$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/df6aa9a0-b32f-3d29-a147-04d62aa1e742.roa File: df6aa9a0-b32f-3d29-a147-04d62aa1e742.roa (raw, json) Hash identifier: WRjFpLX/oUtSwpTZkYVTo+jueLka0c99vbcOp91dwS0= Subject key identifier: 58:F7:85:C7:EE:92:51:2C:F2:FB:30:57:45:D9:1C:F2:B8:19:2E:A9 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F432858494B64312D793AABD22D203380 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/df6aa9a0-b32f-3d29-a147-04d62aa1e742.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 54858 IP address blocks: 172.81.152.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:64:31:2d:79:3a:ab:d2:2d:20:33:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=25684906-0def-42b6-8682-2e26936e62d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:3f:9f:fb:bf:95:d0:e4:68:c0:b4:26:70:15: 03:d8:6b:c1:4a:14:84:cc:82:7e:ce:b8:22:e4:57: 02:c8:9c:8a:9d:30:ae:63:97:13:76:fb:22:89:00: 88:2d:b1:11:74:7e:96:13:d5:21:84:3f:6b:45:33: 08:73:e7:da:c5:19:48:1a:0a:25:d6:31:51:bf:ab: 33:b9:a6:4f:6b:8b:bf:43:07:96:c2:cf:97:4f:6e: d2:dd:b6:b6:95:dc:e2:01:5d:21:6d:9b:00:c4:87: e7:98:12:f2:a0:b0:13:b8:f4:b0:f7:e0:bc:1c:cf: 56:bc:e3:dc:21:4b:e0:73:10:6a:90:b2:47:85:f5: 14:ed:69:04:68:68:43:51:eb:37:ff:ae:8d:5b:b8: e6:12:90:ee:b6:81:ea:c0:6d:4d:4a:00:4f:74:6a: 74:23:bd:96:41:e5:56:1e:cd:c5:7b:38:20:40:02: 51:4a:83:e0:a3:d2:8a:8a:5c:ff:3c:32:e5:c5:d9: ec:87:43:11:12:7c:a3:8b:ad:ce:c3:74:97:27:3b: f3:0f:2d:aa:81:8c:43:0e:82:bd:f1:fb:6c:45:3e: 69:e2:17:f8:1a:ae:5f:11:6c:f1:b0:a1:00:12:19: b3:02:8f:e4:57:c3:4e:93:b7:a6:78:8f:37:db:ca: f1:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:F7:85:C7:EE:92:51:2C:F2:FB:30:57:45:D9:1C:F2:B8:19:2E:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/df6aa9a0-b32f-3d29-a147-04d62aa1e742.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 172.81.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:0c:ed:9d:6c:55:74:30:0c:c4:03:65:5d:53:dc:78:af:42: 08:55:5a:e5:d9:de:f2:ad:21:3c:d4:9c:7f:e9:5b:f4:bf:62: cd:6f:5a:4f:19:93:a6:cc:fc:4e:d9:c6:09:ba:27:7a:e7:46: 85:48:df:91:5c:5c:98:6d:e6:69:1f:a8:59:f8:ff:0a:cd:57: 41:f0:90:8f:29:76:e4:e8:c8:bd:23:58:cf:8e:73:4e:4f:45: 9d:63:f6:99:9f:91:42:66:be:77:37:e0:43:a0:f7:d4:1c:8b: 07:7c:dc:66:0b:97:2a:6d:71:94:85:04:47:dd:2b:0f:29:4a: 47:4c:e1:b1:d8:cb:12:d4:f9:d4:1b:2f:fe:b1:a4:8a:6f:e2: 59:86:55:44:3a:2f:b7:74:12:3b:e8:36:6d:ea:b1:40:60:cb: ac:09:ef:a4:0e:ba:33:1c:0d:b6:2d:44:a0:f4:87:e8:3b:2d: a0:9b:2c:ad:08:25:8e:1a:d0:a7:9e:ae:92:7b:d5:6e:9f:10: fb:26:41:21:69:c1:68:33:0c:fc:94:65:ee:fb:a9:79:63:a4: 21:11:11:ab:74:74:b1:14:41:bb:61:f0:3c:24:e9:23:98:48: 03:9f:ef:45:28:eb:cc:a7:58:76:05:18:23:aa:ed:3b:07:15: 75:8a:97:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElLZDEteTqr0i0gM4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk MjU2ODQ5MDYtMGRlZi00MmI2LTg2ODItMmUyNjkzNmU2MmQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsT+f+7+V0ORowLQmcBUD2GvBShSEzIJ+zrgi 5FcCyJyKnTCuY5cTdvsiiQCILbERdH6WE9UhhD9rRTMIc+faxRlIGgol1jFRv6sz uaZPa4u/QweWws+XT27S3ba2ldziAV0hbZsAxIfnmBLyoLATuPSw9+C8HM9WvOPc IUvgcxBqkLJHhfUU7WkEaGhDUes3/66NW7jmEpDutoHqwG1NSgBPdGp0I72WQeVW Hs3FezggQAJRSoPgo9KKilz/PDLlxdnsh0MREnyji63Ow3SXJzvzDy2qgYxDDoK9 8ftsRT5p4hf4Gq5fEWzxsKEAEhmzAo/kV8NOk7emeI8328rxvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFj3hcfuklEs8vswV0XZHPK4GS6pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvZGY2YWE5YTAtYjMyZi0z ZDI5LWExNDctMDRkNjJhYTFlNzQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrFGYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFsM7Z1sVXQwDMQDZV1T3HivQghVWuXZ3vKtITzUnH/pW/S/Ys1vWk8Z k6bM/E7Zxgm6J3rnRoVI35FcXJht5mkfqFn4/wrNV0HwkI8pduToyL0jWM+Oc05P RZ1j9pmfkUJmvnc34EOg99Qciwd83GYLlyptcZSFBEfdKw8pSkdM4bHYyxLU+dQb L/6xpIpv4lmGVUQ6L7d0EjvoNm3qsUBgy6wJ76QOujMcDbYtRKD0h+g7LaCbLK0I JY4a0KeerpJ71W6fEPsmQSFpwWgzDPyUZe77qXljpCEREat0dLEUQbth8Dwk6SOY SAOf70Uo68ynWHYFGCOq7TsHFXWKl4k= -----END CERTIFICATE-----Generated at Sat Apr 12 12:19:14 2025 by rpki-client