$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3fce74bb-cb08-3dd0-90fd-70a4891c6455.roa File: 3fce74bb-cb08-3dd0-90fd-70a4891c6455.roa (raw, json) Hash identifier: incRKntF9PrGXfy3y/lI7DR7KPnZOmJL1wFA/iyM8K0= Subject key identifier: AF:5A:4D:0E:70:DD:D0:FA:1F:B3:87:72:D7:DB:EA:45:35:32:EA:87 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584953C4200C0CCE398875AE6700 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3fce74bb-cb08-3dd0-90fd-70a4891c6455.roa Signing time: Thu 27 Mar 2025 13:00:52 +0000 ROA not before: Thu 27 Mar 2025 13:00:52 +0000 ROA not after: Wed 25 Jun 2025 13:00:52 +0000 asID: 54600 IP address blocks: 170.62.152.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:53:c4:20:0c:0c:ce:39:88:75:ae:67:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Mar 27 13:00:52 2025 GMT Not After : Jun 25 13:00:52 2025 GMT Subject: CN=a78ffe0e-a0a7-4e66-a88f-c9f1c93801a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:61:d7:69:ff:4f:09:e9:1a:97:08:3d:11:04: 0c:29:34:a9:d2:83:7d:b5:c2:91:8a:78:8d:3a:fc: 91:fe:2f:85:28:57:fc:04:8e:d0:60:d6:5b:16:dd: 56:96:5b:d4:aa:aa:0c:31:1a:21:ad:a6:ed:21:41: 1f:5b:b2:8d:8c:67:11:f4:4d:9d:6a:0a:df:fb:f4: 79:0f:d2:d9:5f:cd:9f:44:64:58:95:b7:45:42:6a: 4d:1a:8a:d4:46:0e:12:5c:bc:f0:5e:24:c4:88:b6: 66:b8:5d:a0:ee:3e:71:d5:e6:1e:05:af:66:94:d5: a2:1e:b1:0e:2b:07:06:02:99:80:38:68:d6:00:ac: 6d:90:e9:61:95:fa:e5:8c:45:a7:6f:40:fc:a3:90: 81:52:6b:d7:7b:ab:f9:70:58:35:f4:b3:df:c5:a9: 7c:5b:47:8b:97:26:74:8f:7e:03:6d:c8:e7:4c:0c: b3:d0:f6:9f:91:47:d7:31:fb:33:97:fc:ba:4c:46: f6:aa:0c:c1:9e:8d:05:c2:3f:87:69:e4:2d:08:30: ff:49:b0:b3:9b:fe:40:a6:05:bf:72:23:04:50:0b: 95:35:89:38:ba:b3:64:a3:fd:5e:92:9e:07:6e:3a: 88:35:43:d0:44:2d:d3:cd:0a:37:75:93:06:71:07: ed:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:5A:4D:0E:70:DD:D0:FA:1F:B3:87:72:D7:DB:EA:45:35:32:EA:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3fce74bb-cb08-3dd0-90fd-70a4891c6455.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 170.62.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:d5:0d:c9:e5:fb:12:a1:4b:14:60:db:e2:03:7c:10:22:3a: 82:d7:f0:d6:eb:e5:1e:f4:84:1d:36:47:b3:4d:7b:a8:9b:10: 87:28:73:85:d7:c6:e6:79:06:17:d1:99:f4:78:04:fe:a9:dd: f4:57:5c:3c:dd:85:e0:cc:22:99:ea:93:87:88:d6:53:72:a0: 3d:8f:9f:f4:e3:ed:8b:2f:5a:34:8f:82:44:dc:cc:fc:a8:63: 0d:c5:90:21:5d:bb:8e:71:c5:5d:3e:e7:27:6f:bd:e3:29:97: 42:79:48:23:24:33:92:07:15:68:db:99:65:ed:6f:04:8e:0c: 3e:fb:5e:c3:ef:14:a7:42:f8:41:83:0b:e5:15:9c:c1:db:fb: d2:cc:6c:99:67:a9:40:6f:94:66:f7:a0:0d:28:88:96:c5:52: e5:0e:cc:74:0c:3b:20:a0:ad:92:66:cc:7a:28:8a:74:0e:72: d5:56:4e:0d:b1:3e:83:2a:fa:4b:1c:86:79:9c:a6:b5:df:62: cb:00:2e:ef:91:d8:aa:2e:f6:d1:41:58:27:e6:6e:f3:81:e1: 6e:4a:ad:05:6f:4d:51:aa:36:a5:c6:09:ea:01:a9:3a:00:0e: 23:78:ab:0f:8b:bc:28:d7:d1:a1:79:50:15:23:6b:7b:75:57: 32:ff:d8:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElTxCAMDM45iHWuZwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDMyNzEzMDA1MloXDTI1MDYyNTEzMDA1MlowLzEtMCsGA1UEAxMk YTc4ZmZlMGUtYTBhNy00ZTY2LWE4OGYtYzlmMWM5MzgwMWE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhGHXaf9PCekalwg9EQQMKTSp0oN9tcKRiniN OvyR/i+FKFf8BI7QYNZbFt1WllvUqqoMMRohrabtIUEfW7KNjGcR9E2dagrf+/R5 D9LZX82fRGRYlbdFQmpNGorURg4SXLzwXiTEiLZmuF2g7j5x1eYeBa9mlNWiHrEO KwcGApmAOGjWAKxtkOlhlfrljEWnb0D8o5CBUmvXe6v5cFg19LPfxal8W0eLlyZ0 j34DbcjnTAyz0PafkUfXMfszl/y6TEb2qgzBno0Fwj+HaeQtCDD/SbCzm/5ApgW/ ciMEUAuVNYk4urNko/1ekp4HbjqINUPQRC3TzQo3dZMGcQftWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK9aTQ5w3dD6H7OHctfb6kU1MuqHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvM2ZjZTc0YmItY2IwOC0z ZGQwLTkwZmQtNzBhNDg5MWM2NDU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqj6YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC3VDcnl+xKhSxRg2+IDfBAiOoLX8Nbr5R70hB02R7NNe6ibEIcoc4XX xuZ5BhfRmfR4BP6p3fRXXDzdheDMIpnqk4eI1lNyoD2Pn/Tj7YsvWjSPgkTczPyo Yw3FkCFdu45xxV0+5ydvveMpl0J5SCMkM5IHFWjbmWXtbwSODD77XsPvFKdC+EGD C+UVnMHb+9LMbJlnqUBvlGb3oA0oiJbFUuUOzHQMOyCgrZJmzHooinQOctVWTg2x PoMq+kschnmcprXfYssALu+R2Kou9tFBWCfmbvOB4W5KrQVvTVGqNqXGCeoBqToA DiN4qw+LvCjX0aF5UBUja3t1VzL/2As= -----END CERTIFICATE-----Generated at Sat Apr 5 02:54:35 2025 by rpki-client