$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/c2b45149-3ba5-3c5b-b000-c12a5001cb80.roa File: c2b45149-3ba5-3c5b-b000-c12a5001cb80.roa (raw, json) Hash identifier: tZt8ym/+fhRQB5VZAcSgSE9uebSVizb6SQWv3sZfZeo= Subject key identifier: F9:4B:83:AE:F3:09:DA:09:E9:6C:F8:E7:54:A5:F8:DB:23:8F:29:9C Certificate issuer: /CN=1e268aaa-6306-4988-99f7-d5802a67b577 Certificate serial: 010D0C9F432858491D717805CE9F5D2655934F00 Authority key identifier: 6E:EA:DD:B7:88:28:8A:01:91:6E:A3:89:AB:C9:61:FD:20:7D:73:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/c2b45149-3ba5-3c5b-b000-c12a5001cb80.roa Signing time: Sat 08 Mar 2025 02:00:39 +0000 ROA not before: Sat 08 Mar 2025 02:00:39 +0000 ROA not after: Fri 06 Jun 2025 01:00:39 +0000 asID: 14593 IP address blocks: 170.203.192.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1d:71:78:05:ce:9f:5d:26:55:93:4f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e268aaa-6306-4988-99f7-d5802a67b577 Validity Not Before: Mar 8 02:00:39 2025 GMT Not After : Jun 6 01:00:39 2025 GMT Subject: CN=3f1b8bc5-ae0c-4435-93c0-ac153d26c2c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:b4:82:b4:2a:6f:0b:ac:dd:a5:36:d0:cb:43: b0:27:48:fd:47:0a:94:22:34:f2:62:ac:f3:95:0f: 25:33:c6:31:23:39:7d:b9:c5:fb:44:08:11:d6:5d: 7a:fc:24:95:85:6c:55:1b:d5:ad:ac:16:f2:e5:0c: f9:63:25:6f:66:8c:67:c7:16:87:13:dd:b8:2c:2d: 69:be:98:e5:b0:2b:12:c2:7f:d3:5c:37:41:cb:fb: c3:ce:0f:e3:be:ea:fd:55:28:59:3f:eb:b4:fb:c7: b9:34:b7:b3:5d:46:31:4a:fb:cd:f1:0f:99:d0:f1: 2f:56:9c:cc:61:79:ae:bd:5f:ba:ff:29:2d:9a:71: 1e:23:7d:6f:89:49:29:79:9e:95:72:2e:e1:bd:a4: fa:5f:85:15:3d:3e:13:63:bf:9a:22:ec:84:43:bf: 1c:e7:c7:e8:af:dc:15:33:01:71:ed:d4:1e:f0:a5: 03:29:de:8a:57:e5:61:f8:3e:32:c6:33:1c:71:c1: 65:5b:28:29:35:b1:65:c4:73:5e:d0:17:f6:73:fb: 6c:aa:ad:f6:f1:21:8d:e1:ba:57:69:5b:3c:0f:fa: f3:49:e2:c2:14:89:9d:0a:70:9b:56:7c:3e:77:87: eb:db:7a:4a:ac:0a:bd:14:f9:ad:c5:63:88:b1:90: 8d:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:4B:83:AE:F3:09:DA:09:E9:6C:F8:E7:54:A5:F8:DB:23:8F:29:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/c2b45149-3ba5-3c5b-b000-c12a5001cb80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.crl X509v3 Authority Key Identifier: keyid:6E:EA:DD:B7:88:28:8A:01:91:6E:A3:89:AB:C9:61:FD:20:7D:73:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer sbgp-ipAddrBlock: critical IPv4: 170.203.192.