$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ee86bab0-ef7e-4e23-84fe-bcd5cee869bb/96b5ecdf-003c-37fd-b621-8fe6b49bd2e4.roa File: 96b5ecdf-003c-37fd-b621-8fe6b49bd2e4.roa (raw, json) Hash identifier: mUZDcTNMaz3WHJfyM2eiox6/faSLLLb4KjepH1YN330= Subject key identifier: 65:6E:F3:42:B1:C9:F8:F6:AC:66:91:89:E3:6B:54:61:F9:38:D3:36 Certificate issuer: /CN=ee86bab0-ef7e-4e23-84fe-bcd5cee869bb Certificate serial: 010D0C9F43285848F65BE68AA7560CE6888BB840 Authority key identifier: 17:D3:83:21:A7:3C:E6:27:6D:07:DB:A2:70:2D:1B:95:C2:EE:2F:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ee86bab0-ef7e-4e23-84fe-bcd5cee869bb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ee86bab0-ef7e-4e23-84fe-bcd5cee869bb/96b5ecdf-003c-37fd-b621-8fe6b49bd2e4.roa Signing time: Sat 22 Feb 2025 02:00:38 +0000 ROA not before: Sat 22 Feb 2025 02:00:38 +0000 ROA not after: Fri 23 May 2025 01:00:38 +0000 asID: 14618 IP address blocks: 170.52.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ee86bab0-ef7e-4e23-84fe-bcd5cee869bb/ee86bab0-ef7e-4e23-84fe-bcd5cee869bb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ee86bab0-ef7e-4e23-84fe-bcd5cee869bb/ee86bab0-ef7e-4e23-84fe-bcd5cee869bb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ee86bab0-ef7e-4e23-84fe-bcd5cee869bb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f6:5b:e6:8a:a7:56:0c:e6:88:8b:b8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee86bab0-ef7e-4e23-84fe-bcd5cee869bb Validity Not Before: Feb 22 02:00:38 2025 GMT Not After : May 23 01:00:38 2025 GMT Subject: CN=6c0471f9-e2c2-48fe-a5c4-4608939845ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:c3:df:9e:9f:51:5e:66:e7:2c:52:d4:0e:42: dc:1a:5c:db:ae:26:e8:88:92:e2:f8:2d:b6:75:96: 6c:17:e2:55:e9:e0:cc:34:75:78:fe:86:ee:4a:f2: 9f:08:b1:f5:f8:d9:eb:f2:2f:9f:56:5c:86:6f:9e: d1:63:68:4f:df:ea:ce:5a:e6:42:35:fd:78:5d:67: 41:fb:85:fb:58:5d:12:9c:d6:00:a1:0f:0d:a7:73: e3:c7:b1:17:64:cc:fc:68:a1:73:2b:a8:dd:35:45: aa:0f:6d:0e:f4:98:8c:7b:b6:d3:5b:0c:3e:69:ab: 4c:8d:62:01:27:60:4e:05:ae:76:92:e8:b0:ab:05: c8:68:88:54:56:2a:a9:06:78:f4:3c:bb:a6:00:f0: ce:0e:c2:83:24:2b:a0:ef:46:a4:58:71:20:9a:6e: 7e:f0:5d:0a:10:b8:4a:08:08:ee:c5:f3:29:46:d5: f6:f9:d7:59:40:83:58:53:f8:7b:7c:0b:ab:ea:68: f9:39:80:19:3d:80:bd:42:e3:6a:99:9d:31:6d:e1: af:75:8e:c9:7d:2a:b6:de:c2:7e:30:51:a8:d1:f9: ff:77:77:6c:ea:05:df:09:a5:88:ec:0b:78:21:0a: 66:cf:c6:ea:c6:e1:b3:55:27:43:8b:d9:5a:56:d4: e0:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:6E:F3:42:B1:C9:F8:F6:AC:66:91:89:E3:6B:54:61:F9:38:D3:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ee86bab0-ef7e-4e23-84fe-bcd5cee869bb/96b5ecdf-003c-37fd-b621-8fe6b49bd2e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ee86bab0-ef7e-4e23-84fe-bcd5cee869bb/ee86bab0-ef7e-4e23-84fe-bcd5cee869bb.crl X509v3 Authority Key Identifier: keyid:17:D3:83:21:A7:3C:E6:27:6D:07:DB:A2:70:2D:1B:95:C2:EE:2F:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ee86bab0-ef7e-4e23-84fe-bcd5cee869bb.cer sbgp-ipAddrBlock: critical IPv4: 170.52.