$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/53ee2d2b-5a77-4db4-8fbd-85e75401cae6/d5c88d88-16d3-3f6e-b800-b605c8de4635.roa File: d5c88d88-16d3-3f6e-b800-b605c8de4635.roa (raw, json) Hash identifier: YM5GPpV9NpI6eJcLSNx4Z3EqDFqkNH7gHxUDQexf6S0= Subject key identifier: D0:9D:6F:AA:43:99:9E:15:16:0D:BC:55:EE:96:7E:50:36:BC:AA:5C Certificate issuer: /CN=53ee2d2b-5a77-4db4-8fbd-85e75401cae6 Certificate serial: 010D0C9F432858491246C7077EF7F48846C18780 Authority key identifier: 31:57:93:9D:40:13:B3:6B:9F:E6:FB:23:B2:E3:4A:75:C5:F3:7C:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/53ee2d2b-5a77-4db4-8fbd-85e75401cae6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/53ee2d2b-5a77-4db4-8fbd-85e75401cae6/d5c88d88-16d3-3f6e-b800-b605c8de4635.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 395662 IP address blocks: 170.10.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/53ee2d2b-5a77-4db4-8fbd-85e75401cae6/53ee2d2b-5a77-4db4-8fbd-85e75401cae6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/53ee2d2b-5a77-4db4-8fbd-85e75401cae6/53ee2d2b-5a77-4db4-8fbd-85e75401cae6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/53ee2d2b-5a77-4db4-8fbd-85e75401cae6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:c7:07:7e:f7:f4:88:46:c1:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53ee2d2b-5a77-4db4-8fbd-85e75401cae6 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=6c67f0d1-5916-412e-8c77-e4f1b40e1c39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:65:b1:3c:22:dd:9c:5b:99:f9:89:68:34:70: 37:fe:88:c1:f1:9c:de:c7:1f:e4:ba:eb:65:88:be: 11:e8:dd:25:9b:9a:aa:8b:82:80:3c:d1:ca:e9:16: 08:b3:82:b7:50:66:a2:d8:73:47:ee:2b:d2:8e:ed: c5:4e:88:0b:55:27:14:60:06:7b:15:82:4d:ee:a1: 85:2a:fc:76:db:48:2a:4c:c1:1c:aa:4e:2f:87:f5: c7:f1:55:eb:f2:ee:c3:4b:34:10:c8:ba:90:f9:a8: 45:3a:19:34:27:c0:8b:0c:96:45:16:41:77:0d:3c: dc:37:17:0b:41:20:a2:f4:89:af:11:91:a5:37:cd: 4c:dc:36:6d:ef:37:4f:cf:3d:f0:75:43:11:02:ea: 68:da:a1:eb:9e:5e:6e:6a:f8:4e:63:84:d7:f1:db: 8b:f2:ec:33:eb:76:44:ea:04:5a:c9:8b:e6:ee:94: 26:aa:6a:c0:44:ad:51:2f:71:55:1d:73:dd:25:15: cc:48:81:a2:ce:f1:eb:00:d7:bc:4e:a5:1a:cc:fe: 8b:52:15:fe:49:53:4f:1a:1e:bc:81:1c:4d:b0:6d: 4d:96:c6:95:90:4a:cf:a7:a2:5f:9e:f6:53:f5:c5: 7d:ce:bf:91:55:c8:a3:76:81:c8:16:ee:8c:94:5f: e5:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:9D:6F:AA:43:99:9E:15:16:0D:BC:55:EE:96:7E:50:36:BC:AA:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/53ee2d2b-5a77-4db4-8fbd-85e75401cae6/d5c88d88-16d3-3f6e-b800-b605c8de4635.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/53ee2d2b-5a77-4db4-8fbd-85e75401cae6/53ee2d2b-5a77-4db4-8fbd-85e75401cae6.crl X509v3 Authority Key Identifier: keyid:31:57:93:9D:40:13:B3:6B:9F:E6:FB:23:B2:E3:4A:75:C5:F3:7C:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/53ee2d2b-5a77-4db4-8fbd-85e75401cae6.cer sbgp-ipAddrBlock: critical IPv4: 170.10.