$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/53a28954-9970-39e6-a84e-6fc7573780fa.roa File: 53a28954-9970-39e6-a84e-6fc7573780fa.roa (raw, json) Hash identifier: wBdSovC2yp1unzbb0UD/qok6g+D9e9syAQcWMWF5iqk= Subject key identifier: F4:E3:23:02:DB:C1:B3:69:19:B5:A6:84:E0:60:A7:07:6F:54:53:92 Certificate issuer: /CN=c86a7ba5-67c5-481d-b278-0b265dc97144 Certificate serial: 010D0C9F432858494B63FDFBB067A257505C3C00 Authority key identifier: 69:92:8D:83:C4:F4:B4:92:18:C1:FE:F0:78:A4:3C:F7:1D:D0:2B:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/53a28954-9970-39e6-a84e-6fc7573780fa.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 8075 IP address blocks: 170.39.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/c86a7ba5-67c5-481d-b278-0b265dc97144.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/c86a7ba5-67c5-481d-b278-0b265dc97144.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:63:fd:fb:b0:67:a2:57:50:5c:3c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c86a7ba5-67c5-481d-b278-0b265dc97144 Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=64e925b5-b48e-41b1-90c7-058ce86754a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:90:e8:eb:9e:92:5b:1e:37:85:97:37:66:45: e4:9c:63:a5:5a:90:eb:fb:a5:f8:f3:99:52:e0:24: 7a:22:4d:27:31:32:aa:9f:e2:9b:d0:2b:b9:41:5c: 4e:e6:7f:11:8e:77:60:58:6d:7f:77:38:c1:df:1f: e5:32:e7:7b:35:3e:e0:12:a5:7e:1a:7a:c5:c0:b5: 2f:11:2f:81:ae:2a:b5:a4:6c:8f:30:e7:a8:46:db: e6:d8:1f:3e:59:8a:76:bc:08:20:33:a2:e6:2e:08: 03:85:a1:d9:af:51:c2:56:d4:da:49:dc:fa:96:c0: 9d:25:0a:7b:e9:0c:47:4b:2b:7b:08:85:42:71:fc: 05:78:51:f1:f8:11:34:37:42:3b:ef:bd:90:fb:1e: 5c:10:92:e1:3e:c8:ec:36:4f:bb:21:8a:32:cb:ac: f5:bb:18:1e:0a:be:3f:0f:71:70:58:55:d9:fc:26: 12:fd:8c:53:19:3d:2a:d1:fc:73:5e:ab:ad:9f:81: ca:e9:2e:6d:46:0d:47:71:17:13:07:2e:7c:51:5b: 6c:86:ca:27:ec:a9:61:14:1e:2e:6c:b0:35:8c:93: eb:1e:d5:8c:a2:ad:b3:a5:75:b0:f6:0f:03:e0:5d: 59:ad:60:09:e6:a8:5f:dd:da:26:5a:02:2e:a7:01: 75:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:E3:23:02:DB:C1:B3:69:19:B5:A6:84:E0:60:A7:07:6F:54:53:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/53a28954-9970-39e6-a84e-6fc7573780fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/c86a7ba5-67c5-481d-b278-0b265dc97144.crl X509v3 Authority Key Identifier: keyid:69:92:8D:83:C4:F4:B4:92:18:C1:FE:F0:78:A4:3C:F7:1D:D0:2B:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144.cer sbgp-ipAddrBlock: critical IPv4: 170.39.