$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/046edc58-3188-4be4-bad7-643a593bcf38/05b97d02-04d2-3a3c-bd2c-0f7da0043062.roa File: 05b97d02-04d2-3a3c-bd2c-0f7da0043062.roa (raw, json) Hash identifier: IuWlqdl+rwNxA0EMypn4y4SDy9DbfqsvqmVR6Wy3UVY= Subject key identifier: F1:45:B8:FA:1E:75:81:54:7A:99:93:5C:52:B7:03:43:7B:81:1A:98 Certificate issuer: /CN=046edc58-3188-4be4-bad7-643a593bcf38 Certificate serial: 010D0C9F4328584957F4145282DE2D70CA6AA6C0 Authority key identifier: 31:EF:CB:6B:90:66:B6:32:B4:3B:90:67:CD:AF:1E:20:6E:47:FD:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/046edc58-3188-4be4-bad7-643a593bcf38.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/046edc58-3188-4be4-bad7-643a593bcf38/05b97d02-04d2-3a3c-bd2c-0f7da0043062.roa Signing time: Sat 29 Mar 2025 01:00:39 +0000 ROA not before: Sat 29 Mar 2025 01:00:39 +0000 ROA not after: Fri 27 Jun 2025 01:00:39 +0000 asID: 52053 IP address blocks: 170.39.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/046edc58-3188-4be4-bad7-643a593bcf38/046edc58-3188-4be4-bad7-643a593bcf38.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/046edc58-3188-4be4-bad7-643a593bcf38/046edc58-3188-4be4-bad7-643a593bcf38.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/046edc58-3188-4be4-bad7-643a593bcf38.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:57:f4:14:52:82:de:2d:70:ca:6a:a6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=046edc58-3188-4be4-bad7-643a593bcf38 Validity Not Before: Mar 29 01:00:39 2025 GMT Not After : Jun 27 01:00:39 2025 GMT Subject: CN=c014a1e6-f198-405f-8158-b3d75695e6e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:5e:90:9f:72:6f:0a:bc:ca:08:d1:0c:cd:4b: 4a:2c:3e:6c:9c:76:63:68:7e:2c:37:e0:73:89:a5: 8b:a3:d8:42:c4:ec:f7:3a:df:73:0b:e1:c1:c2:52: f6:a3:00:49:cc:0d:b7:69:a9:08:ad:f3:c0:58:84: 8b:39:16:e2:b9:19:9b:13:a7:8d:e1:71:56:83:bf: a6:b6:05:ae:e9:99:e9:95:09:ac:81:be:7b:cf:d8: 27:2a:45:ea:8a:ca:45:e5:47:04:bb:c8:b0:af:bc: fd:be:ab:1b:b2:de:91:5e:42:27:09:c8:78:54:49: 2d:25:67:48:b2:ae:70:dc:96:ce:6c:55:79:45:ee: e6:04:21:18:f6:61:8c:fa:d1:0d:dd:f1:95:89:7d: 12:31:32:75:c9:61:4c:4c:00:f8:3b:4b:0f:f0:c9: 3d:51:a8:9c:96:05:8b:da:7a:59:0b:6b:31:02:4a: 60:60:77:ed:e8:18:7b:c9:ea:8f:5a:40:a2:51:25: 04:02:49:5e:82:96:5d:05:49:34:67:05:7e:44:c4: 04:58:1a:d3:68:eb:74:fd:a7:60:37:13:50:c5:24: 41:c2:ce:cd:5d:f5:0b:2c:6d:25:88:7d:ef:40:c4: 27:bf:4d:7a:18:6e:72:b3:0c:d9:f3:1d:84:ed:a8: 8f:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:45:B8:FA:1E:75:81:54:7A:99:93:5C:52:B7:03:43:7B:81:1A:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/046edc58-3188-4be4-bad7-643a593bcf38/05b97d02-04d2-3a3c-bd2c-0f7da0043062.