$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/4aa8c3d2-cbf2-3179-9e53-9ad0af4b7194.roa File: 4aa8c3d2-cbf2-3179-9e53-9ad0af4b7194.roa (raw, json) Hash identifier: VCafCW8H5LfkMtSMFtkLR+rQjcCyAXWbzl4iUsNFDwA= Subject key identifier: 8E:73:D0:A0:B1:BC:EB:4F:C6:7B:13:9C:16:7B:71:93:ED:9B:54:EF Certificate issuer: /CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Certificate serial: 010D0C9F43285849552951F83776E321C5DD1400 Authority key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/4aa8c3d2-cbf2-3179-9e53-9ad0af4b7194.roa Signing time: Fri 28 Mar 2025 01:00:41 +0000 ROA not before: Fri 28 Mar 2025 01:00:41 +0000 ROA not after: Thu 26 Jun 2025 01:00:41 +0000 asID: 4540 IP address blocks: 170.89.232.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:55:29:51:f8:37:76:e3:21:c5:dd:14:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Validity Not Before: Mar 28 01:00:41 2025 GMT Not After : Jun 26 01:00:41 2025 GMT Subject: CN=c1c56d4b-1e49-425b-8fcd-d4d3e60d138e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a9:e2:fd:59:dd:1b:c2:ca:93:06:43:2b:9c: 11:da:43:74:a0:0b:63:a1:91:39:30:43:ee:49:29: b3:cd:32:fb:65:01:f9:a8:cf:bd:28:37:7d:a7:ac: dd:6a:06:27:ab:ac:68:21:e8:de:23:e6:a4:79:1c: d5:a8:21:0a:b5:29:26:39:b7:70:27:83:6f:2a:97: 83:38:cd:cb:ad:1d:de:3e:b0:87:7f:63:a2:5e:ca: ce:23:50:1e:54:19:05:ee:ac:84:20:19:98:d8:9d: b3:c0:d6:df:30:0e:54:17:5c:3b:6e:7c:66:10:94: ce:39:df:b9:47:bd:09:81:b8:33:e4:14:99:43:48: 99:90:ad:8d:41:45:df:7a:10:44:ba:fa:de:4a:e4: e8:2c:f6:88:b2:90:cb:4c:f9:09:ec:8f:27:1e:89: e2:84:3b:f2:f4:ec:41:e0:ca:b9:41:f6:33:ab:92: 7f:54:f8:9f:16:08:ed:f5:f7:45:ac:03:da:6b:f2: f2:ac:fe:d1:0e:c1:fc:3e:81:10:41:e4:52:50:97: 89:b1:f3:da:c8:1b:2d:20:2c:fe:49:56:1f:65:34: 5d:a6:45:ff:ff:ba:8a:a2:97:f1:46:8a:0a:72:13: e7:7d:ce:6d:60:36:03:8c:9c:df:a2:7f:5c:a1:6a: 98:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:73:D0:A0:B1:BC:EB:4F:C6:7B:13:9C:16:7B:71:93:ED:9B:54:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/4aa8c3d2-cbf2-3179-9e53-9ad0af4b7194.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl X509v3 Authority Key Identifier: keyid:D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer sbgp-ipAddrBlock: critical IPv4: 170.89.232.