$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/a25775e3-512e-3d4f-a8d0-3335f43e990e.roa File: a25775e3-512e-3d4f-a8d0-3335f43e990e.roa (raw, json) Hash identifier: 6Zhozbn7QGtdWWPxVGq6QpEKX0/Sa80vUkTnf72Eyyc= Subject key identifier: F4:95:2C:5C:E3:52:B1:A6:9F:C0:2E:E5:F4:CC:E6:A8:9E:24:18:EF Certificate issuer: /CN=7daa4589-66d8-4675-8538-e075ba80ecd3 Certificate serial: 010D0C9F43285848D7A6468ED6957DC5E689DC80 Authority key identifier: BF:D4:FE:F7:0A:A9:40:EC:B8:54:09:F4:36:9B:34:3F:86:5A:0A:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/a25775e3-512e-3d4f-a8d0-3335f43e990e.roa Signing time: Tue 11 Feb 2025 02:00:39 +0000 ROA not before: Tue 11 Feb 2025 02:00:39 +0000 ROA not after: Mon 12 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 170.39.164.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/7daa4589-66d8-4675-8538-e075ba80ecd3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/7daa4589-66d8-4675-8538-e075ba80ecd3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d7:a6:46:8e:d6:95:7d:c5:e6:89:dc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7daa4589-66d8-4675-8538-e075ba80ecd3 Validity Not Before: Feb 11 02:00:39 2025 GMT Not After : May 12 01:00:39 2025 GMT Subject: CN=70741adc-6695-4a8a-89fa-2a4c37d0426a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e9:dd:da:16:fa:d2:bf:f9:ee:76:43:c8:bf: ed:a2:59:6a:71:48:3c:44:63:fd:37:b5:3b:a6:fe: e6:81:b2:03:b5:42:bf:0c:36:38:62:66:89:1b:48: 15:f0:e4:5b:c9:11:18:61:87:2f:bb:6e:54:50:63: 45:60:a7:fd:8e:3e:17:6f:ec:76:b3:fb:bb:62:0c: cd:6d:db:03:fc:5d:c5:22:fe:f9:84:1a:fe:d7:55: 28:86:a0:9c:b5:21:7d:6b:23:cf:8f:f1:0a:67:78: d6:02:1e:e8:8f:c5:f4:23:29:33:3b:c0:71:07:07: 13:9f:95:03:c1:6e:18:f5:05:84:a1:00:a1:99:f5: 96:33:21:8a:50:75:f3:00:02:81:a4:4a:3b:28:0e: ae:a5:4b:f7:6f:da:a3:0c:79:3a:30:67:aa:98:d2: 01:30:d9:67:89:31:bd:a1:56:41:71:09:f5:5c:6f: 4e:2f:c0:bf:c3:4f:74:71:80:86:b2:56:ba:08:3c: c0:03:ef:67:42:f6:fa:8e:33:20:ba:2b:31:c5:f5: 2b:ad:14:e2:78:69:3c:9d:eb:ed:55:6c:65:d6:13: b5:e2:e1:7d:c6:2a:69:6d:8c:62:7f:59:29:be:08: 75:0b:f0:e4:ea:6f:2b:89:65:b4:51:3b:5a:fb:21: 8b:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:95:2C:5C:E3:52:B1:A6:9F:C0:2E:E5:F4:CC:E6:A8:9E:24:18:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/a25775e3-512e-3d4f-a8d0-3335f43e990e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/7daa4589-66d8-4675-8538-e075ba80ecd3.crl X509v3 Authority Key Identifier: keyid:BF:D4:FE:F7:0A:A9:40:EC:B8:54:09:F4:36:9B:34:3F:86:5A:0A:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3.cer sbgp-ipAddrBlock: critical IPv4: 170.39.164.