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:7d:b9:16:c1:3f:3d:4b:05:d5:da:f0:12:f6:e3:1d:ba:57: ab:a0:64:94:01:90:00:83:8f:57:cd:d6:e7:4f:cb:a3:92:d3: 7b:a2:dd:94:e6:be:ea:d8:30:fc:86:ca:3b:d9:7f:30:7a:87: 71:38:5c:a0:b5:3d:e9:1c:0e:5f:a5:c4:17:fa:9e:6b:3a:a3: 36:d6:fe:80:4d:38:2a:03:a4:0a:d3:a2:4d:fa:47:66:54:5d: 70:ee:59:87:f3:f8:d7:91:da:64:90:e1:70:91:8e:f6:fd:93: 80:25:7c:ac:79:0a:b8:70:96:3b:b7:99:65:4a:1c:d0:f8:ff: 42:f1:70:7f:3b:a1:87:14:8e:2f:93:17:7b:5f:73:8b:3a:bd: 7c:43:95:6e:18:14:5d:23:25:a9:7d:f5:a6:51:cf:27:54:35: 1a:6e:e6:2c:19:cf:fe:e5:9e:39:b8:59:56:bd:28:0b:8b:f4: cc:95:8b:43:e0:0e:6d:00:16:3f:64:d6:21:e4:f1:04:f4:d0: 1f:ad:e9:f2:d8:69:f5:75:40:99:a9:77:9f:10:53:9b:42:8a: dd:2c:23:df:bd:54:79:16:d7:55:7c:f7:21:22:09:5f:df:6c: 7b:11:ce:35:10:3f:92:1e:36:5b:b1:7e:0d:28:db:fb:28:1b: 5b:e0:20:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRscHfvf0iEbBh4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTNlZTJkMmItNWE3Ny00ZGI0LThmYmQtODVlNzU0MDFj YWU2MB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk NmM2N2YwZDEtNTkxNi00MTJlLThjNzctZTRmMWI0MGUxYzM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGWxPCLdnFuZ+YloNHA3/ojB8Zzexx/kuutl iL4R6N0lm5qqi4KAPNHK6RYIs4K3UGai2HNH7ivSju3FTogLVScUYAZ7FYJN7qGF Kvx220gqTMEcqk4vh/XH8VXr8u7DSzQQyLqQ+ahFOhk0J8CLDJZFFkF3DTzcNxcL QSCi9ImvEZGlN81M3DZt7zdPzz3wdUMRAupo2qHrnl5uavhOY4TX8duL8uwz63ZE 6gRayYvm7pQmqmrARK1RL3FVHXPdJRXMSIGizvHrANe8TqUazP6LUhX+SVNPGh68 gRxNsG1NlsaVkErPp6JfnvZT9cV9zr+RVcijdoHIFu6MlF/lrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNCdb6pDmZ4VFg28Ve6WflA2vKpcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81M2Vl MmQyYi01YTc3LTRkYjQtOGZiZC04NWU3NTQwMWNhZTYvZDVjODhkODgtMTZkMy0z ZjZlLWI4MDAtYjYwNWM4ZGU0NjM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNTNlZTJkMmItNWE3Ny00ZGI0LThm YmQtODVlNzU0MDFjYWU2LzUzZWUyZDJiLTVhNzctNGRiNC04ZmJkLTg1ZTc1NDAx Y2FlNi5jcmwwHwYDVR0jBBgwFoAUMVeTnUATs2uf5vsjsuNKdcXzfG8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC81M2VlMmQyYi01YTc3LTRkYjQtOGZiZC04NWU3 NTQwMWNhZTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEqgqwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF19uRbBPz1LBdXa8BL24x26V6ugZJQBkACDj1fN1udPy6OS03ui3ZTm vurYMPyGyjvZfzB6h3E4XKC1PekcDl+lxBf6nms6ozbW/oBNOCoDpArTok36R2ZU XXDuWYfz+NeR2mSQ4XCRjvb9k4AlfKx5Crhwlju3mWVKHND4/0LxcH87oYcUji+T F3tfc4s6vXxDlW4YFF0jJal99aZRzydUNRpu5iwZz/7lnjm4WVa9KAuL9MyVi0Pg Dm0AFj9k1iHk8QT00B+t6fLYafV1QJmpd58QU5tCit0sI9+9VHkW11V89yEiCV/f bHsRzjUQP5IeNluxfg0o2/soG1vgIDU= -----END CERTIFICATE-----Generated at Sat Apr 12 14:18:30 2025 by rpki-client