$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ee86bab0-ef7e-4e23-84fe-bcd5cee869bb/00bfdc6f-8d00-3d44-8e6e-526a40918136.roa File: 00bfdc6f-8d00-3d44-8e6e-526a40918136.roa (raw, json) Hash identifier: MCCgKwRgOyzEURkd5fODLHldW81zpa2p0E6z2e38v9s= Subject key identifier: C6:47:7C:8D:A9:A3:71:23:74:EA:4C:E6:31:25:0B:45:0F:AE:25:D4 Certificate issuer: /CN=ee86bab0-ef7e-4e23-84fe-bcd5cee869bb Certificate serial: 010D0C9F43285848F65BE6769A61A947ED01A080 Authority key identifier: 17:D3:83:21:A7:3C:E6:27:6D:07:DB:A2:70:2D:1B:95:C2:EE:2F:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ee86bab0-ef7e-4e23-84fe-bcd5cee869bb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ee86bab0-ef7e-4e23-84fe-bcd5cee869bb/00bfdc6f-8d00-3d44-8e6e-526a40918136.roa Signing time: Sat 22 Feb 2025 02:00:38 +0000 ROA not before: Sat 22 Feb 2025 02:00:38 +0000 ROA not after: Fri 23 May 2025 01:00:38 +0000 asID: 16509 IP address blocks: 170.52.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ee86bab0-ef7e-4e23-84fe-bcd5cee869bb/ee86bab0-ef7e-4e23-84fe-bcd5cee869bb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ee86bab0-ef7e-4e23-84fe-bcd5cee869bb/ee86bab0-ef7e-4e23-84fe-bcd5cee869bb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ee86bab0-ef7e-4e23-84fe-bcd5cee869bb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f6:5b:e6:76:9a:61:a9:47:ed:01:a0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee86bab0-ef7e-4e23-84fe-bcd5cee869bb Validity Not Before: Feb 22 02:00:38 2025 GMT Not After : May 23 01:00:38 2025 GMT Subject: CN=fb452193-af37-45e7-98bd-f501b2177102 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:31:5c:75:16:e3:03:4f:c7:d9:b8:89:34:62: 46:cd:7a:13:62:24:04:a2:8f:cf:6c:25:78:74:fe: db:ed:de:62:0c:bb:00:54:14:55:1f:87:e5:9e:ea: 0f:84:b6:e0:be:4b:9a:02:ea:f8:9b:c9:ad:b7:ae: be:87:e3:31:5f:c7:11:b1:99:cd:0c:9d:47:af:dc: 26:8e:0c:e6:86:01:2d:a2:9b:8f:03:f1:52:ef:87: 57:a0:f9:ac:56:6a:fe:19:64:9a:aa:7f:19:e9:13: 9b:1e:59:4c:bb:c5:33:b6:7a:66:e4:c1:cc:99:a0: c2:c6:70:50:18:1d:7f:8c:70:d1:6b:76:3d:e0:3e: 49:53:70:07:7f:d5:d5:73:11:b5:a9:c1:59:1c:1d: 69:5a:96:02:9a:87:9a:4e:74:54:b4:b3:7f:37:c6: 7f:96:6c:c8:16:d0:80:cd:d1:69:60:64:75:d3:ad: 5d:3b:19:2d:e7:fc:51:65:7e:30:e6:2e:6d:8f:2d: c8:e5:dd:ea:d1:b2:28:83:33:c0:cb:10:be:af:39: ae:49:55:22:03:b5:b9:a8:a4:3c:4c:84:09:89:06: 7d:9b:53:9f:7a:d9:4c:8a:05:d7:46:6b:b5:4e:bc: 27:e7:98:d4:15:b0:ce:d8:bb:74:c2:b0:82:2c:db: e2:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:47:7C:8D:A9:A3:71:23:74:EA:4C:E6:31:25:0B:45:0F:AE:25:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ee86bab0-ef7e-4e23-84fe-bcd5cee869bb/00bfdc6f-8d00-3d44-8e6e-526a40918136.