$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/aced6c3c-599e-3d5e-8ad8-b92918504da2.roa File: aced6c3c-599e-3d5e-8ad8-b92918504da2.roa (raw, json) Hash identifier: pEHPWT57QxkkIMrcCHRjOEegQbzwCZiFv9yC/0d/jYU= Subject key identifier: 03:76:3F:7C:51:C1:87:4B:7D:9B:AD:77:7E:58:46:F3:9E:4E:FE:48 Certificate issuer: /CN=dc455e58-6189-4f28-b803-61a965a21c65 Certificate serial: 010D0C9F4328584961B987B217B78FE5E2774100 Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/aced6c3c-599e-3d5e-8ad8-b92918504da2.roa Signing time: Tue 01 Apr 2025 13:01:00 +0000 ROA not before: Tue 01 Apr 2025 13:01:00 +0000 ROA not after: Mon 30 Jun 2025 13:01:00 +0000 asID: 31898 IP address blocks: 170.114.120.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:61:b9:87:b2:17:b7:8f:e5:e2:77:41:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65 Validity Not Before: Apr 1 13:01:00 2025 GMT Not After : Jun 30 13:01:00 2025 GMT Subject: CN=05452a68-9dc2-4a4c-92a5-0934ca521e1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:22:ba:53:23:f2:66:26:2a:b2:10:a1:0d:c5: 85:12:e0:77:40:71:0c:ab:22:86:72:ea:95:72:80: 99:75:b0:aa:18:7f:aa:2c:3f:f8:66:cc:f0:1e:96: 49:00:d4:57:06:3c:93:fe:e8:7d:e6:e5:a4:fa:0a: 9b:7f:26:0d:40:2b:f4:db:e0:18:2f:ce:cd:b0:0d: fb:ff:f1:8a:6f:c8:27:59:94:74:f7:cd:b6:6a:a8: 76:19:63:1c:05:de:f8:d0:cd:b1:93:4b:2a:8f:c0: e9:4f:55:77:1e:c2:36:c2:97:6e:33:98:5c:a0:5a: 2c:a1:e8:b4:85:f3:58:1c:01:a8:b7:5e:79:60:dd: 28:4b:93:50:8b:42:9a:d2:7f:5f:03:4c:5c:1b:f3: cd:ad:3d:61:4a:35:f7:5f:e9:c8:9c:06:ce:f5:37: 50:10:6e:a3:d4:9d:4b:1c:00:92:c5:84:61:b8:ec: fa:62:5b:1f:bd:ca:23:16:f9:59:03:36:aa:05:6b: ce:f4:0b:1e:1d:34:1f:d0:35:a1:0e:b2:e3:cd:2a: f5:3c:d7:81:27:44:fd:59:18:ca:06:ce:46:4d:5f: 9e:31:ce:07:d6:1f:b2:3a:c3:ed:6e:c8:7b:4d:5e: e7:56:28:2a:02:2b:da:30:b3:64:d9:5c:d4:c3:33: 13:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:76:3F:7C:51:C1:87:4B:7D:9B:AD:77:7E:58:46:F3:9E:4E:FE:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/aced6c3c-599e-3d5e-8ad8-b92918504da2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl X509v3 Authority Key Identifier: keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer sbgp-ipAddrBlock: critical IPv4: 170.114.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:7b:33:73:f6:8c:46:e3:a7:ee:9e:53:eb:ca:69:55:50:2c: 46:e9:a9:74:76:72:45:31:50:4b:53:00:19:12:51:b4:91:0b: ce:2a:f3:ec:2a:d7:32:4b:d7:b7:10:0f:69:9c:d7:9f:3e:cf: 59:c4:10:a7:c1:03:dc:ff:42:d2:7d:f6:fe:94:90:94:e6:c9: f6:61:73:9c:81:e5:ba:c7:27:00:15:85:bf:0b:10:23:44:6c: 0d:75:93:97:f8:98:4d:08:fe:98:03:5b:f8:14:64:8a:19:7e: ee:3f:88:23:02:ed:80:e7:80:2a:3f:da:41:ea:38:ea:38:a5: 31:86:21:94:4f:2c:e8:54:48:73:8e:ce:f2:3e:2f:22:1a:0c: b6:93:e5:06:1a:d5:2c:e2:4c:8b:96:39:4a:ed:94:04:25:b0: 4c:6d:96:c6:13:d1:fa:8e:93:bd:ec:9b:76:e5:1e:dd:f5:30: 99:bb:98:bd:8c:40:2c:e6:16:1b:c4:6d:b6:b9:8e:26:ab:ee: e5:d5:4e:97:09:93:5c:b3:ae:e0:af:3e:09:5c:be:18:e2:50: ee:06:5d:6c:9f:ab:33:d2:15:8a:2c:79:99:42:59:ca:71:3f: 33:d3:3e:60:e8:97:d5:86:d8:60:9a:b7:fc:5c:d6:dc:11:60: eb:5b:2d:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElhuYeyF7eP5eJ3QQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx YzY1MB4XDTI1MDQwMTEzMDEwMFoXDTI1MDYzMDEzMDEwMFowLzEtMCsGA1UEAxMk MDU0NTJhNjgtOWRjMi00YTRjLTkyYTUtMDkzNGNhNTIxZTFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiSK6UyPyZiYqshChDcWFEuB3QHEMqyKGcuqV coCZdbCqGH+qLD/4ZszwHpZJANRXBjyT/uh95uWk+gqbfyYNQCv02+AYL87NsA37 //GKb8gnWZR09822aqh2GWMcBd740M2xk0sqj8DpT1V3HsI2wpduM5hcoFosoei0 hfNYHAGot155YN0oS5NQi0Ka0n9fA0xcG/PNrT1hSjX3X+nInAbO9TdQEG6j1J1L HACSxYRhuOz6YlsfvcojFvlZAzaqBWvO9AseHTQf0DWhDrLjzSr1PNeBJ0T9WRjK Bs5GTV+eMc4H1h+yOsPtbsh7TV7nVigqAivaMLNk2VzUwzMTywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAN2P3xRwYdLfZutd35YRvOeTv5IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1 NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvYWNlZDZjM2MtNTk5ZS0z ZDVlLThhZDgtYjkyOTE4NTA0ZGEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4 MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5 NjVhMjFjNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqnJ4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGx7M3P2jEbjp+6eU+vKaVVQLEbpqXR2ckUxUEtTABkSUbSRC84q8+wq 1zJL17cQD2mc158+z1nEEKfBA9z/QtJ99v6UkJTmyfZhc5yB5brHJwAVhb8LECNE bA11k5f4mE0I/pgDW/gUZIoZfu4/iCMC7YDngCo/2kHqOOo4pTGGIZRPLOhUSHOO zvI+LyIaDLaT5QYa1SziTIuWOUrtlAQlsExtlsYT0fqOk73sm3blHt31MJm7mL2M QCzmFhvEbba5jiar7uXVTpcJk1yzruCvPglcvhjiUO4GXWyfqzPSFYoseZlCWcpx PzPTPmDol9WG2GCat/xc1twRYOtbLRo= -----END CERTIFICATE-----Generated at Sat Apr 26 16:02:54 2025 by rpki-client