$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1fe8849b-66cd-4afe-9b0b-970eafad1175/31087add-e607-36b0-8d31-ad7c14d91fbb.roa File: 31087add-e607-36b0-8d31-ad7c14d91fbb.roa (raw, json) Hash identifier: +Ulu9FHXsIZ+dR2Hh3cgZOldSCf4HviZS1GV3NQ9vDQ= Subject key identifier: 77:35:A6:37:89:9F:B2:9D:4E:51:5F:81:0C:8B:70:CE:AC:C2:AB:C0 Certificate issuer: /CN=1fe8849b-66cd-4afe-9b0b-970eafad1175 Certificate serial: 010D0C9F43285848E59BB8A087EE71325DA96680 Authority key identifier: BE:A8:20:9C:13:5E:FC:F9:EE:69:98:CE:84:4E:B8:E8:DC:83:F4:95 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1fe8849b-66cd-4afe-9b0b-970eafad1175.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1fe8849b-66cd-4afe-9b0b-970eafad1175/31087add-e607-36b0-8d31-ad7c14d91fbb.roa Signing time: Sun 16 Feb 2025 02:00:40 +0000 ROA not before: Sun 16 Feb 2025 02:00:40 +0000 ROA not after: Sat 17 May 2025 01:00:40 +0000 asID: 1008 IP address blocks: 170.205.0.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1fe8849b-66cd-4afe-9b0b-970eafad1175/1fe8849b-66cd-4afe-9b0b-970eafad1175.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1fe8849b-66cd-4afe-9b0b-970eafad1175/1fe8849b-66cd-4afe-9b0b-970eafad1175.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1fe8849b-66cd-4afe-9b0b-970eafad1175.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e5:9b:b8:a0:87:ee:71:32:5d:a9:66:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fe8849b-66cd-4afe-9b0b-970eafad1175 Validity Not Before: Feb 16 02:00:40 2025 GMT Not After : May 17 01:00:40 2025 GMT Subject: CN=c15a84c4-954c-4b2b-b337-e2da539b8b30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:55:30:8d:1d:ca:60:23:b4:2d:71:d0:64:73: d4:c7:b9:5a:e5:b1:d7:e9:9b:73:11:77:de:8a:b5: 35:7c:95:56:e6:a9:8c:94:f6:d3:9e:88:b8:1a:28: 50:96:24:1f:ce:20:14:ae:d3:67:ba:f3:17:a1:c3: 70:eb:88:6d:67:67:a5:c4:7a:1f:cb:83:e9:5a:5c: af:75:93:5d:42:2c:fe:f2:c2:36:7a:a7:04:dd:ff: 17:ec:e4:22:6f:4e:f2:0a:f0:0f:5a:42:9e:a8:de: f7:f9:67:3d:49:eb:57:6d:1a:16:7a:45:9e:92:6c: fb:07:f6:78:3d:2d:d0:fe:5e:36:61:be:5f:70:89: fb:d7:63:6c:28:41:3d:e8:41:b8:72:82:36:f6:37: fb:b0:2d:72:e5:18:4f:e6:45:8f:e0:6c:f3:f7:ad: c3:a0:7d:53:b0:c7:3a:7f:63:27:5c:e5:9d:34:f6: 5c:23:cd:5f:61:dc:16:b0:e1:3e:46:29:32:b2:65: 11:85:fe:af:33:e7:5d:01:bc:e0:f2:0c:ce:d6:06: 47:c5:5b:1f:b9:be:43:09:74:19:75:25:fc:d9:01: 13:ab:d9:fe:d3:fe:47:9d:58:55:3a:2a:73:c3:2c: e9:69:fb:3b:36:03:98:c9:a5:cb:a0:cb:02:55:98: 93:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:35:A6:37:89:9F:B2:9D:4E:51:5F:81:0C:8B:70:CE:AC:C2:AB:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1fe8849b-66cd-4afe-9b0b-970eafad1175/31087add-e607-36b0-8d31-ad7c14d91fbb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1fe8849b-66cd-4afe-9b0b-970eafad1175/1fe8849b-66cd-4afe-9b0b-970eafad1175.crl X509v3 Authority Key Identifier: keyid:BE:A8:20:9C:13:5E:FC:F9:EE:69:98:CE:84:4E:B8:E8:DC:83:F4:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1fe8849b-66cd-4afe-9b0b-970eafad1175.cer sbgp-ipAddrBlock: critical IPv4: 170.205.