$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9b1bda0b-196d-4a62-82df-fdb3c9937cac/5405d0da-96d1-33a3-b713-9cfe8a1f0cac.roa File: 5405d0da-96d1-33a3-b713-9cfe8a1f0cac.roa (raw, json) Hash identifier: v3ZAxAOrXW0vh6Y5Dzg235/HX1Gm7dihj15fhhvasg0= Subject key identifier: 54:39:37:36:6F:E8:36:3A:99:11:74:F6:F1:FF:F4:9C:5F:10:B3:79 Certificate issuer: /CN=9b1bda0b-196d-4a62-82df-fdb3c9937cac Certificate serial: 010D0C9F432858497F09A6482F462AE8BF358B80 Authority key identifier: 0F:83:0B:D8:2D:62:B7:F3:FF:1D:61:1A:6C:5B:9F:79:F0:99:D8:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9b1bda0b-196d-4a62-82df-fdb3c9937cac.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9b1bda0b-196d-4a62-82df-fdb3c9937cac/5405d0da-96d1-33a3-b713-9cfe8a1f0cac.roa Signing time: Sat 12 Apr 2025 01:00:48 +0000 ROA not before: Sat 12 Apr 2025 01:00:48 +0000 ROA not after: Fri 11 Jul 2025 01:00:48 +0000 asID: 396280 IP address blocks: 170.76.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9b1bda0b-196d-4a62-82df-fdb3c9937cac/9b1bda0b-196d-4a62-82df-fdb3c9937cac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9b1bda0b-196d-4a62-82df-fdb3c9937cac/9b1bda0b-196d-4a62-82df-fdb3c9937cac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9b1bda0b-196d-4a62-82df-fdb3c9937cac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 19 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7f:09:a6:48:2f:46:2a:e8:bf:35:8b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b1bda0b-196d-4a62-82df-fdb3c9937cac Validity Not Before: Apr 12 01:00:48 2025 GMT Not After : Jul 11 01:00:48 2025 GMT Subject: CN=452ce7e8-6d20-4512-91ca-97d1d8b9f958 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:08:26:4c:54:ac:b9:d1:50:60:9e:36:c4:5a: ae:e9:85:4b:bd:c5:47:2a:e1:c7:1c:25:a6:4d:58: 3e:0d:2d:40:37:6d:4e:c6:d4:3e:e5:c6:47:fc:68: 46:dc:19:3b:8a:33:3e:6a:71:dd:79:de:a8:79:3c: 97:2d:bf:64:76:70:00:91:42:74:6e:69:07:f1:64: fd:b1:0a:82:79:4e:d5:b9:eb:48:ba:80:30:bc:1d: c4:be:51:59:3b:88:90:41:65:19:63:5f:71:29:44: f2:58:15:b8:77:bf:48:39:5e:e1:a6:1b:7f:9e:13: cc:8b:e6:ff:d9:1b:e7:25:18:19:35:bc:5a:ff:4a: 18:22:7e:85:23:2a:92:b4:66:17:37:8d:45:4a:10: 20:48:9b:8d:45:41:38:67:98:da:5a:20:20:53:ad: cc:69:a1:8d:7b:40:19:72:0f:97:b6:5d:4a:e8:00: 11:f6:eb:de:fa:1f:78:2b:c8:03:2a:88:93:f4:77: f9:fb:4f:10:2d:a1:d4:4d:2d:21:90:52:45:b3:2c: 0f:50:6e:5d:2d:94:12:66:e1:69:7b:2e:8a:b7:d2: 27:32:c7:f3:d7:e0:f5:2f:ad:df:f3:16:ea:ed:99: 6e:2c:46:2c:b2:17:03:a1:0b:62:77:3f:8b:f8:fb: e4:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:39:37:36:6F:E8:36:3A:99:11:74:F6:F1:FF:F4:9C:5F:10:B3:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9b1bda0b-196d-4a62-82df-fdb3c9937cac/5405d0da-96d1-33a3-b713-9cfe8a1f0cac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9b1bda0b-196d-4a62-82df-fdb3c9937cac/9b1bda0b-196d-4a62-82df-fdb3c9937cac.crl X509v3 Authority Key Identifier: keyid:0F:83:0B:D8:2D:62:B7:F3:FF:1D:61:1A:6C:5B:9F:79:F0:99:D8:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9b1bda0b-196d-4a62-82df-fdb3c9937cac.cer sbgp-ipAddrBlock: critical IPv4: 170.76.