$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/d8a8de41-f511-3076-8f1b-f9b1ad4fec20.roa File: d8a8de41-f511-3076-8f1b-f9b1ad4fec20.roa (raw, json) Hash identifier: 2QrN2EShSCFb8tLAaiaGy4+mU77c/hFInI/f3kGWgyA= Subject key identifier: EF:58:A3:F8:65:B4:07:EF:8E:43:33:52:4D:F8:45:26:76:A4:76:E6 Certificate issuer: /CN=dc455e58-6189-4f28-b803-61a965a21c65 Certificate serial: 010D0C9F4328584944694C0D4D8FD194F7026400 Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/d8a8de41-f511-3076-8f1b-f9b1ad4fec20.roa Signing time: Sat 22 Mar 2025 01:00:40 +0000 ROA not before: Sat 22 Mar 2025 01:00:40 +0000 ROA not after: Fri 20 Jun 2025 01:00:40 +0000 asID: 14618 IP address blocks: 170.114.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 19 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:44:69:4c:0d:4d:8f:d1:94:f7:02:64:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65 Validity Not Before: Mar 22 01:00:40 2025 GMT Not After : Jun 20 01:00:40 2025 GMT Subject: CN=f27493fb-534d-4979-b36d-20b09ffc919b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:49:a8:10:16:d5:ed:42:9e:60:dd:9f:9d:33: cc:b6:a2:30:37:a5:50:38:84:7a:6f:b1:ab:62:9d: 67:f5:cc:f0:67:85:1e:8f:0b:3f:c7:27:35:77:23: b6:90:1e:15:5d:61:ab:18:ae:b9:d8:36:e4:66:71: 56:81:a9:5a:73:36:b2:93:6a:b7:70:85:7f:6c:5b: 26:63:f5:5e:d1:5a:d1:80:0a:ba:5f:3b:6a:e1:7c: a6:87:29:ea:f1:62:96:48:95:86:77:c6:4f:cd:fe: eb:04:ac:fc:81:a8:b2:0f:32:51:6f:d0:96:e6:23: d7:3b:35:90:08:5d:c3:9c:ec:ba:79:12:db:3b:ab: be:23:25:c7:f2:13:2e:61:cd:d0:ef:90:33:1f:d5: 2c:13:02:a2:41:aa:01:4b:90:f3:62:ec:a0:52:7a: 35:a6:20:d9:18:56:a4:c2:27:64:20:c2:96:1d:a7: 02:60:5f:9f:46:f0:eb:a9:0f:7c:b8:9b:d1:90:f3: 90:35:39:b2:6e:fb:3a:ab:d3:99:a6:49:00:85:6d: da:90:e9:6d:82:66:f6:b5:df:93:0e:1e:7b:c9:f8: 0f:ad:28:0a:a9:4b:d6:5e:af:92:48:d1:32:b8:c0: cb:7c:d2:16:e7:10:a4:6c:02:63:5d:bb:ed:09:b6: 75:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:58:A3:F8:65:B4:07:EF:8E:43:33:52:4D:F8:45:26:76:A4:76:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/d8a8de41-f511-3076-8f1b-f9b1ad4fec20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl X509v3 Authority Key Identifier: keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer sbgp-ipAddrBlock: critical IPv4: 170.114.84.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:60:c5:9b:d1:d9:f8:93:58:21:16:54:14:1b:68:60:ca:a4: af:00:9c:05:6d:a5:7d:70:cc:f7:b4:aa:2f:f6:bd:f9:c9:4e: 11:b8:94:80:ff:94:84:53:b1:80:ef:2e:23:ea:47:c4:a7:94: 6e:fc:2f:88:9b:d4:31:8c:b7:dd:26:d6:89:ec:29:8d:1e:07: 1e:90:bc:50:28:d8:92:6b:a5:82:f3:54:c7:de:7a:83:f1:c1: b4:62:c4:4f:8d:ec:60:df:25:69:fb:06:db:c1:94:7e:35:c4: af:d9:5f:f2:ce:35:1b:61:ba:1f:eb:7c:fe:7c:f1:1d:2f:48: 9c:71:86:7b:2b:9e:02:b6:72:1f:89:b2:45:ae:a2:c3:63:4b: 55:e9:ea:4e:aa:a0:db:ce:f3:81:c8:44:b9:7f:d3:db:a8:5a: 41:ba:32:6c:c7:01:a2:f1:25:37:45:5b:53:e7:ea:4f:9b:a0: 48:28:ff:48:9a:4d:06:98:6d:d9:ac:d9:45:86:85:76:3b:f6: 85:7f:82:98:a4:04:33:5f:f7:f3:04:95:52:15:06:81:6d:90: 6e:61:05:b4:3c:a8:1b:ae:fd:09:69:3a:8e:76:33:0e:4c:bc: 43:c2:de:9d:b2:69:70:4a:ee:68:10:81:d3:2a:f2:d3:9d:16: 2f:1c:0a:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElEaUwNTY/RlPcCZAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx YzY1MB4XDTI1MDMyMjAxMDA0MFoXDTI1MDYyMDAxMDA0MFowLzEtMCsGA1UEAxMk ZjI3NDkzZmItNTM0ZC00OTc5LWIzNmQtMjBiMDlmZmM5MTliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA30moEBbV7UKeYN2fnTPMtqIwN6VQOIR6b7Gr Yp1n9czwZ4Uejws/xyc1dyO2kB4VXWGrGK652DbkZnFWgalaczayk2q3cIV/bFsm Y/Ve0VrRgAq6Xztq4Xymhynq8WKWSJWGd8ZPzf7rBKz8gaiyDzJRb9CW5iPXOzWQ CF3DnOy6eRLbO6u+IyXH8hMuYc3Q75AzH9UsEwKiQaoBS5DzYuygUno1piDZGFak widkIMKWHacCYF+fRvDrqQ98uJvRkPOQNTmybvs6q9OZpkkAhW3akOltgmb2td+T Dh57yfgPrSgKqUvWXq+SSNEyuMDLfNIW5xCkbAJjXbvtCbZ1awIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO9Yo/hltAfvjkMzUk34RSZ2pHbmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1 NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvZDhhOGRlNDEtZjUxMS0z MDc2LThmMWItZjliMWFkNGZlYzIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4 MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5 NjVhMjFjNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqnJUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABNgxZvR2fiTWCEWVBQbaGDKpK8AnAVtpX1wzPe0qi/2vfnJThG4lID/ lIRTsYDvLiPqR8SnlG78L4ib1DGMt90m1onsKY0eBx6QvFAo2JJrpYLzVMfeeoPx wbRixE+N7GDfJWn7BtvBlH41xK/ZX/LONRthuh/rfP588R0vSJxxhnsrngK2ch+J skWuosNjS1Xp6k6qoNvO84HIRLl/09uoWkG6MmzHAaLxJTdFW1Pn6k+boEgo/0ia TQaYbdms2UWGhXY79oV/gpikBDNf9/MElVIVBoFtkG5hBbQ8qBuu/QlpOo52Mw5M vEPC3p2yaXBK7mgQgdMq8tOdFi8cCrk= -----END CERTIFICATE-----Generated at Thu Apr 17 22:41:59 2025 by rpki-client