$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/568b9ef2-c322-3fd7-ad2b-0246191da328.roa File: 568b9ef2-c322-3fd7-ad2b-0246191da328.roa (raw, json) Hash identifier: IoeTEQZsFF31tJJXoDfmBqX7Wcjq0YOn1v0+Qkkmvgo= Subject key identifier: 89:02:FA:9E:30:70:33:A0:A2:91:A2:72:AF:91:E5:80:20:22:EC:52 Certificate issuer: /CN=4c5f6fb8-1f68-4792-8def-a616a53280be Certificate serial: 010D0C9F4328584944693CA9CEF9351C39520CB3 Authority key identifier: AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/568b9ef2-c322-3fd7-ad2b-0246191da328.roa Signing time: Sat 22 Mar 2025 01:00:40 +0000 ROA not before: Sat 22 Mar 2025 01:00:40 +0000 ROA not after: Fri 20 Jun 2025 01:00:40 +0000 asID: 9084 IP address blocks: 154.1.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 09 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:44:69:3c:a9:ce:f9:35:1c:39:52:0c:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c5f6fb8-1f68-4792-8def-a616a53280be Validity Not Before: Mar 22 01:00:40 2025 GMT Not After : Jun 20 01:00:40 2025 GMT Subject: CN=73e07974-224e-420b-b0e5-ca095773911f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:c8:3d:d0:38:6e:2f:56:0b:ee:ae:3c:3f:e2: 5c:6d:b7:41:d1:ea:5f:ff:49:1e:5c:33:1c:30:5e: f9:27:ff:2a:89:04:70:33:b7:fd:b6:c7:a0:27:04: 91:e1:cf:03:08:d7:55:65:96:3e:d6:6d:81:e5:72: 66:de:f1:05:77:95:3d:01:0c:98:29:9e:5e:ea:e4: 00:56:f7:23:de:51:cb:7c:50:ba:c8:ee:6c:6f:59: 35:13:ad:06:cf:85:f3:dd:69:59:34:23:67:ce:2c: 4a:77:8b:33:02:e7:5c:cd:79:01:28:10:11:64:4d: 71:56:ae:ee:4f:39:5e:04:5b:94:21:0c:7d:26:cf: 31:30:94:8a:db:02:50:90:2c:75:51:aa:88:e0:a1: 81:51:45:64:3c:df:a2:40:7a:aa:cd:a2:6d:0a:36: 56:9f:4d:fe:c0:21:3c:2b:54:bb:9f:dd:68:fb:22: b9:41:d0:7c:42:75:51:14:53:07:7a:6f:02:4a:cb: f3:c6:8f:02:4f:1d:a8:67:75:a0:63:40:ae:0f:10: be:0a:c6:e0:dc:ab:e5:48:80:03:aa:eb:f4:70:c7: 0a:26:79:fb:a6:42:00:fc:c0:6b:3d:38:9a:cf:87: ad:32:a4:d8:69:9e:68:6c:de:b0:bc:c0:dd:b9:40: 34:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:02:FA:9E:30:70:33:A0:A2:91:A2:72:AF:91:E5:80:20:22:EC:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/568b9ef2-c322-3fd7-ad2b-0246191da328.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl X509v3 Authority Key Identifier: keyid:AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer sbgp-ipAddrBlock: critical IPv4: 154.1.