$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/8e99d649-0b3a-393d-a5cd-c7971cabfb82.roa File: 8e99d649-0b3a-393d-a5cd-c7971cabfb82.roa (raw, json) Hash identifier: doGuVZoKnYxdbDqPOebroDRFpdiR26tfqPsPPwB/FoM= Subject key identifier: A9:B9:3A:83:AE:45:70:E7:12:A5:EA:1F:40:14:93:6C:2A:BB:59:39 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F432858494B64223E0C8F915DE898DF40 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/8e99d649-0b3a-393d-a5cd-c7971cabfb82.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 11404 IP address blocks: 152.44.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:64:22:3e:0c:8f:91:5d:e8:98:df:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=99c8a7ae-e6a2-46fa-bc0c-3eec59231ba1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:34:2b:c4:36:3d:2a:d7:2f:18:c2:da:e6:00: 22:cd:e3:7d:50:fd:79:b8:44:98:8b:ef:77:75:89: 93:bd:62:40:70:f7:31:86:74:5d:9c:df:a4:cb:a7: e3:98:26:0a:a6:4c:7b:27:8f:32:82:08:fb:e9:9f: 1b:e9:2d:8b:7a:0c:cb:af:65:3e:bc:e9:f7:a7:23: e5:cb:d4:4f:80:64:7d:30:83:05:36:f8:95:1a:c0: 54:4f:ef:df:ed:5c:a6:1e:80:a4:43:46:d2:ab:bb: cd:fe:84:18:f4:1c:17:68:46:95:e5:b5:8e:52:54: 20:93:98:a5:08:e0:5e:ee:13:c6:cc:40:32:ae:2c: 17:47:48:f7:84:32:e6:e9:03:94:33:53:a8:7f:e9: 8a:db:44:74:50:4a:16:66:d7:29:5d:43:67:7d:be: d0:03:08:87:ce:53:c1:cc:1b:ca:72:b8:52:1d:f5: b6:97:b9:95:46:4a:0d:b9:10:09:f8:fb:50:f4:08: e3:3e:8d:8d:8f:45:df:0e:4e:0b:96:99:e4:a5:04: 43:5e:48:a3:10:51:29:ef:bf:1a:26:99:be:a4:86: 38:38:d8:7c:ef:aa:9e:d8:59:e0:18:e5:a9:32:36: ce:de:fa:cf:52:e1:05:19:5e:2f:d1:f7:3f:cc:98: af:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:B9:3A:83:AE:45:70:E7:12:A5:EA:1F:40:14:93:6C:2A:BB:59:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/8e99d649-0b3a-393d-a5cd-c7971cabfb82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 152.44.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:0c:4d:35:c0:7a:21:89:cb:41:a4:0b:46:0a:d8:3e:78:d7: 03:69:6f:c4:b6:78:13:e1:94:88:15:23:26:34:65:81:83:e2: ba:2b:17:86:f0:f7:54:31:68:98:95:b7:28:21:07:7a:db:a4: e0:c6:f4:41:0f:0e:98:1c:c4:ef:83:7d:68:df:77:fc:3d:db: e9:13:67:16:00:74:0b:30:10:a6:fd:87:d1:b9:5c:45:09:02: 21:54:7a:11:b0:50:8e:95:22:4a:1b:39:3b:7a:ff:d3:36:23: 3d:fd:17:6d:5d:99:81:e0:eb:56:6b:90:1f:ad:a0:d2:1b:aa: 64:77:85:1e:22:28:6d:47:c3:59:c8:11:fc:1a:53:56:c7:ca: 1f:d2:b7:81:11:e8:cf:e7:b5:4e:f5:e9:f8:90:92:5b:fb:7c: 08:65:61:01:8a:87:0b:b1:b8:c2:ac:47:a7:11:bd:78:46:b8: ac:48:a9:81:81:4a:6b:49:91:d3:8c:bc:9c:1d:6c:b9:61:7e: 07:cb:25:22:77:81:35:6b:ac:82:9f:4a:87:0d:04:15:2c:e3: 48:02:d0:79:04:1f:2c:9a:dd:63:85:2a:65:8f:20:b9:0c:96: 38:df:e6:49:cd:e5:2b:bf:cc:98:13:6d:a7:ae:ee:1d:8d:2c: bc:98:11:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElLZCI+DI+RXeiY30AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk OTljOGE3YWUtZTZhMi00NmZhLWJjMGMtM2VlYzU5MjMxYmExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDQrxDY9KtcvGMLa5gAizeN9UP15uESYi+93 dYmTvWJAcPcxhnRdnN+ky6fjmCYKpkx7J48yggj76Z8b6S2LegzLr2U+vOn3pyPl y9RPgGR9MIMFNviVGsBUT+/f7VymHoCkQ0bSq7vN/oQY9BwXaEaV5bWOUlQgk5il COBe7hPGzEAyriwXR0j3hDLm6QOUM1Oof+mK20R0UEoWZtcpXUNnfb7QAwiHzlPB zBvKcrhSHfW2l7mVRkoNuRAJ+PtQ9AjjPo2Nj0XfDk4LlpnkpQRDXkijEFEp778a Jpm+pIY4ONh876qe2FngGOWpMjbO3vrPUuEFGV4v0fc/zJivoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKm5OoOuRXDnEqXqH0AUk2wqu1k5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvOGU5OWQ2NDktMGIzYS0z OTNkLWE1Y2QtYzc5NzFjYWJmYjgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHmCyAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACwMTTXAeiGJy0GkC0YK2D541wNpb8S2eBPhlIgVIyY0ZYGD4rorF4bw 91QxaJiVtyghB3rbpODG9EEPDpgcxO+DfWjfd/w92+kTZxYAdAswEKb9h9G5XEUJ AiFUehGwUI6VIkobOTt6/9M2Iz39F21dmYHg61ZrkB+toNIbqmR3hR4iKG1Hw1nI EfwaU1bHyh/St4ER6M/ntU716fiQklv7fAhlYQGKhwuxuMKsR6cRvXhGuKxIqYGB SmtJkdOMvJwdbLlhfgfLJSJ3gTVrrIKfSocNBBUs40gC0HkEHyya3WOFKmWPILkM ljjf5knN5Su/zJgTbaeu7h2NLLyYEbs= -----END CERTIFICATE-----Generated at Sat Apr 5 19:08:25 2025 by rpki-client