$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/cfe80c02-4451-3852-8f1d-f10baf942eac.roa File: cfe80c02-4451-3852-8f1d-f10baf942eac.roa (raw, json) Hash identifier: F61B7sgfmlDKkc+buQTfziQMDtz8sLE6+cHDkqRRblo= Subject key identifier: D8:33:B8:00:AB:34:8D:97:34:91:83:E2:8E:5A:94:7E:93:E4:30:CB Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F43285849C98D23DCFE9527F1B8401F00 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/cfe80c02-4451-3852-8f1d-f10baf942eac.roa Signing time: Thu 08 May 2025 17:35:41 +0000 ROA not before: Thu 08 May 2025 17:35:41 +0000 ROA not after: Wed 06 Aug 2025 17:35:41 +0000 asID: 2914 IP address blocks: 170.130.154.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c9:8d:23:dc:fe:95:27:f1:b8:40:1f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: May 8 17:35:41 2025 GMT Not After : Aug 6 17:35:41 2025 GMT Subject: CN=eb047bc6-ad3f-43e7-98b8-aa5a2eb462d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:d6:5d:ec:f4:43:f4:db:f6:bf:68:a1:a9:2e: 73:98:06:53:ab:36:1f:51:e9:95:d9:60:e0:df:45: dc:17:a3:aa:88:6a:04:f7:40:a2:88:1d:5b:3d:62: 07:9b:4f:da:19:e4:02:43:c6:94:53:5d:5c:1a:f7: a1:0f:b1:59:8f:51:24:10:e6:de:24:1b:71:9f:f9: 76:bc:c6:11:99:28:61:d4:48:91:87:aa:4f:ac:53: 19:d5:cb:95:f3:94:40:ba:eb:2d:1c:45:86:63:3f: b8:ad:cb:19:65:3b:c7:bf:1c:2b:52:eb:f9:ed:85: 05:de:25:6e:ae:d2:4f:b7:75:77:2f:3c:d6:2f:d4: a2:dc:20:d2:fc:de:f8:a0:98:aa:54:66:95:d3:12: e5:b5:3d:93:f2:6c:22:53:36:53:60:81:d2:58:fd: f7:7c:07:86:65:ff:9c:70:8a:45:84:28:af:ee:20: 29:ae:15:41:e5:24:67:e9:3c:a6:5a:41:ba:86:eb: f7:48:f7:86:d3:d4:26:e5:1c:fe:03:03:67:59:1a: 89:06:bf:a4:46:7e:b9:33:38:91:7b:93:e7:47:7a: ed:cc:4e:75:e3:05:fd:2e:fb:f2:0f:76:20:3a:c5: c9:c2:8f:f8:c2:aa:97:1b:92:09:3e:b1:14:31:e6: 8c:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:33:B8:00:AB:34:8D:97:34:91:83:E2:8E:5A:94:7E:93:E4:30:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/cfe80c02-4451-3852-8f1d-f10baf942eac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 170.130.154.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:b4:94:a0:65:29:46:67:b3:40:b7:94:39:8a:92:1d:5f:cd: fe:c9:8f:29:98:d8:b7:08:34:34:9a:a6:d5:63:37:1a:0e:a9: 3a:95:fe:31:23:1b:28:fa:52:ba:02:4d:a2:77:d5:e8:a0:b8: 8b:0c:4e:08:ef:9f:92:07:e4:07:8b:d3:a5:fb:2b:ef:79:42: 29:e1:af:1b:72:21:46:83:25:cd:f4:dc:26:c2:3e:3c:13:f7: 6a:c6:8b:bc:e2:cb:94:11:08:03:5c:a2:3e:50:ef:e7:cd:f0: 7e:3d:4e:15:67:f9:a8:e5:ec:b6:f9:43:68:60:52:5d:b6:5b: a5:f7:af:c3:53:af:7d:b1:e9:c3:aa:13:61:18:9b:7a:3f:7e: c5:d9:73:ed:66:1d:24:ce:0c:a8:d2:87:94:78:0b:43:0a:9a: e0:e3:f1:c7:5f:03:78:ac:42:99:eb:3f:5e:ed:a0:3c:b2:69: 6f:22:8c:29:7a:31:34:31:48:41:0f:ef:3d:cf:c0:74:01:21: 7e:52:0d:f2:45:14:22:d3:1d:6d:4d:24:95:68:83:37:48:4f: f6:b6:97:aa:23:cd:b2:9c:31:80:cc:d0:b7:89:74:53:b2:83: 1e:39:f3:51:72:0e:ec:ac:e2:02:6f:68:3d:ef:90:9d:2c:f4: 0c:dc:d8:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnJjSPc/pUn8bhAHwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI1MDUwODE3MzU0MVoXDTI1MDgwNjE3MzU0MVowLzEtMCsGA1UEAxMk ZWIwNDdiYzYtYWQzZi00M2U3LTk4YjgtYWE1YTJlYjQ2MmQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndZd7PRD9Nv2v2ihqS5zmAZTqzYfUemV2WDg 30XcF6OqiGoE90CiiB1bPWIHm0/aGeQCQ8aUU11cGvehD7FZj1EkEObeJBtxn/l2 vMYRmShh1EiRh6pPrFMZ1cuV85RAuustHEWGYz+4rcsZZTvHvxwrUuv57YUF3iVu rtJPt3V3LzzWL9Si3CDS/N74oJiqVGaV0xLltT2T8mwiUzZTYIHSWP33fAeGZf+c cIpFhCiv7iAprhVB5SRn6TymWkG6huv3SPeG09Qm5Rz+AwNnWRqJBr+kRn65MziR e5PnR3rtzE514wX9LvvyD3YgOsXJwo/4wqqXG5IJPrEUMeaM2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNgzuACrNI2XNJGD4o5alH6T5DDLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvY2ZlODBjMDItNDQ1MS0z ODUyLThmMWQtZjEwYmFmOTQyZWFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqoKaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAi0lKBlKUZns0C3lDmKkh1fzf7JjymY2LcINDSaptVjNxoOqTqV/jEj Gyj6UroCTaJ31eiguIsMTgjvn5IH5AeL06X7K+95QinhrxtyIUaDJc303CbCPjwT 92rGi7ziy5QRCANcoj5Q7+fN8H49ThVn+ajl7Lb5Q2hgUl22W6X3r8NTr32x6cOq E2EYm3o/fsXZc+1mHSTODKjSh5R4C0MKmuDj8cdfA3isQpnrP17toDyyaW8ijCl6 MTQxSEEP7z3PwHQBIX5SDfJFFCLTHW1NJJVogzdIT/a2l6ojzbKcMYDM0LeJdFOy gx4581FyDuys4gJvaD3vkJ0s9Azc2Mo= -----END CERTIFICATE-----Generated at Mon May 12 02:22:38 2025 by rpki-client