$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/86d2125a-8d57-3d4a-913f-a10e84f8dbae.roa File: 86d2125a-8d57-3d4a-913f-a10e84f8dbae.roa (raw, json) Hash identifier: cMiNwnFUBvqFprfOaCDXgTrygWhxdFeKvgb1BL3mQIo= Subject key identifier: A7:5E:AF:94:86:01:67:B8:CA:CB:08:33:67:EF:97:13:88:EA:E2:23 Certificate issuer: /CN=be3ff10d-9ac5-46a9-8eb4-823027607ca1 Certificate serial: 010D0C9F4328584953C40731ECBD0D28E9EAEAE0 Authority key identifier: C5:FD:6F:CD:D2:74:9A:00:05:9F:45:D5:49:E1:47:AE:5D:95:65:C6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/86d2125a-8d57-3d4a-913f-a10e84f8dbae.roa Signing time: Thu 27 Mar 2025 13:00:52 +0000 ROA not before: Thu 27 Mar 2025 13:00:52 +0000 ROA not after: Wed 25 Jun 2025 13:00:52 +0000 asID: 23241 IP address blocks: 170.89.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/be3ff10d-9ac5-46a9-8eb4-823027607ca1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/be3ff10d-9ac5-46a9-8eb4-823027607ca1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:53:c4:07:31:ec:bd:0d:28:e9:ea:ea:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be3ff10d-9ac5-46a9-8eb4-823027607ca1 Validity Not Before: Mar 27 13:00:52 2025 GMT Not After : Jun 25 13:00:52 2025 GMT Subject: CN=87f07463-2131-4b5b-b6ad-45b8ee00be4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:d6:f8:ef:b6:7e:d6:36:26:72:31:93:1c:aa: ce:42:de:52:02:b3:95:c1:ce:91:66:36:60:29:4e: 34:4c:d6:ac:fb:63:99:a1:a0:80:26:17:5d:86:3d: 81:aa:1c:0b:7b:17:f6:04:2d:ef:94:a0:91:c4:8f: 51:46:00:6d:1b:3c:b8:17:c9:65:21:88:c6:b9:1a: 21:d9:a5:6e:c8:77:11:48:05:12:de:9c:f1:b8:b8: fd:89:e2:5b:63:f0:23:4d:0b:ae:ed:e4:96:c8:a1: ab:71:a9:a6:8d:61:23:a3:c8:42:0d:69:6e:5f:c7: 32:a6:33:df:f3:6a:8a:fa:64:de:c7:5b:7a:3f:5a: d5:4e:b7:73:c1:22:4e:c1:96:78:f2:ba:bf:eb:0a: 59:1a:6c:cc:70:11:a2:b1:db:02:f5:a9:21:47:96: d4:c5:d2:8c:0c:cc:ff:a2:d6:9d:09:28:bc:b6:cf: 95:6f:03:cc:e5:3b:e9:c4:ac:e1:6a:1e:1b:03:13: d4:8e:f7:2a:9f:b4:26:36:01:6f:8b:40:46:19:56: e2:48:f5:28:c9:bb:76:3d:ab:66:35:2e:15:fe:82: ee:a1:c7:7c:e9:50:6d:91:28:21:db:64:67:46:5f: 9e:aa:b9:59:75:ce:e9:62:a2:0b:cd:ee:d4:f0:88: 69:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:5E:AF:94:86:01:67:B8:CA:CB:08:33:67:EF:97:13:88:EA:E2:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/86d2125a-8d57-3d4a-913f-a10e84f8dbae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/be3ff10d-9ac5-46a9-8eb4-823027607ca1.crl X509v3 Authority Key Identifier: keyid:C5:FD:6F:CD:D2:74:9A:00:05:9F:45:D5:49:E1:47:AE:5D:95:65:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1.cer sbgp-ipAddrBlock: critical IPv4: 170.89.