$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/82717fda-af05-3b0d-9fd6-db4321e99fd2.roa File: 82717fda-af05-3b0d-9fd6-db4321e99fd2.roa (raw, json) Hash identifier: JCzYq8/9NGUOrmp4FSdu0XCf8pK6lxXOiFHIw/hl3mo= Subject key identifier: C3:C7:50:36:C6:16:A0:DB:35:68:A7:98:9C:33:C1:04:A7:6A:2D:AD Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F432858494B642E4EF2546CECA6AFA200 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/82717fda-af05-3b0d-9fd6-db4321e99fd2.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 11404 IP address blocks: 172.81.152.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 17 Apr 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:64:2e:4e:f2:54:6c:ec:a6:af:a2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=1c9f452d-1a31-45c2-9ca6-e95daf55fbb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:bc:8b:28:35:af:3e:5e:e6:7d:72:63:f5:34: f5:64:fa:71:1d:f2:a4:ee:14:3b:63:9d:c2:5a:5a: 7a:35:95:a6:d8:dd:fc:00:25:7f:6f:6b:86:f1:d1: 9a:de:a2:47:fd:0b:db:38:ca:cd:d8:e7:40:a1:64: 81:60:7f:d6:ed:e5:42:a0:f6:a9:96:cb:f3:3a:13: ea:8e:28:28:b4:9f:65:31:7e:31:78:8f:c5:a8:8a: b4:cc:d7:66:0b:ef:61:e7:ce:03:db:89:27:b3:14: 89:7c:f9:e6:f3:55:85:11:eb:ad:41:0a:b3:8e:29: 73:b1:b7:a8:51:e3:22:79:10:f4:3a:45:0c:81:82: 6f:5d:2c:99:5e:df:ca:c7:55:3a:66:2e:c9:3c:ea: 6d:ff:82:0f:93:19:34:28:03:39:76:2f:35:85:db: 34:56:08:35:d4:eb:31:49:b2:05:8a:bc:ca:0c:fc: 21:ab:38:28:6a:dc:36:39:ab:9d:26:57:cc:d4:26: 20:b7:60:28:87:83:07:05:a7:49:e9:c5:73:6a:cc: 55:dd:ff:56:df:77:53:86:ae:5c:7e:62:23:4a:65: 41:a1:7e:d1:03:8a:27:53:f3:7a:a9:9b:a4:f8:dc: 2b:b0:02:e1:f3:41:93:d1:6e:7b:ad:d5:d2:3c:09: fa:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:C7:50:36:C6:16:A0:DB:35:68:A7:98:9C:33:C1:04:A7:6A:2D:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/82717fda-af05-3b0d-9fd6-db4321e99fd2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 172.81.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:e7:0c:c7:78:29:8b:b3:83:3f:fd:15:3a:e7:8f:6a:b1:0e: f6:8b:1b:04:61:e2:56:75:98:5a:4b:05:49:3c:3b:77:5f:4d: 7e:08:c9:d2:96:64:7d:33:32:c1:42:44:5f:e7:9c:e5:ee:de: 63:74:33:d0:b3:48:9e:c3:69:91:f2:8a:f3:f6:79:d7:7d:75: 32:ab:c4:f8:75:7f:91:15:68:7d:d3:74:71:f8:da:0a:23:02: b5:c0:89:e7:88:22:f9:f9:27:bd:1b:b9:a6:f8:f0:d9:d8:16: e9:37:99:a0:ca:17:20:53:93:93:ad:5f:ce:fd:5e:5b:ee:8a: db:7a:71:90:ce:20:c9:e7:d9:60:a3:eb:38:13:67:d1:a6:a7: ac:45:e0:b2:b7:da:e5:b1:7b:e8:af:5e:25:29:68:93:1a:fb: c8:05:e2:1d:66:dc:4e:25:a8:1f:b1:43:07:cb:eb:23:d5:78: f9:cb:bd:e1:07:87:1c:16:28:69:fe:07:78:98:6c:9d:61:d5: b6:07:65:61:b0:c2:8e:75:1e:f6:db:89:bc:1d:1d:69:ff:06: 31:db:ae:57:66:10:32:dd:92:1e:f4:73:48:3f:35:d6:81:c3: b7:34:59:d8:67:b9:64:cf:09:3e:96:98:e9:c6:5d:f7:50:a3: ed:cb:1a:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElLZC5O8lRs7KavogAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk MWM5ZjQ1MmQtMWEzMS00NWMyLTljYTYtZTk1ZGFmNTVmYmI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmLyLKDWvPl7mfXJj9TT1ZPpxHfKk7hQ7Y53C Wlp6NZWm2N38ACV/b2uG8dGa3qJH/QvbOMrN2OdAoWSBYH/W7eVCoPaplsvzOhPq jigotJ9lMX4xeI/FqIq0zNdmC+9h584D24knsxSJfPnm81WFEeutQQqzjilzsbeo UeMieRD0OkUMgYJvXSyZXt/Kx1U6Zi7JPOpt/4IPkxk0KAM5di81hds0Vgg11Osx SbIFirzKDPwhqzgoatw2OaudJlfM1CYgt2Aoh4MHBadJ6cVzasxV3f9W33dThq5c fmIjSmVBoX7RA4onU/N6qZuk+NwrsALh80GT0W57rdXSPAn68wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMPHUDbGFqDbNWinmJwzwQSnai2tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvODI3MTdmZGEtYWYwNS0z YjBkLTlmZDYtZGI0MzIxZTk5ZmQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrFGYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABTnDMd4KYuzgz/9FTrnj2qxDvaLGwRh4lZ1mFpLBUk8O3dfTX4IydKW ZH0zMsFCRF/nnOXu3mN0M9CzSJ7DaZHyivP2edd9dTKrxPh1f5EVaH3TdHH42goj ArXAieeIIvn5J70buab48NnYFuk3maDKFyBTk5OtX879Xlvuitt6cZDOIMnn2WCj 6zgTZ9Gmp6xF4LK32uWxe+ivXiUpaJMa+8gF4h1m3E4lqB+xQwfL6yPVePnLveEH hxwWKGn+B3iYbJ1h1bYHZWGwwo51HvbbibwdHWn/BjHbrldmEDLdkh70c0g/NdaB w7c0WdhnuWTPCT6WmOnGXfdQo+3LGk4= -----END CERTIFICATE-----Generated at Thu Apr 17 06:54:18 2025 by rpki-client