$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/f1e0eb8c-a3a0-3b44-9159-f00bd2b4de1e.roa File: f1e0eb8c-a3a0-3b44-9159-f00bd2b4de1e.roa (raw, json) Hash identifier: xGfR3wSN8hlsiIwKLIZWKaLsIC40Vn/x3GGYtRGWJgE= Subject key identifier: C1:ED:85:E1:6A:97:A2:75:09:83:F5:35:50:93:FE:07:5E:C9:A3:A1 Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F43285848C150D238EE4E22F48FFD1F80 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/f1e0eb8c-a3a0-3b44-9159-f00bd2b4de1e.roa Signing time: Mon 03 Feb 2025 02:00:39 +0000 ROA not before: Mon 03 Feb 2025 02:00:39 +0000 ROA not after: Sun 04 May 2025 01:00:39 +0000 asID: 213122 IP address blocks: 170.39.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c1:50:d2:38:ee:4e:22:f4:8f:fd:1f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: Feb 3 02:00:39 2025 GMT Not After : May 4 01:00:39 2025 GMT Subject: CN=b63928f0-81d4-45df-b3a7-b4b01de0b47b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:22:d0:04:41:08:05:6d:a7:50:e2:70:c6:db: 83:89:db:76:7a:dc:08:b2:9c:14:d3:a1:5f:ad:ac: a7:11:c1:24:31:6f:49:42:c1:81:4a:81:bb:07:d0: 35:ae:aa:f5:04:83:53:52:22:e5:ae:31:68:50:0b: 8b:9e:16:a2:d1:40:ff:8e:86:41:73:fe:1f:07:4f: ea:36:2d:38:d2:39:19:f1:52:62:0f:d0:c8:6a:c0: 99:d4:de:5d:6b:85:dd:65:84:70:85:20:2f:4d:b8: 86:20:81:2e:24:36:c7:d2:27:a5:fa:c4:65:09:7a: fb:74:76:2b:01:c3:e8:92:eb:d2:3f:4d:43:90:eb: 6d:18:29:9f:38:3d:5c:fb:46:89:7b:17:0b:a7:9e: f6:0b:c0:9d:0d:a4:03:ba:5e:93:c1:20:cd:5b:85: 49:dc:4c:01:9e:a0:72:ab:be:f8:3b:f2:44:7f:84: af:62:8b:53:40:54:c9:c3:6e:bc:bd:20:c1:82:bb: 3b:b6:aa:b5:7f:e2:2d:22:cb:d9:e9:c4:87:69:4b: 85:37:28:61:11:e1:ee:b8:6e:6a:47:da:54:06:7f: 34:f1:8e:f2:ca:95:c3:45:6b:c1:00:7d:2d:d6:61: d6:78:11:94:77:19:11:a9:12:e2:fc:a2:a5:52:e8: be:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:ED:85:E1:6A:97:A2:75:09:83:F5:35:50:93:FE:07:5E:C9:A3:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/f1e0eb8c-a3a0-3b44-9159-f00bd2b4de1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 170.39.186.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:cd:b0:80:48:27:27:73:c9:0b:34:9c:fd:ad:5c:3a:5f:6f: 0f:08:17:79:b7:89:64:a3:e9:31:6e:c9:5e:a2:d1:b7:63:c4: bb:77:de:d1:ef:92:3b:27:27:43:4b:0d:0e:fa:e5:1b:57:d1: fb:40:38:36:b9:3c:95:00:d5:fa:bb:7b:24:5e:3e:09:a3:28: 67:b3:91:31:cb:f2:c0:78:cb:9a:60:0d:85:b9:9d:75:c3:72: 14:75:44:ec:c3:de:3d:09:e9:25:83:38:14:31:54:b0:a8:cd: e2:41:69:3a:23:65:9d:ec:5d:3a:3c:3b:c2:db:3b:c1:d8:bc: a4:c2:9f:52:f1:58:50:99:0c:cd:7e:45:49:24:75:9a:5d:a6: 86:47:33:0f:21:76:79:e9:19:50:dc:e1:a2:35:11:a7:61:7d: fc:6d:27:53:ce:8f:65:a3:eb:d2:30:2f:46:9c:8b:72:39:9b: 2b:d4:84:5c:3c:7f:c3:e5:0c:92:dd:f4:8a:37:41:b3:58:11: ed:78:f0:42:0b:1e:c7:d1:5a:c5:cf:de:59:e2:be:63:a7:16: e1:dd:f5:44:52:d7:03:df:3f:eb:ce:b2:2e:ef:87:1f:31:59: 4d:ee:07:64:9a:3b:42:0c:f8:80:36:44:ff:ea:bf:c3:1b:42: 0b:aa:0f:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjBUNI47k4i9I/9H4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI1MDIwMzAyMDAzOVoXDTI1MDUwNDAxMDAzOVowLzEtMCsGA1UEAxMk YjYzOTI4ZjAtODFkNC00NWRmLWIzYTctYjRiMDFkZTBiNDdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSLQBEEIBW2nUOJwxtuDidt2etwIspwU06Ff raynEcEkMW9JQsGBSoG7B9A1rqr1BINTUiLlrjFoUAuLnhai0UD/joZBc/4fB0/q Ni040jkZ8VJiD9DIasCZ1N5da4XdZYRwhSAvTbiGIIEuJDbH0iel+sRlCXr7dHYr AcPokuvSP01DkOttGCmfOD1c+0aJexcLp572C8CdDaQDul6TwSDNW4VJ3EwBnqBy q774O/JEf4SvYotTQFTJw268vSDBgrs7tqq1f+ItIsvZ6cSHaUuFNyhhEeHuuG5q R9pUBn808Y7yypXDRWvBAH0t1mHWeBGUdxkRqRLi/KKlUui+wwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMHtheFql6J1CYP1NVCT/gdeyaOhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvZjFlMGViOGMtYTNhMC0z YjQ0LTkxNTktZjAwYmQyYjRkZTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqie6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH7NsIBIJydzyQs0nP2tXDpfbw8IF3m3iWSj6TFuyV6i0bdjxLt33tHv kjsnJ0NLDQ765RtX0ftAODa5PJUA1fq7eyRePgmjKGezkTHL8sB4y5pgDYW5nXXD chR1ROzD3j0J6SWDOBQxVLCozeJBaTojZZ3sXTo8O8LbO8HYvKTCn1LxWFCZDM1+ RUkkdZpdpoZHMw8hdnnpGVDc4aI1EadhffxtJ1POj2Wj69IwL0aci3I5myvUhFw8 f8PlDJLd9Io3QbNYEe148EILHsfRWsXP3lnivmOnFuHd9URS1wPfP+vOsi7vhx8x WU3uB2SaO0IM+IA2RP/qv8MbQguqD4g= -----END CERTIFICATE-----Generated at Sun Apr 6 04:49:40 2025 by rpki-client