$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/d097d779-d0f5-3dfb-b429-f39981788e91.roa File: d097d779-d0f5-3dfb-b429-f39981788e91.roa (raw, json) Hash identifier: 0xUlXSh70zHVa7zSVpQDa5a09rKPFXSBPJGCwcCJ1a0= Subject key identifier: 30:0D:C4:9D:A1:76:27:7C:E0:76:63:31:84:B2:0A:67:BC:9A:D3:AA Certificate issuer: /CN=21adcbb8-b500-460f-90cb-bca0525aabcb Certificate serial: 010D0C9F43285848E59BC19D33610B78FFE9E0D0 Authority key identifier: 62:2B:0A:1E:7B:53:D2:E2:2B:6B:5A:FF:1D:C1:AA:ED:0A:06:69:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/d097d779-d0f5-3dfb-b429-f39981788e91.roa Signing time: Sun 16 Feb 2025 02:00:40 +0000 ROA not before: Sun 16 Feb 2025 02:00:40 +0000 ROA not after: Sat 17 May 2025 01:00:40 +0000 asID: 16509 IP address blocks: 170.176.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/21adcbb8-b500-460f-90cb-bca0525aabcb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/21adcbb8-b500-460f-90cb-bca0525aabcb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e5:9b:c1:9d:33:61:0b:78:ff:e9:e0:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21adcbb8-b500-460f-90cb-bca0525aabcb Validity Not Before: Feb 16 02:00:40 2025 GMT Not After : May 17 01:00:40 2025 GMT Subject: CN=fab61950-4de7-4dce-a02d-569a161dbf81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a8:ce:b2:54:bb:27:de:97:e6:a7:ed:ac:c8: a3:d6:03:d1:5f:4d:4b:14:96:91:c3:65:fb:1f:e3: b7:15:35:d3:e1:d7:71:e9:97:4c:71:b2:0e:64:bd: 50:ee:ff:3d:1c:15:1d:8b:9e:ad:11:07:f3:50:c6: a0:b6:a5:5e:d0:66:76:ff:ba:df:a2:1d:f0:89:54: 7c:08:dc:17:1d:71:79:8e:67:8e:b8:21:45:9d:44: a6:42:7f:28:6e:64:6d:0c:53:ee:95:aa:5b:d4:76: c6:39:fd:d7:48:54:3b:e9:51:cc:11:6d:f3:4a:d4: 42:b4:5c:91:87:50:c7:48:38:7e:85:38:20:39:bc: bb:84:ce:db:8a:10:84:68:30:ae:8b:35:95:b4:4e: 8f:04:a8:08:61:13:7b:7f:8c:6d:9d:94:b3:4f:8a: cd:80:bd:ab:c7:db:0d:53:29:44:c0:85:96:59:d7: 9f:29:93:d4:bf:45:d8:31:41:06:91:88:b9:b5:d2: fd:9d:04:8b:3a:fd:62:e8:a0:4e:18:8c:d2:47:d1: b4:a2:3e:88:24:a7:7a:a2:fc:04:bc:74:9d:a6:cb: b4:b1:c7:e2:78:b4:07:4f:ef:3a:e9:1e:a6:5d:23: 76:ec:e2:62:fa:7c:e1:e4:0c:5d:cd:9e:81:c2:49: 7d:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:0D:C4:9D:A1:76:27:7C:E0:76:63:31:84:B2:0A:67:BC:9A:D3:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/d097d779-d0f5-3dfb-b429-f39981788e91.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/21adcbb8-b500-460f-90cb-bca0525aabcb.crl X509v3 Authority Key Identifier: keyid:62:2B:0A:1E:7B:53:D2:E2:2B:6B:5A:FF:1D:C1:AA:ED:0A:06:69:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb.cer sbgp-ipAddrBlock: critical IPv4: 170.176.