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:94:3f:12:62:00:dc:a2:66:34:6a:3e:46:06:4f:02:c6:a2: f0:22:9b:f4:82:64:be:c9:0a:ed:64:25:05:5d:3f:6c:60:91: 02:9b:da:90:6d:06:48:cd:ee:4b:66:9a:b2:f6:2c:c1:c7:d9: af:82:f0:1c:02:d1:9e:7f:cb:af:a1:06:83:af:ce:36:e4:de: ef:cd:38:9e:9c:37:18:a8:f5:47:c7:f8:74:4e:f2:f8:3e:3e: 9a:8b:72:97:d1:3a:ea:4b:1e:02:be:df:11:6d:fe:99:f2:e0: 5a:30:50:80:68:4a:d3:2c:34:7b:3f:23:72:f3:b4:f8:18:5e: 69:56:79:27:c0:a8:d8:fd:d3:86:5c:1a:09:06:ed:86:79:d3: d3:13:c5:89:0a:25:4b:ed:37:00:25:f9:65:6e:b6:fd:2d:54: 0a:b2:df:f5:d7:e2:c9:ba:62:f0:a6:3a:aa:d4:2e:d3:54:5f: e4:2c:89:f7:23:33:b2:7d:97:0e:04:78:3b:4d:d3:c1:15:af: 6a:be:27:bf:f3:d8:bc:08:51:0d:65:ab:9e:89:f7:a6:21:7f: e3:6c:41:87:3e:e3:50:6f:4c:b9:91:f7:e3:95:f4:8a:61:c3: b5:79:f5:f5:e7:c4:0c:5c:78:eb:8a:43:2e:19:ca:fe:5c:4e: e9:7d:60:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj2W+aKp1YM5oiLuEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWU4NmJhYjAtZWY3ZS00ZTIzLTg0ZmUtYmNkNWNlZTg2 OWJiMB4XDTI1MDIyMjAyMDAzOFoXDTI1MDUyMzAxMDAzOFowLzEtMCsGA1UEAxMk NmMwNDcxZjktZTJjMi00OGZlLWE1YzQtNDYwODkzOTg0NWVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkcPfnp9RXmbnLFLUDkLcGlzbriboiJLi+C22 dZZsF+JV6eDMNHV4/obuSvKfCLH1+Nnr8i+fVlyGb57RY2hP3+rOWuZCNf14XWdB +4X7WF0SnNYAoQ8Np3Pjx7EXZMz8aKFzK6jdNUWqD20O9JiMe7bTWww+aatMjWIB J2BOBa52kuiwqwXIaIhUViqpBnj0PLumAPDODsKDJCug70akWHEgmm5+8F0KELhK CAjuxfMpRtX2+ddZQINYU/h7fAur6mj5OYAZPYC9QuNqmZ0xbeGvdY7JfSq23sJ+ MFGo0fn/d3ds6gXfCaWI7At4IQpmz8bqxuGzVSdDi9laVtTgRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGVu80Kxyfj2rGaRieNrVGH5ONM2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lZTg2 YmFiMC1lZjdlLTRlMjMtODRmZS1iY2Q1Y2VlODY5YmIvOTZiNWVjZGYtMDAzYy0z N2ZkLWI2MjEtOGZlNmI0OWJkMmU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZWU4NmJhYjAtZWY3ZS00ZTIzLTg0 ZmUtYmNkNWNlZTg2OWJiL2VlODZiYWIwLWVmN2UtNGUyMy04NGZlLWJjZDVjZWU4 NjliYi5jcmwwHwYDVR0jBBgwFoAUF9ODIac85idtB9uicC0blcLuLw0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lZTg2YmFiMC1lZjdlLTRlMjMtODRmZS1iY2Q1 Y2VlODY5YmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqjQgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABuUPxJiANyiZjRqPkYGTwLGovAim/SCZL7JCu1kJQVdP2xgkQKb2pBt BkjN7ktmmrL2LMHH2a+C8BwC0Z5/y6+hBoOvzjbk3u/NOJ6cNxio9UfH+HRO8vg+ PpqLcpfROupLHgK+3xFt/pny4FowUIBoStMsNHs/I3LztPgYXmlWeSfAqNj904Zc GgkG7YZ509MTxYkKJUvtNwAl+WVutv0tVAqy3/XX4sm6YvCmOqrULtNUX+Qsifcj M7J9lw4EeDtN08EVr2q+J7/z2LwIUQ1lq56J96Yhf+NsQYc+41BvTLmR9+OV9Iph w7V59fXnxAxceOuKQy4Zyv5cTul9YGs= -----END CERTIFICATE-----Generated at Fri Apr 4 23:32:38 2025 by rpki-client