$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/513ad2a0-8a15-3688-8173-779f97b22bad.roa File: 513ad2a0-8a15-3688-8173-779f97b22bad.roa (raw, json) Hash identifier: 2FAC+6oscoWBCDXKiIpOfqypcZb+qrwUKTaGac7UBBI= Subject key identifier: 64:15:11:01:62:A3:4C:75:C7:99:A3:1C:08:E1:B9:42:F8:D5:19:60 Certificate issuer: /CN=74a9db22-8d49-4938-9c6f-e3fd428c158e Certificate serial: 010D0C9F43285848E59BBE430F221E4100BAF820 Authority key identifier: 98:FB:A9:0E:C5:77:6A:E8:69:9A:83:85:57:54:2E:33:A0:1C:26:41 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/513ad2a0-8a15-3688-8173-779f97b22bad.roa Signing time: Sun 16 Feb 2025 02:00:40 +0000 ROA not before: Sun 16 Feb 2025 02:00:40 +0000 ROA not after: Sat 17 May 2025 01:00:40 +0000 asID: 63399 IP address blocks: 170.10.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/74a9db22-8d49-4938-9c6f-e3fd428c158e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/74a9db22-8d49-4938-9c6f-e3fd428c158e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e5:9b:be:43:0f:22:1e:41:00:ba:f8:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74a9db22-8d49-4938-9c6f-e3fd428c158e Validity Not Before: Feb 16 02:00:40 2025 GMT Not After : May 17 01:00:40 2025 GMT Subject: CN=bbcaa476-b6db-49ce-9922-72ba6490e267 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:2c:8f:fd:1d:bd:84:6a:5c:08:8a:c1:22:38: e3:bb:84:13:91:35:4c:87:15:28:e7:ee:c1:3f:83: f9:77:e4:54:de:2f:d8:48:30:de:ff:c3:d2:f7:55: 86:48:74:06:08:f3:65:24:94:e2:e7:1c:89:82:4d: 9e:6c:24:84:29:f7:e5:e7:50:ee:bc:2c:6e:f1:21: 1e:ca:de:07:31:53:5d:80:08:ed:ed:bc:6b:fe:41: 23:6f:21:26:e8:17:fe:14:2d:a6:01:c7:2c:77:7d: 17:f4:b7:79:5e:66:53:c9:6a:6f:eb:bc:b7:e9:f6: ab:26:61:bf:14:fa:1b:ef:a7:ea:b9:da:00:fd:a8: ba:f0:9e:ef:f5:70:a6:d8:fe:5a:04:24:c2:72:ac: b0:ae:7f:7b:0e:fb:a0:e8:0c:11:d2:8e:c6:82:10: 89:4f:1e:c5:72:48:f7:3b:c0:00:15:01:7c:0a:1c: 15:fa:a7:75:2f:28:13:44:b2:80:2b:c9:29:bc:ce: aa:5d:4b:a1:45:cc:a6:a7:b7:d9:89:00:c4:97:60: 06:70:a4:50:e0:5d:41:95:7c:bd:b4:65:f4:c0:7f: ce:60:50:28:84:25:a2:13:ba:d3:b6:d0:75:4c:f6: 3f:e7:07:7a:b1:ce:98:9e:c8:b0:8e:7e:8b:29:c4: 9f:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:15:11:01:62:A3:4C:75:C7:99:A3:1C:08:E1:B9:42:F8:D5:19:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/513ad2a0-8a15-3688-8173-779f97b22bad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/74a9db22-8d49-4938-9c6f-e3fd428c158e.crl X509v3 Authority Key Identifier: keyid:98:FB:A9:0E:C5:77:6A:E8:69:9A:83:85:57:54:2E:33:A0:1C:26:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e.cer sbgp-ipAddrBlock: critical IPv4: 170.10.