$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c75c2a49-d4ec-49ef-affc-f07717c14231/dfb69a96-4285-3b81-8af6-658aadd832b0.roa File: dfb69a96-4285-3b81-8af6-658aadd832b0.roa (raw, json) Hash identifier: wl+qc5fqmHXUlhMsI8Up4UZtXI8uM/xQMpfjgJiX66k= Subject key identifier: FA:B5:F2:88:F9:10:45:DE:4E:72:53:8D:CC:D2:48:BA:08:0B:02:8A Certificate issuer: /CN=c75c2a49-d4ec-49ef-affc-f07717c14231 Certificate serial: 010D0C9F43285848F56CC057C7C4EBCA32B3EF80 Authority key identifier: 1D:AB:A6:60:5B:91:EA:C1:D4:F7:19:D1:23:FC:C0:38:C1:5A:12:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c75c2a49-d4ec-49ef-affc-f07717c14231.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c75c2a49-d4ec-49ef-affc-f07717c14231/dfb69a96-4285-3b81-8af6-658aadd832b0.roa Signing time: Fri 21 Feb 2025 17:59:03 +0000 ROA not before: Fri 21 Feb 2025 17:59:03 +0000 ROA not after: Thu 22 May 2025 16:59:03 +0000 asID: 36310 IP address blocks: 170.205.4.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c75c2a49-d4ec-49ef-affc-f07717c14231/c75c2a49-d4ec-49ef-affc-f07717c14231.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c75c2a49-d4ec-49ef-affc-f07717c14231/c75c2a49-d4ec-49ef-affc-f07717c14231.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c75c2a49-d4ec-49ef-affc-f07717c14231.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f5:6c:c0:57:c7:c4:eb:ca:32:b3:ef:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c75c2a49-d4ec-49ef-affc-f07717c14231 Validity Not Before: Feb 21 17:59:03 2025 GMT Not After : May 22 16:59:03 2025 GMT Subject: CN=67bc878f-fa20-4532-9428-353d5cdbd11a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:a5:f8:43:38:4f:2d:e2:06:cd:90:b1:db:fa: b4:e9:93:72:16:ec:0e:19:d4:9d:71:5c:a2:4d:fa: 32:3e:1a:81:82:16:a4:ee:35:aa:ac:fa:45:43:1f: b1:f9:66:6e:cd:f4:ad:98:a0:69:7e:f5:2d:a9:80: a1:ad:a0:cc:72:d4:c8:a7:e3:09:83:a8:d0:89:95: 3f:db:ef:9f:92:cc:6c:f0:fa:59:9d:8e:65:06:82: 2c:a1:1e:62:43:2e:b8:4c:18:5f:82:9c:b8:31:97: e7:14:fb:29:51:2e:96:b1:7e:8c:4e:2a:f7:89:d6: 02:1f:33:1c:2b:28:1c:0f:4f:60:3f:6e:7d:11:41: ad:3a:fc:ee:5e:14:58:d6:dc:93:40:dd:47:ec:eb: 68:b0:68:df:15:0a:92:b0:b0:ed:8a:3e:21:29:2c: 9d:a7:6b:27:9b:4a:27:d1:63:1b:1d:42:f9:48:03: 6a:36:08:f7:c3:14:f6:fe:42:36:38:27:f7:07:e7: 27:9c:48:98:85:a7:7e:e5:7e:eb:eb:c3:a7:e5:dd: 88:26:e2:b4:d8:da:fd:5f:cb:d3:16:cf:81:89:e5: 10:cc:a8:39:ae:ba:54:94:5a:c4:46:78:72:97:1b: 4f:42:fc:fa:a8:ce:4a:7a:be:ab:cf:16:d5:93:77: ec:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:B5:F2:88:F9:10:45:DE:4E:72:53:8D:CC:D2:48:BA:08:0B:02:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c75c2a49-d4ec-49ef-affc-f07717c14231/dfb69a96-4285-3b81-8af6-658aadd832b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c75c2a49-d4ec-49ef-affc-f07717c14231/c75c2a49-d4ec-49ef-affc-f07717c14231.crl X509v3 Authority Key Identifier: keyid:1D:AB:A6:60:5B:91:EA:C1:D4:F7:19:D1:23:FC:C0:38:C1:5A:12:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c75c2a49-d4ec-49ef-affc-f07717c14231.cer sbgp-ipAddrBlock: critical IPv4: 170.205.4.