$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/95fc2f52-bf9f-3360-9990-f97b1cc4863a.roa File: 95fc2f52-bf9f-3360-9990-f97b1cc4863a.roa (raw, json) Hash identifier: JlEbYXKGcTtbQskAWCtCUTnWAu4YxcJPTdFGzJHlJIw= Subject key identifier: FA:61:F3:EA:38:DD:FE:73:17:2E:38:98:DB:78:0D:09:22:37:65:11 Certificate issuer: /CN=824dfb5f-8580-48ff-b32e-fd393fa7dcc4 Certificate serial: 010D0C9F43285849350EA5A19993C708646D12A0 Authority key identifier: D9:84:FC:01:25:1A:F5:E5:ED:9B:B3:69:50:58:31:B7:12:47:29:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/95fc2f52-bf9f-3360-9990-f97b1cc4863a.roa Signing time: Sun 16 Mar 2025 13:00:52 +0000 ROA not before: Sun 16 Mar 2025 13:00:52 +0000 ROA not after: Sat 14 Jun 2025 13:00:52 +0000 asID: 16509 IP address blocks: 170.176.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:35:0e:a5:a1:99:93:c7:08:64:6d:12:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=824dfb5f-8580-48ff-b32e-fd393fa7dcc4 Validity Not Before: Mar 16 13:00:52 2025 GMT Not After : Jun 14 13:00:52 2025 GMT Subject: CN=a1a822d2-8129-4c8d-bf4a-18af4333bd50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:aa:fb:3d:41:6b:60:ba:45:80:08:ba:37:ef: 33:68:30:16:f2:6b:ef:4b:ff:9b:49:1e:fb:d3:2e: 1c:1e:b2:1a:2b:16:64:cc:3c:34:8a:2b:98:45:d2: 45:1d:9e:aa:7e:83:b0:84:56:7b:43:30:c7:9b:35: 20:17:38:b7:96:2b:39:df:d8:1b:4f:b3:69:11:13: c7:65:4b:77:58:87:c8:9d:90:d3:f7:2e:87:90:ac: 5b:13:ef:2e:dc:d7:2f:0a:75:a4:f5:77:a4:a7:81: 1f:bd:06:bf:39:9d:dd:a4:6e:67:86:ba:4b:95:b2: 43:f5:b7:eb:67:39:eb:23:65:74:68:00:2b:f8:ac: 5c:76:19:02:a4:a3:b9:3b:8a:ce:48:1a:9a:6c:9e: 71:17:15:8a:ff:3f:f0:8e:f6:22:17:e9:d1:04:40: 5d:04:a4:b7:30:df:0b:b1:5a:2f:dd:5c:99:2e:8d: dc:ec:18:66:b5:52:4e:4b:a9:b2:e5:ad:25:04:0a: 95:f3:ee:77:60:da:ac:0c:6e:9e:91:96:0b:08:0b: 12:c8:2c:80:73:0f:18:4d:32:e0:85:0e:9f:36:11: 29:7c:15:59:30:0d:c4:34:6d:8a:6a:25:ff:d0:a9: cf:94:e0:45:eb:41:08:a5:cf:a7:bb:4b:0a:36:04: a9:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:61:F3:EA:38:DD:FE:73:17:2E:38:98:DB:78:0D:09:22:37:65:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/95fc2f52-bf9f-3360-9990-f97b1cc4863a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.crl X509v3 Authority Key Identifier: keyid:D9:84:FC:01:25:1A:F5:E5:ED:9B:B3:69:50:58:31:B7:12:47:29:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer sbgp-ipAddrBlock: critical IPv4: 170.176.