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:e1:cc:3f:0e:26:62:63:b8:04:82:91:07:26:84:ae:67:7d: 15:c4:b5:d2:43:1d:a4:93:b4:d8:15:fc:3e:77:d5:04:06:35: 35:b9:95:1c:6d:84:98:77:cf:b8:5d:a4:d3:42:37:f2:ac:ab: f9:b8:a9:9f:e7:89:e0:48:32:76:d5:03:ab:87:ba:92:79:de: a3:b2:d3:53:40:94:c5:8f:fa:dd:9e:6f:fc:4b:36:69:35:ab: 2e:c0:11:07:23:a7:dc:06:19:df:56:bb:fd:96:e9:68:21:23: 5a:85:ac:4a:c2:28:e2:3a:35:8f:2a:bd:e3:46:e8:2b:8b:24: 6c:c3:92:93:c6:e3:b3:3c:ae:d5:47:51:c4:61:16:5e:50:30: 76:df:ad:58:f7:25:83:f7:5a:9d:db:67:c0:2b:68:1a:a3:cf: 4a:ee:4a:43:d6:35:eb:d7:19:27:b8:17:32:74:d8:f6:f5:e9: b5:de:d7:16:c4:69:d8:c0:c1:5f:1c:9d:78:93:50:86:5b:d2: d8:1c:18:32:60:f5:70:2f:06:5d:73:d5:60:48:3c:26:a4:6f: 3b:60:e9:76:1c:d2:4c:53:54:0c:3c:f5:8a:27:57:24:44:86: c0:27:8c:94:b1:d0:d1:b4:6b:e9:d5:5d:bd:d9:94:b4:15:45: a1:05:88:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElEaTypzvk1HDlSDLMwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGM1ZjZmYjgtMWY2OC00NzkyLThkZWYtYTYxNmE1MzI4 MGJlMB4XDTI1MDMyMjAxMDA0MFoXDTI1MDYyMDAxMDA0MFowLzEtMCsGA1UEAxMk NzNlMDc5NzQtMjI0ZS00MjBiLWIwZTUtY2EwOTU3NzM5MTFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiMg90DhuL1YL7q48P+JcbbdB0epf/0keXDMc MF75J/8qiQRwM7f9tsegJwSR4c8DCNdVZZY+1m2B5XJm3vEFd5U9AQyYKZ5e6uQA Vvcj3lHLfFC6yO5sb1k1E60Gz4Xz3WlZNCNnzixKd4szAudczXkBKBARZE1xVq7u TzleBFuUIQx9Js8xMJSK2wJQkCx1UaqI4KGBUUVkPN+iQHqqzaJtCjZWn03+wCE8 K1S7n91o+yK5QdB8QnVRFFMHem8CSsvzxo8CTx2oZ3WgY0CuDxC+Csbg3KvlSIAD quv0cMcKJnn7pkIA/MBrPTiaz4etMqTYaZ5obN6wvMDduUA0HwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIkC+p4wcDOgopGicq+R5YAgIuxSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80YzVm NmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2YTUzMjgwYmUvNTY4YjllZjItYzMyMi0z ZmQ3LWFkMmItMDI0NjE5MWRhMzI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNGM1ZjZmYjgtMWY2OC00NzkyLThk ZWYtYTYxNmE1MzI4MGJlLzRjNWY2ZmI4LTFmNjgtNDc5Mi04ZGVmLWE2MTZhNTMy ODBiZS5jcmwwHwYDVR0jBBgwFoAUqu/U+Zezd94fL8XYAsEplL9Ek5owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS80YzVmNmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2 YTUzMjgwYmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmgGqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGDhzD8OJmJjuASCkQcmhK5nfRXEtdJDHaSTtNgV/D531QQGNTW5lRxt hJh3z7hdpNNCN/Ksq/m4qZ/nieBIMnbVA6uHupJ53qOy01NAlMWP+t2eb/xLNmk1 qy7AEQcjp9wGGd9Wu/2W6WghI1qFrErCKOI6NY8qveNG6CuLJGzDkpPG47M8rtVH UcRhFl5QMHbfrVj3JYP3Wp3bZ8AraBqjz0ruSkPWNevXGSe4FzJ02Pb16bXe1xbE adjAwV8cnXiTUIZb0tgcGDJg9XAvBl1z1WBIPCakbztg6XYc0kxTVAw89YonVyRE hsAnjJSx0NG0a+nVXb3ZlLQVRaEFiBU= -----END CERTIFICATE-----Generated at Mon Apr 7 23:34:12 2025 by rpki-client