$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1fe8849b-66cd-4afe-9b0b-970eafad1175/31087add-e607-36b0-8d31-ad7c14d91fbb.roa File: 31087add-e607-36b0-8d31-ad7c14d91fbb.roa (raw, json) Hash identifier: Ri6QuRR/Qm3/e7Ms1M1hyphIUvhs66JXUN4vTEta3RY= Subject key identifier: E2:F9:A2:F2:24:47:C8:96:A6:AC:0E:B5:DD:39:44:04:54:A9:EE:E2 Certificate issuer: /CN=1fe8849b-66cd-4afe-9b0b-970eafad1175 Certificate serial: 010D0C9F43285849C4D4C5E7F4F96FCA66D5D6C0 Authority key identifier: BE:A8:20:9C:13:5E:FC:F9:EE:69:98:CE:84:4E:B8:E8:DC:83:F4:95 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1fe8849b-66cd-4afe-9b0b-970eafad1175.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1fe8849b-66cd-4afe-9b0b-970eafad1175/31087add-e607-36b0-8d31-ad7c14d91fbb.roa Signing time: Wed 07 May 2025 01:00:46 +0000 ROA not before: Wed 07 May 2025 01:00:46 +0000 ROA not after: Tue 05 Aug 2025 01:00:46 +0000 asID: 1008 IP address blocks: 170.205.0.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1fe8849b-66cd-4afe-9b0b-970eafad1175/1fe8849b-66cd-4afe-9b0b-970eafad1175.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1fe8849b-66cd-4afe-9b0b-970eafad1175/1fe8849b-66cd-4afe-9b0b-970eafad1175.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1fe8849b-66cd-4afe-9b0b-970eafad1175.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c4:d4:c5:e7:f4:f9:6f:ca:66:d5:d6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fe8849b-66cd-4afe-9b0b-970eafad1175 Validity Not Before: May 7 01:00:46 2025 GMT Not After : Aug 5 01:00:46 2025 GMT Subject: CN=738747ac-e3f3-4e89-8585-451d430b88b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:c9:cd:a1:32:66:f9:b3:32:4a:9a:ec:eb:f2: 22:3f:94:4a:67:0c:46:88:f5:91:9c:f9:32:4a:a4: e7:13:5f:c4:17:40:38:77:a0:92:38:b1:ac:cb:55: fc:8f:a5:9e:50:04:0c:b3:bf:5e:0d:93:48:93:03: e4:30:f7:50:9f:f9:d0:98:c6:fc:5f:73:4a:99:f6: 20:a3:21:1c:21:6f:fa:94:fb:b6:bc:87:11:f1:58: 3b:77:21:a8:22:a7:fd:e7:6b:61:6c:71:90:5d:84: 79:25:67:67:34:bc:a9:e5:ae:99:2d:1b:be:23:ae: 66:82:ac:2b:7c:3c:91:a5:5d:7f:6d:79:82:ff:51: ef:a2:f2:da:e8:83:40:7d:e7:b8:51:ef:93:29:92: fc:17:94:d0:b5:a7:9e:14:ad:76:b2:18:88:63:b7: ba:7a:b6:07:04:f8:54:a4:07:7d:88:b6:48:5d:fa: eb:65:0a:18:b2:2c:d1:e5:55:2b:61:26:53:0d:71: c5:d7:2f:9a:da:ab:1a:18:d3:5b:0f:3a:57:19:32: 3f:04:40:0f:fc:54:3b:5e:1a:79:a7:b5:71:9f:92: 15:db:95:4c:26:00:74:97:be:40:d2:30:72:24:15: 3f:df:41:c2:f5:e3:e2:60:c6:4e:f3:cd:16:ac:25: 47:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:F9:A2:F2:24:47:C8:96:A6:AC:0E:B5:DD:39:44:04:54:A9:EE:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1fe8849b-66cd-4afe-9b0b-970eafad1175/31087add-e607-36b0-8d31-ad7c14d91fbb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1fe8849b-66cd-4afe-9b0b-970eafad1175/1fe8849b-66cd-4afe-9b0b-970eafad1175.crl X509v3 Authority Key Identifier: keyid:BE:A8:20:9C:13:5E:FC:F9:EE:69:98:CE:84:4E:B8:E8:DC:83:F4:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1fe8849b-66cd-4afe-9b0b-970eafad1175.cer sbgp-ipAddrBlock: critical IPv4: 170.205.