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/046edc58-3188-4be4-bad7-643a593bcf38/046edc58-3188-4be4-bad7-643a593bcf38.crl X509v3 Authority Key Identifier: keyid:31:EF:CB:6B:90:66:B6:32:B4:3B:90:67:CD:AF:1E:20:6E:47:FD:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/046edc58-3188-4be4-bad7-643a593bcf38.cer sbgp-ipAddrBlock: critical IPv4: 170.39.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:62:19:91:80:d5:ab:12:d9:ca:c0:55:bd:f6:ad:1a:ec:e3: 05:53:7d:32:c6:42:f5:e3:98:56:42:d3:ac:2e:52:6b:33:22: 9c:88:81:c9:34:6c:e1:4b:8e:43:86:47:f1:2f:db:fc:92:8d: 1b:eb:06:20:e8:7f:2c:5e:79:18:e7:ea:f9:35:cc:31:28:dd: b2:87:f5:f7:27:7f:33:ad:87:74:e4:9e:d4:45:a7:30:5e:08: bb:4a:3e:d9:ef:34:0f:36:01:38:a2:68:92:64:2e:7c:95:c7: 3c:24:b9:f7:cf:4a:a6:81:61:36:6f:a3:a0:9e:6b:5b:f9:ba: 2f:f6:42:5c:de:4e:07:ec:48:2e:58:a4:0b:99:86:26:e0:a7: 89:f5:34:85:a3:10:5f:56:78:a6:a8:37:79:45:fd:89:cc:53: 65:83:0c:4e:71:91:2a:af:dc:5e:c3:d1:3f:ff:c6:07:42:40: 88:69:94:80:2f:be:4f:57:b4:fc:53:e1:84:0e:c7:7f:d0:ad: b0:c2:7c:f2:07:a4:4d:78:30:d8:85:4d:ee:2c:97:72:73:83: a2:63:36:7e:1a:cf:5e:54:c3:e7:58:be:2b:65:0b:9e:e3:e5: 61:0e:ff:ab:ca:49:0b:7a:57:0a:5f:53:93:8a:04:84:d4:8c: 84:88:81:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElX9BRSgt4tcMpqpsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDQ2ZWRjNTgtMzE4OC00YmU0LWJhZDctNjQzYTU5M2Jj ZjM4MB4XDTI1MDMyOTAxMDAzOVoXDTI1MDYyNzAxMDAzOVowLzEtMCsGA1UEAxMk YzAxNGExZTYtZjE5OC00MDVmLTgxNTgtYjNkNzU2OTVlNmU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqF6Qn3JvCrzKCNEMzUtKLD5snHZjaH4sN+Bz iaWLo9hCxOz3Ot9zC+HBwlL2owBJzA23aakIrfPAWISLORbiuRmbE6eN4XFWg7+m tgWu6ZnplQmsgb57z9gnKkXqispF5UcEu8iwr7z9vqsbst6RXkInCch4VEktJWdI sq5w3JbObFV5Re7mBCEY9mGM+tEN3fGViX0SMTJ1yWFMTAD4O0sP8Mk9UaiclgWL 2npZC2sxAkpgYHft6Bh7yeqPWkCiUSUEAklegpZdBUk0ZwV+RMQEWBrTaOt0/adg NxNQxSRBws7NXfULLG0liH3vQMQnv016GG5yswzZ8x2E7aiP7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPFFuPoedYFUepmTXFK3A0N7gRqYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wNDZl ZGM1OC0zMTg4LTRiZTQtYmFkNy02NDNhNTkzYmNmMzgvMDViOTdkMDItMDRkMi0z YTNjLWJkMmMtMGY3ZGEwMDQzMDYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDQ2ZWRjNTgtMzE4OC00YmU0LWJh ZDctNjQzYTU5M2JjZjM4LzA0NmVkYzU4LTMxODgtNGJlNC1iYWQ3LTY0M2E1OTNi Y2YzOC5jcmwwHwYDVR0jBBgwFoAUMe/La5BmtjK0O5Bnza8eIG5H/eQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wNDZlZGM1OC0zMTg4LTRiZTQtYmFkNy02NDNh NTkzYmNmMzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqifYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACFiGZGA1asS2crAVb32rRrs4wVTfTLGQvXjmFZC06wuUmszIpyIgck0 bOFLjkOGR/Ev2/ySjRvrBiDofyxeeRjn6vk1zDEo3bKH9fcnfzOth3TkntRFpzBe CLtKPtnvNA82ATiiaJJkLnyVxzwkuffPSqaBYTZvo6Cea1v5ui/2QlzeTgfsSC5Y pAuZhibgp4n1NIWjEF9WeKaoN3lF/YnMU2WDDE5xkSqv3F7D0T//xgdCQIhplIAv vk9XtPxT4YQOx3/QrbDCfPIHpE14MNiFTe4sl3Jzg6JjNn4az15Uw+dYvitlC57j 5WEO/6vKSQt6VwpfU5OKBITUjISIgTM= -----END CERTIFICATE-----Generated at Sun Apr 6 05:53:14 2025 by rpki-client