$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/f55d329b-e206-3311-9383-9e5491a7f00f.roa File: f55d329b-e206-3311-9383-9e5491a7f00f.roa (raw, json) Hash identifier: PT2eEOEn/J0NJIuwxDH5f1BpojjXaGPdtZVqLJODElM= Subject key identifier: CD:2B:5C:9E:29:38:FB:E3:8C:F5:09:79:D4:2A:14:10:23:E7:B8:54 Certificate issuer: /CN=3a8d6c4c-eb82-43f1-80cc-884c560bd0bd Certificate serial: 010D0C9F432858491246C688AE4301CD3C17F880 Authority key identifier: 6E:8B:F4:7D:E4:DB:28:26:29:13:4D:8E:C3:9D:0A:17:DC:6A:B2:01 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/f55d329b-e206-3311-9383-9e5491a7f00f.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 15404 IP address blocks: 170.200.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:c6:88:ae:43:01:cd:3c:17:f8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a8d6c4c-eb82-43f1-80cc-884c560bd0bd Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=7fec3510-11cb-4855-a898-740fd2de559e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:02:5f:80:dd:f2:07:db:98:ec:fa:db:26:ed: 89:a7:85:09:54:89:74:92:bb:02:8c:18:d3:e2:30: 0d:c5:cc:77:14:ed:f1:4d:30:35:cc:e1:f2:23:98: 2f:c2:9b:04:1c:7c:97:43:2b:e6:f6:63:c9:68:89: eb:d2:c2:11:98:d2:49:95:a6:37:65:5e:c0:09:54: 95:53:02:b1:24:27:1b:66:cd:25:40:ce:b4:7a:b3: 47:04:da:07:1f:41:98:5d:9a:d0:c4:f9:f7:62:d8: 85:f1:91:96:8c:7c:a2:13:02:1b:03:35:ca:0b:91: 9e:a8:f7:53:a2:c5:95:70:35:37:df:82:50:1e:1e: 83:48:68:89:68:fc:d1:af:4f:2a:10:08:24:6b:c9: 31:28:5e:5d:e2:af:19:d7:01:8c:6b:27:f1:65:93: 5f:90:96:9f:70:8d:ac:cb:53:3f:de:86:b9:d7:bd: ad:c3:7a:cb:be:47:4e:7f:75:9d:7d:23:b2:00:c4: b8:89:a2:56:5d:3b:32:e4:57:49:b8:b4:fb:fd:21: 59:24:0a:1d:9b:0d:3f:20:c7:80:65:7f:a8:78:55: 92:5f:ea:02:4b:d2:92:20:67:79:c3:c1:2b:03:46: a5:d1:a9:74:12:0c:00:e1:3a:5a:3f:42:f5:14:5b: 39:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:2B:5C:9E:29:38:FB:E3:8C:F5:09:79:D4:2A:14:10:23:E7:B8:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/f55d329b-e206-3311-9383-9e5491a7f00f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.crl X509v3 Authority Key Identifier: keyid:6E:8B:F4:7D:E4:DB:28:26:29:13:4D:8E:C3:9D:0A:17:DC:6A:B2:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.cer sbgp-ipAddrBlock: critical IPv4: 170.200.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:2e:f1:1e:ac:bf:b6:33:3f:30:32:62:80:33:be:8b:5e:be: 5d:72:90:40:f2:70:5a:00:28:84:1c:df:bb:ac:7a:3e:f9:1e: 4b:ee:58:b5:23:30:e5:60:a6:fc:04:1e:79:05:8e:f1:39:03: 72:80:4b:ca:86:08:4d:a5:e3:13:a8:03:86:82:31:ec:17:a4: a8:56:6c:8c:8c:06:8c:0d:aa:42:52:6e:4c:17:9e:11:5e:98: 3e:47:34:d0:11:0a:74:91:89:28:36:96:f3:9a:1d:86:ba:38: b5:b3:c5:73:d5:a0:21:d2:67:b9:55:b3:3f:cb:78:81:6c:27: d1:87:09:e4:89:1c:8e:dc:54:44:77:a8:b6:7a:60:a6:b9:e0: ef:11:fb:f8:37:79:fd:3a:ef:d4:6b:05:a1:20:51:a4:c2:45: a2:6e:a9:8e:09:be:c1:fd:0d:1d:a7:67:8d:1c:7a:88:b5:3b: 56:00:79:aa:38:9f:0c:e5:3d:15:98:5b:70:9e:79:7e:6b:b0: b5:12:96:7d:00:e1:fa:5a:4b:2a:5a:48:10:01:89:df:69:ee: 92:cb:d0:6e:fe:42:40:59:8b:ad:31:c3:f2:df:ec:30:eb:00: 78:c2:a2:d7:ac:ee:5b:74:8c:95:e3:a0:2e:06:ae:bb:a7:48: 0f:f7:9f:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRsaIrkMBzTwX+IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2E4ZDZjNGMtZWI4Mi00M2YxLTgwY2MtODg0YzU2MGJk MGJkMB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk N2ZlYzM1MTAtMTFjYi00ODU1LWE4OTgtNzQwZmQyZGU1NTllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgJfgN3yB9uY7PrbJu2Jp4UJVIl0krsCjBjT 4jANxcx3FO3xTTA1zOHyI5gvwpsEHHyXQyvm9mPJaInr0sIRmNJJlaY3ZV7ACVSV UwKxJCcbZs0lQM60erNHBNoHH0GYXZrQxPn3YtiF8ZGWjHyiEwIbAzXKC5GeqPdT osWVcDU334JQHh6DSGiJaPzRr08qEAgka8kxKF5d4q8Z1wGMayfxZZNfkJafcI2s y1M/3oa5172tw3rLvkdOf3WdfSOyAMS4iaJWXTsy5FdJuLT7/SFZJAodmw0/IMeA ZX+oeFWSX+oCS9KSIGd5w8ErA0al0al0EgwA4TpaP0L1FFs5hwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM0rXJ4pOPvjjPUJedQqFBAj57hUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zYThk NmM0Yy1lYjgyLTQzZjEtODBjYy04ODRjNTYwYmQwYmQvZjU1ZDMyOWItZTIwNi0z MzExLTkzODMtOWU1NDkxYTdmMDBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvM2E4ZDZjNGMtZWI4Mi00M2YxLTgw Y2MtODg0YzU2MGJkMGJkLzNhOGQ2YzRjLWViODItNDNmMS04MGNjLTg4NGM1NjBi ZDBiZC5jcmwwHwYDVR0jBBgwFoAUbov0feTbKCYpE02Ow50KF9xqsgEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zYThkNmM0Yy1lYjgyLTQzZjEtODBjYy04ODRj NTYwYmQwYmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqsj9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAAu8R6sv7YzPzAyYoAzvotevl1ykEDycFoAKIQc37usej75HkvuWLUj MOVgpvwEHnkFjvE5A3KAS8qGCE2l4xOoA4aCMewXpKhWbIyMBowNqkJSbkwXnhFe mD5HNNARCnSRiSg2lvOaHYa6OLWzxXPVoCHSZ7lVsz/LeIFsJ9GHCeSJHI7cVER3 qLZ6YKa54O8R+/g3ef0679RrBaEgUaTCRaJuqY4JvsH9DR2nZ40ceoi1O1YAeao4 nwzlPRWYW3CeeX5rsLUSln0A4fpaSypaSBABid9p7pLL0G7+QkBZi60xw/Lf7DDr AHjCotes7lt0jJXjoC4GrrunSA/3n1s= -----END CERTIFICATE-----Generated at Sat Apr 5 11:09:00 2025 by rpki-client