$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/276203f1-be22-3c00-bbd8-a7d5d0a0bdfc.roa File: 276203f1-be22-3c00-bbd8-a7d5d0a0bdfc.roa (raw, json) Hash identifier: riS0TzkeJahSe9YSsrzjP4apmBh89VCDFAIYjMOyKCE= Subject key identifier: 1D:9A:EC:9F:93:AB:59:BB:54:7C:02:76:21:C5:01:A8:63:B8:C3:80 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F43285849AE7F38CFC77178A10249BFA0 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/276203f1-be22-3c00-bbd8-a7d5d0a0bdfc.roa Signing time: Tue 29 Apr 2025 01:00:47 +0000 ROA not before: Tue 29 Apr 2025 01:00:47 +0000 ROA not after: Mon 28 Jul 2025 01:00:47 +0000 asID: 8070 IP address blocks: 170.85.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ae:7f:38:cf:c7:71:78:a1:02:49:bf:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Apr 29 01:00:47 2025 GMT Not After : Jul 28 01:00:47 2025 GMT Subject: CN=2bf76aea-3a1c-4109-9437-e6b92d93eaa3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:df:60:f9:b4:3e:cc:c4:b6:eb:ad:29:bf:77: 6b:ee:ad:07:51:77:09:de:75:d7:7f:3b:09:58:2c: 3b:6d:a0:c6:0c:5e:b3:c2:8f:56:35:49:b5:7a:04: 4b:74:5e:5f:89:dc:a3:14:0c:61:b1:1e:fe:b7:29: 7a:7d:c5:0f:e8:f8:da:b1:a9:38:a7:b3:6f:ec:31: 42:89:19:30:e3:81:a9:7a:6e:06:f0:55:ad:3b:7c: a7:0a:02:c7:43:cc:ec:ec:8c:f8:68:3f:8d:b8:96: 3c:b9:02:3a:0d:c1:1b:c8:25:2d:02:3e:cd:6d:94: f7:41:c9:0c:1d:96:69:e0:c5:82:a6:72:40:9e:05: 44:dd:9c:cf:94:b3:73:2b:7e:fa:16:a7:70:27:51: a8:51:ee:2b:f9:06:1a:6d:28:02:bc:6e:ab:2b:5e: fe:c3:15:08:18:43:8e:99:a0:e6:45:7f:13:b5:34: 63:eb:e2:e3:8c:4a:60:3e:44:f4:fb:42:71:6b:5b: 24:09:92:55:a7:44:aa:5c:06:2d:eb:e2:97:b3:02: 3a:d0:e5:59:2b:3e:10:ad:b0:81:81:3c:38:00:f1: 99:2a:db:42:22:e8:30:8c:22:b5:03:31:56:46:5f: 39:40:38:94:38:a4:14:37:7c:38:38:2a:ee:db:fd: eb:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:9A:EC:9F:93:AB:59:BB:54:7C:02:76:21:C5:01:A8:63:B8:C3:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/276203f1-be22-3c00-bbd8-a7d5d0a0bdfc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.198.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:72:b5:79:9a:a5:b4:7a:a1:f0:6a:41:36:73:af:03:13:30: 34:1f:54:bc:72:65:9e:c5:ff:93:6f:d4:8c:d9:f5:82:3d:9c: 22:97:94:30:cc:ce:01:e2:6d:78:e2:e8:cc:93:29:e1:41:08: fc:4d:2b:e4:9b:aa:bd:f0:c3:75:e0:12:c1:51:dd:17:67:b2: ea:d9:9d:ab:54:16:ab:0c:53:ce:d3:a7:fe:f5:33:a1:50:90: b8:40:29:08:f4:08:11:cc:4e:c3:58:8c:fb:91:cf:21:aa:60: 36:41:ed:a4:fe:45:72:fa:06:34:1f:b3:d9:7c:dc:5d:6b:7d: ff:72:8a:f2:e7:e7:d9:95:81:a6:71:6c:26:5d:26:84:19:99: a4:2e:c0:15:b8:e7:bb:69:59:29:8b:41:6e:25:6b:2a:df:05: 4a:d6:5f:5b:80:64:77:41:12:15:73:f0:3d:8b:af:f5:26:a4: a5:3a:3c:86:c1:4e:45:fe:a7:17:1c:b8:b0:fe:67:65:58:d4: 0d:c4:2f:9d:41:58:0e:f8:33:b4:e9:dd:c2:38:2b:b5:64:99: 0c:a3:bd:f8:40:92:66:bc:a0:88:80:34:5c:c3:92:4a:1f:e4: e0:9d:9d:fb:28:3f:d2:33:78:2a:a7:9a:a2:12:06:3b:57:42: 7c:73:b6:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmufzjPx3F4oQJJv6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MDQyOTAxMDA0N1oXDTI1MDcyODAxMDA0N1owLzEtMCsGA1UEAxMk MmJmNzZhZWEtM2ExYy00MTA5LTk0MzctZTZiOTJkOTNlYWEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnt9g+bQ+zMS2660pv3dr7q0HUXcJ3nXXfzsJ WCw7baDGDF6zwo9WNUm1egRLdF5fidyjFAxhsR7+tyl6fcUP6Pjasak4p7Nv7DFC iRkw44Gpem4G8FWtO3ynCgLHQ8zs7Iz4aD+NuJY8uQI6DcEbyCUtAj7NbZT3QckM HZZp4MWCpnJAngVE3ZzPlLNzK376FqdwJ1GoUe4r+QYabSgCvG6rK17+wxUIGEOO maDmRX8TtTRj6+LjjEpgPkT0+0Jxa1skCZJVp0SqXAYt6+KXswI60OVZKz4QrbCB gTw4APGZKttCIugwjCK1AzFWRl85QDiUOKQUN3w4OCru2/3rDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB2a7J+Tq1m7VHwCdiHFAahjuMOAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvMjc2MjAzZjEtYmUyMi0z YzAwLWJiZDgtYTdkNWQwYTBiZGZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqlXGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB9ytXmapbR6ofBqQTZzrwMTMDQfVLxyZZ7F/5Nv1IzZ9YI9nCKXlDDM zgHibXji6MyTKeFBCPxNK+Sbqr3ww3XgEsFR3RdnsurZnatUFqsMU87Tp/71M6FQ kLhAKQj0CBHMTsNYjPuRzyGqYDZB7aT+RXL6BjQfs9l83F1rff9yivLn59mVgaZx bCZdJoQZmaQuwBW457tpWSmLQW4layrfBUrWX1uAZHdBEhVz8D2Lr/UmpKU6PIbB TkX+pxccuLD+Z2VY1A3EL51BWA74M7Tp3cI4K7VkmQyjvfhAkma8oIiANFzDkkof 5OCdnfsoP9IzeCqnmqISBjtXQnxztrs= -----END CERTIFICATE-----Generated at Fri May 9 04:55:40 2025 by rpki-client