$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/d274a1a4-4284-3ce0-a276-785c1add14e8.roa File: d274a1a4-4284-3ce0-a276-785c1add14e8.roa (raw, json) Hash identifier: OPgF/FWrFb19zjkA9jm48dQcMWfo/d0j7FUN2uyTHaA= Subject key identifier: 59:5C:5B:B7:CC:88:21:26:68:1D:CE:50:21:85:83:B5:63:98:63:C0 Certificate issuer: /CN=dc455e58-6189-4f28-b803-61a965a21c65 Certificate serial: 010D0C9F4328584961B98773C09420C18752A100 Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/d274a1a4-4284-3ce0-a276-785c1add14e8.roa Signing time: Tue 01 Apr 2025 13:01:00 +0000 ROA not before: Tue 01 Apr 2025 13:01:00 +0000 ROA not after: Mon 30 Jun 2025 13:01:00 +0000 asID: 31898 IP address blocks: 170.114.102.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:61:b9:87:73:c0:94:20:c1:87:52:a1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65 Validity Not Before: Apr 1 13:01:00 2025 GMT Not After : Jun 30 13:01:00 2025 GMT Subject: CN=2e85ed31-6c58-4e13-a449-3fbc63339f56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:2c:c0:3f:45:95:a6:f8:16:77:f1:d4:fa:60: db:47:84:7b:b8:85:04:0b:cf:4e:ae:a5:ab:c4:e5: 36:7b:bf:1b:48:f7:2b:59:a4:e6:e0:19:a5:93:ab: 4f:47:17:88:ee:7f:30:34:0d:72:3f:36:e7:03:cb: c1:c7:10:be:b2:e7:b3:dd:75:69:f2:f8:46:bf:0c: d4:6c:6c:94:50:a5:0d:02:46:75:01:a3:9d:0d:a0: 8e:68:da:23:3e:04:62:6a:6d:92:2e:d7:53:bf:91: 6d:f4:98:16:3e:2e:59:ef:c6:21:b8:64:48:fb:d7: ca:b1:73:e0:20:db:7f:f4:80:51:8d:6e:59:75:f9: 3d:aa:8a:a0:3e:e1:5b:09:a4:91:7b:ec:38:e3:f0: c7:e5:af:dd:a3:b9:33:f4:47:28:a5:8b:6c:75:9d: fa:7d:50:3a:84:1b:56:a7:d7:06:ec:e0:b5:01:09: a7:e5:62:9a:e4:f8:f0:f2:69:1d:b4:d8:67:20:78: 64:4b:26:26:ff:2f:7a:bd:34:b3:0b:be:96:f2:bc: a5:8d:1a:a1:b9:f9:fe:15:e1:2e:68:ad:d4:14:72: c4:5a:39:16:33:6c:eb:ac:ee:a6:c6:d7:e7:0f:76: 34:77:f8:c7:e8:d4:50:a8:4f:7b:ac:bd:25:5a:7e: 1f:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:5C:5B:B7:CC:88:21:26:68:1D:CE:50:21:85:83:B5:63:98:63:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/d274a1a4-4284-3ce0-a276-785c1add14e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl X509v3 Authority Key Identifier: keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer sbgp-ipAddrBlock: critical IPv4: 170.114.102.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:f7:bf:d0:52:e7:d7:78:0d:d8:a5:83:c1:2b:33:a0:a7:cd: cd:22:68:86:b6:42:b6:ee:7c:87:d2:97:6e:c8:36:0a:16:b6: 87:d2:ac:c5:c9:e1:96:5f:cf:61:39:96:6d:a0:2e:44:80:5f: 3b:93:ad:c9:72:43:32:66:4b:b0:90:76:e8:c8:1a:d4:d3:37: a0:76:95:60:f4:f6:ac:80:e8:c1:f1:ed:d5:d4:19:c4:a8:d8: 14:1f:82:f1:9e:0e:0a:de:cf:0d:37:df:9c:c4:89:b7:d3:7a: 7f:40:01:9a:7e:c2:c5:b1:20:46:7a:a1:90:c5:e4:61:e2:e5: 68:99:2a:37:83:cc:5e:f7:ed:42:28:b9:07:e8:51:6b:27:72: e8:c4:26:61:c9:88:62:e3:e9:a4:8a:ed:a7:6c:2d:98:0a:3a: 66:f2:76:3b:76:26:64:88:4c:3a:08:59:e6:80:6e:2f:4b:bf: 6c:22:ef:ad:3e:06:0d:2f:5a:0c:7f:a2:e0:ce:c7:20:c5:d9: 52:76:39:d7:95:91:8b:35:02:0b:d4:19:8c:84:6c:8f:f2:7d: 82:e3:77:4a:54:98:c4:ec:32:03:39:18:cd:48:aa:9f:bc:f3: d1:ad:92:00:6c:6b:4c:fc:6a:51:c0:30:01:ce:7d:d0:d2:f5: 78:25:c4:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElhuYdzwJQgwYdSoQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx YzY1MB4XDTI1MDQwMTEzMDEwMFoXDTI1MDYzMDEzMDEwMFowLzEtMCsGA1UEAxMk MmU4NWVkMzEtNmM1OC00ZTEzLWE0NDktM2ZiYzYzMzM5ZjU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhSzAP0WVpvgWd/HU+mDbR4R7uIUEC89OrqWr xOU2e78bSPcrWaTm4Bmlk6tPRxeI7n8wNA1yPzbnA8vBxxC+suez3XVp8vhGvwzU bGyUUKUNAkZ1AaOdDaCOaNojPgRiam2SLtdTv5Ft9JgWPi5Z78YhuGRI+9fKsXPg INt/9IBRjW5Zdfk9qoqgPuFbCaSRe+w44/DH5a/do7kz9EcopYtsdZ36fVA6hBtW p9cG7OC1AQmn5WKa5Pjw8mkdtNhnIHhkSyYm/y96vTSzC76W8ryljRqhufn+FeEu aK3UFHLEWjkWM2zrrO6mxtfnD3Y0d/jH6NRQqE97rL0lWn4f8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFlcW7fMiCEmaB3OUCGFg7VjmGPAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1 NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvZDI3NGExYTQtNDI4NC0z Y2UwLWEyNzYtNzg1YzFhZGQxNGU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4 MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5 NjVhMjFjNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqnJmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADD3v9BS59d4Ddilg8ErM6Cnzc0iaIa2QrbufIfSl27INgoWtofSrMXJ 4ZZfz2E5lm2gLkSAXzuTrclyQzJmS7CQdujIGtTTN6B2lWD09qyA6MHx7dXUGcSo 2BQfgvGeDgrezw0335zEibfTen9AAZp+wsWxIEZ6oZDF5GHi5WiZKjeDzF737UIo uQfoUWsncujEJmHJiGLj6aSK7adsLZgKOmbydjt2JmSITDoIWeaAbi9Lv2wi760+ Bg0vWgx/ouDOxyDF2VJ2OdeVkYs1AgvUGYyEbI/yfYLjd0pUmMTsMgM5GM1Iqp+8 89GtkgBsa0z8alHAMAHOfdDS9XglxAs= -----END CERTIFICATE-----Generated at Sat Apr 26 14:54:49 2025 by rpki-client