$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/7f02fce9-3961-3b18-8795-ab236c2e0478.roa File: 7f02fce9-3961-3b18-8795-ab236c2e0478.roa (raw, json) Hash identifier: K0ef1Rrxp/qyvE6HJdpH++cDOggAXWOONgKOgztvlbk= Subject key identifier: DF:A7:1F:AC:F8:2A:4A:FE:B4:E9:0C:E4:48:46:09:94:39:17:67:FE Certificate issuer: /CN=be3ff10d-9ac5-46a9-8eb4-823027607ca1 Certificate serial: 010D0C9F4328584953C40DA75DD23B55B739E300 Authority key identifier: C5:FD:6F:CD:D2:74:9A:00:05:9F:45:D5:49:E1:47:AE:5D:95:65:C6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/7f02fce9-3961-3b18-8795-ab236c2e0478.roa Signing time: Thu 27 Mar 2025 13:00:52 +0000 ROA not before: Thu 27 Mar 2025 13:00:52 +0000 ROA not after: Wed 25 Jun 2025 13:00:52 +0000 asID: 16509 IP address blocks: 170.89.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/be3ff10d-9ac5-46a9-8eb4-823027607ca1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/be3ff10d-9ac5-46a9-8eb4-823027607ca1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:53:c4:0d:a7:5d:d2:3b:55:b7:39:e3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be3ff10d-9ac5-46a9-8eb4-823027607ca1 Validity Not Before: Mar 27 13:00:52 2025 GMT Not After : Jun 25 13:00:52 2025 GMT Subject: CN=5f5cc3b7-25e4-4090-ab21-0db56d5c3dfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:45:65:32:64:e4:78:75:06:ae:b0:74:4f:81: b6:2e:0f:19:aa:4a:26:84:a2:05:57:90:a5:27:cc: 98:2f:54:46:79:9d:29:61:e5:ab:c0:43:83:b7:cc: 27:f5:18:f9:83:a8:99:29:4c:68:9f:4b:5f:35:73: 8c:79:92:d1:4e:81:ca:0e:22:be:d2:a4:e6:22:5c: 20:08:32:17:d4:cd:2e:f4:bd:49:e8:fb:49:f9:b7: ee:f0:89:4e:c3:4a:fa:d6:d4:7a:7f:ed:49:1f:b4: fb:c4:25:a6:9b:cb:a7:9a:80:f1:60:13:33:8e:2c: 01:26:da:94:bb:e2:6a:06:20:8a:77:39:39:d3:a4: 36:ee:cb:cb:a9:8e:08:91:59:cc:ad:31:43:14:fe: 99:24:41:15:21:80:81:08:84:c8:a6:cc:ac:a1:9e: 10:53:f4:da:d4:35:58:26:62:e3:ea:8f:e4:c7:61: d2:60:c3:4f:7b:07:77:0a:0a:ce:10:8e:c6:df:c3: 49:77:a2:aa:7b:d0:e0:40:24:f3:bd:99:21:c3:16: 4a:8e:89:48:86:7a:1c:b7:30:c0:50:8c:04:0f:72: 24:c7:cc:82:ef:ac:fd:70:7b:a6:1d:8c:f2:aa:4f: c6:95:45:5f:f5:04:ae:47:53:83:26:a5:9c:5a:b6: 5b:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:A7:1F:AC:F8:2A:4A:FE:B4:E9:0C:E4:48:46:09:94:39:17:67:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/7f02fce9-3961-3b18-8795-ab236c2e0478.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/be3ff10d-9ac5-46a9-8eb4-823027607ca1.crl X509v3 Authority Key Identifier: keyid:C5:FD:6F:CD:D2:74:9A:00:05:9F:45:D5:49:E1:47:AE:5D:95:65:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1.cer sbgp-ipAddrBlock: critical IPv4: 170.89.