$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/12b496d5-5cb5-36f8-baf0-9e729b598d53.roa File: 12b496d5-5cb5-36f8-baf0-9e729b598d53.roa (raw, json) Hash identifier: dvbsaTfGYZDVZ8aW2VLsoZqFsWqQ/R0mlBDRfmZ/3eI= Subject key identifier: 30:63:A6:4E:02:77:D1:DE:6D:26:7B:9F:DA:10:BF:81:F7:40:8F:CF Certificate issuer: /CN=dc455e58-6189-4f28-b803-61a965a21c65 Certificate serial: 010D0C9F4328584961B9879442E5762AF0658F40 Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/12b496d5-5cb5-36f8-baf0-9e729b598d53.roa Signing time: Tue 01 Apr 2025 13:01:00 +0000 ROA not before: Tue 01 Apr 2025 13:01:00 +0000 ROA not after: Mon 30 Jun 2025 13:01:00 +0000 asID: 31898 IP address blocks: 170.114.104.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:61:b9:87:94:42:e5:76:2a:f0:65:8f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65 Validity Not Before: Apr 1 13:01:00 2025 GMT Not After : Jun 30 13:01:00 2025 GMT Subject: CN=dc3f1e67-34f4-42eb-81da-71dc07c204fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:4c:0e:0a:e0:be:e7:18:0c:6b:b9:ec:f7:f8: db:bd:db:12:95:21:02:77:00:89:ca:ee:12:a7:ed: 46:d9:40:8a:50:78:5d:54:5f:ae:a0:39:79:e6:64: a9:af:47:fd:cd:e6:ed:4a:dd:e4:1c:22:50:d9:96: 9f:cd:05:2d:b5:09:0f:5c:62:38:6d:e6:0c:35:92: 50:04:f2:7c:ab:46:20:f2:db:83:44:0e:a8:0d:23: ef:28:50:d1:28:96:cd:d7:53:b1:21:2f:d3:5e:92: ff:aa:bd:43:99:29:66:bf:61:21:a7:6a:3e:c6:b4: c4:7d:bb:c2:08:0f:92:0f:c1:21:28:bb:0e:2c:8b: 45:1e:68:68:db:99:78:31:10:bf:c9:99:1b:5b:b7: 73:cc:37:3e:c3:54:87:49:8a:8b:b9:c9:0f:68:ac: 7e:89:f3:b6:44:7d:5a:d3:d6:20:55:5a:6a:4c:eb: dc:98:9b:5c:78:f7:9d:77:00:b6:70:0c:48:08:0b: c0:18:c0:b8:8f:f4:ac:c8:04:d2:89:0e:62:39:9e: a0:7c:2a:5f:8a:c2:76:db:90:75:11:04:9b:b2:43: 1e:5c:7e:37:76:1d:bf:c2:dc:81:63:27:31:31:d5: dd:f7:ea:ed:f9:1a:13:e4:6a:25:81:17:af:e7:b4: af:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:63:A6:4E:02:77:D1:DE:6D:26:7B:9F:DA:10:BF:81:F7:40:8F:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/12b496d5-5cb5-36f8-baf0-9e729b598d53.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl X509v3 Authority Key Identifier: keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer sbgp-ipAddrBlock: critical IPv4: 170.114.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:2d:03:20:1a:92:8a:66:16:8b:a5:b6:d8:bb:ae:c6:1e:f1: ea:18:36:18:f3:88:2d:1b:19:3a:6a:5c:3d:46:5c:4f:f7:9d: f4:28:16:a1:33:ca:c8:bf:5a:4b:ef:5d:ea:5f:00:41:c3:17: 7d:5a:34:b1:f2:94:e5:61:7b:9d:3c:2e:1c:8e:19:5c:69:53: a9:93:94:7e:6f:38:49:4a:84:ad:fc:70:15:3b:e1:6e:6c:78: 2d:e8:27:cc:4c:f7:e7:a4:bc:b7:72:9e:4e:eb:ec:04:ce:11: 57:63:98:f7:b8:47:f3:b6:fb:05:9b:63:f6:8a:96:61:f2:94: a6:3d:92:80:a7:b6:e7:57:14:00:74:f8:80:27:16:7d:19:c5: 84:42:24:75:d0:5e:d9:05:ab:66:a2:12:21:f5:aa:9b:ff:50: 73:5c:c8:48:ae:dc:92:3a:98:36:60:92:99:f0:31:ea:f9:ea: bd:f3:dd:0c:b4:e2:bf:e6:39:86:99:2e:7a:e4:2d:cd:04:33: 36:e1:61:bd:fe:50:c2:b9:de:78:77:04:94:2f:ed:81:2d:c1: 92:46:25:05:a9:94:e3:01:ac:cc:51:d8:e5:4c:6d:fa:af:31: 55:5a:f9:7e:f3:43:b9:e8:18:11:df:c3:a9:01:f6:fa:12:dc: 21:f7:b5:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElhuYeUQuV2KvBlj0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx YzY1MB4XDTI1MDQwMTEzMDEwMFoXDTI1MDYzMDEzMDEwMFowLzEtMCsGA1UEAxMk ZGMzZjFlNjctMzRmNC00MmViLTgxZGEtNzFkYzA3YzIwNGZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUwOCuC+5xgMa7ns9/jbvdsSlSECdwCJyu4S p+1G2UCKUHhdVF+uoDl55mSpr0f9zebtSt3kHCJQ2ZafzQUttQkPXGI4beYMNZJQ BPJ8q0Yg8tuDRA6oDSPvKFDRKJbN11OxIS/TXpL/qr1DmSlmv2Ehp2o+xrTEfbvC CA+SD8EhKLsOLItFHmho25l4MRC/yZkbW7dzzDc+w1SHSYqLuckPaKx+ifO2RH1a 09YgVVpqTOvcmJtcePeddwC2cAxICAvAGMC4j/SsyATSiQ5iOZ6gfCpfisJ225B1 EQSbskMeXH43dh2/wtyBYycxMdXd9+rt+RoT5GolgRev57SvBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDBjpk4Cd9HebSZ7n9oQv4H3QI/PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1 NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvMTJiNDk2ZDUtNWNiNS0z NmY4LWJhZjAtOWU3MjliNTk4ZDUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4 MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5 NjVhMjFjNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqnJoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABMtAyAakopmFoultti7rsYe8eoYNhjziC0bGTpqXD1GXE/3nfQoFqEz ysi/WkvvXepfAEHDF31aNLHylOVhe508LhyOGVxpU6mTlH5vOElKhK38cBU74W5s eC3oJ8xM9+ekvLdynk7r7ATOEVdjmPe4R/O2+wWbY/aKlmHylKY9koCntudXFAB0 +IAnFn0ZxYRCJHXQXtkFq2aiEiH1qpv/UHNcyEiu3JI6mDZgkpnwMer56r3z3Qy0 4r/mOYaZLnrkLc0EMzbhYb3+UMK53nh3BJQv7YEtwZJGJQWplOMBrMxR2OVMbfqv MVVa+X7zQ7noGBHfw6kB9voS3CH3tRw= -----END CERTIFICATE-----Generated at Sat Apr 26 16:10:37 2025 by rpki-client