$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/4deca47a-06dc-30d8-843f-52136e603e18.roa File: 4deca47a-06dc-30d8-843f-52136e603e18.roa (raw, json) Hash identifier: qqAhPRGEIaytDhMYJ4+hB5wDHFsk+G+ZhAbXI/aE/ng= Subject key identifier: C7:5D:8C:A3:A7:FC:DD:70:78:BB:55:E7:04:FF:BF:31:22:99:47:70 Certificate issuer: /CN=8252d812-07cd-4870-b413-e08fb8355928 Certificate serial: 010D0C9F43285848A29B4B734E0B9A51BD13DA52 Authority key identifier: 22:F6:B7:89:81:53:28:BF:20:D6:FF:E0:86:EC:A6:DC:6E:1E:F6:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/4deca47a-06dc-30d8-843f-52136e603e18.roa Signing time: Thu 23 Jan 2025 02:00:40 +0000 ROA not before: Thu 23 Jan 2025 02:00:40 +0000 ROA not after: Wed 23 Apr 2025 01:00:40 +0000 asID: 36642 IP address blocks: 170.88.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/8252d812-07cd-4870-b413-e08fb8355928.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/8252d812-07cd-4870-b413-e08fb8355928.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a2:9b:4b:73:4e:0b:9a:51:bd:13:da:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8252d812-07cd-4870-b413-e08fb8355928 Validity Not Before: Jan 23 02:00:40 2025 GMT Not After : Apr 23 01:00:40 2025 GMT Subject: CN=b5447590-3c96-46ad-ac54-881e060d0822 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:3b:83:bf:d8:5b:37:d3:65:eb:6b:5f:1f:f9: 5a:a1:9e:62:f1:2c:35:34:42:32:53:4a:2f:c8:7d: 25:67:0a:00:17:9f:fe:8c:70:5f:37:de:44:d0:87: cc:db:6c:0c:12:21:40:31:2e:69:e7:de:f0:bc:d3: 70:e3:b7:51:0c:c9:31:60:d1:5e:82:ed:d7:68:28: 07:d6:07:f5:71:21:9f:72:e3:48:62:1f:47:d8:98: 8e:3f:ab:28:64:26:61:bd:aa:7a:cf:54:b7:cb:4f: 2b:59:18:a0:e6:9a:a6:9c:59:ff:db:11:3e:f0:f9: 84:3e:33:1b:e5:88:45:ba:46:8c:5f:b9:2e:44:f6: db:67:6f:50:48:23:2d:56:43:c9:ce:9d:d3:e8:b1: c8:90:60:fc:c3:e6:50:91:26:53:43:d2:82:e8:16: 1f:df:8d:22:37:98:42:39:9c:01:9a:97:a2:9a:88: 28:a5:9e:a9:1e:6e:52:24:a5:8c:4b:f2:03:ec:64: 9c:08:66:1b:b0:8d:94:10:c1:17:51:75:d6:e7:76: a0:ab:9b:42:14:bf:44:3c:03:fc:e2:f1:b9:db:f0: 3a:6b:40:f5:6e:6b:cb:5b:24:fb:ad:61:c9:0e:48: eb:61:a4:00:7c:92:ea:7f:d1:d4:b1:21:5b:a7:d5: 0e:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:5D:8C:A3:A7:FC:DD:70:78:BB:55:E7:04:FF:BF:31:22:99:47:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/4deca47a-06dc-30d8-843f-52136e603e18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/8252d812-07cd-4870-b413-e08fb8355928.crl X509v3 Authority Key Identifier: keyid:22:F6:B7:89:81:53:28:BF:20:D6:FF:E0:86:EC:A6:DC:6E:1E:F6:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928.cer sbgp-ipAddrBlock: critical IPv4: 170.88.