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:56:a4:da:dc:fd:24:23:e5:53:38:c5:ca:32:96:1d:1c:a1: bc:fa:fa:f7:5c:c8:50:25:47:29:42:68:06:e7:f9:48:6b:b1: 94:2c:d9:2c:57:f0:82:7c:ce:0e:5d:da:f8:25:39:bf:b5:19: f7:16:57:6a:9a:e3:1b:e7:ef:c7:c9:f0:40:96:1d:01:c1:98: ba:50:8f:dd:8b:e2:8b:3c:9f:2e:8f:44:b9:53:2c:96:20:01: dd:b7:a8:8e:39:be:3e:b1:02:f8:46:60:09:fc:1a:16:cb:d5: 15:64:25:90:2b:32:39:fe:dc:a5:ec:ac:cc:d5:9d:05:cc:10: b3:14:1b:ac:0d:ea:5f:f4:21:8c:1e:d4:e2:1e:32:11:b5:87: 0e:bf:61:77:c7:38:e0:18:8a:a7:e8:7a:d2:1f:cd:fb:6b:7c: 48:dc:3d:2b:44:91:08:0a:5a:2b:ee:60:7c:ee:b6:0d:e6:2e: f8:c2:49:ea:25:7b:21:37:66:97:db:bb:51:7c:e6:81:67:35: 38:ef:52:46:9c:19:c1:d2:ff:42:32:b1:5c:a1:f5:c8:27:d7: a8:55:d4:34:20:3a:1a:ec:fa:e8:db:a7:3e:ec:28:07:45:e3: 21:68:98:89:87:a0:b0:78:2d:61:69:67:24:b1:9c:32:cf:cc: 58:1e:b6:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjXpkaO1pV9xeaJ3IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2RhYTQ1ODktNjZkOC00Njc1LTg1MzgtZTA3NWJhODBl Y2QzMB4XDTI1MDIxMTAyMDAzOVoXDTI1MDUxMjAxMDAzOVowLzEtMCsGA1UEAxMk NzA3NDFhZGMtNjY5NS00YThhLTg5ZmEtMmE0YzM3ZDA0MjZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+nd2hb60r/57nZDyL/tollqcUg8RGP9N7U7 pv7mgbIDtUK/DDY4YmaJG0gV8ORbyREYYYcvu25UUGNFYKf9jj4Xb+x2s/u7YgzN bdsD/F3FIv75hBr+11UohqCctSF9ayPPj/EKZ3jWAh7oj8X0IykzO8BxBwcTn5UD wW4Y9QWEoQChmfWWMyGKUHXzAAKBpEo7KA6upUv3b9qjDHk6MGeqmNIBMNlniTG9 oVZBcQn1XG9OL8C/w090cYCGsla6CDzAA+9nQvb6jjMguisxxfUrrRTieGk8nevt VWxl1hO14uF9xippbYxif1kpvgh1C/Dk6m8riWW0UTta+yGLCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPSVLFzjUrGmn8Au5fTM5qieJBjvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83ZGFh NDU4OS02NmQ4LTQ2NzUtODUzOC1lMDc1YmE4MGVjZDMvYTI1Nzc1ZTMtNTEyZS0z ZDRmLWE4ZDAtMzMzNWY0M2U5OTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvN2RhYTQ1ODktNjZkOC00Njc1LTg1 MzgtZTA3NWJhODBlY2QzLzdkYWE0NTg5LTY2ZDgtNDY3NS04NTM4LWUwNzViYTgw ZWNkMy5jcmwwHwYDVR0jBBgwFoAUv9T+9wqpQOy4VAn0Nps0P4ZaCgIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC83ZGFhNDU4OS02NmQ4LTQ2NzUtODUzOC1lMDc1 YmE4MGVjZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqiekMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGRWpNrc/SQj5VM4xcoylh0cobz6+vdcyFAlRylCaAbn+UhrsZQs2SxX 8IJ8zg5d2vglOb+1GfcWV2qa4xvn78fJ8ECWHQHBmLpQj92L4os8ny6PRLlTLJYg Ad23qI45vj6xAvhGYAn8GhbL1RVkJZArMjn+3KXsrMzVnQXMELMUG6wN6l/0IYwe 1OIeMhG1hw6/YXfHOOAYiqfoetIfzftrfEjcPStEkQgKWivuYHzutg3mLvjCSeol eyE3Zpfbu1F85oFnNTjvUkacGcHS/0IysVyh9cgn16hV1DQgOhrs+ujbpz7sKAdF 4yFomImHoLB4LWFpZySxnDLPzFgetvA= -----END CERTIFICATE-----Generated at Sat Apr 5 23:18:48 2025 by rpki-client