$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/420c59c6-76f5-3a1f-ad30-ade90f37c6f5.roa File: 420c59c6-76f5-3a1f-ad30-ade90f37c6f5.roa (raw, json) Hash identifier: 7AAwX+t8w5VnL/o5TL+0FhPAnHupTmZn4n7a9vTpV24= Subject key identifier: 0E:CE:E4:67:25:3F:E1:54:94:EE:8F:AD:07:F5:DF:39:40:7B:3F:7D Certificate issuer: /CN=171c42a2-3dc6-43af-b734-e91956bdfe19 Certificate serial: 010D0C9F43285849780F0F4FD0F1E20354104C80 Authority key identifier: EB:B0:D5:3C:A6:56:F6:56:4F:C5:16:70:B8:ED:89:90:DE:0F:26:D3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/420c59c6-76f5-3a1f-ad30-ade90f37c6f5.roa Signing time: Wed 09 Apr 2025 13:01:01 +0000 ROA not before: Wed 09 Apr 2025 13:01:01 +0000 ROA not after: Tue 08 Jul 2025 13:01:01 +0000 asID: 203 IP address blocks: 135.84.120.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/171c42a2-3dc6-43af-b734-e91956bdfe19.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/171c42a2-3dc6-43af-b734-e91956bdfe19.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 19 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:78:0f:0f:4f:d0:f1:e2:03:54:10:4c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=171c42a2-3dc6-43af-b734-e91956bdfe19 Validity Not Before: Apr 9 13:01:01 2025 GMT Not After : Jul 8 13:01:01 2025 GMT Subject: CN=fb4acbc0-47d3-4721-8246-6bcf8045e2fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:85:13:95:ff:c9:a9:1a:9c:93:5b:5f:98:c4: 46:62:1e:21:ca:4b:cd:66:f8:c9:ad:a0:ee:67:8c: 40:13:94:00:92:6f:85:e7:50:01:93:24:ee:92:9b: 10:45:ed:b2:84:7d:5b:b6:22:ba:b0:a3:bc:7e:26: 15:d6:b0:93:ec:49:a0:ce:39:bd:a9:91:5b:df:7b: fd:d9:0f:20:fe:df:50:bf:c5:b6:b2:35:28:8b:33: b6:08:85:d9:9c:58:23:39:98:99:05:53:01:cc:e3: 77:55:25:c9:06:9e:29:fa:f3:bd:39:1b:22:f7:46: 79:ec:7a:de:2f:1b:75:3d:fc:fd:2c:ae:02:11:bd: 14:32:5d:c3:34:a1:fd:16:a4:e9:ce:0d:d1:b9:53: f1:7d:00:03:42:e3:2b:6a:dd:e3:d6:06:d3:e8:1d: 3c:d8:8c:ba:99:26:e3:5c:ea:b7:44:09:5d:32:6f: 81:8d:00:f8:59:15:bd:6f:69:10:43:92:ba:70:83: b4:43:84:49:9c:f7:a9:79:d9:63:03:f0:b1:92:45: b9:31:f9:aa:c6:22:90:2d:82:95:3b:87:45:3a:39: 2e:c7:b1:29:19:b6:52:99:63:ad:8d:b7:6b:fd:81: 3f:e7:fb:26:e6:c3:af:72:5b:63:da:3f:99:15:d8: c6:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:CE:E4:67:25:3F:E1:54:94:EE:8F:AD:07:F5:DF:39:40:7B:3F:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/420c59c6-76f5-3a1f-ad30-ade90f37c6f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/171c42a2-3dc6-43af-b734-e91956bdfe19.crl X509v3 Authority Key Identifier: keyid:EB:B0:D5:3C:A6:56:F6:56:4F:C5:16:70:B8:ED:89:90:DE:0F:26:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19.cer sbgp-ipAddrBlock: critical IPv4: 135.84.