$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/05198722-f522-345f-a506-ef6cca90a62d.roa File: 05198722-f522-345f-a506-ef6cca90a62d.roa (raw, json) Hash identifier: PlSDw42+n35QS1f37sPEA+ddVbw0BEUrWtghYNLs+ac= Subject key identifier: 5F:38:51:E5:10:A6:BF:F4:74:FA:AD:46:2F:EB:41:A5:15:96:33:2B Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F43285849AE3222A69DE20C8B090BF380 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/05198722-f522-345f-a506-ef6cca90a62d.roa Signing time: Mon 28 Apr 2025 22:25:30 +0000 ROA not before: Mon 28 Apr 2025 22:25:30 +0000 ROA not after: Sun 27 Jul 2025 22:25:30 +0000 asID: 8987 IP address blocks: 170.85.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ae:32:22:a6:9d:e2:0c:8b:09:0b:f3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Apr 28 22:25:30 2025 GMT Not After : Jul 27 22:25:30 2025 GMT Subject: CN=93e1a6c6-a4ee-47d4-a9f2-7ce7fc67220b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:e3:b8:5b:0c:86:6e:a3:8a:82:22:4c:2c:0b: 4d:d5:f1:a1:ab:72:48:21:a3:b2:f3:7d:a3:42:32: e3:f3:8b:ff:6c:43:0e:7c:f9:c0:b4:55:59:df:18: 7e:f4:3f:b3:f3:10:f0:d4:51:d5:1a:46:73:54:7a: e7:43:52:86:c3:1e:94:3f:85:dc:74:fc:55:24:6b: ad:4b:3c:02:26:95:9c:34:a5:24:90:87:28:9e:23: c6:1d:15:ac:77:35:33:00:1a:4a:36:f0:1e:97:d8: 75:a3:12:d1:18:d6:75:26:4b:44:6f:b0:b2:6f:17: c3:fa:66:c0:7a:e0:57:15:ba:49:db:ef:f2:30:0c: 32:f7:76:b1:69:07:7e:82:74:2f:28:0c:66:eb:16: d3:0c:0b:71:66:7c:03:cb:b3:6b:8c:bd:c6:46:69: ed:fa:3f:85:38:99:31:15:38:f4:02:89:d0:66:b5: 9c:27:da:7c:75:ec:88:57:39:ef:92:1d:c3:b7:9e: ca:0c:2a:30:b9:9e:c7:25:c3:fb:11:53:3c:85:ce: 58:f3:ba:06:81:e5:8c:c5:86:cf:6d:3b:f9:49:a6: f4:d2:50:66:bc:e3:64:e2:42:46:17:d1:c6:ee:67: 04:24:86:6a:7f:36:49:f0:07:f2:ca:e9:23:5b:05: d8:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:38:51:E5:10:A6:BF:F4:74:FA:AD:46:2F:EB:41:A5:15:96:33:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/05198722-f522-345f-a506-ef6cca90a62d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.224.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:32:75:21:61:fd:aa:41:4d:57:b2:7a:32:40:0a:93:2f:1c: 45:f2:eb:cc:34:b6:ca:e3:a0:5b:3b:be:26:99:2f:54:bb:95: f0:3d:1a:50:cd:58:b5:7a:cf:c3:b9:25:35:0d:f2:95:28:ee: 12:7f:11:80:dc:6b:5f:de:68:e6:12:7e:4e:3d:3c:d3:a0:42: c7:4d:d8:f8:54:ad:84:7d:0f:6a:1f:a4:a9:82:b2:05:8e:ed: e5:45:85:7c:48:9e:12:79:0b:e6:ac:a3:85:37:38:81:d9:83: 63:bd:5a:73:ce:80:c2:89:45:75:71:32:d3:ad:81:4b:46:f0: d2:8a:7f:35:b9:ae:bc:ea:3c:38:e3:2e:34:1c:87:da:8d:c8: 85:4f:d3:ca:68:d0:32:89:28:6e:09:b5:db:f8:14:26:35:5a: 97:ac:4d:b5:1f:05:e8:b5:16:d5:a0:f8:c1:ca:aa:58:bd:21: 89:44:19:38:aa:31:08:59:b4:cb:ba:6b:8c:39:34:b6:c9:2b: 43:87:0f:b8:c0:49:d0:f0:d1:4d:70:75:ad:4b:1f:59:f4:eb: 77:6c:cc:7a:22:cf:a9:c6:ec:34:ea:5f:80:e9:d7:aa:30:ee: e6:3b:6a:7a:52:1c:30:83:08:66:56:20:ad:c9:a2:41:6d:f3: e5:8f:70:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmuMiKmneIMiwkL84AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MDQyODIyMjUzMFoXDTI1MDcyNzIyMjUzMFowLzEtMCsGA1UEAxMk OTNlMWE2YzYtYTRlZS00N2Q0LWE5ZjItN2NlN2ZjNjcyMjBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoeO4WwyGbqOKgiJMLAtN1fGhq3JIIaOy832j QjLj84v/bEMOfPnAtFVZ3xh+9D+z8xDw1FHVGkZzVHrnQ1KGwx6UP4XcdPxVJGut SzwCJpWcNKUkkIconiPGHRWsdzUzABpKNvAel9h1oxLRGNZ1JktEb7CybxfD+mbA euBXFbpJ2+/yMAwy93axaQd+gnQvKAxm6xbTDAtxZnwDy7NrjL3GRmnt+j+FOJkx FTj0AonQZrWcJ9p8deyIVznvkh3Dt57KDCowuZ7HJcP7EVM8hc5Y87oGgeWMxYbP bTv5Sab00lBmvONk4kJGF9HG7mcEJIZqfzZJ8AfyyukjWwXYeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF84UeUQpr/0dPqtRi/rQaUVljMrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvMDUxOTg3MjItZjUyMi0z NDVmLWE1MDYtZWY2Y2NhOTBhNjJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqlXgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADsydSFh/apBTVeyejJACpMvHEXy68w0tsrjoFs7viaZL1S7lfA9GlDN WLV6z8O5JTUN8pUo7hJ/EYDca1/eaOYSfk49PNOgQsdN2PhUrYR9D2ofpKmCsgWO 7eVFhXxInhJ5C+aso4U3OIHZg2O9WnPOgMKJRXVxMtOtgUtG8NKKfzW5rrzqPDjj LjQch9qNyIVP08po0DKJKG4Jtdv4FCY1WpesTbUfBei1FtWg+MHKqli9IYlEGTiq MQhZtMu6a4w5NLbJK0OHD7jASdDw0U1wda1LH1n063dszHoiz6nG7DTqX4Dp16ow 7uY7anpSHDCDCGZWIK3JokFt8+WPcMc= -----END CERTIFICATE-----Generated at Sat May 10 19:10:31 2025 by rpki-client