$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/e3efcc8d-473c-3337-a7b3-91ccf2cbd2e6.roa File: e3efcc8d-473c-3337-a7b3-91ccf2cbd2e6.roa (raw, json) Hash identifier: QVtej2Bdly+F1qaDnMZiEMH5ZXTlGMdcNRo53ni/+Fg= Subject key identifier: 9D:63:2C:49:FF:E7:B5:47:9D:AE:7B:95:BC:27:7E:41:A9:87:12:5F Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F43285848C150D01E96CE973DB02DCE18 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/e3efcc8d-473c-3337-a7b3-91ccf2cbd2e6.roa Signing time: Mon 03 Feb 2025 02:00:39 +0000 ROA not before: Mon 03 Feb 2025 02:00:39 +0000 ROA not after: Sun 04 May 2025 01:00:39 +0000 asID: 931 IP address blocks: 170.39.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c1:50:d0:1e:96:ce:97:3d:b0:2d:ce:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: Feb 3 02:00:39 2025 GMT Not After : May 4 01:00:39 2025 GMT Subject: CN=6614a9ec-0144-41d4-b6c0-df0e2948b920 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:c3:9d:49:f1:57:49:c7:73:92:58:6a:9c:6e: 75:20:4c:fc:0d:ca:4c:c5:72:b1:1f:e1:13:ea:dc: e6:cf:7a:8b:9d:d0:cf:4e:b9:fd:76:e7:02:d4:3f: 0e:28:23:07:97:79:a3:89:b4:74:dd:72:22:c0:c8: ea:bc:13:b9:0a:c8:94:8f:6d:bd:cd:4e:72:2c:7e: b7:94:53:69:e2:51:60:0c:b3:eb:b1:cf:c2:b2:05: 01:7b:63:ac:3a:42:4d:68:ef:54:73:6d:23:59:89: 5e:25:20:0a:d3:0e:de:2b:72:92:50:5f:36:11:39: 55:f3:0d:6b:f5:25:05:2e:47:07:72:b9:a4:5d:79: 5c:3b:91:ae:56:2f:6b:20:a4:45:e4:e9:c0:02:ce: 74:53:04:3d:23:48:67:0c:4c:72:fd:c3:25:74:16: 85:3f:bb:86:93:57:aa:90:55:ff:b2:3d:8a:e4:29: b5:1c:dc:e1:3a:01:49:10:b3:22:af:f9:51:d7:04: 9b:1b:af:f4:95:9d:88:ff:35:dd:2b:a5:32:a2:a5: 87:8c:c5:a0:4c:b7:6e:c5:08:86:ef:15:a2:e2:16: f8:82:c7:4b:49:2b:d7:e8:e4:22:43:61:4f:0f:ff: 96:eb:81:32:11:d5:f9:db:61:51:55:9c:5a:57:4d: ba:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:63:2C:49:FF:E7:B5:47:9D:AE:7B:95:BC:27:7E:41:A9:87:12:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/e3efcc8d-473c-3337-a7b3-91ccf2cbd2e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 170.39.185.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:4f:a9:91:f7:2b:a5:e1:98:ef:60:c1:7e:f2:b2:29:b9:57: 25:67:bd:5d:bc:9f:2f:1e:05:a6:1b:5e:ea:47:8b:07:55:1d: 78:91:29:9c:05:57:01:9c:1a:59:bf:fd:15:43:f4:5a:0d:12: 5c:0c:ab:0a:49:78:28:25:c9:a0:b0:c4:7c:fd:c2:b1:4f:24: b8:ff:cd:51:b0:0b:8c:5a:43:61:d4:f3:d7:31:55:3d:67:d6: 71:e1:4d:6c:76:79:22:33:8a:27:6e:cb:cb:93:6a:0d:e2:a7: c6:6f:7a:65:d2:22:6d:67:8d:28:d5:1c:29:cc:11:0f:5e:91: 04:4d:64:a1:c8:9b:5a:55:34:a0:35:e4:47:20:ef:2c:04:8f: a5:91:b5:26:9a:4a:78:d3:21:f6:6e:cf:c1:b7:7d:f3:4a:e8: 57:8e:27:74:17:c1:ce:d7:1f:f1:44:cd:57:00:c8:ff:06:08: 3a:6f:9b:45:d5:e4:f2:76:0c:65:d1:81:7d:4e:aa:c6:74:e6: d9:3a:e3:de:c9:da:24:2b:2d:63:29:39:fa:39:87:af:b4:ef: ea:77:ca:96:d3:d7:30:db:e5:f5:df:7d:ec:ca:71:d4:28:58: f7:0f:ef:89:d2:fd:24:a1:02:c4:a0:57:c6:9c:ab:c6:ce:1d: 17:60:e4:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjBUNAels6XPbAtzhgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI1MDIwMzAyMDAzOVoXDTI1MDUwNDAxMDAzOVowLzEtMCsGA1UEAxMk NjYxNGE5ZWMtMDE0NC00MWQ0LWI2YzAtZGYwZTI5NDhiOTIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMOdSfFXScdzklhqnG51IEz8DcpMxXKxH+ET 6tzmz3qLndDPTrn9ducC1D8OKCMHl3mjibR03XIiwMjqvBO5CsiUj229zU5yLH63 lFNp4lFgDLPrsc/CsgUBe2OsOkJNaO9Uc20jWYleJSAK0w7eK3KSUF82ETlV8w1r 9SUFLkcHcrmkXXlcO5GuVi9rIKRF5OnAAs50UwQ9I0hnDExy/cMldBaFP7uGk1eq kFX/sj2K5Cm1HNzhOgFJELMir/lR1wSbG6/0lZ2I/zXdK6UyoqWHjMWgTLduxQiG 7xWi4hb4gsdLSSvX6OQiQ2FPD/+W64EyEdX522FRVZxaV026DQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ1jLEn/57VHna57lbwnfkGphxJfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvZTNlZmNjOGQtNDczYy0z MzM3LWE3YjMtOTFjY2YyY2JkMmU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqie5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC1PqZH3K6XhmO9gwX7ysim5VyVnvV28ny8eBaYbXupHiwdVHXiRKZwF VwGcGlm//RVD9FoNElwMqwpJeCglyaCwxHz9wrFPJLj/zVGwC4xaQ2HU89cxVT1n 1nHhTWx2eSIziiduy8uTag3ip8ZvemXSIm1njSjVHCnMEQ9ekQRNZKHIm1pVNKA1 5Ecg7ywEj6WRtSaaSnjTIfZuz8G3ffNK6FeOJ3QXwc7XH/FEzVcAyP8GCDpvm0XV 5PJ2DGXRgX1OqsZ05tk6497J2iQrLWMpOfo5h6+07+p3ypbT1zDb5fXffezKcdQo WPcP74nS/SShAsSgV8acq8bOHRdg5OI= -----END CERTIFICATE-----Generated at Mon Apr 7 13:11:43 2025 by rpki-client