$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/8c3602d1-cf96-33d3-9024-5c890685dfd5.roa File: 8c3602d1-cf96-33d3-9024-5c890685dfd5.roa (raw, json) Hash identifier: dZY3i119rMC/XIwELQdbyPwqIkHD1xnmOJWi8dfMB+A= Subject key identifier: 31:FD:20:46:65:68:D7:25:48:11:B4:F1:36:79:07:43:6E:46:ED:12 Certificate issuer: /CN=5fab6378-e15d-4471-b01f-be15fc5bfa04 Certificate serial: 010D0C9F432858494CC946612997E0A6EC1E8880 Authority key identifier: 61:40:43:BF:E2:50:B3:47:64:FC:D1:73:0F:62:98:03:50:32:18:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/8c3602d1-cf96-33d3-9024-5c890685dfd5.roa Signing time: Tue 25 Mar 2025 01:00:40 +0000 ROA not before: Tue 25 Mar 2025 01:00:40 +0000 ROA not after: Mon 23 Jun 2025 01:00:40 +0000 asID: 7018 IP address blocks: 207.170.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/5fab6378-e15d-4471-b01f-be15fc5bfa04.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/5fab6378-e15d-4471-b01f-be15fc5bfa04.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4c:c9:46:61:29:97:e0:a6:ec:1e:88:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5fab6378-e15d-4471-b01f-be15fc5bfa04 Validity Not Before: Mar 25 01:00:40 2025 GMT Not After : Jun 23 01:00:40 2025 GMT Subject: CN=529dbd6c-1a09-4d68-9df1-2c05c15de21b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:fc:ac:ad:d4:de:8e:91:92:3f:e3:70:c7:c4: e6:8d:b5:c9:df:7b:31:0c:6f:3c:66:d9:9f:8b:3f: fd:da:66:59:aa:53:1f:c0:7e:df:66:2b:cb:9b:ef: d0:81:b0:9a:95:02:41:51:b6:cd:1b:f4:0c:9a:32: af:f5:88:22:a3:0b:c5:98:3c:31:48:9e:d1:14:3f: 77:2f:5e:03:4d:93:6e:6f:e0:8b:c4:87:c4:0b:d6: a2:2c:61:72:a1:65:ae:94:6d:a8:3d:b0:82:69:b4: 01:56:0f:9b:27:5d:2d:7c:50:3b:cc:2b:0e:82:2a: f1:3e:88:db:78:3e:e9:80:fb:24:35:78:82:c3:4f: 84:fb:98:bf:da:eb:24:ed:46:64:6e:65:8e:06:9b: 47:d1:be:77:b1:b1:27:bc:a8:99:85:f5:0f:44:ec: ef:38:85:9b:2a:db:ee:91:53:dd:77:3c:8d:fb:76: 15:6b:7a:83:86:c4:59:43:c2:dc:ba:24:72:98:30: 22:4b:b2:57:17:4a:c3:a8:fc:8d:76:1f:cb:43:1d: f2:11:31:5c:c0:a2:40:fb:06:fc:b4:ea:60:88:66: 04:67:37:ee:57:7a:35:ac:e7:55:00:a2:84:9c:01: 45:da:f8:60:d4:5d:e5:c5:fd:86:fe:99:db:87:20: 94:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:FD:20:46:65:68:D7:25:48:11:B4:F1:36:79:07:43:6E:46:ED:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/8c3602d1-cf96-33d3-9024-5c890685dfd5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/5fab6378-e15d-4471-b01f-be15fc5bfa04.crl X509v3 Authority Key Identifier: keyid:61:40:43:BF:E2:50:B3:47:64:FC:D1:73:0F:62:98:03:50:32:18:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04.cer sbgp-ipAddrBlock: critical IPv4: 207.170.175.