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:2f:42:59:f2:29:9d:6f:0a:3c:62:57:04:16:60:7d:d7:ab: 49:be:54:f9:b6:5e:61:46:ad:1d:ae:6c:06:ac:8b:e9:16:12: 3d:71:99:50:d9:59:7d:a9:a8:3d:e8:0b:f7:7f:d9:6b:2b:c7: 7b:f9:83:23:4c:b6:63:6c:77:7d:53:62:02:93:6c:45:33:d4: 4c:fb:7c:c2:ae:05:77:30:b1:1d:fc:2d:d1:fd:98:f8:5e:a3: 93:03:16:86:98:25:d8:b4:61:ac:49:21:c2:95:7c:0b:5c:87: d0:5a:cc:67:bf:90:06:72:41:44:ac:8d:2a:8a:8e:7f:60:18: ef:cc:13:a2:b2:e0:41:de:7d:f8:e7:45:13:12:1e:cf:45:fd: 33:36:47:88:fb:c1:53:8b:53:ff:ec:c4:37:10:f9:44:5c:0a: a2:ae:ed:68:1b:00:e0:75:44:38:2c:c9:09:31:d7:4e:73:19: 24:9c:e7:0a:57:3c:ae:63:42:40:78:5c:96:03:eb:9c:8f:77: 1d:8a:a2:00:a3:04:3e:02:1f:09:8c:f8:c9:44:24:d6:4f:17: c8:7d:a0:82:79:6e:dd:2d:5b:e1:ff:94:3a:85:a7:33:d5:4a: c1:5e:1a:12:c0:ad:40:6b:fd:36:c6:ad:ce:6b:45:98:31:6c: 9f:c9:e2:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnE1MXn9PlvymbV1sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZlODg0OWItNjZjZC00YWZlLTliMGItOTcwZWFmYWQx MTc1MB4XDTI1MDUwNzAxMDA0NloXDTI1MDgwNTAxMDA0NlowLzEtMCsGA1UEAxMk NzM4NzQ3YWMtZTNmMy00ZTg5LTg1ODUtNDUxZDQzMGI4OGI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4cnNoTJm+bMySprs6/IiP5RKZwxGiPWRnPky SqTnE1/EF0A4d6CSOLGsy1X8j6WeUAQMs79eDZNIkwPkMPdQn/nQmMb8X3NKmfYg oyEcIW/6lPu2vIcR8Vg7dyGoIqf952thbHGQXYR5JWdnNLyp5a6ZLRu+I65mgqwr fDyRpV1/bXmC/1HvovLa6INAfee4Ue+TKZL8F5TQtaeeFK12shiIY7e6erYHBPhU pAd9iLZIXfrrZQoYsizR5VUrYSZTDXHF1y+a2qsaGNNbDzpXGTI/BEAP/FQ7Xhp5 p7Vxn5IV25VMJgB0l75A0jByJBU/30HC9ePiYMZO880WrCVHLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOL5ovIkR8iWpqwOtd05RARUqe7iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xZmU4 ODQ5Yi02NmNkLTRhZmUtOWIwYi05NzBlYWZhZDExNzUvMzEwODdhZGQtZTYwNy0z NmIwLThkMzEtYWQ3YzE0ZDkxZmJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMWZlODg0OWItNjZjZC00YWZlLTli MGItOTcwZWFmYWQxMTc1LzFmZTg4NDliLTY2Y2QtNGFmZS05YjBiLTk3MGVhZmFk MTE3NS5jcmwwHwYDVR0jBBgwFoAUvqggnBNe/PnuaZjOhE646NyD9JUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xZmU4ODQ5Yi02NmNkLTRhZmUtOWIwYi05NzBl YWZhZDExNzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqs0AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALkvQlnyKZ1vCjxiVwQWYH3Xq0m+VPm2XmFGrR2ubAasi+kWEj1xmVDZ WX2pqD3oC/d/2Wsrx3v5gyNMtmNsd31TYgKTbEUz1Ez7fMKuBXcwsR38LdH9mPhe o5MDFoaYJdi0YaxJIcKVfAtch9BazGe/kAZyQUSsjSqKjn9gGO/ME6Ky4EHeffjn RRMSHs9F/TM2R4j7wVOLU//sxDcQ+URcCqKu7WgbAOB1RDgsyQkx105zGSSc5wpX PK5jQkB4XJYD65yPdx2KogCjBD4CHwmM+MlEJNZPF8h9oIJ5bt0tW+H/lDqFpzPV SsFeGhLArUBr/TbGrc5rRZgxbJ/J4vg= -----END CERTIFICATE-----Generated at Sun May 11 13:23:12 2025 by rpki-client