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:96:44:6e:88:83:cb:3a:80:ba:ca:a7:4d:49:6c:aa:68:d1: 44:70:83:99:cd:fb:c9:78:68:0b:f1:9b:bd:82:65:96:c8:e6: 59:f4:46:f5:aa:3d:5b:ba:08:2a:1a:c5:14:58:10:11:66:c0: 13:c2:86:6a:be:f8:a4:c0:75:99:1a:71:b1:e9:5b:e1:22:7e: 17:19:05:3d:ae:2d:ce:a3:a1:41:ad:8b:c1:d5:e9:e0:7d:4d: 62:1d:c3:c0:bf:ac:d4:b5:60:81:04:77:eb:fd:15:9d:da:45: 2f:ea:ee:10:71:44:8d:b4:3a:d5:c8:dd:b5:ad:b1:3f:3f:54: 5d:ec:e6:75:cf:ae:2d:14:c3:7b:37:4e:f6:1a:d0:97:f6:96: 68:a4:04:32:4a:2e:0e:c6:73:0e:8a:be:3f:4a:a3:66:b6:fc: 9f:6b:7c:b4:f4:82:af:be:17:71:74:ef:1b:37:4d:ae:d9:98: 32:a2:8d:c2:0c:d4:6f:ac:15:50:fc:53:11:1c:25:46:7d:7e: 07:b3:c6:1b:5c:1c:98:8e:3f:f1:ed:d2:91:46:42:b8:07:f2: c6:61:83:8d:7e:f4:bb:c9:64:27:7c:bf:e6:ad:23:5f:d4:9a: c7:95:e3:ed:f1:69:af:9b:82:1a:90:59:16:30:0c:62:f8:d4: 6d:9e:78:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjlm75DDyIeQQC6+CAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzRhOWRiMjItOGQ0OS00OTM4LTljNmYtZTNmZDQyOGMx NThlMB4XDTI1MDIxNjAyMDA0MFoXDTI1MDUxNzAxMDA0MFowLzEtMCsGA1UEAxMk YmJjYWE0NzYtYjZkYi00OWNlLTk5MjItNzJiYTY0OTBlMjY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiCyP/R29hGpcCIrBIjjju4QTkTVMhxUo5+7B P4P5d+RU3i/YSDDe/8PS91WGSHQGCPNlJJTi5xyJgk2ebCSEKffl51DuvCxu8SEe yt4HMVNdgAjt7bxr/kEjbyEm6Bf+FC2mAccsd30X9Ld5XmZTyWpv67y36farJmG/ FPob76fqudoA/ai68J7v9XCm2P5aBCTCcqywrn97Dvug6AwR0o7GghCJTx7Fckj3 O8AAFQF8ChwV+qd1LygTRLKAK8kpvM6qXUuhRcymp7fZiQDEl2AGcKRQ4F1BlXy9 tGX0wH/OYFAohCWiE7rTttB1TPY/5wd6sc6Ynsiwjn6LKcSfwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGQVEQFio0x1x5mjHAjhuUL41RlgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NGE5 ZGIyMi04ZDQ5LTQ5MzgtOWM2Zi1lM2ZkNDI4YzE1OGUvNTEzYWQyYTAtOGExNS0z Njg4LTgxNzMtNzc5Zjk3YjIyYmFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzRhOWRiMjItOGQ0OS00OTM4LTlj NmYtZTNmZDQyOGMxNThlLzc0YTlkYjIyLThkNDktNDkzOC05YzZmLWUzZmQ0Mjhj MTU4ZS5jcmwwHwYDVR0jBBgwFoAUmPupDsV3auhpmoOFV1QuM6AcJkEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NGE5ZGIyMi04ZDQ5LTQ5MzgtOWM2Zi1lM2Zk NDI4YzE1OGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqgreMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACCWRG6Ig8s6gLrKp01JbKpo0URwg5nN+8l4aAvxm72CZZbI5ln0RvWq PVu6CCoaxRRYEBFmwBPChmq++KTAdZkacbHpW+EifhcZBT2uLc6joUGti8HV6eB9 TWIdw8C/rNS1YIEEd+v9FZ3aRS/q7hBxRI20OtXI3bWtsT8/VF3s5nXPri0Uw3s3 TvYa0Jf2lmikBDJKLg7Gcw6Kvj9Ko2a2/J9rfLT0gq++F3F07xs3Ta7ZmDKijcIM 1G+sFVD8UxEcJUZ9fgezxhtcHJiOP/Ht0pFGQrgH8sZhg41+9LvJZCd8v+atI1/U mseV4+3xaa+bghqQWRYwDGL41G2eeOo= -----END CERTIFICATE-----Generated at Sun Apr 6 17:21:07 2025 by rpki-client