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:c2:87:1e:27:15:13:6a:14:9b:c1:2d:e6:81:ac:bb:30:e6: 30:42:5e:dd:02:83:91:80:85:ca:89:82:d4:c9:3d:55:d6:bc: fa:e9:fb:13:48:11:a2:98:b3:3a:26:a4:77:e0:e8:f4:d1:be: a1:8f:18:5e:26:87:95:10:36:51:44:90:35:51:01:60:56:f2: a0:b0:65:e4:d1:0d:44:3e:96:85:1f:e6:46:cc:0e:16:7f:fb: 15:e1:02:f7:4c:77:5d:3a:18:33:fb:76:a3:2c:f4:d1:5e:1f: 00:a5:dd:71:3a:9b:4f:08:51:04:51:26:7c:49:7e:d2:fb:38: fb:d4:f0:38:97:4d:e0:2d:fb:49:f4:0b:91:77:7c:3c:7c:85: a4:23:8f:1a:d0:cf:ce:0f:6d:6f:df:bc:0a:81:c2:93:37:98: 5c:da:28:ba:53:41:cc:fa:42:de:66:d9:6a:20:33:55:aa:8f: 00:72:cf:e3:43:ce:b5:0f:92:6a:e3:47:36:e3:a9:05:e5:4e: c1:aa:33:48:d0:62:f2:df:ea:a4:47:e6:98:ef:1a:88:00:2e: d5:9d:36:dc:0b:86:51:7e:6f:b5:1f:3b:9d:54:1a:42:cb:79: 9d:7e:22:c6:41:c7:bc:4c:34:d2:53:ab:98:2b:0a:44:08:cc: 9b:40:43:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjlm7igh+5xMl2pZoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZlODg0OWItNjZjZC00YWZlLTliMGItOTcwZWFmYWQx MTc1MB4XDTI1MDIxNjAyMDA0MFoXDTI1MDUxNzAxMDA0MFowLzEtMCsGA1UEAxMk YzE1YTg0YzQtOTU0Yy00YjJiLWIzMzctZTJkYTUzOWI4YjMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj1UwjR3KYCO0LXHQZHPUx7la5bHX6ZtzEXfe irU1fJVW5qmMlPbTnoi4GihQliQfziAUrtNnuvMXocNw64htZ2elxHofy4PpWlyv dZNdQiz+8sI2eqcE3f8X7OQib07yCvAPWkKeqN73+Wc9SetXbRoWekWekmz7B/Z4 PS3Q/l42Yb5fcIn712NsKEE96EG4coI29jf7sC1y5RhP5kWP4Gzz963DoH1TsMc6 f2MnXOWdNPZcI81fYdwWsOE+RikysmURhf6vM+ddAbzg8gzO1gZHxVsfub5DCXQZ dSX82QETq9n+0/5HnVhVOipzwyzpafs7NgOYyaXLoMsCVZiT9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHc1pjeJn7KdTlFfgQyLcM6swqvAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xZmU4 ODQ5Yi02NmNkLTRhZmUtOWIwYi05NzBlYWZhZDExNzUvMzEwODdhZGQtZTYwNy0z NmIwLThkMzEtYWQ3YzE0ZDkxZmJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMWZlODg0OWItNjZjZC00YWZlLTli MGItOTcwZWFmYWQxMTc1LzFmZTg4NDliLTY2Y2QtNGFmZS05YjBiLTk3MGVhZmFk MTE3NS5jcmwwHwYDVR0jBBgwFoAUvqggnBNe/PnuaZjOhE646NyD9JUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xZmU4ODQ5Yi02NmNkLTRhZmUtOWIwYi05NzBl YWZhZDExNzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqs0AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJvChx4nFRNqFJvBLeaBrLsw5jBCXt0Cg5GAhcqJgtTJPVXWvPrp+xNI EaKYszompHfg6PTRvqGPGF4mh5UQNlFEkDVRAWBW8qCwZeTRDUQ+loUf5kbMDhZ/ +xXhAvdMd106GDP7dqMs9NFeHwCl3XE6m08IUQRRJnxJftL7OPvU8DiXTeAt+0n0 C5F3fDx8haQjjxrQz84PbW/fvAqBwpM3mFzaKLpTQcz6Qt5m2WogM1WqjwByz+ND zrUPkmrjRzbjqQXlTsGqM0jQYvLf6qRH5pjvGogALtWdNtwLhlF+b7UfO51UGkLL eZ1+IsZBx7xMNNJTq5grCkQIzJtAQz8= -----END CERTIFICATE-----Generated at Thu Mar 13 06:56:43 2025 by rpki-client