$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/835821d2-0caf-36fd-9142-4db451b3d885.roa File: 835821d2-0caf-36fd-9142-4db451b3d885.roa (raw, json) Hash identifier: UVZoGVe+Zws15VhsrII/K0QaYf3Huqu09C15zFTZ8Ko= Subject key identifier: 94:D9:FB:83:A1:8D:96:54:D9:F3:7B:13:24:02:94:7C:69:44:22:51 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F432858494B642F2D3C54E2819AF9A800 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/835821d2-0caf-36fd-9142-4db451b3d885.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 14642 IP address blocks: 174.127.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 17 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:64:2f:2d:3c:54:e2:81:9a:f9:a8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=ec8b296a-5908-414d-97b2-e10572b67795 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:eb:f5:13:64:71:53:09:71:af:53:02:84:7a: 26:8d:38:88:f8:91:93:36:af:b3:b6:24:27:ae:35: e5:7e:56:c9:7f:bf:d1:6c:d4:60:9a:93:95:fe:d9: b4:56:7c:2e:94:b5:65:10:9a:03:d1:bc:a3:db:e1: a1:5b:fb:59:b4:96:be:18:96:64:1a:41:f4:2a:cd: 5e:23:0e:41:13:5a:e2:f8:df:d3:24:66:c7:9b:04: 64:39:3a:17:d9:19:69:d1:78:4b:c1:57:34:c2:de: b2:f4:a8:a5:e7:23:81:fa:0b:e9:9a:72:3a:40:61: ba:c2:02:0a:36:bf:1c:ee:7b:e1:57:d4:ef:3a:19: 97:d9:b8:b0:bf:8c:99:1a:2b:40:61:b4:5c:f2:50: 5e:6b:c9:ed:5e:ac:72:8f:dc:34:be:9e:71:a3:90: 0c:c1:6b:d5:65:95:9b:bc:22:27:e5:ae:59:d3:6a: 14:83:71:94:ba:63:57:05:11:02:54:4c:e7:a2:82: 84:bf:71:ab:5f:26:14:e9:da:86:31:50:35:0f:29: 63:1a:6f:25:a6:39:3b:69:5a:ad:7e:80:64:b3:5f: 51:bf:61:35:6a:b8:8d:e4:a5:34:f6:4d:76:63:c6: 3e:57:d9:a6:3b:e4:16:76:3c:f6:55:21:54:bc:88: f6:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:D9:FB:83:A1:8D:96:54:D9:F3:7B:13:24:02:94:7C:69:44:22:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/835821d2-0caf-36fd-9142-4db451b3d885.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 174.127.198.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:d1:c8:7c:5a:2a:d7:05:b8:db:4a:e3:20:52:ac:d2:c7:ba: d0:88:bc:ff:01:bf:d9:b5:87:74:ac:64:dc:d8:1e:66:52:d6: b0:20:e0:3d:97:d3:a8:11:36:f5:0e:39:8f:30:8c:40:db:a1: f6:9c:fc:0b:1a:06:42:a6:51:38:68:23:08:fd:2e:1e:69:91: 8b:ac:29:fc:4c:0e:c7:2f:89:95:cc:a3:2a:c7:4e:08:34:30: fd:bb:68:20:50:b8:dd:e9:22:5d:80:f5:08:b4:b4:0d:21:c3: 10:f3:45:9a:8a:3e:0d:4d:f8:21:19:32:cc:f4:d6:98:e8:e1: cb:17:76:8a:be:f6:f7:a9:51:24:88:95:1a:65:89:c5:43:0b: fe:3b:80:9e:d5:e9:2e:0e:13:6d:85:60:27:1a:7a:30:e9:94: 22:85:4c:10:63:09:01:4b:bc:0f:f8:49:7a:3c:82:0c:5e:a9: a8:cb:87:26:ee:2b:67:e2:5d:c9:95:5f:2d:22:c4:9e:37:6c: 87:ee:63:5f:cd:a0:7e:e1:81:03:0b:1c:c2:47:b5:dc:c7:e5: d7:70:57:cf:40:e8:02:56:34:a8:f2:05:b1:01:3f:be:5c:d0: 31:2a:bb:18:5a:8d:4e:02:08:f9:01:63:37:0e:7b:80:52:8b: 34:ce:fa:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElLZC8tPFTigZr5qAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk ZWM4YjI5NmEtNTkwOC00MTRkLTk3YjItZTEwNTcyYjY3Nzk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOv1E2RxUwlxr1MChHomjTiI+JGTNq+ztiQn rjXlflbJf7/RbNRgmpOV/tm0VnwulLVlEJoD0byj2+GhW/tZtJa+GJZkGkH0Ks1e Iw5BE1ri+N/TJGbHmwRkOToX2Rlp0XhLwVc0wt6y9Kil5yOB+gvpmnI6QGG6wgIK Nr8c7nvhV9TvOhmX2biwv4yZGitAYbRc8lBea8ntXqxyj9w0vp5xo5AMwWvVZZWb vCIn5a5Z02oUg3GUumNXBRECVEznooKEv3GrXyYU6dqGMVA1DyljGm8lpjk7aVqt foBks19Rv2E1ariN5KU09k12Y8Y+V9mmO+QWdjz2VSFUvIj23QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJTZ+4OhjZZU2fN7EyQClHxpRCJRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvODM1ODIxZDItMGNhZi0z NmZkLTkxNDItNGRiNDUxYjNkODg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArn/GMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIDRyHxaKtcFuNtK4yBSrNLHutCIvP8Bv9m1h3SsZNzYHmZS1rAg4D2X 06gRNvUOOY8wjEDbofac/AsaBkKmUThoIwj9Lh5pkYusKfxMDscviZXMoyrHTgg0 MP27aCBQuN3pIl2A9Qi0tA0hwxDzRZqKPg1N+CEZMsz01pjo4csXdoq+9vepUSSI lRplicVDC/47gJ7V6S4OE22FYCcaejDplCKFTBBjCQFLvA/4SXo8ggxeqajLhybu K2fiXcmVXy0ixJ43bIfuY1/NoH7hgQMLHMJHtdzH5ddwV89A6AJWNKjyBbEBP75c 0DEquxhajU4CCPkBYzcOe4BSizTO+kQ= -----END CERTIFICATE-----Generated at Wed Apr 16 04:24:19 2025 by rpki-client