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ca:c7:9a:b9:c3:bd:50:19:a8:a8:74:6a:a0:96:08:9b:5e:42: 76:47:1b:3c:63:00:49:ac:dd:09:31:c2:52:c9:14:a8:56:68: db:31:d8:d9:15:5d:41:df:a4:95:ac:70:99:54:ea:f7:8f:ba: 3b:c1:c1:03:02:6c:a4:a1:12:42:f8:fc:fa:56:3e:0e:d1:d3: 6a:b6:15:08:b0:2e:7f:cc:72:a9:dc:2d:42:43:65:1f:39:79: 8d:5d:9c:09:09:4b:62:90:d9:a0:af:ac:a9:96:f1:af:bd:4f: a1:52:fd:f1:26:20:96:40:35:2c:2f:2b:bd:05:9a:11:a7:9e: 73:71:87:26:ce:ca:5a:47:c1:65:8a:eb:2e:86:72:4f:b6:48: 3e:af:c3:36:7d:39:d2:40:86:2a:a5:c5:46:44:4b:70:23:b0: da:ec:a2:69:16:e1:a0:4f:c3:4d:93:19:d8:3f:2e:a0:54:a4: 6c:fb:69:8b:b2:3f:3d:0a:72:23:f3:e3:3b:ab:bb:f0:0c:19: 2c:8e:ae:00:99:f5:fd:06:e6:fa:47:6b:a5:93:3a:7b:e7:c5: 99:dd:56:03:6f:79:50:e3:5e:24:32:41:82:ba:34:e6:56:f3: 69:26:4a:25:51:26:54:2d:da:9d:95:d5:b6:13:38:ec:93:50: c7:37:0f:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjlm8GdM2ELeP/p4NAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFhZGNiYjgtYjUwMC00NjBmLTkwY2ItYmNhMDUyNWFh YmNiMB4XDTI1MDIxNjAyMDA0MFoXDTI1MDUxNzAxMDA0MFowLzEtMCsGA1UEAxMk ZmFiNjE5NTAtNGRlNy00ZGNlLWEwMmQtNTY5YTE2MWRiZjgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqjOslS7J96X5qftrMij1gPRX01LFJaRw2X7 H+O3FTXT4ddx6ZdMcbIOZL1Q7v89HBUdi56tEQfzUMagtqVe0GZ2/7rfoh3wiVR8 CNwXHXF5jmeOuCFFnUSmQn8obmRtDFPulapb1HbGOf3XSFQ76VHMEW3zStRCtFyR h1DHSDh+hTggOby7hM7bihCEaDCuizWVtE6PBKgIYRN7f4xtnZSzT4rNgL2rx9sN UylEwIWWWdefKZPUv0XYMUEGkYi5tdL9nQSLOv1i6KBOGIzSR9G0oj6IJKd6ovwE vHSdpsu0scfieLQHT+866R6mXSN27OJi+nzh5AxdzZ6Bwkl9rQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDANxJ2hdid84HZjMYSyCme8mtOqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yMWFk Y2JiOC1iNTAwLTQ2MGYtOTBjYi1iY2EwNTI1YWFiY2IvZDA5N2Q3NzktZDBmNS0z ZGZiLWI0MjktZjM5OTgxNzg4ZTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjFhZGNiYjgtYjUwMC00NjBmLTkw Y2ItYmNhMDUyNWFhYmNiLzIxYWRjYmI4LWI1MDAtNDYwZi05MGNiLWJjYTA1MjVh YWJjYi5jcmwwHwYDVR0jBBgwFoAUYisKHntT0uIra1r/HcGq7QoGaT0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yMWFkY2JiOC1iNTAwLTQ2MGYtOTBjYi1iY2Ew NTI1YWFiY2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqrDIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMrHmrnDvVAZqKh0aqCWCJteQnZHGzxjAEms3QkxwlLJFKhWaNsx2NkV XUHfpJWscJlU6vePujvBwQMCbKShEkL4/PpWPg7R02q2FQiwLn/McqncLUJDZR85 eY1dnAkJS2KQ2aCvrKmW8a+9T6FS/fEmIJZANSwvK70FmhGnnnNxhybOylpHwWWK 6y6Gck+2SD6vwzZ9OdJAhiqlxUZES3AjsNrsomkW4aBPw02TGdg/LqBUpGz7aYuy Pz0KciPz4zuru/AMGSyOrgCZ9f0G5vpHa6WTOnvnxZndVgNveVDjXiQyQYK6NOZW 82kmSiVRJlQt2p2V1bYTOOyTUMc3D4Q= -----END CERTIFICATE-----Generated at Sat Apr 5 04:39:18 2025 by rpki-client