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:99:72:9e:c4:7d:f3:38:f8:cb:56:5c:1a:c1:4b:34:79:53: dc:f7:4c:fb:47:57:e3:9e:1a:0d:4f:fe:20:d5:21:be:d5:51: 38:b6:2c:25:9c:a4:44:80:69:80:85:0c:11:b5:00:19:06:2f: 42:e3:57:c8:e5:90:f0:bc:9c:ba:3f:a8:25:67:51:a3:af:59: d2:8e:a4:53:de:89:25:ee:fc:fa:b6:75:03:b3:2c:61:01:46: 55:82:d6:62:7c:c5:bb:9d:27:2c:ba:e3:19:f4:6b:df:21:72: 46:b1:90:22:03:32:6f:26:7d:b6:f4:9b:b7:5b:6c:74:37:aa: d2:a8:82:79:75:b3:a0:07:ca:c8:f5:4b:1e:e2:1d:0e:1a:f6: f6:87:33:d3:26:05:fa:f3:fa:3a:17:98:63:da:5d:56:15:d3: dd:66:0d:5f:75:6b:ed:88:80:4d:21:e2:96:74:c3:47:5d:cd: 50:91:29:1b:97:d4:c2:c5:8f:91:25:82:27:ab:93:d0:c3:5a: 9b:1d:08:93:e3:a1:f0:01:35:4b:c7:e5:a8:98:40:48:14:f5: 16:2c:c7:d4:e8:c6:52:7b:5c:58:00:bb:fc:05:fa:bd:fe:a0: 6d:22:19:c3:a2:7a:bc:11:c7:0b:74:c4:9b:f5:a1:ee:d7:8b: aa:b9:ae:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElTxAcx7L0NKOnq6uAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmUzZmYxMGQtOWFjNS00NmE5LThlYjQtODIzMDI3NjA3 Y2ExMB4XDTI1MDMyNzEzMDA1MloXDTI1MDYyNTEzMDA1MlowLzEtMCsGA1UEAxMk ODdmMDc0NjMtMjEzMS00YjViLWI2YWQtNDViOGVlMDBiZTRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA99b477Z+1jYmcjGTHKrOQt5SArOVwc6RZjZg KU40TNas+2OZoaCAJhddhj2BqhwLexf2BC3vlKCRxI9RRgBtGzy4F8llIYjGuRoh 2aVuyHcRSAUS3pzxuLj9ieJbY/AjTQuu7eSWyKGrcammjWEjo8hCDWluX8cypjPf 82qK+mTex1t6P1rVTrdzwSJOwZZ48rq/6wpZGmzMcBGisdsC9akhR5bUxdKMDMz/ otadCSi8ts+VbwPM5TvpxKzhah4bAxPUjvcqn7QmNgFvi0BGGVbiSPUoybt2Patm NS4V/oLuocd86VBtkSgh22RnRl+eqrlZdc7pYqILze7U8IhpFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKder5SGAWe4yssIM2fvlxOI6uIjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iZTNm ZjEwZC05YWM1LTQ2YTktOGViNC04MjMwMjc2MDdjYTEvODZkMjEyNWEtOGQ1Ny0z ZDRhLTkxM2YtYTEwZTg0ZjhkYmFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYmUzZmYxMGQtOWFjNS00NmE5LThl YjQtODIzMDI3NjA3Y2ExL2JlM2ZmMTBkLTlhYzUtNDZhOS04ZWI0LTgyMzAyNzYw N2NhMS5jcmwwHwYDVR0jBBgwFoAUxf1vzdJ0mgAFn0XVSeFHrl2VZcYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iZTNmZjEwZC05YWM1LTQ2YTktOGViNC04MjMw Mjc2MDdjYTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGqlkAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAqZcp7EffM4+MtWXBrBSzR5U9z3TPtHV+OeGg1P/iDVIb7VUTi2LCWc pESAaYCFDBG1ABkGL0LjV8jlkPC8nLo/qCVnUaOvWdKOpFPeiSXu/Pq2dQOzLGEB RlWC1mJ8xbudJyy64xn0a98hckaxkCIDMm8mfbb0m7dbbHQ3qtKognl1s6AHysj1 Sx7iHQ4a9vaHM9MmBfrz+joXmGPaXVYV091mDV91a+2IgE0h4pZ0w0ddzVCRKRuX 1MLFj5Elgierk9DDWpsdCJPjofABNUvH5aiYQEgU9RYsx9ToxlJ7XFgAu/wF+r3+ oG0iGcOierwRxwt0xJv1oe7Xi6q5rpw= -----END CERTIFICATE-----Generated at Sat Apr 12 14:54:10 2025 by rpki-client