$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/2dce6000-c112-3dbd-a403-c351462057df.roa File: 2dce6000-c112-3dbd-a403-c351462057df.roa (raw, json) Hash identifier: vziu7Yubjj9Fs36jYO09kwUak5Qt/siMHnRPL+98cYk= Subject key identifier: BA:67:57:28:AD:20:9C:48:26:47:EC:B7:F3:B3:79:5F:C7:52:45:1A Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F43285848D64111AEFA85E5C0E31521C0 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/2dce6000-c112-3dbd-a403-c351462057df.roa Signing time: Mon 10 Feb 2025 14:00:52 +0000 ROA not before: Mon 10 Feb 2025 14:00:52 +0000 ROA not after: Sun 11 May 2025 13:00:52 +0000 asID: 14618 IP address blocks: 170.85.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d6:41:11:ae:fa:85:e5:c0:e3:15:21:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Feb 10 14:00:52 2025 GMT Not After : May 11 13:00:52 2025 GMT Subject: CN=414810cf-974a-449a-b62f-ed1b9d6d7ca4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:2d:9e:be:6c:24:bf:36:98:d3:4e:71:04:ab: fa:78:82:5b:ad:fe:71:d5:62:80:22:16:da:69:2a: f5:63:80:db:ca:4e:e1:07:a4:c0:60:2c:c8:29:c8: 13:de:dc:98:44:f9:f9:91:8a:f2:bc:f3:c6:40:b6: c2:ff:b2:b4:27:62:bb:d2:ef:22:da:d1:73:ce:a4: ac:e8:5e:73:fb:35:b6:40:8b:07:ba:86:ea:ca:19: 19:10:a5:05:ee:e4:1c:02:54:2c:05:16:c0:6b:8a: 1d:87:0d:6f:a3:0c:1c:2d:1f:73:ec:66:74:af:51: 96:6f:a1:13:17:65:9f:3c:27:88:83:0a:d5:81:94: f2:db:55:29:2b:93:a9:e1:33:3e:2c:0e:ea:40:b2: 66:e1:94:b6:f2:26:64:b5:a7:53:52:3d:b4:d4:f3: c9:25:12:b4:50:f8:38:b5:05:28:24:78:15:6d:1e: 9c:e7:af:73:81:77:69:56:83:01:78:10:27:ce:2d: 65:bd:1c:e4:16:1a:a5:ea:e7:d1:28:da:bf:0c:65: 3c:c7:ed:2b:b4:d8:f7:a5:c7:f8:7a:76:1d:f9:fb: b2:22:f9:0c:47:f9:79:64:bd:2d:7a:82:9e:a3:d0: 84:1c:41:c0:2e:a9:97:9d:cc:96:b1:ba:a4:4e:22: 03:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:67:57:28:AD:20:9C:48:26:47:EC:B7:F3:B3:79:5F:C7:52:45:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/2dce6000-c112-3dbd-a403-c351462057df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:3f:19:53:5b:36:a9:c5:53:47:01:81:b0:e0:20:58:4c:e9: 19:07:ab:ed:a2:b6:8b:2b:65:47:30:4a:4e:f2:f8:f0:b1:ad: e9:a6:2a:61:46:bd:4e:3a:c8:e7:40:ed:2d:f8:74:01:d1:53: 27:a5:cd:34:c5:36:69:7e:55:c7:a4:32:47:04:93:ef:d2:6e: 5a:32:2a:7b:64:3c:ae:91:34:91:ea:b4:92:7e:68:9f:2c:63: 92:2d:75:d5:c2:bf:49:e4:70:cd:fc:28:1b:d2:23:08:1b:e9: 99:ce:97:84:5b:80:75:ba:e5:d5:44:ba:f5:b2:04:56:af:0a: 58:30:41:f9:8c:9f:64:03:60:47:d1:88:38:40:d3:b1:2f:6c: d0:d3:18:3b:79:cf:f8:c7:99:53:85:f0:04:51:f0:c0:b3:10: 24:21:09:8f:14:91:a1:c6:e5:a2:6d:5d:54:fb:bc:6a:43:c3: 29:78:20:e8:2e:55:e7:a3:e8:21:7b:bd:ae:69:03:ed:25:69: 46:2a:e8:6f:8b:fe:ac:d4:08:a1:86:9e:30:d0:1e:67:d5:23: c8:98:cd:11:f8:c2:f7:66:8b:47:d2:51:c0:95:68:3e:c7:10: 0c:9f:37:ec:09:3e:60:bb:e0:8d:2b:e5:ad:a1:d4:a2:fe:bc: d8:1b:74:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjWQRGu+oXlwOMVIcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MDIxMDE0MDA1MloXDTI1MDUxMTEzMDA1MlowLzEtMCsGA1UEAxMk NDE0ODEwY2YtOTc0YS00NDlhLWI2MmYtZWQxYjlkNmQ3Y2E0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhS2evmwkvzaY005xBKv6eIJbrf5x1WKAIhba aSr1Y4Dbyk7hB6TAYCzIKcgT3tyYRPn5kYryvPPGQLbC/7K0J2K70u8i2tFzzqSs 6F5z+zW2QIsHuobqyhkZEKUF7uQcAlQsBRbAa4odhw1vowwcLR9z7GZ0r1GWb6ET F2WfPCeIgwrVgZTy21UpK5Op4TM+LA7qQLJm4ZS28iZktadTUj201PPJJRK0UPg4 tQUoJHgVbR6c569zgXdpVoMBeBAnzi1lvRzkFhql6ufRKNq/DGU8x+0rtNj3pcf4 enYd+fuyIvkMR/l5ZL0teoKeo9CEHEHALqmXncyWsbqkTiIDQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLpnVyitIJxIJkfst/OzeV/HUkUaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvMmRjZTYwMDAtYzExMi0z ZGJkLWE0MDMtYzM1MTQ2MjA1N2RmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqlV4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGE/GVNbNqnFU0cBgbDgIFhM6RkHq+2itosrZUcwSk7y+PCxremmKmFG vU46yOdA7S34dAHRUyelzTTFNml+VcekMkcEk+/SbloyKntkPK6RNJHqtJJ+aJ8s Y5ItddXCv0nkcM38KBvSIwgb6ZnOl4RbgHW65dVEuvWyBFavClgwQfmMn2QDYEfR iDhA07EvbNDTGDt5z/jHmVOF8ARR8MCzECQhCY8UkaHG5aJtXVT7vGpDwyl4IOgu Veej6CF7va5pA+0laUYq6G+L/qzUCKGGnjDQHmfVI8iYzRH4wvdmi0fSUcCVaD7H EAyfN+wJPmC74I0r5a2h1KL+vNgbdFk= -----END CERTIFICATE-----Generated at Fri Mar 14 09:45:32 2025 by rpki-client