$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/6bf2b9a4-3ddc-3a38-afed-f2a517d47b25.roa File: 6bf2b9a4-3ddc-3a38-afed-f2a517d47b25.roa (raw, json) Hash identifier: cwOtv76k8cuAXSVRyRgQNtzq+rggu4y4Q3Cwx3RPmVk= Subject key identifier: 4D:6F:ED:FC:3C:A6:C4:4C:3E:B2:F3:0C:A7:8E:E5:F0:A6:EC:83:BF Certificate issuer: /CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f Certificate serial: 010D0C9F43285849350E813BF8285D604E475C40 Authority key identifier: AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/6bf2b9a4-3ddc-3a38-afed-f2a517d47b25.roa Signing time: Sun 16 Mar 2025 13:00:52 +0000 ROA not before: Sun 16 Mar 2025 13:00:52 +0000 ROA not after: Sat 14 Jun 2025 13:00:52 +0000 asID: 198949 IP address blocks: 170.133.208.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:35:0e:81:3b:f8:28:5d:60:4e:47:5c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f Validity Not Before: Mar 16 13:00:52 2025 GMT Not After : Jun 14 13:00:52 2025 GMT Subject: CN=1ecff9f6-e09a-49ec-bb25-d45eacc3ee75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:81:b5:7b:57:11:2e:50:2b:b2:3e:4a:ff:71: 49:8d:13:ff:d3:8a:de:c3:ba:81:53:26:bd:20:eb: 62:3c:1f:78:6d:a7:57:1f:09:b6:63:4d:04:1a:e8: aa:35:5d:35:dd:45:82:ab:09:d1:1e:ce:a2:65:15: b8:53:a6:85:d7:3a:58:cc:60:2c:5a:6e:29:d8:32: 10:ac:97:24:4e:d4:b0:cd:65:18:54:42:b4:6d:20: 67:3b:7b:31:8c:d6:d8:69:16:8e:b0:46:91:65:6e: 37:e9:79:15:29:15:18:53:3c:9b:ef:06:1f:ad:a5: b4:57:30:3e:82:e8:dd:9a:7f:01:0f:4a:62:a7:32: 93:47:61:2e:86:e7:28:36:9f:d6:20:36:71:b7:0c: 31:02:6a:8f:e4:a1:2e:44:87:20:84:64:09:70:66: 80:2e:e9:7c:78:4a:a8:ca:8f:84:53:50:44:16:a9: 46:ae:63:1e:97:50:29:c5:d1:ee:68:d1:71:e8:a9: e3:8b:b7:1b:22:51:6b:eb:20:3d:66:53:d9:94:90: 90:8c:2b:f4:1f:6f:9c:91:9c:ad:9f:fd:25:f4:5d: af:fa:9f:0a:b1:ac:5f:00:69:f6:27:46:bd:6c:28: fe:23:d7:3e:0b:73:44:0f:a7:ef:f4:81:cf:ff:8c: f8:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:6F:ED:FC:3C:A6:C4:4C:3E:B2:F3:0C:A7:8E:E5:F0:A6:EC:83:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/6bf2b9a4-3ddc-3a38-afed-f2a517d47b25.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl X509v3 Authority Key Identifier: keyid:AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer sbgp-ipAddrBlock: critical IPv4: 170.133.