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:d0:35:eb:07:cb:34:c5:31:6a:64:1d:02:be:d3:b1:01:cb: ec:c9:f5:d8:ee:28:a4:98:9c:e9:81:46:e0:c7:d6:7e:08:5d: 11:18:bf:f1:25:99:96:40:f5:b6:f7:a8:2a:36:ba:0d:a6:73: 7a:50:ec:63:b6:c5:41:ee:55:71:c2:07:eb:0f:a1:9c:30:c8: db:fc:a3:45:68:5b:ce:f2:67:32:c7:3a:4a:df:b9:01:4e:6d: 8a:8f:b2:4c:10:c2:71:77:1b:34:3f:7c:00:83:cf:44:73:8f: e5:ab:f1:a7:9b:fc:02:92:1e:f0:cd:f5:30:90:a6:73:14:22: a2:49:1b:16:19:fc:41:c3:e5:17:82:74:9c:b8:82:4b:ab:8b: c1:cb:2e:5f:41:26:1e:a9:de:d7:e8:48:63:90:86:4b:7d:a0: 62:50:fa:49:cc:ef:a4:1b:a2:29:2b:19:80:5d:83:4e:04:fd: 93:de:e0:6b:04:12:a3:ad:c5:b0:5c:df:23:9c:8c:3b:aa:bc: e0:5a:e4:cc:ae:be:a7:1b:b2:24:c5:53:eb:50:ea:89:a3:59: 08:c4:34:f5:eb:b0:33:0d:2a:42:af:bf:25:6d:cf:75:c7:3f: 64:78:d4:cc:6f:df:6f:d1:d4:77:0f:a1:c6:18:8d:2d:4a:ca: d8:4f:bd:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkdcXgFzp9dJlWTTwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWUyNjhhYWEtNjMwNi00OTg4LTk5ZjctZDU4MDJhNjdi NTc3MB4XDTI1MDMwODAyMDAzOVoXDTI1MDYwNjAxMDAzOVowLzEtMCsGA1UEAxMk M2YxYjhiYzUtYWUwYy00NDM1LTkzYzAtYWMxNTNkMjZjMmMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAibSCtCpvC6zdpTbQy0OwJ0j9RwqUIjTyYqzz lQ8lM8YxIzl9ucX7RAgR1l16/CSVhWxVG9WtrBby5Qz5YyVvZoxnxxaHE924LC1p vpjlsCsSwn/TXDdBy/vDzg/jvur9VShZP+u0+8e5NLezXUYxSvvN8Q+Z0PEvVpzM YXmuvV+6/yktmnEeI31viUkpeZ6Vci7hvaT6X4UVPT4TY7+aIuyEQ78c58for9wV MwFx7dQe8KUDKd6KV+Vh+D4yxjMcccFlWygpNbFlxHNe0Bf2c/tsqq328SGN4bpX aVs8D/rzSeLCFImdCnCbVnw+d4fr23pKrAq9FPmtxWOIsZCNLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPlLg67zCdoJ6Wz451Sl+NsjjymcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xZTI2 OGFhYS02MzA2LTQ5ODgtOTlmNy1kNTgwMmE2N2I1NzcvYzJiNDUxNDktM2JhNS0z YzViLWIwMDAtYzEyYTUwMDFjYjgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMWUyNjhhYWEtNjMwNi00OTg4LTk5 ZjctZDU4MDJhNjdiNTc3LzFlMjY4YWFhLTYzMDYtNDk4OC05OWY3LWQ1ODAyYTY3 YjU3Ny5jcmwwHwYDVR0jBBgwFoAUburdt4goigGRbqOJq8lh/SB9c8wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8xZTI2OGFhYS02MzA2LTQ5ODgtOTlmNy1kNTgw MmE2N2I1NzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFqsvAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF7QNesHyzTFMWpkHQK+07EBy+zJ9djuKKSYnOmBRuDH1n4IXREYv/El mZZA9bb3qCo2ug2mc3pQ7GO2xUHuVXHCB+sPoZwwyNv8o0VoW87yZzLHOkrfuQFO bYqPskwQwnF3GzQ/fACDz0Rzj+Wr8aeb/AKSHvDN9TCQpnMUIqJJGxYZ/EHD5ReC dJy4gkuri8HLLl9BJh6p3tfoSGOQhkt9oGJQ+knM76QboikrGYBdg04E/ZPe4GsE EqOtxbBc3yOcjDuqvOBa5MyuvqcbsiTFU+tQ6omjWQjENPXrsDMNKkKvvyVtz3XH P2R41Mxv32/R1HcPocYYjS1KythPvSQ= -----END CERTIFICATE-----Generated at Sat Apr 5 11:19:16 2025 by rpki-client