$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/98d4dcd1-7048-351e-8685-4eb20dda3967.roa File: 98d4dcd1-7048-351e-8685-4eb20dda3967.roa (raw, json) Hash identifier: 0iXlDk8pzdJo+Rb3n4B8yu8h/1kr8kx/vVxuTV8ZXM4= Subject key identifier: FF:BC:F9:FC:C8:25:52:B6:0E:93:6D:C9:12:B8:13:FF:A9:DA:42:E2 Certificate issuer: /CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279 Certificate serial: 010D0C9F432858494B641A5DF6B4244CBAA01630 Authority key identifier: E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/98d4dcd1-7048-351e-8685-4eb20dda3967.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 16509 IP address blocks: 170.225.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:64:1a:5d:f6:b4:24:4c:ba:a0:16:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279 Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=0b55d8aa-3ffe-4f7b-949b-f3daf2dc8b36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:e1:b8:ac:e6:20:75:8a:b3:36:91:c9:45:d5: c6:f7:a7:6c:ed:12:63:b5:bb:fe:9d:ca:89:4a:91: bc:ea:06:c2:ff:b4:4e:5d:92:ad:02:fc:4f:76:1f: 1b:36:e4:ee:0b:56:91:d0:e8:69:db:c7:55:a8:a1: e5:f0:62:9b:64:6f:d4:ea:2e:88:52:b3:4e:1f:60: 35:59:39:78:78:95:a5:7c:90:82:22:6f:67:6a:bb: 3e:26:9f:9d:80:11:b6:08:e7:13:97:0e:f4:15:c9: 67:32:73:1b:22:d5:d2:2d:f5:89:c3:0a:e1:7e:75: b6:58:ca:f1:df:88:0d:81:6e:0e:c0:6f:51:f4:a7: c4:f7:cc:db:68:4e:20:db:d6:a0:b3:cf:5c:15:a2: 54:0a:08:ec:0b:47:98:97:fc:1d:71:32:74:07:f3: 4d:0f:4d:31:9c:9a:d4:1e:b9:8b:30:fd:9f:4c:71: b7:09:c6:3c:96:bc:15:c4:2b:e7:0b:9b:78:fa:0c: e3:c3:39:e5:6e:10:9d:13:75:74:06:0f:49:80:5b: f4:f1:8a:84:aa:73:af:05:0b:17:66:e7:bc:f3:c3: 42:20:eb:7a:01:cf:65:c3:aa:32:e9:9e:b7:4d:d3: 21:95:29:f9:83:4f:9c:3e:e4:fd:f9:78:61:05:d7: 50:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:BC:F9:FC:C8:25:52:B6:0E:93:6D:C9:12:B8:13:FF:A9:DA:42:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/98d4dcd1-7048-351e-8685-4eb20dda3967.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl X509v3 Authority Key Identifier: keyid:E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer sbgp-ipAddrBlock: critical IPv4: 170.225.215.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:e3:fb:31:66:b0:1d:7c:ff:57:34:2d:af:d6:ac:19:ba:99: 47:b8:1d:a4:63:74:e8:4d:2e:85:33:7f:2a:bc:fc:64:62:4c: 87:eb:18:9d:7d:a0:f4:34:da:19:24:dc:ba:17:fd:ea:4a:ce: 87:1f:20:e3:c4:1f:77:d5:87:1c:c5:63:db:37:cf:03:8b:36: 2f:af:a7:ad:5b:5f:b9:ba:15:9b:67:0e:05:8c:e3:7f:73:77: 3b:b3:de:59:86:12:b6:54:0e:d7:42:05:af:87:75:35:5b:b2: b6:01:79:31:9e:d7:38:c4:51:b9:f7:3b:b7:f8:c9:bb:77:0d: 2c:4a:f1:0b:67:92:26:9f:3a:4a:89:00:6c:1b:b4:da:43:aa: e5:ee:09:3b:9e:25:eb:5a:ee:68:1b:5e:19:ef:3b:41:96:d6: ca:dc:f0:6f:d1:1f:be:b6:44:89:6e:7b:dd:ba:19:0e:1c:95: 6c:19:08:9d:3c:42:99:5c:70:54:d5:20:f9:bd:2c:7a:e1:9f: 9d:28:f8:96:d9:03:76:7e:49:79:db:58:91:05:c5:2b:62:b7: b4:2e:72:92:48:f9:dd:4b:87:de:bd:af:ea:77:6a:9f:6e:06: 28:73:35:eb:88:09:cc:ce:8c:86:da:71:24:c1:39:db:4e:93: 50:4b:0b:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElLZBpd9rQkTLqgFjAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGNjOTdkOTYtNTJkMC00OGE3LWE5ZWEtYTc3NDlkYzA4 Mjc5MB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk MGI1NWQ4YWEtM2ZmZS00ZjdiLTk0OWItZjNkYWYyZGM4YjM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjOG4rOYgdYqzNpHJRdXG96ds7RJjtbv+ncqJ SpG86gbC/7ROXZKtAvxPdh8bNuTuC1aR0Ohp28dVqKHl8GKbZG/U6i6IUrNOH2A1 WTl4eJWlfJCCIm9nars+Jp+dgBG2COcTlw70FclnMnMbItXSLfWJwwrhfnW2WMrx 34gNgW4OwG9R9KfE98zbaE4g29ags89cFaJUCgjsC0eYl/wdcTJ0B/NND00xnJrU HrmLMP2fTHG3CcY8lrwVxCvnC5t4+gzjwznlbhCdE3V0Bg9JgFv08YqEqnOvBQsX Zue888NCIOt6Ac9lw6oy6Z63TdMhlSn5g0+cPuT9+XhhBddQswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP+8+fzIJVK2DpNtyRK4E/+p2kLiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Y2M5 N2Q5Ni01MmQwLTQ4YTctYTllYS1hNzc0OWRjMDgyNzkvOThkNGRjZDEtNzA0OC0z NTFlLTg2ODUtNGViMjBkZGEzOTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGNjOTdkOTYtNTJkMC00OGE3LWE5 ZWEtYTc3NDlkYzA4Mjc5LzRjYzk3ZDk2LTUyZDAtNDhhNy1hOWVhLWE3NzQ5ZGMw ODI3OS5jcmwwHwYDVR0jBBgwFoAU4vrUb8NLZY1545Z6Y6GWz7mMjdUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80Y2M5N2Q5Ni01MmQwLTQ4YTctYTllYS1hNzc0 OWRjMDgyNzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAquHXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHbj+zFmsB18/1c0La/WrBm6mUe4HaRjdOhNLoUzfyq8/GRiTIfrGJ19 oPQ02hkk3LoX/epKzocfIOPEH3fVhxzFY9s3zwOLNi+vp61bX7m6FZtnDgWM439z dzuz3lmGErZUDtdCBa+HdTVbsrYBeTGe1zjEUbn3O7f4ybt3DSxK8QtnkiafOkqJ AGwbtNpDquXuCTueJeta7mgbXhnvO0GW1src8G/RH762RIlue926GQ4clWwZCJ08 QplccFTVIPm9LHrhn50o+JbZA3Z+SXnbWJEFxStit7QucpJI+d1Lh969r+p3ap9u BihzNeuICczOjIbacSTBOdtOk1BLC/Q= -----END CERTIFICATE-----Generated at Sat Apr 5 11:21:59 2025 by rpki-client