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:94:48:a8:79:ca:ba:b1:08:7e:86:e6:17:ae:30:ae:b2:17: 5a:a8:10:d8:e6:b2:6c:88:dd:92:40:57:e5:06:df:c5:84:c6: 74:e5:17:08:82:b8:ba:45:6c:84:b0:92:91:b7:7a:3e:71:4c: 8e:60:43:e2:ff:cd:fc:19:94:b5:60:3b:a5:dd:d5:8f:ec:cc: d4:0e:3c:e8:37:1a:6b:46:20:09:57:00:c9:a3:f5:c6:3a:ce: 60:2d:ff:e5:0e:c4:af:d7:5e:3c:a4:c2:94:f4:bc:67:ad:f0: 26:20:9a:bb:a8:f5:a7:8a:1b:30:a5:c4:b0:d0:ce:ac:57:57: fe:3e:e5:44:32:47:98:a0:02:e3:46:ef:1b:52:7a:82:38:cf: be:9f:be:cb:dd:6f:fb:bf:9b:94:4b:fe:c1:9a:0c:8f:7e:e4: cc:2a:b3:1f:3f:a7:c3:d6:57:8e:ef:64:b3:3d:9f:02:d8:b3: 9a:16:a7:72:47:6a:96:76:f7:25:94:1d:ff:af:5e:19:e9:33: 90:b1:d6:03:ad:b1:83:83:ea:ba:82:cd:99:85:db:e4:45:a4: 83:98:23:4a:81:48:38:8c:55:ce:df:53:a2:7f:63:d9:e2:43: 71:31:a6:e3:e2:6a:e2:9b:9a:12:c3:f5:4d:e5:54:a0:b4:96: cb:e3:e2:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk1DoE7+ChdYE5HXEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTcxZmYzOTItZGQzMy00ZWE4LTljMWItOGFmZGQ0Mjk5 NzdmMB4XDTI1MDMxNjEzMDA1MloXDTI1MDYxNDEzMDA1MlowLzEtMCsGA1UEAxMk MWVjZmY5ZjYtZTA5YS00OWVjLWJiMjUtZDQ1ZWFjYzNlZTc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsoG1e1cRLlArsj5K/3FJjRP/04rew7qBUya9 IOtiPB94badXHwm2Y00EGuiqNV013UWCqwnRHs6iZRW4U6aF1zpYzGAsWm4p2DIQ rJckTtSwzWUYVEK0bSBnO3sxjNbYaRaOsEaRZW436XkVKRUYUzyb7wYfraW0VzA+ gujdmn8BD0pipzKTR2EuhucoNp/WIDZxtwwxAmqP5KEuRIcghGQJcGaALul8eEqo yo+EU1BEFqlGrmMel1ApxdHuaNFx6Knji7cbIlFr6yA9ZlPZlJCQjCv0H2+ckZyt n/0l9F2v+p8KsaxfAGn2J0a9bCj+I9c+C3NED6fv9IHP/4z4pQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE1v7fw8psRMPrLzDKeO5fCm7IO/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hNzFm ZjM5Mi1kZDMzLTRlYTgtOWMxYi04YWZkZDQyOTk3N2YvNmJmMmI5YTQtM2RkYy0z YTM4LWFmZWQtZjJhNTE3ZDQ3YjI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTcxZmYzOTItZGQzMy00ZWE4LTlj MWItOGFmZGQ0Mjk5NzdmL2E3MWZmMzkyLWRkMzMtNGVhOC05YzFiLThhZmRkNDI5 OTc3Zi5jcmwwHwYDVR0jBBgwFoAUrknJUG2uUJbz62ommeoYPXRw8cUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9hNzFmZjM5Mi1kZDMzLTRlYTgtOWMxYi04YWZk ZDQyOTk3N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEqoXQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIeUSKh5yrqxCH6G5heuMK6yF1qoENjmsmyI3ZJAV+UG38WExnTlFwiC uLpFbISwkpG3ej5xTI5gQ+L/zfwZlLVgO6Xd1Y/szNQOPOg3GmtGIAlXAMmj9cY6 zmAt/+UOxK/XXjykwpT0vGet8CYgmruo9aeKGzClxLDQzqxXV/4+5UQyR5igAuNG 7xtSeoI4z76fvsvdb/u/m5RL/sGaDI9+5Mwqsx8/p8PWV47vZLM9nwLYs5oWp3JH apZ29yWUHf+vXhnpM5Cx1gOtsYOD6rqCzZmF2+RFpIOYI0qBSDiMVc7fU6J/Y9ni Q3ExpuPiauKbmhLD9U3lVKC0lsvj4pE= -----END CERTIFICATE-----Generated at Fri Apr 11 23:54:41 2025 by rpki-client