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:b0:58:2f:cc:c4:07:fe:ab:9e:40:87:74:77:ca:0e:c3:61: 68:bc:2f:1f:f5:82:e7:1d:42:e6:e9:66:bc:0d:60:cb:89:6e: d9:2b:dd:43:c7:c5:19:eb:72:99:ec:bc:03:bc:04:35:9b:2d: 8a:51:56:c1:ab:15:9a:ce:7c:7f:17:0f:96:f0:11:c2:61:8c: 04:c8:e1:42:a0:99:2d:31:da:16:5a:df:f4:73:b7:4e:69:9a: 35:be:d1:02:7f:6e:29:f9:89:6a:ca:8b:74:c7:20:42:cd:db: d2:1c:5c:8f:9c:94:48:8d:f2:ca:88:d2:cb:34:a3:df:9f:ab: 37:d8:79:0b:4a:99:81:e3:4d:0c:c0:24:1b:71:64:dd:25:4d: 4e:7d:ea:fa:68:35:5f:03:63:26:a5:4e:1c:04:7e:14:e0:cc: 67:9c:04:17:a4:97:74:d1:a4:27:b4:1b:93:d6:6c:d5:64:46: e0:b6:1c:93:55:5b:26:af:a8:60:ba:5f:b1:29:ad:42:a2:3e: aa:7c:aa:54:c1:85:58:bf:37:28:2b:8b:87:27:b0:81:91:30: eb:e6:ae:f1:e1:26:e9:27:d0:9e:8f:9d:a0:cc:30:1f:b8:a5: 0a:a6:5d:e2:68:ac:38:71:e1:1a:8c:69:cb:2d:eb:37:fd:8f: 7a:e8:92:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiim0tzTguaUb0T2lIwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODI1MmQ4MTItMDdjZC00ODcwLWI0MTMtZTA4ZmI4MzU1 OTI4MB4XDTI1MDEyMzAyMDA0MFoXDTI1MDQyMzAxMDA0MFowLzEtMCsGA1UEAxMk YjU0NDc1OTAtM2M5Ni00NmFkLWFjNTQtODgxZTA2MGQwODIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6DuDv9hbN9Nl62tfH/laoZ5i8Sw1NEIyU0ov yH0lZwoAF5/+jHBfN95E0IfM22wMEiFAMS5p597wvNNw47dRDMkxYNFegu3XaCgH 1gf1cSGfcuNIYh9H2JiOP6soZCZhvap6z1S3y08rWRig5pqmnFn/2xE+8PmEPjMb 5YhFukaMX7kuRPbbZ29QSCMtVkPJzp3T6LHIkGD8w+ZQkSZTQ9KC6BYf340iN5hC OZwBmpeimogopZ6pHm5SJKWMS/ID7GScCGYbsI2UEMEXUXXW53agq5tCFL9EPAP8 4vG52/A6a0D1bmvLWyT7rWHJDkjrYaQAfJLqf9HUsSFbp9UOmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMddjKOn/N1weLtV5wT/vzEimUdwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84MjUy ZDgxMi0wN2NkLTQ4NzAtYjQxMy1lMDhmYjgzNTU5MjgvNGRlY2E0N2EtMDZkYy0z MGQ4LTg0M2YtNTIxMzZlNjAzZTE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODI1MmQ4MTItMDdjZC00ODcwLWI0 MTMtZTA4ZmI4MzU1OTI4LzgyNTJkODEyLTA3Y2QtNDg3MC1iNDEzLWUwOGZiODM1 NTkyOC5jcmwwHwYDVR0jBBgwFoAUIva3iYFTKL8g1v/ghuym3G4e9twwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84MjUyZDgxMi0wN2NkLTQ4NzAtYjQxMy1lMDhm YjgzNTU5MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqlhVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJOwWC/MxAf+q55Ah3R3yg7DYWi8Lx/1gucdQubpZrwNYMuJbtkr3UPH xRnrcpnsvAO8BDWbLYpRVsGrFZrOfH8XD5bwEcJhjATI4UKgmS0x2hZa3/Rzt05p mjW+0QJ/bin5iWrKi3THIELN29IcXI+clEiN8sqI0ss0o9+fqzfYeQtKmYHjTQzA JBtxZN0lTU596vpoNV8DYyalThwEfhTgzGecBBekl3TRpCe0G5PWbNVkRuC2HJNV WyavqGC6X7EprUKiPqp8qlTBhVi/Nygri4cnsIGRMOvmrvHhJukn0J6PnaDMMB+4 pQqmXeJorDhx4RqMacst6zf9j3rokhI= -----END CERTIFICATE-----Generated at Fri Mar 14 07:22:06 2025 by rpki-client