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ee86bab0-ef7e-4e23-84fe-bcd5cee869bb/ee86bab0-ef7e-4e23-84fe-bcd5cee869bb.crl X509v3 Authority Key Identifier: keyid:17:D3:83:21:A7:3C:E6:27:6D:07:DB:A2:70:2D:1B:95:C2:EE:2F:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ee86bab0-ef7e-4e23-84fe-bcd5cee869bb.cer sbgp-ipAddrBlock: critical IPv4: 170.52.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:44:ee:db:e9:79:be:3c:ee:91:a5:36:d4:3f:8e:5a:72:03: d8:32:f2:51:d3:ef:8c:74:b2:51:52:84:c0:59:a0:62:05:8b: 02:c5:3e:b0:1d:e9:ab:eb:c7:c0:82:57:27:32:36:6d:ba:2e: 42:1f:26:93:08:d8:cd:0c:c5:52:aa:a4:60:00:e8:3a:47:b5: 56:29:78:87:29:00:3e:2a:8c:96:d3:69:10:e4:e4:53:4d:e2: 5b:3c:65:26:a0:bf:ff:7c:29:61:73:53:e9:f9:78:bf:5e:32: 01:7d:24:d8:a8:57:eb:6b:c8:5a:c1:a9:cb:55:03:c4:9a:ce: ff:a9:35:b5:1d:bc:cf:13:77:61:39:3c:86:95:1f:86:bf:32: b3:fe:97:43:62:5c:45:58:88:f1:a1:f9:58:1c:c3:21:f2:ea: d3:c5:47:fd:32:19:34:4e:7b:08:1a:73:34:cf:61:4b:15:d2: 31:62:6d:98:a5:3a:22:15:b5:77:23:62:dd:3b:92:03:cb:5d: 85:7d:48:3f:94:65:b7:e4:6d:ec:ca:15:d7:bc:6f:fd:c4:13: e9:0b:ae:0c:46:cb:89:f8:77:15:16:4e:76:7e:a0:68:52:20: 1d:a7:e4:75:c2:2a:38:70:7e:04:2a:50:8a:33:72:72:d0:3b: 48:9f:3d:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj2W+Z2mmGpR+0BoIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWU4NmJhYjAtZWY3ZS00ZTIzLTg0ZmUtYmNkNWNlZTg2 OWJiMB4XDTI1MDIyMjAyMDAzOFoXDTI1MDUyMzAxMDAzOFowLzEtMCsGA1UEAxMk ZmI0NTIxOTMtYWYzNy00NWU3LTk4YmQtZjUwMWIyMTc3MTAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3TFcdRbjA0/H2biJNGJGzXoTYiQEoo/PbCV4 dP7b7d5iDLsAVBRVH4flnuoPhLbgvkuaAur4m8mtt66+h+MxX8cRsZnNDJ1Hr9wm jgzmhgEtopuPA/FS74dXoPmsVmr+GWSaqn8Z6RObHllMu8Uztnpm5MHMmaDCxnBQ GB1/jHDRa3Y94D5JU3AHf9XVcxG1qcFZHB1pWpYCmoeaTnRUtLN/N8Z/lmzIFtCA zdFpYGR1061dOxkt5/xRZX4w5i5tjy3I5d3q0bIogzPAyxC+rzmuSVUiA7W5qKQ8 TIQJiQZ9m1OfetlMigXXRmu1Trwn55jUFbDO2Lt0wrCCLNvipwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMZHfI2po3EjdOpM5jElC0UPriXUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lZTg2 YmFiMC1lZjdlLTRlMjMtODRmZS1iY2Q1Y2VlODY5YmIvMDBiZmRjNmYtOGQwMC0z ZDQ0LThlNmUtNTI2YTQwOTE4MTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZWU4NmJhYjAtZWY3ZS00ZTIzLTg0 ZmUtYmNkNWNlZTg2OWJiL2VlODZiYWIwLWVmN2UtNGUyMy04NGZlLWJjZDVjZWU4 NjliYi5jcmwwHwYDVR0jBBgwFoAUF9ODIac85idtB9uicC0blcLuLw0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lZTg2YmFiMC1lZjdlLTRlMjMtODRmZS1iY2Q1 Y2VlODY5YmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqjQgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABlE7tvpeb487pGlNtQ/jlpyA9gy8lHT74x0slFShMBZoGIFiwLFPrAd 6avrx8CCVycyNm26LkIfJpMI2M0MxVKqpGAA6DpHtVYpeIcpAD4qjJbTaRDk5FNN 4ls8ZSagv/98KWFzU+n5eL9eMgF9JNioV+tryFrBqctVA8Sazv+pNbUdvM8Td2E5 PIaVH4a/MrP+l0NiXEVYiPGh+VgcwyHy6tPFR/0yGTROewgaczTPYUsV0jFibZil OiIVtXcjYt07kgPLXYV9SD+UZbfkbezKFde8b/3EE+kLrgxGy4n4dxUWTnZ+oGhS IB2n5HXCKjhwfgQqUIozcnLQO0ifPbA= -----END CERTIFICATE-----Generated at Sat Apr 5 11:10:00 2025 by rpki-client