$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/2c9902ef-6d33-3e34-ae3f-43b7a02c1a09.roa File: 2c9902ef-6d33-3e34-ae3f-43b7a02c1a09.roa (raw, json) Hash identifier: 90vnBpDJnD3EnSxbWJMT5NMilnzIBc7MOSFkDKjd240= Subject key identifier: 23:24:4A:72:14:B8:30:BA:71:E2:45:2B:AA:28:03:A7:3C:D6:21:3E Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F432858492CAE8B62AA47F0AA2B74EAC0 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/2c9902ef-6d33-3e34-ae3f-43b7a02c1a09.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 16509 IP address blocks: 170.85.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:ae:8b:62:aa:47:f0:aa:2b:74:ea:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=f71f6555-78b2-4973-a723-f6275322bcca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:89:8a:c0:62:b0:fe:63:ee:9a:0b:a2:91:fc: 34:57:0c:2b:2d:a7:2a:93:6f:f1:78:84:a9:94:42: 9e:f8:27:bf:1d:4f:b3:6e:3a:b0:66:f6:3d:48:de: 35:e8:85:89:80:eb:98:d1:b4:86:c0:16:48:e0:c6: ae:9e:30:1d:22:17:ee:7a:a9:97:ba:90:24:e0:9c: 03:55:c2:44:23:65:97:34:07:4d:93:f2:88:24:9b: cd:dd:90:6f:34:aa:f6:0a:e3:17:77:4c:f5:9e:f2: f0:4a:13:2f:cf:88:f4:6c:57:3a:ca:9d:53:c7:0d: f1:a3:20:d8:d5:7b:aa:12:98:a4:98:80:2b:5c:14: d7:3c:b7:20:91:95:af:83:4c:b7:f1:50:ce:75:e8: 3a:57:9e:fa:bf:56:4c:93:2c:ce:cc:89:b2:1b:66: 86:79:4a:8b:e7:e4:e2:d6:12:6b:89:58:57:11:e6: ed:30:05:e3:9d:50:c6:4c:89:b0:1e:38:91:4a:2c: 1a:bf:fd:84:1d:a1:d2:6b:e2:c8:44:57:0d:e9:ba: f5:de:41:c7:86:37:55:38:d3:db:64:be:c8:13:e1: 21:2a:49:9d:07:67:84:a5:81:67:f5:ca:0e:4d:41: 89:b9:b1:b8:3f:09:bd:28:8e:a3:fe:c7:61:84:a0: 69:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:24:4A:72:14:B8:30:BA:71:E2:45:2B:AA:28:03:A7:3C:D6:21:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/2c9902ef-6d33-3e34-ae3f-43b7a02c1a09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.53.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:27:a1:d4:85:7a:ac:a1:52:b6:f8:69:9f:02:f9:b1:f8:0f: 7d:f8:d0:2e:d2:a9:bd:b6:21:d5:ca:b6:5f:51:30:2f:de:f5: 2b:79:20:03:ab:b6:a0:10:bb:aa:99:14:73:4e:5a:8e:a4:95: 3e:32:c4:86:02:1e:ac:89:cc:5c:c2:de:e4:bd:e8:7e:85:ef: e5:07:0e:89:10:51:f4:1c:f0:a7:1e:0d:d2:22:27:50:4f:9a: 96:bd:76:38:94:af:52:39:1a:e4:08:ff:75:18:f8:32:55:73: fe:90:b7:b7:57:a1:b8:2b:0a:77:31:71:e7:75:a5:49:a8:b0: 24:bc:29:7e:1a:2b:b5:56:c1:1e:84:9a:c6:ca:dc:c4:f2:29: fa:af:d2:d4:38:ff:fc:04:16:e9:f4:f1:bb:a3:bb:0d:4d:b7: e2:eb:01:9e:d1:b8:53:65:8f:86:7e:af:ad:20:e1:0e:d9:6d: ef:3a:6a:6d:e4:50:d9:a2:4c:2b:aa:ab:6c:cc:fe:bf:c3:3f: c3:fc:28:f3:a2:fb:f4:7d:3f:d0:72:ac:fa:d0:08:af:03:91: cb:88:89:d4:3f:4e:25:65:7c:a5:f4:d2:bc:02:0e:39:e7:ab: 8c:19:6f:5f:3f:61:17:df:75:62:24:f4:94:2b:10:bd:70:54: 02:8a:cc:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksrotiqkfwqit06sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk ZjcxZjY1NTUtNzhiMi00OTczLWE3MjMtZjYyNzUzMjJiY2NhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4mKwGKw/mPumguikfw0VwwrLacqk2/xeISp lEKe+Ce/HU+zbjqwZvY9SN416IWJgOuY0bSGwBZI4MaunjAdIhfueqmXupAk4JwD VcJEI2WXNAdNk/KIJJvN3ZBvNKr2CuMXd0z1nvLwShMvz4j0bFc6yp1Txw3xoyDY 1XuqEpikmIArXBTXPLcgkZWvg0y38VDOdeg6V576v1ZMkyzOzImyG2aGeUqL5+Ti 1hJriVhXEebtMAXjnVDGTImwHjiRSiwav/2EHaHSa+LIRFcN6br13kHHhjdVONPb ZL7IE+EhKkmdB2eEpYFn9coOTUGJubG4Pwm9KI6j/sdhhKBpdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCMkSnIUuDC6ceJFK6ooA6c81iE+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvMmM5OTAyZWYtNmQzMy0z ZTM0LWFlM2YtNDNiN2EwMmMxYTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqlU1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGMnodSFeqyhUrb4aZ8C+bH4D3340C7Sqb22IdXKtl9RMC/e9St5IAOr tqAQu6qZFHNOWo6klT4yxIYCHqyJzFzC3uS96H6F7+UHDokQUfQc8KceDdIiJ1BP mpa9djiUr1I5GuQI/3UY+DJVc/6Qt7dXobgrCncxced1pUmosCS8KX4aK7VWwR6E msbK3MTyKfqv0tQ4//wEFun08bujuw1Nt+LrAZ7RuFNlj4Z+r60g4Q7Zbe86am3k UNmiTCuqq2zM/r/DP8P8KPOi+/R9P9ByrPrQCK8DkcuIidQ/TiVlfKX00rwCDjnn q4wZb18/YRffdWIk9JQrEL1wVAKKzHI= -----END CERTIFICATE-----Generated at Fri Mar 14 10:25:01 2025 by rpki-client