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:33:b5:07:65:8a:a3:c9:a3:46:e2:73:c9:02:e0:73:41:bb: fe:ef:66:df:3c:1f:b8:41:12:57:67:8e:bd:2f:3a:58:a5:ea: 37:7a:da:7b:e3:5e:95:70:07:2b:b5:2d:3e:b0:c8:d4:70:55: 1c:93:7d:ce:20:e9:35:8d:64:30:a9:d6:2c:ca:5f:d9:61:06: a7:2e:29:24:80:33:06:8d:16:60:14:2a:d3:16:f1:82:8d:32: 04:b9:5c:f6:99:89:c8:a9:ba:d4:1b:77:a4:1b:31:ef:d5:49: 70:ba:4a:e0:01:d5:7b:86:e0:01:7b:20:9b:ad:53:bb:96:7b: bf:ac:38:c9:d7:e2:31:fb:82:f5:ac:5b:e5:d2:d1:0f:01:ad: c1:37:16:59:46:3f:c1:b4:62:91:ba:0a:16:51:ab:2f:8b:01: 0c:ee:64:f6:b9:86:49:74:2d:11:db:91:39:d3:24:a4:c1:c7: 5a:69:d9:30:64:f7:89:f1:35:fd:8e:09:75:67:3a:d2:f0:cc: e1:71:3b:56:0a:c3:92:9d:93:b1:35:a2:8e:69:d7:cd:ea:9e: f9:b6:b6:f0:aa:51:7a:db:a4:fc:80:58:aa:fc:6d:ea:b3:1d: cd:31:c9:58:59:41:2d:8a:a6:9c:db:b8:69:2c:41:d5:84:8e: c7:bf:6a:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl/CaZIL0Yq6L81i4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWIxYmRhMGItMTk2ZC00YTYyLTgyZGYtZmRiM2M5OTM3 Y2FjMB4XDTI1MDQxMjAxMDA0OFoXDTI1MDcxMTAxMDA0OFowLzEtMCsGA1UEAxMk NDUyY2U3ZTgtNmQyMC00NTEyLTkxY2EtOTdkMWQ4YjlmOTU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApggmTFSsudFQYJ42xFqu6YVLvcVHKuHHHCWm TVg+DS1AN21OxtQ+5cZH/GhG3Bk7ijM+anHded6oeTyXLb9kdnAAkUJ0bmkH8WT9 sQqCeU7VuetIuoAwvB3EvlFZO4iQQWUZY19xKUTyWBW4d79IOV7hpht/nhPMi+b/ 2RvnJRgZNbxa/0oYIn6FIyqStGYXN41FShAgSJuNRUE4Z5jaWiAgU63MaaGNe0AZ cg+Xtl1K6AAR9uve+h94K8gDKoiT9Hf5+08QLaHUTS0hkFJFsywPUG5dLZQSZuFp ey6Kt9InMsfz1+D1L63f8xbq7ZluLEYsshcDoQtidz+L+Pvk4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFQ5NzZv6DY6mRF09vH/9JxfELN5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85YjFi ZGEwYi0xOTZkLTRhNjItODJkZi1mZGIzYzk5MzdjYWMvNTQwNWQwZGEtOTZkMS0z M2EzLWI3MTMtOWNmZThhMWYwY2FjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOWIxYmRhMGItMTk2ZC00YTYyLTgy ZGYtZmRiM2M5OTM3Y2FjLzliMWJkYTBiLTE5NmQtNGE2Mi04MmRmLWZkYjNjOTkz N2NhYy5jcmwwHwYDVR0jBBgwFoAUD4ML2C1it/P/HWEabFufefCZ2CMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85YjFiZGEwYi0xOTZkLTRhNjItODJkZi1mZGIz Yzk5MzdjYWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqkyHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJIztQdliqPJo0bic8kC4HNBu/7vZt88H7hBEldnjr0vOlil6jd62nvj XpVwByu1LT6wyNRwVRyTfc4g6TWNZDCp1izKX9lhBqcuKSSAMwaNFmAUKtMW8YKN MgS5XPaZiciputQbd6QbMe/VSXC6SuAB1XuG4AF7IJutU7uWe7+sOMnX4jH7gvWs W+XS0Q8BrcE3FllGP8G0YpG6ChZRqy+LAQzuZPa5hkl0LRHbkTnTJKTBx1pp2TBk 94nxNf2OCXVnOtLwzOFxO1YKw5Kdk7E1oo5p183qnvm2tvCqUXrbpPyAWKr8beqz Hc0xyVhZQS2KppzbuGksQdWEjse/anI= -----END CERTIFICATE-----Generated at Fri Apr 18 02:02:37 2025 by rpki-client