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:81:34:b6:73:83:c4:ac:c5:18:20:7c:31:ee:20:2f:d1:70: 1d:0e:a8:48:b5:16:3d:38:32:28:f6:50:58:f9:d3:07:2e:94: 50:8c:70:d5:82:f5:4b:ff:ca:b6:bc:85:de:6a:43:55:a6:d3: d0:c0:fe:53:58:8d:ba:a8:98:3c:75:ab:6c:58:d5:43:f0:8f: aa:f2:a4:c6:72:d1:93:d7:c2:41:1b:c4:1f:2f:5f:b3:2c:8b: 54:0e:0a:37:66:9e:0b:1c:5d:ca:c6:49:6d:1a:a9:1e:41:c6: 36:22:fa:7a:9d:25:33:b6:3e:0b:62:22:fe:f8:de:af:14:d2: 90:a6:14:78:de:74:67:2b:42:aa:12:1f:b5:c1:9e:2b:29:fc: 67:ea:83:e6:38:f5:c2:cd:0e:34:cb:bf:30:35:dd:53:7e:09: 9b:a6:71:ca:4d:bf:cc:7d:84:74:7d:cb:94:ff:b3:ab:65:5a: 11:3b:d7:88:4b:54:7f:9a:49:d2:56:1a:20:16:5d:1c:a4:f4: 8e:11:28:f4:89:52:6f:97:ac:d8:ae:4f:ff:c2:4b:d3:a8:38: b2:2b:44:65:01:96:72:a5:c8:b6:9f:21:e3:4d:a5:17:10:aa: 45:70:ca:5d:56:30:61:0a:23:73:06:90:32:61:d2:4d:a0:70: 91:4d:2d:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElLY/37sGeiV1BcPAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg2YTdiYTUtNjdjNS00ODFkLWIyNzgtMGIyNjVkYzk3 MTQ0MB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk NjRlOTI1YjUtYjQ4ZS00MWIxLTkwYzctMDU4Y2U4Njc1NGE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5Do656SWx43hZc3ZkXknGOlWpDr+6X485lS 4CR6Ik0nMTKqn+Kb0Cu5QVxO5n8RjndgWG1/dzjB3x/lMud7NT7gEqV+GnrFwLUv ES+Briq1pGyPMOeoRtvm2B8+WYp2vAggM6LmLggDhaHZr1HCVtTaSdz6lsCdJQp7 6QxHSyt7CIVCcfwFeFHx+BE0N0I7772Q+x5cEJLhPsjsNk+7IYoyy6z1uxgeCr4/ D3FwWFXZ/CYS/YxTGT0q0fxzXqutn4HK6S5tRg1HcRcTBy58UVtshson7KlhFB4u bLA1jJPrHtWMoq2zpXWw9g8D4F1ZrWAJ5qhf3domWgIupwF1WwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPTjIwLbwbNpGbWmhOBgpwdvVFOSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODZh N2JhNS02N2M1LTQ4MWQtYjI3OC0wYjI2NWRjOTcxNDQvNTNhMjg5NTQtOTk3MC0z OWU2LWE4NGUtNmZjNzU3Mzc4MGZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg2YTdiYTUtNjdjNS00ODFkLWIy NzgtMGIyNjVkYzk3MTQ0L2M4NmE3YmE1LTY3YzUtNDgxZC1iMjc4LTBiMjY1ZGM5 NzE0NC5jcmwwHwYDVR0jBBgwFoAUaZKNg8T0tJIYwf7weKQ89x3QKzwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODZhN2JhNS02N2M1LTQ4MWQtYjI3OC0wYjI2 NWRjOTcxNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqidWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGCBNLZzg8SsxRggfDHuIC/RcB0OqEi1Fj04Mij2UFj50wculFCMcNWC 9Uv/yra8hd5qQ1Wm09DA/lNYjbqomDx1q2xY1UPwj6rypMZy0ZPXwkEbxB8vX7Ms i1QOCjdmngscXcrGSW0aqR5BxjYi+nqdJTO2PgtiIv743q8U0pCmFHjedGcrQqoS H7XBnisp/Gfqg+Y49cLNDjTLvzA13VN+CZumccpNv8x9hHR9y5T/s6tlWhE714hL VH+aSdJWGiAWXRyk9I4RKPSJUm+XrNiuT//CS9OoOLIrRGUBlnKlyLafIeNNpRcQ qkVwyl1WMGEKI3MGkDJh0k2gcJFNLZE= -----END CERTIFICATE-----Generated at Fri Apr 4 16:50:29 2025 by rpki-client