$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/5253ae96-6f67-3e85-86be-36c4a5535f8d.roa File: 5253ae96-6f67-3e85-86be-36c4a5535f8d.roa (raw, json) Hash identifier: BA59tVpC5tv74g8tKwqqa2uYW5nwSDHEX3fAaFn35MY= Subject key identifier: 37:DF:C4:D8:12:FA:78:A8:11:4F:CD:F5:CA:EB:6E:4E:75:C8:A4:03 Certificate issuer: /CN=dc455e58-6189-4f28-b803-61a965a21c65 Certificate serial: 010D0C9F43285848CDE110934C408470B0E4C4C0 Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/5253ae96-6f67-3e85-86be-36c4a5535f8d.roa Signing time: Fri 07 Feb 2025 14:00:53 +0000 ROA not before: Fri 07 Feb 2025 14:00:53 +0000 ROA not after: Thu 08 May 2025 13:00:53 +0000 asID: 31898 IP address blocks: 170.114.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cd:e1:10:93:4c:40:84:70:b0:e4:c4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65 Validity Not Before: Feb 7 14:00:53 2025 GMT Not After : May 8 13:00:53 2025 GMT Subject: CN=bef82b4d-93d6-4b19-b8d3-9f6270599de6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:67:05:36:be:71:28:e0:26:9e:96:e7:b1:d3: f5:ba:da:1f:25:0c:de:c3:20:73:cd:e4:b3:8a:26: f0:ab:9f:5c:89:9b:d2:b3:4e:f9:d1:72:9b:17:48: 51:3d:6f:a1:96:d3:61:29:ca:7f:d1:85:64:a0:3d: e8:20:52:00:e6:e2:cf:fa:7a:8a:b8:e8:67:74:c0: 80:59:da:40:cc:4b:c7:6e:f8:e8:81:9d:ed:18:38: fa:d3:6d:7b:30:a2:0f:4f:a5:92:b1:d0:62:4f:80: 3c:43:9a:6f:9a:05:41:fa:a8:58:f3:e9:95:71:fe: 2b:a6:72:da:5f:db:98:19:2e:d9:75:59:21:a4:a5: ef:19:36:20:42:8f:ec:7b:a7:23:fb:ab:85:e1:9d: 79:4d:ce:1f:3e:08:88:6e:99:6a:f0:b2:41:52:2e: 98:ea:d9:20:86:ab:c3:94:ec:6c:d4:51:f6:92:53: d8:e1:97:04:21:c6:50:cc:01:6c:b2:c2:03:75:d4: d8:a6:06:29:21:b2:1e:9c:41:8e:70:95:14:82:2a: ab:d1:49:a8:4d:56:74:9a:ab:d3:f5:11:dc:6f:c6: 86:95:e3:5b:f9:f7:eb:dd:52:65:18:af:66:8f:25: cb:49:f9:0c:55:34:18:d3:ca:72:71:b4:bd:9f:ba: 7e:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:DF:C4:D8:12:FA:78:A8:11:4F:CD:F5:CA:EB:6E:4E:75:C8:A4:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/5253ae96-6f67-3e85-86be-36c4a5535f8d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl X509v3 Authority Key Identifier: keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer sbgp-ipAddrBlock: critical IPv4: 170.114.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:54:0d:9d:87:9d:ac:69:7f:74:d8:2d:75:0f:ae:14:97:4c: 81:04:5b:ed:03:1d:63:34:2e:3c:60:dc:f7:d6:95:99:ac:3d: a7:2f:8f:57:4f:10:d3:46:d7:0d:ca:b2:3e:4e:d2:50:8e:1b: 66:40:bf:ce:19:d7:20:99:bf:4c:52:45:13:69:33:a8:a7:5b: 80:8f:5c:39:fd:af:fa:cc:56:75:a5:a8:fb:3a:96:81:2f:ee: 27:e6:3a:da:a7:04:10:8f:8b:a1:34:a4:8b:8f:cf:14:5c:a3: 45:5d:6a:af:30:50:94:90:fb:31:8e:b9:f8:ac:a0:e1:b2:11: 88:5c:a1:3a:3f:a5:9a:9e:63:c1:c6:62:3b:bc:6a:be:e2:55: ed:50:9b:bc:93:bc:93:be:2b:fd:23:b2:3a:40:bc:a5:1f:33: 11:8d:dd:4e:59:76:66:26:f5:c6:4a:25:56:ce:ba:13:93:30: 33:17:5d:41:4c:b5:03:97:88:00:02:e5:c6:e5:98:a5:43:87: ba:8b:00:61:34:fe:cf:f5:d6:93:15:b6:34:24:96:d5:92:89: 85:30:f5:44:28:65:34:41:2d:38:94:40:e9:2f:57:2d:96:f0: 4e:d7:9c:e3:39:e7:40:2e:02:f9:7f:3a:9c:ef:18:f5:ff:60: 6a:5c:27:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjN4RCTTECEcLDkxMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx YzY1MB4XDTI1MDIwNzE0MDA1M1oXDTI1MDUwODEzMDA1M1owLzEtMCsGA1UEAxMk YmVmODJiNGQtOTNkNi00YjE5LWI4ZDMtOWY2MjcwNTk5ZGU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomcFNr5xKOAmnpbnsdP1utofJQzewyBzzeSz iibwq59ciZvSs0750XKbF0hRPW+hltNhKcp/0YVkoD3oIFIA5uLP+nqKuOhndMCA WdpAzEvHbvjogZ3tGDj60217MKIPT6WSsdBiT4A8Q5pvmgVB+qhY8+mVcf4rpnLa X9uYGS7ZdVkhpKXvGTYgQo/se6cj+6uF4Z15Tc4fPgiIbplq8LJBUi6Y6tkghqvD lOxs1FH2klPY4ZcEIcZQzAFsssIDddTYpgYpIbIenEGOcJUUgiqr0UmoTVZ0mqvT 9RHcb8aGleNb+ffr3VJlGK9mjyXLSfkMVTQY08pycbS9n7p+PQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDffxNgS+nioEU/N9crrbk51yKQDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1 NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvNTI1M2FlOTYtNmY2Ny0z ZTg1LTg2YmUtMzZjNGE1NTM1ZjhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4 MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5 NjVhMjFjNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqnJIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAJUDZ2Hnaxpf3TYLXUPrhSXTIEEW+0DHWM0Ljxg3PfWlZmsPacvj1dP ENNG1w3Ksj5O0lCOG2ZAv84Z1yCZv0xSRRNpM6inW4CPXDn9r/rMVnWlqPs6loEv 7ifmOtqnBBCPi6E0pIuPzxRco0Vdaq8wUJSQ+zGOufisoOGyEYhcoTo/pZqeY8HG Yju8ar7iVe1Qm7yTvJO+K/0jsjpAvKUfMxGN3U5ZdmYm9cZKJVbOuhOTMDMXXUFM tQOXiAAC5cblmKVDh7qLAGE0/s/11pMVtjQkltWSiYUw9UQoZTRBLTiUQOkvVy2W 8E7XnOM550AuAvl/OpzvGPX/YGpcJ3M= -----END CERTIFICATE-----Generated at Sun Apr 27 09:06:04 2025 by rpki-client