$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/572d45e6-6a32-30de-a6e6-c4214389980b.roa File: 572d45e6-6a32-30de-a6e6-c4214389980b.roa (raw, json) Hash identifier: 8wWvKEdqmycF6UCd3jwqgPdtrKtW64lcem7w7l8aTWo= Subject key identifier: B5:32:A4:FE:60:B2:88:4D:99:52:BA:C8:E9:4C:3D:83:F3:59:4B:2C Certificate issuer: /CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279 Certificate serial: 010D0C9F432858487755DBC1553C4C463E4D9C00 Authority key identifier: E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/572d45e6-6a32-30de-a6e6-c4214389980b.roa Signing time: Tue 07 Jan 2025 14:00:53 +0000 ROA not before: Tue 07 Jan 2025 14:00:53 +0000 ROA not after: Mon 07 Apr 2025 13:00:53 +0000 asID: 14618 IP address blocks: 170.225.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:77:55:db:c1:55:3c:4c:46:3e:4d:9c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279 Validity Not Before: Jan 7 14:00:53 2025 GMT Not After : Apr 7 13:00:53 2025 GMT Subject: CN=66a2b734-8e26-4591-93be-24913943d2f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ea:9d:85:0d:84:32:b0:c4:7a:93:93:31:17: 3a:bd:af:81:a1:5c:51:00:3a:fe:2e:83:21:58:f2: c7:8a:fe:73:a5:88:03:53:bf:9d:30:a4:19:19:60: 8f:26:0f:21:45:00:0a:62:14:ff:4f:eb:fc:64:9b: 9c:3c:86:15:a0:aa:2f:d8:05:d2:34:77:d5:5e:ca: 01:c0:2f:4b:1a:2b:ea:1a:5a:ca:6a:cf:b8:1a:f7: ad:28:f9:dc:3c:8c:a0:32:04:1d:52:f2:e1:6c:1d: 64:41:c1:c8:dd:22:c9:b4:fa:fb:64:25:d1:47:13: f9:a4:a1:c6:d3:6c:d8:fb:87:28:d4:da:94:2f:a3: 01:6f:47:16:08:39:7d:b6:da:51:91:81:73:91:28: 10:e0:31:5c:09:7b:b8:f6:e8:f6:87:f2:ce:60:7e: 6e:20:cc:00:e4:b8:af:7f:53:17:41:46:7d:c1:b6: ac:4d:1a:95:07:e8:b2:54:11:9b:62:84:95:ca:fc: 89:c1:7a:dc:bf:50:0c:42:f0:8c:4b:66:19:73:e8: 13:29:5e:80:f9:1c:8f:f3:e8:ea:f4:36:eb:22:81: e3:a3:da:6f:c2:52:cb:c9:8b:91:52:de:fd:e9:6d: e1:02:c0:79:19:7a:de:d9:94:f5:3e:bb:3a:96:18: 3d:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:32:A4:FE:60:B2:88:4D:99:52:BA:C8:E9:4C:3D:83:F3:59:4B:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/572d45e6-6a32-30de-a6e6-c4214389980b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl X509v3 Authority Key Identifier: keyid:E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer sbgp-ipAddrBlock: critical IPv4: 170.225.