$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/50f0813d-b9a1-3791-ae1a-76762b263f6f.roa File: 50f0813d-b9a1-3791-ae1a-76762b263f6f.roa (raw, json) Hash identifier: OjrIGm854jSaJ1ZP8GoT/qkm+48gxfTeiSujBMzFbzs= Subject key identifier: E3:1A:FE:5A:F4:C3:40:09:FA:23:5E:8D:F7:75:79:7D:BC:CC:37:0E Certificate issuer: /CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279 Certificate serial: 010D0C9F43285848F7C14355A9C6BF952677BA20 Authority key identifier: E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/50f0813d-b9a1-3791-ae1a-76762b263f6f.roa Signing time: Sat 22 Feb 2025 14:00:52 +0000 ROA not before: Sat 22 Feb 2025 14:00:52 +0000 ROA not after: Fri 23 May 2025 13:00:52 +0000 asID: 14618 IP address blocks: 170.225.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f7:c1:43:55:a9:c6:bf:95:26:77:ba:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279 Validity Not Before: Feb 22 14:00:52 2025 GMT Not After : May 23 13:00:52 2025 GMT Subject: CN=b7c9394c-4dad-4358-b3d4-9b758d40a987 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:da:96:12:7a:28:da:cc:93:23:4a:cf:3a:92: 79:d7:bd:a5:d3:3f:c8:e2:68:0b:5d:7a:61:ad:75: 85:9e:4d:07:c0:c8:3c:f2:7f:d8:f0:9f:29:b5:96: 4e:b5:37:3a:69:55:d1:dd:d4:64:7c:e3:d2:ad:b6: 36:21:06:8e:4b:f8:0b:24:0b:da:3c:23:3e:88:e7: d3:b2:d1:ea:ba:f7:62:15:91:31:e7:be:f1:05:00: 87:6e:c4:33:06:dc:a9:59:a9:ba:6c:7c:ca:59:e4: 14:f1:3a:2c:66:c3:2b:d0:9e:9a:63:6e:da:fe:6e: ab:05:7d:0f:60:d7:24:ea:dd:80:09:d9:99:56:86: 8a:f2:0c:5a:65:f1:f2:ac:75:6c:4b:ab:a3:a3:2a: ec:d8:7c:47:b6:b5:fd:28:40:09:2c:c4:14:85:e1: 7c:39:fc:61:2f:5d:e3:d7:00:c6:f7:30:d5:94:d2: 81:b7:2a:44:5a:2c:21:70:d0:00:f0:6e:e0:99:ea: d6:0a:c2:50:23:f5:b6:74:27:df:d8:da:05:81:9c: 32:51:88:d9:ce:ef:70:c0:fb:20:08:89:3e:8d:05: 2e:fd:99:08:92:e5:35:8d:3d:e8:fe:67:9d:95:af: 63:d5:56:d0:0c:36:02:b6:31:ee:ae:d0:4c:ca:84: c3:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:1A:FE:5A:F4:C3:40:09:FA:23:5E:8D:F7:75:79:7D:BC:CC:37:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/50f0813d-b9a1-3791-ae1a-76762b263f6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl X509v3 Authority Key Identifier: keyid:E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer sbgp-ipAddrBlock: critical IPv4: 170.225.115.