$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/2005d58a-8b58-35a2-bbfb-dda3e02e4490.roa File: 2005d58a-8b58-35a2-bbfb-dda3e02e4490.roa (raw, json) Hash identifier: g7s0+D2tt7mIHy7YxTIXTj8HrWLodQC45ePBRqu7EHE= Subject key identifier: 00:8C:49:18:37:7D:2D:69:E1:FC:CE:1B:3E:44:5D:8F:93:5C:7C:95 Certificate issuer: /CN=3a8d6c4c-eb82-43f1-80cc-884c560bd0bd Certificate serial: 010D0C9F432858495ABEE12DA72803913DE17600 Authority key identifier: 6E:8B:F4:7D:E4:DB:28:26:29:13:4D:8E:C3:9D:0A:17:DC:6A:B2:01 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/2005d58a-8b58-35a2-bbfb-dda3e02e4490.roa Signing time: Sun 30 Mar 2025 01:00:47 +0000 ROA not before: Sun 30 Mar 2025 01:00:47 +0000 ROA not after: Sat 28 Jun 2025 01:00:47 +0000 asID: 16509 IP address blocks: 170.200.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5a:be:e1:2d:a7:28:03:91:3d:e1:76:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a8d6c4c-eb82-43f1-80cc-884c560bd0bd Validity Not Before: Mar 30 01:00:47 2025 GMT Not After : Jun 28 01:00:47 2025 GMT Subject: CN=4c82dd97-85ae-4f85-9c86-4af9f1d9983d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ae:e5:ed:6c:a5:44:3c:f1:7a:a0:78:90:69: af:0f:8b:8f:17:a7:75:9e:a4:3e:51:19:6e:b9:26: a6:01:d8:07:ca:eb:f4:ff:1c:9f:cf:e4:b6:47:62: a6:f5:f6:07:84:60:e3:ea:c2:47:5e:90:25:eb:93: 55:62:2a:74:aa:c9:60:0a:d4:18:66:04:bd:1a:c4: 04:49:9d:12:3e:af:3c:c8:33:bc:a8:68:65:ed:f2: d2:c5:11:a5:cb:27:35:63:4a:22:21:1a:d7:5f:82: b8:3d:64:5f:34:3e:e2:88:b2:ae:2b:b3:60:37:d8: 5a:42:34:8b:83:1b:61:33:bf:53:f0:89:8e:74:ac: df:80:3b:6b:c3:94:ef:54:13:b8:44:06:cd:37:6f: ea:25:c9:6c:4e:6a:d9:6d:1c:40:da:70:d6:76:d8: b1:33:b8:73:5a:23:f0:72:8f:55:cd:f5:4a:10:f7: 3a:ad:9c:c1:45:51:1b:5b:b9:94:53:cf:e0:9a:40: 7d:ae:49:77:d7:73:cc:9c:9c:7a:c3:d2:34:14:0c: 07:26:76:3d:9f:51:24:56:b9:dc:d2:cd:fa:15:d2: af:6a:3a:28:f6:31:79:67:46:64:0b:b8:91:85:db: 22:49:f2:fd:8d:67:e4:7c:5e:2b:c6:0e:02:be:54: 90:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:8C:49:18:37:7D:2D:69:E1:FC:CE:1B:3E:44:5D:8F:93:5C:7C:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/2005d58a-8b58-35a2-bbfb-dda3e02e4490.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.crl X509v3 Authority Key Identifier: keyid:6E:8B:F4:7D:E4:DB:28:26:29:13:4D:8E:C3:9D:0A:17:DC:6A:B2:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.cer sbgp-ipAddrBlock: critical IPv4: 170.200.