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:b7:49:53:bd:f1:28:43:5b:b0:66:23:c6:31:dc:e2:4e:f6: 4a:83:a5:c0:d1:9b:92:98:8f:f8:b3:19:97:ad:ca:27:89:70: da:9e:a1:89:5e:2c:88:ea:50:cd:80:b4:8c:64:37:1e:32:8b: f6:86:21:15:44:dd:ba:98:60:aa:3d:16:37:ac:0e:f6:57:27: 02:fd:70:e7:12:29:e1:d6:0f:cb:6d:35:70:c4:7a:ca:24:50: cf:c6:36:f0:52:39:b2:f4:11:14:c3:ce:3f:03:3d:d2:a0:9b: 7f:41:83:7e:35:b6:77:5a:a7:5c:3a:ba:7c:f0:04:5f:05:ad: ac:69:9c:8d:06:5e:c0:32:f9:86:e2:6a:f2:4d:03:73:8c:42: 25:27:b7:49:89:54:22:e0:6c:c4:97:9b:7a:c0:31:90:79:84: dd:74:2c:fe:13:e4:45:97:a1:da:5f:d4:97:d6:64:9f:d5:90: 11:04:d3:7d:a6:f5:02:c3:13:0d:bd:db:0c:5b:25:31:8f:3c: 57:4f:0e:9a:62:2b:7b:b1:79:a4:76:ee:1a:11:96:72:71:b9: ca:5f:d5:71:65:5c:b6:9a:d4:04:71:6a:6b:31:2d:ac:80:16: 44:4d:48:b8:a2:33:03:4c:09:4b:ec:b6:92:9a:c6:67:b8:bf: bc:5e:de:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElMyUZhKZfgpuweiIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWZhYjYzNzgtZTE1ZC00NDcxLWIwMWYtYmUxNWZjNWJm YTA0MB4XDTI1MDMyNTAxMDA0MFoXDTI1MDYyMzAxMDA0MFowLzEtMCsGA1UEAxMk NTI5ZGJkNmMtMWEwOS00ZDY4LTlkZjEtMmMwNWMxNWRlMjFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfysrdTejpGSP+Nwx8TmjbXJ33sxDG88Ztmf iz/92mZZqlMfwH7fZivLm+/QgbCalQJBUbbNG/QMmjKv9YgiowvFmDwxSJ7RFD93 L14DTZNub+CLxIfEC9aiLGFyoWWulG2oPbCCabQBVg+bJ10tfFA7zCsOgirxPojb eD7pgPskNXiCw0+E+5i/2usk7UZkbmWOBptH0b53sbEnvKiZhfUPROzvOIWbKtvu kVPddzyN+3YVa3qDhsRZQ8LcuiRymDAiS7JXF0rDqPyNdh/LQx3yETFcwKJA+wb8 tOpgiGYEZzfuV3o1rOdVAKKEnAFF2vhg1F3lxf2G/pnbhyCUvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDH9IEZlaNclSBG08TZ5B0NuRu0SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS81ZmFi NjM3OC1lMTVkLTQ0NzEtYjAxZi1iZTE1ZmM1YmZhMDQvOGMzNjAyZDEtY2Y5Ni0z M2QzLTkwMjQtNWM4OTA2ODVkZmQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNWZhYjYzNzgtZTE1ZC00NDcxLWIw MWYtYmUxNWZjNWJmYTA0LzVmYWI2Mzc4LWUxNWQtNDQ3MS1iMDFmLWJlMTVmYzVi ZmEwNC5jcmwwHwYDVR0jBBgwFoAUYUBDv+JQs0dk/NFzD2KYA1AyGNIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS81ZmFiNjM3OC1lMTVkLTQ0NzEtYjAxZi1iZTE1 ZmM1YmZhMDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz6qvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKa3SVO98ShDW7BmI8Yx3OJO9kqDpcDRm5KYj/izGZetyieJcNqeoYle LIjqUM2AtIxkNx4yi/aGIRVE3bqYYKo9FjesDvZXJwL9cOcSKeHWD8ttNXDEesok UM/GNvBSObL0ERTDzj8DPdKgm39Bg341tndap1w6unzwBF8FraxpnI0GXsAy+Ybi avJNA3OMQiUnt0mJVCLgbMSXm3rAMZB5hN10LP4T5EWXodpf1JfWZJ/VkBEE032m 9QLDEw292wxbJTGPPFdPDppiK3uxeaR27hoRlnJxucpf1XFlXLaa1ARxamsxLayA FkRNSLiiMwNMCUvstpKaxme4v7xe3l8= -----END CERTIFICATE-----Generated at Fri Apr 4 21:40:36 2025 by rpki-client