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:67:da:8b:93:3c:d2:07:8d:0b:9e:64:10:3b:eb:f1:c2:02: a4:7d:17:33:fc:d2:4a:47:bc:78:32:31:18:14:1a:6e:f5:66: 5b:60:11:05:b3:89:25:60:eb:0a:35:ee:a3:f3:ba:ba:ec:dc: ae:7c:2f:49:41:5e:f9:45:1c:98:9e:68:21:b7:7a:50:c4:f7: ee:3d:2f:21:0e:d1:55:11:20:67:74:ea:f9:a9:2d:ab:f6:55: 61:ad:df:5c:3a:3a:b0:cf:97:b9:60:5d:e5:d2:52:5b:08:79: 6a:c8:7a:3f:7f:e9:39:7b:b6:51:53:b1:49:07:e9:4d:57:af: 00:98:d9:87:5c:62:9a:31:bc:08:90:8b:64:8c:7d:fe:96:25: 90:ed:27:55:88:01:78:39:24:47:72:f8:5d:cf:01:01:6e:e9: c8:a3:ef:26:8f:0e:6e:85:fa:f5:81:ff:0b:62:82:6f:13:d4: c1:14:1a:fd:6d:41:b0:fc:93:ff:0e:33:a1:2b:7d:98:59:78: 1a:1e:78:42:41:4c:dd:2e:33:37:dd:2b:1b:d9:4e:4d:25:40: 04:9f:a6:a9:ec:ea:eb:7d:a8:bd:28:b7:be:77:bb:ba:29:12: 00:c1:06:d3:bd:4f:84:c9:54:61:c3:69:85:29:43:a6:61:ab: 4b:a1:99:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj1bMBXx8TryjKz74AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzc1YzJhNDktZDRlYy00OWVmLWFmZmMtZjA3NzE3YzE0 MjMxMB4XDTI1MDIyMTE3NTkwM1oXDTI1MDUyMjE2NTkwM1owLzEtMCsGA1UEAxMk NjdiYzg3OGYtZmEyMC00NTMyLTk0MjgtMzUzZDVjZGJkMTFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyaX4QzhPLeIGzZCx2/q06ZNyFuwOGdSdcVyi TfoyPhqBghak7jWqrPpFQx+x+WZuzfStmKBpfvUtqYChraDMctTIp+MJg6jQiZU/ 2++fksxs8PpZnY5lBoIsoR5iQy64TBhfgpy4MZfnFPspUS6WsX6MTir3idYCHzMc KygcD09gP259EUGtOvzuXhRY1tyTQN1H7OtosGjfFQqSsLDtij4hKSydp2snm0on 0WMbHUL5SANqNgj3wxT2/kI2OCf3B+cnnEiYhad+5X7r68On5d2IJuK02Nr9X8vT Fs+BieUQzKg5rrpUlFrERnhylxtPQvz6qM5Ker6rzxbVk3fsCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPq18oj5EEXeTnJTjczSSLoICwKKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jNzVj MmE0OS1kNGVjLTQ5ZWYtYWZmYy1mMDc3MTdjMTQyMzEvZGZiNjlhOTYtNDI4NS0z YjgxLThhZjYtNjU4YWFkZDgzMmIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzc1YzJhNDktZDRlYy00OWVmLWFm ZmMtZjA3NzE3YzE0MjMxL2M3NWMyYTQ5LWQ0ZWMtNDllZi1hZmZjLWYwNzcxN2Mx NDIzMS5jcmwwHwYDVR0jBBgwFoAUHaumYFuR6sHU9xnRI/zAOMFaEtIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jNzVjMmE0OS1kNGVjLTQ5ZWYtYWZmYy1mMDc3 MTdjMTQyMzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqs0EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA9n2ouTPNIHjQueZBA76/HCAqR9FzP80kpHvHgyMRgUGm71ZltgEQWz iSVg6wo17qPzurrs3K58L0lBXvlFHJieaCG3elDE9+49LyEO0VURIGd06vmpLav2 VWGt31w6OrDPl7lgXeXSUlsIeWrIej9/6Tl7tlFTsUkH6U1XrwCY2YdcYpoxvAiQ i2SMff6WJZDtJ1WIAXg5JEdy+F3PAQFu6cij7yaPDm6F+vWB/wtigm8T1MEUGv1t QbD8k/8OM6ErfZhZeBoeeEJBTN0uMzfdKxvZTk0lQASfpqns6ut9qL0ot753u7op EgDBBtO9T4TJVGHDaYUpQ6Zhq0uhmW8= -----END CERTIFICATE-----Generated at Sat Apr 12 13:45:13 2025 by rpki-client