$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/0409117d-54a8-39ec-bb51-017bc80bd644.roa File: 0409117d-54a8-39ec-bb51-017bc80bd644.roa (raw, json) Hash identifier: dORKd8/WoArSbD6a/NTzcGJvjId1an86ifSV2DMV0HU= Subject key identifier: ED:9A:E9:81:42:DC:55:61:39:66:68:8D:31:E9:55:31:67:2D:F0:63 Certificate issuer: /CN=b0ca02e7-7a12-4d90-8feb-8f130aaea380 Certificate serial: 010D0C9F432858494E2EA9386046140FF139C700 Authority key identifier: EF:E8:C5:96:3E:3D:66:15:2E:A7:51:BE:9C:66:0C:95:32:89:A4:5B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/0409117d-54a8-39ec-bb51-017bc80bd644.roa Signing time: Tue 25 Mar 2025 13:00:51 +0000 ROA not before: Tue 25 Mar 2025 13:00:51 +0000 ROA not after: Mon 23 Jun 2025 13:00:51 +0000 asID: 16509 IP address blocks: 164.55.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/b0ca02e7-7a12-4d90-8feb-8f130aaea380.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/b0ca02e7-7a12-4d90-8feb-8f130aaea380.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4e:2e:a9:38:60:46:14:0f:f1:39:c7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0ca02e7-7a12-4d90-8feb-8f130aaea380 Validity Not Before: Mar 25 13:00:51 2025 GMT Not After : Jun 23 13:00:51 2025 GMT Subject: CN=0d916031-64f7-4a53-bb03-fc8a6ce131f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:b7:e4:76:96:61:7f:2b:9d:3e:9d:b8:b3:c2: 66:e8:c6:cb:18:6f:00:50:31:fe:1e:ec:4a:bb:44: 19:d7:5f:9b:bd:b0:3b:73:62:ab:bb:9b:d1:20:73: f3:1f:dd:98:ee:92:4f:64:7c:c8:d9:e4:84:ba:53: a0:27:da:2f:2a:2d:7e:17:57:8d:d5:ad:cb:22:c4: 1f:c3:2d:bc:e8:1b:b1:f7:1c:f6:da:8f:89:5e:d9: 78:48:4b:bc:1a:5b:a7:64:90:4a:49:9c:bf:19:b1: 59:3f:d1:92:9a:f2:5d:84:de:3b:71:8a:99:2e:c3: e2:b8:05:45:92:10:20:04:27:e3:1d:75:86:2c:ff: 9b:03:69:66:26:a8:30:7c:60:4e:ef:74:72:3a:5f: d8:ea:de:67:dd:ba:c0:de:7f:8d:d8:8c:51:d3:84: 3f:5a:f3:87:ef:92:d4:65:ed:ec:8b:1b:c7:7a:5f: 12:ef:bc:53:2f:eb:4d:f1:87:cf:50:63:6c:3c:6f: 3a:cd:67:8d:d5:9d:52:c2:c5:74:0f:eb:ef:3c:06: 51:15:2a:17:e6:6d:cb:00:2b:c7:f8:b6:b4:9e:ec: c7:50:0d:15:0a:4d:09:78:be:f7:83:e1:39:e5:d3: ee:6c:b5:0a:ed:1b:b6:79:70:79:34:38:e3:fe:42: 91:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:9A:E9:81:42:DC:55:61:39:66:68:8D:31:E9:55:31:67:2D:F0:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/0409117d-54a8-39ec-bb51-017bc80bd644.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/b0ca02e7-7a12-4d90-8feb-8f130aaea380.crl X509v3 Authority Key Identifier: keyid:EF:E8:C5:96:3E:3D:66:15:2E:A7:51:BE:9C:66:0C:95:32:89:A4:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380.cer sbgp-ipAddrBlock: critical IPv4: 164.55.