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:b5:19:76:10:91:44:23:8e:64:5b:f9:ea:8c:9c:f7:9c:bb: b4:74:75:36:16:8d:6c:6c:0a:e4:c0:9e:a0:8e:6a:e4:ef:5f: dd:2e:31:74:a4:dc:45:5c:24:e0:14:96:6d:43:e2:b6:2c:39: d3:93:05:a2:78:ac:9c:41:29:6d:db:ca:15:64:29:8a:e4:0f: 80:99:e1:72:0f:e5:71:88:ff:a2:bd:20:f6:43:10:dd:72:25: d2:97:62:32:68:32:d6:fb:85:8c:2e:3f:32:7b:f2:f7:35:eb: f3:24:33:0c:e1:47:59:29:91:a3:7e:da:9f:ad:91:c3:e0:5f: 6d:94:b8:bd:8b:76:41:08:bc:bd:d4:22:9d:4c:80:7d:4d:7b: af:af:8a:b8:e1:e6:51:52:0c:21:7d:7c:fe:72:3d:b8:27:a9: 04:38:a9:4e:bc:1e:d5:8a:79:e7:f8:2c:30:d7:8f:30:52:74: e1:dc:86:fc:58:7d:8f:58:e2:95:69:65:b5:53:81:ed:49:ec: bd:1e:d1:a6:be:6b:b4:eb:3e:ae:1f:7d:c4:eb:66:b9:ed:fb: 4a:dc:1c:80:50:a9:06:18:d1:56:71:3b:65:fd:4e:21:dd:af: a3:b7:08:4b:79:95:91:13:70:90:9b:64:da:47:8b:27:42:28: dd:5a:47:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk1DqWhmZPHCGRtEqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODI0ZGZiNWYtODU4MC00OGZmLWIzMmUtZmQzOTNmYTdk Y2M0MB4XDTI1MDMxNjEzMDA1MloXDTI1MDYxNDEzMDA1MlowLzEtMCsGA1UEAxMk YTFhODIyZDItODEyOS00YzhkLWJmNGEtMThhZjQzMzNiZDUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6r7PUFrYLpFgAi6N+8zaDAW8mvvS/+bSR77 0y4cHrIaKxZkzDw0iiuYRdJFHZ6qfoOwhFZ7QzDHmzUgFzi3lis539gbT7NpERPH ZUt3WIfInZDT9y6HkKxbE+8u3NcvCnWk9Xekp4EfvQa/OZ3dpG5nhrpLlbJD9bfr ZznrI2V0aAAr+KxcdhkCpKO5O4rOSBqabJ5xFxWK/z/wjvYiF+nRBEBdBKS3MN8L sVov3VyZLo3c7BhmtVJOS6my5a0lBAqV8+53YNqsDG6ekZYLCAsSyCyAcw8YTTLg hQ6fNhEpfBVZMA3ENG2KaiX/0KnPlOBF60EIpc+nu0sKNgSpcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPph8+o43f5zFy44mNt4DQkiN2URMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84MjRk ZmI1Zi04NTgwLTQ4ZmYtYjMyZS1mZDM5M2ZhN2RjYzQvOTVmYzJmNTItYmY5Zi0z MzYwLTk5OTAtZjk3YjFjYzQ4NjNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODI0ZGZiNWYtODU4MC00OGZmLWIz MmUtZmQzOTNmYTdkY2M0LzgyNGRmYjVmLTg1ODAtNDhmZi1iMzJlLWZkMzkzZmE3 ZGNjNC5jcmwwHwYDVR0jBBgwFoAU2YT8ASUa9eXtm7NpUFgxtxJHKZYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84MjRkZmI1Zi04NTgwLTQ4ZmYtYjMyZS1mZDM5 M2ZhN2RjYzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqrCeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHy1GXYQkUQjjmRb+eqMnPecu7R0dTYWjWxsCuTAnqCOauTvX90uMXSk 3EVcJOAUlm1D4rYsOdOTBaJ4rJxBKW3byhVkKYrkD4CZ4XIP5XGI/6K9IPZDEN1y JdKXYjJoMtb7hYwuPzJ78vc16/MkMwzhR1kpkaN+2p+tkcPgX22UuL2LdkEIvL3U Ip1MgH1Ne6+virjh5lFSDCF9fP5yPbgnqQQ4qU68HtWKeef4LDDXjzBSdOHchvxY fY9Y4pVpZbVTge1J7L0e0aa+a7TrPq4ffcTrZrnt+0rcHIBQqQYY0VZxO2X9TiHd r6O3CEt5lZETcJCbZNpHiydCKN1aR8o= -----END CERTIFICATE-----Generated at Sat Apr 5 11:10:05 2025 by rpki-client