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:fe:da:05:a5:f6:c1:bd:20:40:26:be:c8:70:9f:eb:5e:d4: d3:ad:5b:90:a5:d8:84:93:4f:33:b6:87:ff:b6:e3:6f:d6:ea: ac:42:7c:78:e3:2a:47:42:0a:ae:b6:81:72:fb:ba:d8:bc:07: 6e:6a:6f:40:44:9f:09:c4:b8:b0:bb:2b:de:7f:92:29:d0:e0: 09:52:d3:73:4e:37:9e:2e:52:06:21:99:5e:c8:e6:ad:5e:ee: fd:9f:fb:42:63:f1:2c:f8:62:e8:59:a5:0f:45:71:73:cb:b3: d9:97:0b:89:c5:bf:90:de:83:d2:57:08:f2:9d:ad:41:4e:83: a9:9a:a7:b6:1a:65:d6:94:ec:8b:a4:fd:76:20:a3:92:2d:5b: 61:75:b7:3f:e8:1b:e1:6d:dd:bb:89:d9:d7:58:28:ff:bd:9d: 4e:1f:1a:db:92:8e:c5:e7:8e:fb:db:f2:88:cb:a6:ea:27:a5: 97:df:1a:c8:5e:b4:54:7f:8b:e7:e0:36:94:6a:cc:f3:ba:af: ee:1b:56:1a:40:fc:db:bb:36:3f:2b:d2:5a:22:3e:4f:a7:18: aa:67:a5:91:c8:84:5d:9a:5a:18:76:ad:5b:04:fe:ad:58:05: c8:7c:f4:be:d4:08:a3:4d:e3:f2:28:68:9a:1f:ea:69:4b:1f: 55:89:c9:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElVKVH4N3bjIcXdFAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODUxMWI4ZGMtNzRiYS00N2U1LWFmNGEtN2M0ZTZiNzc3 ZDkyMB4XDTI1MDMyODAxMDA0MVoXDTI1MDYyNjAxMDA0MVowLzEtMCsGA1UEAxMk YzFjNTZkNGItMWU0OS00MjViLThmY2QtZDRkM2U2MGQxMzhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArani/VndG8LKkwZDK5wR2kN0oAtjoZE5MEPu SSmzzTL7ZQH5qM+9KDd9p6zdagYnq6xoIejeI+akeRzVqCEKtSkmObdwJ4NvKpeD OM3LrR3ePrCHf2OiXsrOI1AeVBkF7qyEIBmY2J2zwNbfMA5UF1w7bnxmEJTOOd+5 R70Jgbgz5BSZQ0iZkK2NQUXfehBEuvreSuToLPaIspDLTPkJ7I8nHonihDvy9OxB 4Mq5QfYzq5J/VPifFgjt9fdFrAPaa/LyrP7RDsH8PoEQQeRSUJeJsfPayBstICz+ SVYfZTRdpkX//7qKopfxRooKchPnfc5tYDYDjJzfon9coWqYjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI5z0KCxvOtPxnsTnBZ7cZPtm1TvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84NTEx YjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRlNmI3NzdkOTIvNGFhOGMzZDItY2JmMi0z MTc5LTllNTMtOWFkMGFmNGI3MTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODUxMWI4ZGMtNzRiYS00N2U1LWFm NGEtN2M0ZTZiNzc3ZDkyLzg1MTFiOGRjLTc0YmEtNDdlNS1hZjRhLTdjNGU2Yjc3 N2Q5Mi5jcmwwHwYDVR0jBBgwFoAU1/PfqfdA8CtR2EIn8tzC4d9gdQ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS84NTExYjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRl NmI3NzdkOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqlnoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEv+2gWl9sG9IEAmvshwn+te1NOtW5Cl2ISTTzO2h/+242/W6qxCfHjj KkdCCq62gXL7uti8B25qb0BEnwnEuLC7K95/kinQ4AlS03NON54uUgYhmV7I5q1e 7v2f+0Jj8Sz4YuhZpQ9FcXPLs9mXC4nFv5Deg9JXCPKdrUFOg6map7YaZdaU7Iuk /XYgo5ItW2F1tz/oG+Ft3buJ2ddYKP+9nU4fGtuSjsXnjvvb8ojLpuonpZffGshe tFR/i+fgNpRqzPO6r+4bVhpA/Nu7Nj8r0loiPk+nGKpnpZHIhF2aWhh2rVsE/q1Y Bch89L7UCKNN4/IoaJof6mlLH1WJyVE= -----END CERTIFICATE-----Generated at Fri Apr 11 21:10:21 2025 by rpki-client