$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/1cc67015-7a49-308f-b9cb-a49114ced13b.roa File: 1cc67015-7a49-308f-b9cb-a49114ced13b.roa (raw, json) Hash identifier: 5b1PKKGp0rOhx0x4t8Q2HqDymcXvSiTUs3urZGeG0WY= Subject key identifier: 0F:F5:D9:13:FA:16:3E:AF:89:42:DD:0C:1A:08:CE:09:1B:69:F6:90 Certificate issuer: /CN=21adcbb8-b500-460f-90cb-bca0525aabcb Certificate serial: 010D0C9F432858496A199650E7C12BAD4BAC8000 Authority key identifier: 62:2B:0A:1E:7B:53:D2:E2:2B:6B:5A:FF:1D:C1:AA:ED:0A:06:69:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/1cc67015-7a49-308f-b9cb-a49114ced13b.roa Signing time: Fri 04 Apr 2025 13:00:59 +0000 ROA not before: Fri 04 Apr 2025 13:00:59 +0000 ROA not after: Thu 03 Jul 2025 13:00:59 +0000 asID: 16509 IP address blocks: 170.176.218.0/24 maxlen: 24 170.176.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/21adcbb8-b500-460f-90cb-bca0525aabcb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/21adcbb8-b500-460f-90cb-bca0525aabcb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6a:19:96:50:e7:c1:2b:ad:4b:ac:80:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21adcbb8-b500-460f-90cb-bca0525aabcb Validity Not Before: Apr 4 13:00:59 2025 GMT Not After : Jul 3 13:00:59 2025 GMT Subject: CN=fc9de50c-d3ca-4279-a868-f6facb10c04b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:75:b4:8d:57:42:e9:2d:49:bb:34:78:a4:2f: 6b:7f:75:84:0a:79:53:da:8b:dd:67:ac:5b:f3:91: b6:da:e0:92:81:08:5e:17:91:a8:19:24:2d:dd:0e: d2:be:fa:e8:11:15:3f:be:ad:0d:5a:75:80:f6:39: 06:4f:90:ce:ae:6d:cf:b8:3d:29:3c:93:6d:9a:4f: 9c:6e:b1:51:99:28:dc:b5:8b:a0:03:f9:ec:0d:1d: 5a:97:eb:c1:ea:56:ca:9c:75:60:ed:c5:7d:b7:d1: f2:45:ba:48:33:96:42:f0:2a:3a:04:1c:0f:f9:d6: b0:e3:19:35:47:a0:29:92:c2:94:c2:ff:04:95:bb: dd:d1:ea:e0:6f:84:84:db:d7:ca:14:c4:bd:ad:50: e5:30:d4:ac:c6:3e:8c:d3:5d:68:0c:ac:dc:24:d0: 0f:c9:b4:29:a3:52:10:11:c5:31:82:20:28:a3:3d: 9a:91:f8:e9:01:e1:21:f7:31:1f:44:39:cc:ab:4e: f1:31:6c:43:ff:f1:db:44:a8:fc:75:3b:bc:df:cc: 7f:7d:30:27:9d:ae:9c:ad:88:30:1f:38:e8:70:54: e2:fe:eb:02:74:ab:c3:c6:2b:bb:62:71:83:0e:1e: 19:72:5b:fd:62:61:69:bc:44:91:d4:a2:d7:ae:92: 07:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:F5:D9:13:FA:16:3E:AF:89:42:DD:0C:1A:08:CE:09:1B:69:F6:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/1cc67015-7a49-308f-b9cb-a49114ced13b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/21adcbb8-b500-460f-90cb-bca0525aabcb.crl X509v3 Authority Key Identifier: keyid:62:2B:0A:1E:7B:53:D2:E2:2B:6B:5A:FF:1D:C1:AA:ED:0A:06:69:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb.cer sbgp-ipAddrBlock: critical IPv4: 170.176.218.