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:2b:66:bb:06:3d:a0:dc:d6:7a:8e:d4:73:43:84:75:e9:48: 54:e7:ad:7d:f9:15:f8:78:d8:59:31:84:7f:a0:8e:47:0a:16: 64:f3:d5:83:c8:7d:9c:01:c0:45:38:ff:42:96:eb:f1:af:38: 6d:60:7c:ff:ff:3a:41:b2:0c:0c:41:de:e2:0e:4d:fb:a0:44: a0:4f:da:d4:c2:c9:7d:f1:eb:a2:d8:c1:5a:ff:74:50:cb:d7: bc:83:4c:6d:7e:b5:a5:b9:23:6c:bb:5a:8e:30:ec:7f:2b:47: 29:21:af:fa:8f:90:0f:2c:ba:99:39:ad:a4:2a:a9:7f:99:2e: ff:73:03:f2:2f:8b:d0:ae:fc:94:a9:3f:cf:e6:72:f4:9d:60: 2f:0c:52:f6:61:11:6d:20:b0:91:c5:98:42:5d:f9:ed:a2:0b: c4:ae:d5:60:59:54:75:8f:23:89:2a:5d:70:87:c7:52:e8:53: 9d:89:2a:78:7c:b3:40:eb:5c:ab:00:bb:84:48:21:53:70:68: 8c:ae:f4:a7:58:d5:a9:ba:53:9f:2e:03:17:1a:a5:80:bf:83: 75:c9:78:20:44:5f:ae:5e:45:59:98:a2:7e:27:60:ae:ef:ec: 4d:dd:b3:ad:f3:b4:08:c0:73:62:fb:99:f3:b4:fa:43:45:29: 99:9c:a7:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElavuEtpygDkT3hdgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2E4ZDZjNGMtZWI4Mi00M2YxLTgwY2MtODg0YzU2MGJk MGJkMB4XDTI1MDMzMDAxMDA0N1oXDTI1MDYyODAxMDA0N1owLzEtMCsGA1UEAxMk NGM4MmRkOTctODVhZS00Zjg1LTljODYtNGFmOWYxZDk5ODNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApK7l7WylRDzxeqB4kGmvD4uPF6d1nqQ+URlu uSamAdgHyuv0/xyfz+S2R2Km9fYHhGDj6sJHXpAl65NVYip0qslgCtQYZgS9GsQE SZ0SPq88yDO8qGhl7fLSxRGlyyc1Y0oiIRrXX4K4PWRfND7iiLKuK7NgN9haQjSL gxthM79T8ImOdKzfgDtrw5TvVBO4RAbNN2/qJclsTmrZbRxA2nDWdtixM7hzWiPw co9VzfVKEPc6rZzBRVEbW7mUU8/gmkB9rkl313PMnJx6w9I0FAwHJnY9n1EkVrnc 0s36FdKvajoo9jF5Z0ZkC7iRhdsiSfL9jWfkfF4rxg4CvlSQfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFACMSRg3fS1p4fzOGz5EXY+TXHyVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zYThk NmM0Yy1lYjgyLTQzZjEtODBjYy04ODRjNTYwYmQwYmQvMjAwNWQ1OGEtOGI1OC0z NWEyLWJiZmItZGRhM2UwMmU0NDkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvM2E4ZDZjNGMtZWI4Mi00M2YxLTgw Y2MtODg0YzU2MGJkMGJkLzNhOGQ2YzRjLWViODItNDNmMS04MGNjLTg4NGM1NjBi ZDBiZC5jcmwwHwYDVR0jBBgwFoAUbov0feTbKCYpE02Ow50KF9xqsgEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zYThkNmM0Yy1lYjgyLTQzZjEtODBjYy04ODRj NTYwYmQwYmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqsj3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAQrZrsGPaDc1nqO1HNDhHXpSFTnrX35Ffh42FkxhH+gjkcKFmTz1YPI fZwBwEU4/0KW6/GvOG1gfP//OkGyDAxB3uIOTfugRKBP2tTCyX3x66LYwVr/dFDL 17yDTG1+taW5I2y7Wo4w7H8rRykhr/qPkA8supk5raQqqX+ZLv9zA/Ivi9Cu/JSp P8/mcvSdYC8MUvZhEW0gsJHFmEJd+e2iC8Su1WBZVHWPI4kqXXCHx1LoU52JKnh8 s0DrXKsAu4RIIVNwaIyu9KdY1am6U58uAxcapYC/g3XJeCBEX65eRVmYon4nYK7v 7E3ds63ztAjAc2L7mfO0+kNFKZmcp+I= -----END CERTIFICATE-----Generated at Sat Apr 5 12:10:06 2025 by rpki-client