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:e1:89:32:ff:e0:09:39:bf:8f:02:83:80:fc:18:b6:83:a2: 59:9c:6b:58:20:47:7a:67:cd:00:30:39:03:3e:51:16:e6:5e: c7:00:00:bc:c4:16:84:02:86:2c:9d:95:0c:e8:54:f8:bf:65: 5a:44:d4:2a:ce:7f:b6:79:21:35:44:25:88:ae:b4:c2:71:b5: 43:7e:06:d7:b9:61:f5:5b:da:b7:6d:13:2c:f8:0d:45:f3:9f: fa:f2:4f:b4:58:68:fe:d3:48:84:ff:f0:e4:95:c4:16:0b:92: 1a:8f:9b:a6:fd:80:e6:ea:e0:6a:f4:3b:a9:c8:5f:4f:22:6d: b4:f5:05:3d:d9:88:19:b3:ec:c0:6d:d2:71:5f:cd:1b:c5:9b: cd:9c:13:e3:ee:7a:ee:c2:a0:e1:ff:d6:a8:bd:15:cc:ef:42: 27:54:6e:ef:be:9d:93:54:cd:36:97:d8:4b:23:8b:63:af:ce: 83:68:41:a5:2c:2e:46:f2:0c:1d:f2:24:e8:d7:11:5b:0f:f6: ac:e6:9d:96:b5:94:b9:6e:d5:cf:eb:5c:cf:cc:e4:7b:0a:aa: d5:10:73:b7:cb:af:9b:24:76:52:f0:d2:cb:a0:cd:4d:3d:b3: e8:74:0b:75:95:7a:6f:d0:5a:8e:89:e1:61:ae:d0:83:1c:f3: 2c:f3:d2:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj3wUNVqca/lSZ3uiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGNjOTdkOTYtNTJkMC00OGE3LWE5ZWEtYTc3NDlkYzA4 Mjc5MB4XDTI1MDIyMjE0MDA1MloXDTI1MDUyMzEzMDA1MlowLzEtMCsGA1UEAxMk YjdjOTM5NGMtNGRhZC00MzU4LWIzZDQtOWI3NThkNDBhOTg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9qWEnoo2syTI0rPOpJ5172l0z/I4mgLXXph rXWFnk0HwMg88n/Y8J8ptZZOtTc6aVXR3dRkfOPSrbY2IQaOS/gLJAvaPCM+iOfT stHquvdiFZEx577xBQCHbsQzBtypWam6bHzKWeQU8TosZsMr0J6aY27a/m6rBX0P YNck6t2ACdmZVoaK8gxaZfHyrHVsS6ujoyrs2HxHtrX9KEAJLMQUheF8OfxhL13j 1wDG9zDVlNKBtypEWiwhcNAA8G7gmerWCsJQI/W2dCff2NoFgZwyUYjZzu9wwPsg CIk+jQUu/ZkIkuU1jT3o/medla9j1VbQDDYCtjHurtBMyoTD7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOMa/lr0w0AJ+iNejfd1eX28zDcOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Y2M5 N2Q5Ni01MmQwLTQ4YTctYTllYS1hNzc0OWRjMDgyNzkvNTBmMDgxM2QtYjlhMS0z NzkxLWFlMWEtNzY3NjJiMjYzZjZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGNjOTdkOTYtNTJkMC00OGE3LWE5 ZWEtYTc3NDlkYzA4Mjc5LzRjYzk3ZDk2LTUyZDAtNDhhNy1hOWVhLWE3NzQ5ZGMw ODI3OS5jcmwwHwYDVR0jBBgwFoAU4vrUb8NLZY1545Z6Y6GWz7mMjdUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80Y2M5N2Q5Ni01MmQwLTQ4YTctYTllYS1hNzc0 OWRjMDgyNzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAquFzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFnhiTL/4Ak5v48Cg4D8GLaDolmca1ggR3pnzQAwOQM+URbmXscAALzE FoQChiydlQzoVPi/ZVpE1CrOf7Z5ITVEJYiutMJxtUN+Bte5YfVb2rdtEyz4DUXz n/ryT7RYaP7TSIT/8OSVxBYLkhqPm6b9gObq4Gr0O6nIX08ibbT1BT3ZiBmz7MBt 0nFfzRvFm82cE+Pueu7CoOH/1qi9FczvQidUbu++nZNUzTaX2Esji2OvzoNoQaUs LkbyDB3yJOjXEVsP9qzmnZa1lLlu1c/rXM/M5HsKqtUQc7fLr5skdlLw0sugzU09 s+h0C3WVem/QWo6J4WGu0IMc8yzz0lQ= -----END CERTIFICATE-----Generated at Fri Apr 18 02:38:48 2025 by rpki-client