$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/7993d267-af3b-37cd-8527-dfc865e86277.roa File: 7993d267-af3b-37cd-8527-dfc865e86277.roa (raw, json) Hash identifier: f2BHpexT2Q499IilNxm149/EU6a9jGpX27uHZmcbKJE= Subject key identifier: 5B:B2:D9:D6:6B:A6:70:66:13:86:BB:F8:FB:D9:D4:96:EF:DA:A0:13 Certificate issuer: /CN=824dfb5f-8580-48ff-b32e-fd393fa7dcc4 Certificate serial: 010D0C9F43285849002157D0761FAAB56143A4B0 Authority key identifier: D9:84:FC:01:25:1A:F5:E5:ED:9B:B3:69:50:58:31:B7:12:47:29:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/7993d267-af3b-37cd-8527-dfc865e86277.roa Signing time: Tue 25 Feb 2025 14:00:52 +0000 ROA not before: Tue 25 Feb 2025 14:00:52 +0000 ROA not after: Mon 26 May 2025 13:00:52 +0000 asID: 16509 IP address blocks: 170.176.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:00:21:57:d0:76:1f:aa:b5:61:43:a4:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=824dfb5f-8580-48ff-b32e-fd393fa7dcc4 Validity Not Before: Feb 25 14:00:52 2025 GMT Not After : May 26 13:00:52 2025 GMT Subject: CN=3f6d03e6-6c3c-439a-a3c7-60426b2a3a07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:8e:15:c0:df:b0:35:41:f9:b3:a3:5c:f4:12: c4:6d:a7:c0:33:7b:96:66:d1:40:14:45:c9:eb:74: ca:5e:bb:4a:cd:95:dc:49:d7:9e:d1:ea:54:92:28: 9d:4c:18:f9:55:b4:34:18:04:7c:ff:73:25:d5:f2: e0:11:34:50:37:62:01:64:03:53:7c:6f:51:51:90: 3a:a0:18:03:7a:82:5f:2e:12:16:71:3e:aa:c6:75: 2c:af:80:3d:ff:51:b4:2c:85:99:66:c2:b8:2a:5a: d5:03:85:5a:b3:a4:d0:18:db:3c:14:01:6c:96:ee: 07:b4:67:95:eb:56:8b:83:b1:87:72:50:d5:4e:6c: bf:52:a8:12:ab:2a:de:f4:84:3e:71:d6:7a:45:d7: 78:3a:e1:f8:7c:82:7a:6c:73:78:8b:43:90:36:84: cc:46:2d:78:d1:34:9b:95:01:a5:cc:41:6e:94:9e: 42:9b:76:d6:97:dc:15:d1:2f:d1:f1:10:12:c4:7e: 65:77:47:3b:6a:b3:47:a8:c8:2d:ea:c5:95:fb:76: 24:04:46:cf:18:ad:34:2a:1b:85:53:3d:c0:d2:09: 48:14:aa:47:e5:7d:d4:33:ce:59:65:0a:65:41:93: 88:86:fc:01:68:88:18:10:38:0f:48:cc:b0:a7:e1: eb:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:B2:D9:D6:6B:A6:70:66:13:86:BB:F8:FB:D9:D4:96:EF:DA:A0:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/7993d267-af3b-37cd-8527-dfc865e86277.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.crl X509v3 Authority Key Identifier: keyid:D9:84:FC:01:25:1A:F5:E5:ED:9B:B3:69:50:58:31:B7:12:47:29:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer sbgp-ipAddrBlock: critical IPv4: 170.176.