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:3c:9d:41:f0:0a:d5:73:21:5a:c3:ae:39:35:ce:52:57:d7: 1d:90:63:a6:38:02:0d:f9:8f:e3:a7:11:0e:55:67:1a:18:10: 74:5d:c1:a6:20:dd:e4:fb:9e:1d:47:92:47:66:d9:86:76:94: 70:10:04:e8:11:4f:77:e5:a5:dc:a6:0b:40:a9:54:0b:cf:b4: 82:9d:60:01:65:d3:fd:ca:f0:da:9c:d5:f8:24:6c:f1:7e:97: d5:a5:0f:e6:0e:2e:96:18:62:fb:8f:20:b5:83:11:26:fc:76: 18:8f:90:9d:33:9f:67:1a:ba:c3:c2:dc:39:52:1a:f4:a3:f4: 46:2a:a4:b1:ac:20:1f:cf:ca:78:d4:a2:0d:3a:1e:65:0a:eb: a9:52:39:ec:e2:06:ac:34:eb:4a:4a:3e:f8:fb:ed:22:e0:d0: 2f:22:df:5b:bc:0b:09:0a:be:0a:a7:7f:94:c3:8b:f2:b9:38: a4:b2:0f:59:d3:5e:25:c2:61:23:80:99:b4:0e:02:cd:25:20: 23:f0:74:15:e0:f0:97:ed:f0:c4:a8:13:8d:78:ce:ca:6e:5f: 66:12:6c:f6:91:53:c8:22:b5:f9:5f:c4:96:ab:2c:89:4a:6b: b4:e1:f0:b8:57:11:7f:cb:c2:01:2a:9e:b0:ab:29:42:44:75: e2:42:5d:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl4Dw9P0PHiA1QQTIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTcxYzQyYTItM2RjNi00M2FmLWI3MzQtZTkxOTU2YmRm ZTE5MB4XDTI1MDQwOTEzMDEwMVoXDTI1MDcwODEzMDEwMVowLzEtMCsGA1UEAxMk ZmI0YWNiYzAtNDdkMy00NzIxLTgyNDYtNmJjZjgwNDVlMmZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIUTlf/JqRqck1tfmMRGYh4hykvNZvjJraDu Z4xAE5QAkm+F51ABkyTukpsQRe2yhH1btiK6sKO8fiYV1rCT7Emgzjm9qZFb33v9 2Q8g/t9Qv8W2sjUoizO2CIXZnFgjOZiZBVMBzON3VSXJBp4p+vO9ORsi90Z57Hre Lxt1Pfz9LK4CEb0UMl3DNKH9FqTpzg3RuVPxfQADQuMrat3j1gbT6B082Iy6mSbj XOq3RAldMm+BjQD4WRW9b2kQQ5K6cIO0Q4RJnPepedljA/CxkkW5MfmqxiKQLYKV O4dFOjkux7EpGbZSmWOtjbdr/YE/5/sm5sOvcltj2j+ZFdjG5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA7O5GclP+FUlO6PrQf13zlAez99MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xNzFj NDJhMi0zZGM2LTQzYWYtYjczNC1lOTE5NTZiZGZlMTkvNDIwYzU5YzYtNzZmNS0z YTFmLWFkMzAtYWRlOTBmMzdjNmY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMTcxYzQyYTItM2RjNi00M2FmLWI3 MzQtZTkxOTU2YmRmZTE5LzE3MWM0MmEyLTNkYzYtNDNhZi1iNzM0LWU5MTk1NmJk ZmUxOS5jcmwwHwYDVR0jBBgwFoAU67DVPKZW9lZPxRZwuO2JkN4PJtMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xNzFjNDJhMi0zZGM2LTQzYWYtYjczNC1lOTE5 NTZiZGZlMTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBh1R4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACM8nUHwCtVzIVrDrjk1zlJX1x2QY6Y4Ag35j+OnEQ5VZxoYEHRdwaYg 3eT7nh1Hkkdm2YZ2lHAQBOgRT3flpdymC0CpVAvPtIKdYAFl0/3K8Nqc1fgkbPF+ l9WlD+YOLpYYYvuPILWDESb8dhiPkJ0zn2causPC3DlSGvSj9EYqpLGsIB/PynjU og06HmUK66lSOeziBqw060pKPvj77SLg0C8i31u8CwkKvgqnf5TDi/K5OKSyD1nT XiXCYSOAmbQOAs0lICPwdBXg8Jft8MSoE414zspuX2YSbPaRU8gitflfxJarLIlK a7Th8LhXEX/LwgEqnrCrKUJEdeJCXTk= -----END CERTIFICATE-----Generated at Thu Apr 17 19:48:37 2025 by rpki-client