$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/96ce3e89-656f-3a76-b18d-33ba1bb341c2.roa File: 96ce3e89-656f-3a76-b18d-33ba1bb341c2.roa (raw, json) Hash identifier: iRELA7Y+0nuYlnuGN8f7IpQZjHxEVK3rRSAFwbfwDjI= Subject key identifier: 81:6F:75:40:9E:3C:43:D0:76:FF:DC:B8:D6:31:C8:96:D6:03:18:D2 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584968B4216535079C7F625F1800 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/96ce3e89-656f-3a76-b18d-33ba1bb341c2.roa Signing time: Fri 04 Apr 2025 01:00:47 +0000 ROA not before: Fri 04 Apr 2025 01:00:47 +0000 ROA not after: Thu 03 Jul 2025 01:00:47 +0000 asID: 8987 IP address blocks: 170.85.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:68:b4:21:65:35:07:9c:7f:62:5f:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Apr 4 01:00:47 2025 GMT Not After : Jul 3 01:00:47 2025 GMT Subject: CN=c3c602d9-e977-4516-a090-780d9ebe002b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:d3:cb:1f:be:87:02:56:25:28:83:aa:d4:52: ef:f6:86:94:ce:31:52:4c:dc:d5:7b:1b:e3:fd:06: ba:f4:07:3a:fa:e6:97:77:df:aa:f0:e4:a5:c3:85: 4c:d7:96:d1:6f:ee:83:49:c1:67:53:fa:cf:b9:1e: 13:43:91:b2:74:cf:32:1e:8b:a2:0a:4d:93:f0:02: 05:3a:8e:d1:cb:94:11:2c:4c:1e:78:d5:19:19:d6: 0c:0b:d0:68:cd:4e:bf:91:c2:21:9b:55:1e:c8:0f: 6f:e2:33:df:69:62:42:c2:be:22:07:5b:3d:bd:c0: 77:93:f1:0d:5a:91:08:af:0a:a3:d7:10:ea:bf:59: 22:3b:ce:5b:62:00:29:1b:5e:57:94:d1:e2:f9:76: ca:e3:59:2e:53:ec:5a:02:8c:56:e4:60:0a:63:e6: 1e:d0:99:d7:e5:f3:66:21:ec:8d:48:c0:0b:80:22: bd:2d:79:a9:77:ce:4f:73:d4:30:20:19:08:96:32: 6f:f6:2d:60:8b:5a:46:1f:5c:73:8a:5e:49:e4:98: be:f5:e7:29:44:e6:71:e8:b4:d5:33:f4:d3:63:7f: f2:53:e8:53:cb:a1:88:4f:8f:90:48:31:2c:0a:51: 4d:ab:60:c0:16:8a:2d:02:7d:54:59:66:2f:6a:e6: ab:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:6F:75:40:9E:3C:43:D0:76:FF:DC:B8:D6:31:C8:96:D6:03:18:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/96ce3e89-656f-3a76-b18d-33ba1bb341c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.195.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:eb:7f:f5:6b:b0:d3:16:06:30:c0:98:e3:6b:bd:69:c1:dd: 40:a9:88:f4:5c:8f:1d:ae:15:b7:43:ad:d7:30:61:99:44:df: a0:93:3c:25:04:7e:cd:ba:ee:67:a8:23:28:4a:87:2f:03:ca: b8:b3:ad:4e:45:be:9c:e4:56:90:bb:a2:eb:d5:e0:13:73:ca: f2:0f:93:05:72:92:41:ff:0f:e2:04:54:f7:ac:95:ce:64:19: 91:5b:8a:18:3b:96:cd:66:6d:82:90:b5:b9:90:b5:0b:b9:55: aa:5c:f5:ed:d9:f8:0a:e2:b1:fb:f6:7b:35:ac:8e:63:8e:52: 12:dd:f0:ea:a2:40:49:df:ce:cb:c0:c6:45:e5:94:cf:a7:e2: a9:fe:9c:38:8d:01:2b:96:ce:5b:77:74:10:f1:01:5b:3e:06: 4a:f4:13:4b:d2:66:c1:2f:4f:aa:23:1d:14:db:13:db:8e:44: e9:e1:49:2a:03:6e:5e:8a:52:04:95:84:da:a5:2c:21:e4:00: 98:2a:27:b6:8a:be:32:db:3e:93:cf:d8:dc:c5:c5:04:fd:bd: 0d:7c:26:7c:b7:04:2b:73:c8:4e:b7:c8:2f:f4:22:3e:90:22: 9d:96:1a:e8:a3:c6:f6:87:45:75:e5:38:07:95:02:41:4f:7f: 63:fd:fc:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElotCFlNQecf2JfGAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MDQwNDAxMDA0N1oXDTI1MDcwMzAxMDA0N1owLzEtMCsGA1UEAxMk YzNjNjAyZDktZTk3Ny00NTE2LWEwOTAtNzgwZDllYmUwMDJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNPLH76HAlYlKIOq1FLv9oaUzjFSTNzVexvj /Qa69Ac6+uaXd9+q8OSlw4VM15bRb+6DScFnU/rPuR4TQ5GydM8yHouiCk2T8AIF Oo7Ry5QRLEweeNUZGdYMC9BozU6/kcIhm1UeyA9v4jPfaWJCwr4iB1s9vcB3k/EN WpEIrwqj1xDqv1kiO85bYgApG15XlNHi+XbK41kuU+xaAoxW5GAKY+Ye0JnX5fNm IeyNSMALgCK9LXmpd85Pc9QwIBkIljJv9i1gi1pGH1xzil5J5Ji+9ecpROZx6LTV M/TTY3/yU+hTy6GIT4+QSDEsClFNq2DAFootAn1UWWYvauaruwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIFvdUCePEPQdv/cuNYxyJbWAxjSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvOTZjZTNlODktNjU2Zi0z YTc2LWIxOGQtMzNiYTFiYjM0MWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqlXDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC3rf/VrsNMWBjDAmONrvWnB3UCpiPRcjx2uFbdDrdcwYZlE36CTPCUE fs267meoIyhKhy8DyrizrU5FvpzkVpC7ouvV4BNzyvIPkwVykkH/D+IEVPeslc5k GZFbihg7ls1mbYKQtbmQtQu5Vapc9e3Z+Arisfv2ezWsjmOOUhLd8OqiQEnfzsvA xkXllM+n4qn+nDiNASuWzlt3dBDxAVs+Bkr0E0vSZsEvT6ojHRTbE9uOROnhSSoD bl6KUgSVhNqlLCHkAJgqJ7aKvjLbPpPP2NzFxQT9vQ18Jny3BCtzyE63yC/0Ij6Q Ip2WGuijxvaHRXXlOAeVAkFPf2P9/Ec= -----END CERTIFICATE-----Generated at Sat Apr 19 07:10:40 2025 by rpki-client