$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/959fa2cf-147a-396a-8092-e49db2a3a69f.roa File: 959fa2cf-147a-396a-8092-e49db2a3a69f.roa (raw, json) Hash identifier: XW4Ztw4WRhrBcCqLuCWhrYFgavH/P3qI2mwEIIOj+kc= Subject key identifier: 2E:82:C5:7F:B1:48:5B:17:7D:C8:A5:E6:39:C1:1E:28:09:C3:09:8A Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F90DEFB198C8D5690B03A0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/959fa2cf-147a-396a-8092-e49db2a3a69f.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 33662 IP address blocks: 174.170.170.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f9:0d:ef:b1:98:c8:d5:69:0b:03:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=5c366fad-be57-4a35-aa25-2670107737f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:a7:8a:a5:d8:5c:89:b8:b2:12:0c:57:38:5e: 06:df:1e:d7:10:3b:ce:a0:bf:a2:93:84:3b:ba:8d: 98:53:af:03:d3:5e:96:fc:d3:8e:f2:a3:41:e4:cb: f9:f4:be:d3:c6:dc:e3:c1:c8:db:8d:f2:c2:d1:55: c3:87:2d:f8:b8:31:f8:f9:03:35:12:27:cc:05:c6: 9b:d2:bf:07:9d:e6:9b:5c:3d:e5:c9:e0:e9:74:12: d8:8b:83:2b:07:46:83:eb:7a:a8:2c:cc:f6:5e:b2: ae:ce:c6:7b:be:f3:9d:1a:aa:8e:3d:20:c6:4a:a9: 0a:93:6f:9e:01:6d:e2:ed:57:3b:a0:88:13:09:a3: 3e:00:8a:f3:ed:41:45:6d:6e:e7:11:7b:67:46:c6: 71:89:35:5a:d7:f0:f5:f2:7d:9f:dd:b4:97:5d:9e: e8:db:36:f7:9b:3e:4c:6e:88:4b:9b:02:a1:22:49: 52:8b:cf:5b:0d:32:c8:b9:d9:3a:ae:bd:04:46:98: d9:59:66:d2:74:d3:51:77:74:b8:86:6f:95:52:2a: af:f8:7f:f0:7f:5b:78:06:27:9a:09:ee:6a:8f:4d: cc:21:3b:50:fb:ab:aa:9f:26:1f:ef:a5:87:f2:b5: 57:21:ba:5f:2c:85:5a:10:b8:9b:05:b4:30:84:c6: 25:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:82:C5:7F:B1:48:5B:17:7D:C8:A5:E6:39:C1:1E:28:09:C3:09:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/959fa2cf-147a-396a-8092-e49db2a3a69f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 174.170.170.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:91:95:8a:b4:71:76:d0:6a:31:ca:d2:d4:af:62:e3:e4:c8: a6:4a:fa:6e:43:a1:39:8c:c6:e7:63:66:51:ed:7d:7d:05:66: 05:02:f9:54:e7:a0:6e:5c:8c:21:cc:4e:51:dd:bc:e3:8a:26: a5:6a:87:11:63:2c:88:8e:b9:45:5f:96:aa:a1:29:a8:69:d6: 1c:0a:04:dd:e2:91:1c:d1:13:23:23:07:4c:c0:7b:03:f4:46: 52:e9:c4:00:d5:6e:4e:e2:04:f5:33:6d:a4:37:fb:57:57:81: ce:e6:ed:78:7a:f1:eb:9b:78:8b:92:d0:1b:18:22:61:a6:cf: 7f:fe:a3:14:a9:32:17:c6:25:d0:da:43:5e:74:4c:14:0c:3b: 37:18:30:ba:a9:da:31:0f:ec:6f:e3:c1:d4:6a:5f:d4:7d:22: 4d:78:62:bf:dd:7c:77:2c:2c:ae:9a:48:37:d5:c0:83:3b:93: 3e:74:89:d0:5c:91:cd:29:3d:b9:f7:eb:d4:91:a7:a4:d4:59: 51:db:08:d3:36:14:12:d4:36:ab:ca:b2:2c:bd:22:95:5a:7a: 41:9e:83:f4:9f:91:9d:e9:de:34:25:3a:da:02:2d:cb:38:fe: da:ca:f5:17:4d:a9:9c:72:44:24:75:44:59:b9:0f:33:c7:6f: b3:12:fd:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj0+Q3vsZjI1WkLA6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk NWMzNjZmYWQtYmU1Ny00YTM1LWFhMjUtMjY3MDEwNzczN2Y3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5KeKpdhcibiyEgxXOF4G3x7XEDvOoL+ik4Q7 uo2YU68D016W/NOO8qNB5Mv59L7TxtzjwcjbjfLC0VXDhy34uDH4+QM1EifMBcab 0r8HneabXD3lyeDpdBLYi4MrB0aD63qoLMz2XrKuzsZ7vvOdGqqOPSDGSqkKk2+e AW3i7Vc7oIgTCaM+AIrz7UFFbW7nEXtnRsZxiTVa1/D18n2f3bSXXZ7o2zb3mz5M bohLmwKhIklSi89bDTLIudk6rr0ERpjZWWbSdNNRd3S4hm+VUiqv+H/wf1t4Biea Ce5qj03MITtQ+6uqnyYf76WH8rVXIbpfLIVaELibBbQwhMYluwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC6CxX+xSFsXfcil5jnBHigJwwmKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTU5ZmEyY2YtMTQ3YS0z OTZhLTgwOTItZTQ5ZGIyYTNhNjlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrqqqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC2RlYq0cXbQajHK0tSvYuPkyKZK+m5DoTmMxudjZlHtfX0FZgUC+VTn oG5cjCHMTlHdvOOKJqVqhxFjLIiOuUVflqqhKahp1hwKBN3ikRzREyMjB0zAewP0 RlLpxADVbk7iBPUzbaQ3+1dXgc7m7Xh68eubeIuS0BsYImGmz3/+oxSpMhfGJdDa Q150TBQMOzcYMLqp2jEP7G/jwdRqX9R9Ik14Yr/dfHcsLK6aSDfVwIM7kz50idBc kc0pPbn369SRp6TUWVHbCNM2FBLUNqvKsiy9IpVaekGeg/SfkZ3p3jQlOtoCLcs4 /trK9RdNqZxyRCR1RFm5DzPHb7MS/SU= -----END CERTIFICATE-----Generated at Mon Apr 7 06:22:01 2025 by rpki-client