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:05:da:67:2c:b2:d2:6c:2a:b2:35:ab:6d:c0:a1:c7:61:c1: ac:96:9b:b2:16:2d:90:4c:33:51:57:8f:33:76:30:67:3b:77: 93:21:bd:f4:e7:4a:70:e9:41:6d:98:97:3d:c1:42:64:a9:1b: 37:14:87:13:60:bd:95:85:da:dc:d1:36:f6:6f:a9:c0:0b:23: 3d:a4:bb:78:e7:de:af:58:0d:7d:4f:ab:a7:ab:9f:65:c9:0d: 93:fc:1f:22:41:b3:d1:d5:5b:4b:e5:cb:ce:0d:14:a5:8b:68: 16:55:e7:0c:ca:7f:e3:62:46:71:bd:40:bb:a4:83:15:7e:e7: 69:c8:12:18:f1:e7:5b:cf:4e:d3:42:b3:c0:5c:62:54:c0:f7: 9a:31:43:85:b7:90:6d:af:d5:53:19:e7:e3:43:b9:d9:1c:0c: d4:9a:3a:f4:ae:0b:fb:38:7c:60:bc:77:18:0b:73:c3:05:fb: c3:31:2d:7e:9a:2b:3f:20:97:bd:3d:f5:9b:35:7c:73:17:fe: be:b8:b2:1e:5d:23:c6:0c:d0:d5:35:3d:65:4b:aa:25:5c:0d: 90:15:43:a6:a0:61:36:24:4f:06:f7:2f:54:d2:bb:a3:69:29: c4:bc:62:bd:06:01:71:79:12:a0:3c:f3:36:02:70:01:af:22: d9:dc:1f:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElTxA2nXdI7Vbc54wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmUzZmYxMGQtOWFjNS00NmE5LThlYjQtODIzMDI3NjA3 Y2ExMB4XDTI1MDMyNzEzMDA1MloXDTI1MDYyNTEzMDA1MlowLzEtMCsGA1UEAxMk NWY1Y2MzYjctMjVlNC00MDkwLWFiMjEtMGRiNTZkNWMzZGZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUVlMmTkeHUGrrB0T4G2Lg8ZqkomhKIFV5Cl J8yYL1RGeZ0pYeWrwEODt8wn9Rj5g6iZKUxon0tfNXOMeZLRToHKDiK+0qTmIlwg CDIX1M0u9L1J6PtJ+bfu8IlOw0r61tR6f+1JH7T7xCWmm8unmoDxYBMzjiwBJtqU u+JqBiCKdzk506Q27svLqY4IkVnMrTFDFP6ZJEEVIYCBCITIpsysoZ4QU/Ta1DVY JmLj6o/kx2HSYMNPewd3CgrOEI7G38NJd6Kqe9DgQCTzvZkhwxZKjolIhnoctzDA UIwED3Ikx8yC76z9cHumHYzyqk/GlUVf9QSuR1ODJqWcWrZbvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN+nH6z4Kkr+tOkM5EhGCZQ5F2f+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iZTNm ZjEwZC05YWM1LTQ2YTktOGViNC04MjMwMjc2MDdjYTEvN2YwMmZjZTktMzk2MS0z YjE4LTg3OTUtYWIyMzZjMmUwNDc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYmUzZmYxMGQtOWFjNS00NmE5LThl YjQtODIzMDI3NjA3Y2ExL2JlM2ZmMTBkLTlhYzUtNDZhOS04ZWI0LTgyMzAyNzYw N2NhMS5jcmwwHwYDVR0jBBgwFoAUxf1vzdJ0mgAFn0XVSeFHrl2VZcYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iZTNmZjEwZC05YWM1LTQ2YTktOGViNC04MjMw Mjc2MDdjYTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGqlmAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFIF2mcsstJsKrI1q23AocdhwayWm7IWLZBMM1FXjzN2MGc7d5MhvfTn SnDpQW2Ylz3BQmSpGzcUhxNgvZWF2tzRNvZvqcALIz2ku3jn3q9YDX1Pq6ern2XJ DZP8HyJBs9HVW0vly84NFKWLaBZV5wzKf+NiRnG9QLukgxV+52nIEhjx51vPTtNC s8BcYlTA95oxQ4W3kG2v1VMZ5+NDudkcDNSaOvSuC/s4fGC8dxgLc8MF+8MxLX6a Kz8gl7099Zs1fHMX/r64sh5dI8YM0NU1PWVLqiVcDZAVQ6agYTYkTwb3L1TSu6Np KcS8Yr0GAXF5EqA88zYCcAGvItncH+4= -----END CERTIFICATE-----Generated at Sat Apr 26 19:24:03 2025 by rpki-client