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:6a:e6:1a:bc:01:48:89:09:12:6e:bb:c7:48:fb:57:8a:4f: dd:97:7f:4a:bc:84:bd:5d:15:07:27:d4:f3:3e:b3:77:00:bf: 1e:99:81:42:fb:b7:3e:ee:a0:dd:70:84:dd:fa:2a:48:49:33: 20:25:9c:4c:fb:39:30:1d:13:19:29:ba:6c:b0:71:60:9b:a4: 3d:6d:10:01:6f:13:1b:86:e9:7b:82:bf:7f:b7:dc:1d:ec:19: d5:18:d1:b1:8d:3d:5b:65:de:57:86:30:7a:ac:5c:59:99:65: 59:b3:95:6a:42:c0:0a:21:28:7e:5d:3d:47:da:22:28:59:2c: ff:03:bc:ce:18:3e:4d:9b:de:18:54:22:5a:f1:ae:17:44:da: 85:74:ad:5f:a6:2c:ec:dc:6f:dc:bf:09:be:a4:db:2f:24:56: 05:98:da:ef:c9:ca:dc:61:6f:45:89:a6:4c:02:31:4f:17:83: b2:0a:ae:64:03:d1:83:32:09:7e:58:52:de:45:dc:49:a5:7a: a7:a9:c2:e4:f9:da:f3:27:ee:cb:6f:c6:03:8c:f2:8d:11:90: be:0e:8c:72:7e:5d:f3:c8:54:07:fd:66:9c:a9:ba:6e:d3:5f: 0a:15:f6:45:36:35:a0:84:f0:21:a2:47:c2:10:e8:9e:93:6b: e5:25:d9:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh3VdvBVTxMRj5NnAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGNjOTdkOTYtNTJkMC00OGE3LWE5ZWEtYTc3NDlkYzA4 Mjc5MB4XDTI1MDEwNzE0MDA1M1oXDTI1MDQwNzEzMDA1M1owLzEtMCsGA1UEAxMk NjZhMmI3MzQtOGUyNi00NTkxLTkzYmUtMjQ5MTM5NDNkMmYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+qdhQ2EMrDEepOTMRc6va+BoVxRADr+LoMh WPLHiv5zpYgDU7+dMKQZGWCPJg8hRQAKYhT/T+v8ZJucPIYVoKov2AXSNHfVXsoB wC9LGivqGlrKas+4GvetKPncPIygMgQdUvLhbB1kQcHI3SLJtPr7ZCXRRxP5pKHG 02zY+4co1NqUL6MBb0cWCDl9ttpRkYFzkSgQ4DFcCXu49uj2h/LOYH5uIMwA5Liv f1MXQUZ9wbasTRqVB+iyVBGbYoSVyvyJwXrcv1AMQvCMS2YZc+gTKV6A+RyP8+jq 9DbrIoHjo9pvwlLLyYuRUt796W3hAsB5GXre2ZT1Prs6lhg9mQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLUypP5gsohNmVK6yOlMPYPzWUssMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Y2M5 N2Q5Ni01MmQwLTQ4YTctYTllYS1hNzc0OWRjMDgyNzkvNTcyZDQ1ZTYtNmEzMi0z MGRlLWE2ZTYtYzQyMTQzODk5ODBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGNjOTdkOTYtNTJkMC00OGE3LWE5 ZWEtYTc3NDlkYzA4Mjc5LzRjYzk3ZDk2LTUyZDAtNDhhNy1hOWVhLWE3NzQ5ZGMw ODI3OS5jcmwwHwYDVR0jBBgwFoAU4vrUb8NLZY1545Z6Y6GWz7mMjdUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80Y2M5N2Q5Ni01MmQwLTQ4YTctYTllYS1hNzc0 OWRjMDgyNzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAquHYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHZq5hq8AUiJCRJuu8dI+1eKT92Xf0q8hL1dFQcn1PM+s3cAvx6ZgUL7 tz7uoN1whN36KkhJMyAlnEz7OTAdExkpumywcWCbpD1tEAFvExuG6XuCv3+33B3s GdUY0bGNPVtl3leGMHqsXFmZZVmzlWpCwAohKH5dPUfaIihZLP8DvM4YPk2b3hhU IlrxrhdE2oV0rV+mLOzcb9y/Cb6k2y8kVgWY2u/Jytxhb0WJpkwCMU8Xg7IKrmQD 0YMyCX5YUt5F3EmleqepwuT52vMn7stvxgOM8o0RkL4OjHJ+XfPIVAf9Zpypum7T XwoV9kU2NaCE8CGiR8IQ6J6Ta+Ul2eA= -----END CERTIFICATE-----Generated at Sun Feb 16 15:20:11 2025 by rpki-client