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:bf:7e:34:6c:56:8b:04:a0:b8:78:bb:7d:ab:f3:9a:3f:b7: 76:d4:b1:e4:8f:ce:67:62:17:d4:e8:82:31:d1:57:f9:97:0c: 25:35:46:99:47:d0:5b:b3:99:ac:3a:99:d6:35:d4:b2:14:a3: 10:1f:db:fa:54:94:41:f4:1e:a2:63:0a:0f:b9:86:f1:1b:92: da:8c:6a:87:67:64:db:43:4f:dd:5d:fe:f5:f8:35:0a:ba:7c: 77:4f:61:83:79:6c:6b:73:08:a3:60:25:80:c0:2d:0a:1d:a7: 9d:9a:79:c7:f2:95:14:86:21:2a:38:56:b4:77:a4:52:ac:30: 45:73:91:e3:c5:5f:59:6d:d9:4a:03:ab:a7:c1:52:9c:78:9a: d2:a8:f4:64:bf:20:01:ad:57:4f:a8:fc:99:f8:28:bd:b0:32: 20:5f:ca:4d:e3:5d:84:79:17:ab:e5:62:19:9d:67:83:80:92: bd:96:02:98:cb:2a:cc:de:8c:1e:b9:b3:ba:dc:bc:b4:ef:d5: 1a:f2:dd:d8:43:09:1e:14:84:02:b3:70:14:9f:2e:1e:a9:de: 46:5a:d3:3d:2e:cc:a4:ba:cb:93:86:3e:9e:68:be:49:e7:0c: 51:c9:4b:27:e3:e7:69:e8:ad:0b:ff:ea:b2:9e:41:39:e0:13: 7f:6d:1b:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkAIVfQdh+qtWFDpLAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODI0ZGZiNWYtODU4MC00OGZmLWIzMmUtZmQzOTNmYTdk Y2M0MB4XDTI1MDIyNTE0MDA1MloXDTI1MDUyNjEzMDA1MlowLzEtMCsGA1UEAxMk M2Y2ZDAzZTYtNmMzYy00MzlhLWEzYzctNjA0MjZiMmEzYTA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Y4VwN+wNUH5s6Nc9BLEbafAM3uWZtFAFEXJ 63TKXrtKzZXcSdee0epUkiidTBj5VbQ0GAR8/3Ml1fLgETRQN2IBZANTfG9RUZA6 oBgDeoJfLhIWcT6qxnUsr4A9/1G0LIWZZsK4KlrVA4Vas6TQGNs8FAFslu4HtGeV 61aLg7GHclDVTmy/UqgSqyre9IQ+cdZ6Rdd4OuH4fIJ6bHN4i0OQNoTMRi140TSb lQGlzEFulJ5Cm3bWl9wV0S/R8RASxH5ld0c7arNHqMgt6sWV+3YkBEbPGK00KhuF Uz3A0glIFKpH5X3UM85ZZQplQZOIhvwBaIgYEDgPSMywp+HrdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFuy2dZrpnBmE4a7+PvZ1Jbv2qATMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84MjRk ZmI1Zi04NTgwLTQ4ZmYtYjMyZS1mZDM5M2ZhN2RjYzQvNzk5M2QyNjctYWYzYi0z N2NkLTg1MjctZGZjODY1ZTg2Mjc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODI0ZGZiNWYtODU4MC00OGZmLWIz MmUtZmQzOTNmYTdkY2M0LzgyNGRmYjVmLTg1ODAtNDhmZi1iMzJlLWZkMzkzZmE3 ZGNjNC5jcmwwHwYDVR0jBBgwFoAU2YT8ASUa9eXtm7NpUFgxtxJHKZYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84MjRkZmI1Zi04NTgwLTQ4ZmYtYjMyZS1mZDM5 M2ZhN2RjYzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqrCaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKm/fjRsVosEoLh4u32r85o/t3bUseSPzmdiF9TogjHRV/mXDCU1RplH 0Fuzmaw6mdY11LIUoxAf2/pUlEH0HqJjCg+5hvEbktqMaodnZNtDT91d/vX4NQq6 fHdPYYN5bGtzCKNgJYDALQodp52aecfylRSGISo4VrR3pFKsMEVzkePFX1lt2UoD q6fBUpx4mtKo9GS/IAGtV0+o/Jn4KL2wMiBfyk3jXYR5F6vlYhmdZ4OAkr2WApjL KszejB65s7rcvLTv1Rry3dhDCR4UhAKzcBSfLh6p3kZa0z0uzKS6y5OGPp5ovknn DFHJSyfj52norQv/6rKeQTngE39tG0U= -----END CERTIFICATE-----Generated at Sat Apr 5 12:17:27 2025 by rpki-client