32:4b:bd:08: 6d:40:b0:2d:94:84:c0:8c:2a:bc:d6:7d:44:06:ad: b3:08:7c:64:3e:ec:55:77:ec:0e:be:cd:76:69:7b: 62:58:93:98:71:77:bf:ca:a7:1f:cb:64:6e:b6:b4: ff:8d:91:0a:ae:7e:c9:84:4c:04:32:00:3d:67:e6: ae:56:44:6b:aa:83:4d:d1:64:60:ff:67:30:4d:d7: 16:93:59:cb:e0:70:d0:7a:a3:42:56:44:7f:75:0f: 19:41:1b:0f:b3:30:e7:f3:4f:71:7d:d6:35:9b:36: 82:1a:55:5e:c3:d5:30:b8:d5:a6:80:10:3d:87:d1: 10:52:c2:3b:43:72:a5:96:b8:64:03:3b:ad:0a:66: 9c:83:9b:ea:20:50:05:bb:0d:65:45:ba:98:8e:ea: b1:39:98:48:d3:43:46:81:78:a7:b7:cb:e1:f9:df: 7e:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:7B:59:8F:B4:45:F3:FE:FF:4D:A4:D6:0F:61:0A:E1:78:6E:75:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/01844c74-2602-37e4-ab14-a01f52a17442.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/be3ff10d-9ac5-46a9-8eb4-823027607ca1.crl X509v3 Authority Key Identifier: keyid:C5:FD:6F:CD:D2:74:9A:00:05:9F:45:D5:49:E1:47:AE:5D:95:65:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1.cer sbgp-ipAddrBlock: critical IPv4: 170.89.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:86:7a:8f:3a:c4:39:e1:40:22:bf:03:58:30:16:b0:b7:71: fc:ed:0f:1e:e3:57:c6:21:bf:59:69:09:46:4a:c9:c9:76:27: 00:b5:3e:43:e3:f0:ad:c5:b5:86:ca:19:22:7f:81:88:b6:9e: 6b:be:7e:94:00:7a:d0:2d:c2:11:8b:95:95:94:16:8b:da:80: 74:6e:f4:d4:e3:e9:01:b3:76:72:34:ec:c3:62:f5:6f:56:da: 02:b9:e7:0f:bf:f6:a7:3a:a6:4b:fe:24:7f:59:5e:02:03:ac: 61:50:db:76:5e:b8:33:33:8d:83:79:57:9d:96:81:0f:1a:e5: c5:0c:1f:9b:ab:6a:59:40:ff:b4:de:84:e4:f8:e2:fc:97:a9: fb:52:99:a3:3c:03:fa:3c:2c:a5:c2:dd:59:4f:ef:c3:4d:55: df:ae:63:ea:d6:54:72:ac:94:1f:2c:5b:43:2b:70:93:d5:c9: cd:0d:af:89:0f:87:4a:18:26:50:b1:b2:e5:66:a5:78:14:97: 4f:07:55:31:e3:a2:38:0c:b9:2b:5c:df:e7:a6:e3:35:a3:69: f7:70:c5:d1:91:a6:0a:0c:fe:c0:a1:54:6c:a8:78:94:c4:5a: cd:e9:1c:34:70:ad:a6:68:ec:44:ab:85:d0:f2:81:12:db:6c: b3:ef:96:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElTxA2TS3ND2hNvo0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmUzZmYxMGQtOWFjNS00NmE5LThlYjQtODIzMDI3NjA3 Y2ExMB4XDTI1MDMyNzEzMDA1MloXDTI1MDYyNTEzMDA1MlowLzEtMCsGA1UEAxMk ZDhkNTZjNmMtZjdlOS00ODg1LWE0NDctMmY0NTA3MmMyNzY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjgutUM8ciNx2e6wlV1hgYh4zFjtneSPyPZ4J WfjoS97eLsAPxQ1AUDPX/73FfuCKQsi1Eyxc4doAPI0H1imQnKjy2ffuA/0F2qiO krtmiLM0rT5SODJLvQhtQLAtlITAjCq81n1EBq2zCHxkPuxVd+wOvs12aXtiWJOY cXe/yqcfy2RutrT/jZEKrn7JhEwEMgA9Z+auVkRrqoNN0WRg/2cwTdcWk1nL4HDQ eqNCVkR/dQ8ZQRsPszDn809xfdY1mzaCGlVew9UwuNWmgBA9h9EQUsI7Q3Kllrhk AzutCmacg5vqIFAFuw1lRbqYjuqxOZhI00NGgXint8vh+d9+JwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFB7WY+0RfP+/02k1g9hCuF4bnVCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iZTNm ZjEwZC05YWM1LTQ2YTktOGViNC04MjMwMjc2MDdjYTEvMDE4NDRjNzQtMjYwMi0z N2U0LWFiMTQtYTAxZjUyYTE3NDQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYmUzZmYxMGQtOWFjNS00NmE5LThl YjQtODIzMDI3NjA3Y2ExL2JlM2ZmMTBkLTlhYzUtNDZhOS04ZWI0LTgyMzAyNzYw N2NhMS5jcmwwHwYDVR0jBBgwFoAUxf1vzdJ0mgAFn0XVSeFHrl2VZcYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iZTNmZjEwZC05YWM1LTQ2YTktOGViNC04MjMw Mjc2MDdjYTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGqlkAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI2Geo86xDnhQCK/A1gwFrC3cfztDx7jV8Yhv1lpCUZKycl2JwC1PkPj 8K3FtYbKGSJ/gYi2nmu+fpQAetAtwhGLlZWUFovagHRu9NTj6QGzdnI07MNi9W9W 2gK55w+/9qc6pkv+JH9ZXgIDrGFQ23ZeuDMzjYN5V52WgQ8a5cUMH5urallA/7Te hOT44vyXqftSmaM8A/o8LKXC3VlP78NNVd+uY+rWVHKslB8sW0MrcJPVyc0Nr4kP h0oYJlCxsuVmpXgUl08HVTHjojgMuStc3+em4zWjafdwxdGRpgoM/sChVGyoeJTE Ws3pHDRwraZo7ESrhdDygRLbbLPvlhk= -----END CERTIFICATE-----Generated at Sat Apr 26 17:47:21 2025 by rpki-client