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:31:34:f9:75:dc:62:4d:54:73:51:2f:43:ba:54:84:04:ba: 7e:c2:46:2c:d9:85:6c:65:2d:df:e8:81:8d:7f:e4:bd:90:0b: 6d:0d:b9:9c:a2:a3:93:1c:b5:58:35:a0:f7:56:d4:56:d8:8b: f8:d7:b8:22:e5:7c:f1:5d:4f:24:a4:41:b8:72:9f:3f:71:34: f9:d4:16:18:1e:26:75:0d:ed:8f:d4:19:73:b3:b2:b7:fe:d0: 0c:c5:f1:b2:d1:f3:a2:05:84:c5:c7:ed:f3:1c:d3:49:2b:91: 80:96:1e:3a:38:9a:02:f0:db:28:c5:2d:1f:e4:c4:51:6d:5e: 7b:9e:9d:a5:70:9e:83:e1:1c:ac:5f:d4:d5:7e:2e:07:1b:54: cb:78:f0:c2:fc:84:8d:c2:90:f7:e9:8b:07:a4:7c:24:68:94: dd:1d:db:20:23:6c:1e:bf:2b:b0:5d:6f:40:e5:40:1b:95:8c: 36:f2:df:43:4a:4c:b1:a6:48:fa:3f:86:ae:26:05:17:65:3d: bc:93:9e:76:ff:82:03:2c:70:21:d5:81:f4:52:f8:ac:45:56: 9a:b3:f5:76:a2:be:56:fe:e2:f4:b8:03:66:65:3a:32:52:b7: f5:67:66:1b:36:56:d1:fd:f2:70:d2:50:56:f9:62:59:e4:fc: 21:a8:20:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElOLqk4YEYUD/E5xwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjBjYTAyZTctN2ExMi00ZDkwLThmZWItOGYxMzBhYWVh MzgwMB4XDTI1MDMyNTEzMDA1MVoXDTI1MDYyMzEzMDA1MVowLzEtMCsGA1UEAxMk MGQ5MTYwMzEtNjRmNy00YTUzLWJiMDMtZmM4YTZjZTEzMWY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7fkdpZhfyudPp24s8Jm6MbLGG8AUDH+HuxK u0QZ11+bvbA7c2Kru5vRIHPzH92Y7pJPZHzI2eSEulOgJ9ovKi1+F1eN1a3LIsQf wy286Bux9xz22o+JXtl4SEu8GlunZJBKSZy/GbFZP9GSmvJdhN47cYqZLsPiuAVF khAgBCfjHXWGLP+bA2lmJqgwfGBO73RyOl/Y6t5n3brA3n+N2IxR04Q/WvOH75LU Ze3sixvHel8S77xTL+tN8YfPUGNsPG86zWeN1Z1SwsV0D+vvPAZRFSoX5m3LACvH +La0nuzHUA0VCk0JeL73g+E55dPubLUK7Ru2eXB5NDjj/kKR9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO2a6YFC3FVhOWZojTHpVTFnLfBjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMGNh MDJlNy03YTEyLTRkOTAtOGZlYi04ZjEzMGFhZWEzODAvMDQwOTExN2QtNTRhOC0z OWVjLWJiNTEtMDE3YmM4MGJkNjQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjBjYTAyZTctN2ExMi00ZDkwLThm ZWItOGYxMzBhYWVhMzgwL2IwY2EwMmU3LTdhMTItNGQ5MC04ZmViLThmMTMwYWFl YTM4MC5jcmwwHwYDVR0jBBgwFoAU7+jFlj49ZhUup1G+nGYMlTKJpFswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMGNhMDJlNy03YTEyLTRkOTAtOGZlYi04ZjEz MGFhZWEzODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApDfpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHMxNPl13GJNVHNRL0O6VIQEun7CRizZhWxlLd/ogY1/5L2QC20NuZyi o5MctVg1oPdW1FbYi/jXuCLlfPFdTySkQbhynz9xNPnUFhgeJnUN7Y/UGXOzsrf+ 0AzF8bLR86IFhMXH7fMc00krkYCWHjo4mgLw2yjFLR/kxFFtXnuenaVwnoPhHKxf 1NV+LgcbVMt48ML8hI3CkPfpiwekfCRolN0d2yAjbB6/K7Bdb0DlQBuVjDby30NK TLGmSPo/hq4mBRdlPbyTnnb/ggMscCHVgfRS+KxFVpqz9Xaivlb+4vS4A2ZlOjJS t/VnZhs2VtH98nDSUFb5Ylnk/CGoIGI= -----END CERTIFICATE-----Generated at Sat Apr 5 11:16:48 2025 by rpki-client