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:c3:c2:94:2a:62:0b:78:e9:7d:43:b8:87:42:94:bb:4f:2e: 74:a7:25:c5:cd:a5:d6:f2:36:8b:09:a6:68:ec:1a:93:9b:c9: 67:b8:29:b0:dd:d8:f9:56:de:2a:72:9a:f6:6d:d7:c2:f5:aa: 0d:0b:f6:c0:63:ae:73:37:bf:b8:a5:8a:e1:a5:1c:6e:5f:40: ca:93:95:e5:1e:ff:63:9c:33:03:ad:c6:00:9f:48:35:ac:cc: dd:ee:e7:ac:f5:f0:02:6f:36:e0:b1:24:00:a5:f6:7f:24:26: 86:05:4c:df:7f:6e:aa:4a:32:a8:f0:ef:d4:95:2a:c9:38:00: 72:3e:7c:98:c9:a4:f0:1c:95:fb:01:09:17:55:36:bf:66:47: 25:04:13:5a:d3:d3:43:06:e5:89:f5:0b:01:e9:4b:36:a4:83: 2b:2e:f7:71:f7:a7:54:3e:79:08:d1:b1:ef:dd:6f:04:31:11: b3:d6:7f:f0:f8:d2:25:8b:ba:e6:7a:95:b2:18:69:6a:c7:f1: 13:a6:f4:78:a5:31:52:20:91:b0:38:78:09:e9:32:e8:be:aa: ba:07:8d:c7:63:14:5e:18:e1:e5:52:a2:c2:be:40:e4:1d:a8: cc:29:49:96:69:a7:97:fc:37:89:e6:6a:ac:e1:7e:3b:f0:90: 7d:3c:49:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElqGZZQ58ErrUusgAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFhZGNiYjgtYjUwMC00NjBmLTkwY2ItYmNhMDUyNWFh YmNiMB4XDTI1MDQwNDEzMDA1OVoXDTI1MDcwMzEzMDA1OVowLzEtMCsGA1UEAxMk ZmM5ZGU1MGMtZDNjYS00Mjc5LWE4NjgtZjZmYWNiMTBjMDRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHW0jVdC6S1JuzR4pC9rf3WECnlT2ovdZ6xb 85G22uCSgQheF5GoGSQt3Q7SvvroERU/vq0NWnWA9jkGT5DOrm3PuD0pPJNtmk+c brFRmSjctYugA/nsDR1al+vB6lbKnHVg7cV9t9HyRbpIM5ZC8Co6BBwP+daw4xk1 R6ApksKUwv8Elbvd0ergb4SE29fKFMS9rVDlMNSsxj6M011oDKzcJNAPybQpo1IQ EcUxgiAooz2akfjpAeEh9zEfRDnMq07xMWxD//HbRKj8dTu838x/fTAnna6crYgw HzjocFTi/usCdKvDxiu7YnGDDh4Zclv9YmFpvESR1KLXrpIHTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA/12RP6Fj6viULdDBoIzgkbafaQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yMWFk Y2JiOC1iNTAwLTQ2MGYtOTBjYi1iY2EwNTI1YWFiY2IvMWNjNjcwMTUtN2E0OS0z MDhmLWI5Y2ItYTQ5MTE0Y2VkMTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjFhZGNiYjgtYjUwMC00NjBmLTkw Y2ItYmNhMDUyNWFhYmNiLzIxYWRjYmI4LWI1MDAtNDYwZi05MGNiLWJjYTA1MjVh YWJjYi5jcmwwHwYDVR0jBBgwFoAUYisKHntT0uIra1r/HcGq7QoGaT0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yMWFkY2JiOC1iNTAwLTQ2MGYtOTBjYi1iY2Ew NTI1YWFiY2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqrDaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALbDwpQqYgt46X1DuIdClLtPLnSnJcXNpdbyNosJpmjsGpObyWe4KbDd 2PlW3ipymvZt18L1qg0L9sBjrnM3v7iliuGlHG5fQMqTleUe/2OcMwOtxgCfSDWs zN3u56z18AJvNuCxJACl9n8kJoYFTN9/bqpKMqjw79SVKsk4AHI+fJjJpPAclfsB CRdVNr9mRyUEE1rT00MG5Yn1CwHpSzakgysu93H3p1Q+eQjRse/dbwQxEbPWf/D4 0iWLuuZ6lbIYaWrH8ROm9HilMVIgkbA4eAnpMui+qroHjcdjFF4Y4eVSosK+QOQd qMwpSZZpp5f8N4nmaqzhfjvwkH08SVY= -----END CERTIFICATE-----Generated at Sat Apr 5 04:38:13 2025 by rpki-client