$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/35f69044-5811-389f-995a-dbb1f6465b9e.roa File: 35f69044-5811-389f-995a-dbb1f6465b9e.roa (raw, json) Hash identifier: 27/PfuWcvr/2dhpLr23DDP+QdJaWEbxWRgfEZed8k+Y= Subject key identifier: D7:36:C6:B3:96:3C:7E:90:9C:D1:21:5C:08:C1:B2:09:D0:90:52:54 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F43285849AA4F558AF3D628F56CAB5A80 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/35f69044-5811-389f-995a-dbb1f6465b9e.roa Signing time: Sun 27 Apr 2025 13:01:01 +0000 ROA not before: Sun 27 Apr 2025 13:01:01 +0000 ROA not after: Sat 26 Jul 2025 13:01:01 +0000 asID: 22616 IP address blocks: 170.85.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:aa:4f:55:8a:f3:d6:28:f5:6c:ab:5a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Apr 27 13:01:01 2025 GMT Not After : Jul 26 13:01:01 2025 GMT Subject: CN=927bc03b-626a-461a-ad7d-d2d279bec6d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:90:4a:95:d2:8e:d2:fb:ae:dd:4a:66:69:fb: 6b:77:75:82:27:05:90:63:15:b0:7f:80:2a:e6:3e: 82:3d:2b:2c:ac:b3:58:a0:a8:69:b7:83:94:4d:1c: b8:dd:ea:75:5b:01:68:42:66:9d:a2:e9:b7:ef:9c: a5:42:0f:c4:5a:51:23:e3:2f:86:e5:a5:f7:10:0a: f3:84:c8:f8:9f:33:6f:9e:1d:66:92:5c:92:e6:e3: bb:db:66:72:55:4c:2f:e8:7f:04:43:c0:39:71:fa: 18:54:2e:30:88:54:65:21:47:83:e7:ba:6c:4a:b9: 56:97:f2:a1:77:ec:c0:f6:69:b8:75:76:8e:da:2b: be:ef:ee:34:e2:40:21:5c:3f:ee:80:a1:54:77:9d: 7e:da:c8:c7:1c:76:c6:c9:b8:ae:08:be:ba:78:e7: 9a:f4:a3:3d:dc:a1:71:02:66:dd:43:66:76:a9:1e: a9:de:50:cf:81:74:d7:d0:da:96:c7:a8:43:c5:b7: 6a:c8:a7:9c:3c:90:bf:10:58:a3:43:50:fa:a1:75: b9:3c:65:22:85:b3:94:98:78:8b:13:2a:c8:a3:b0: b3:f6:a9:93:61:f8:cf:18:d4:ad:d8:72:94:dc:e0: 5a:1c:62:10:4e:c2:82:c1:87:59:4e:8e:4b:92:b7: cd:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:36:C6:B3:96:3C:7E:90:9C:D1:21:5C:08:C1:B2:09:D0:90:52:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/35f69044-5811-389f-995a-dbb1f6465b9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c0:84:8a:25:4e:1c:34:6c:f9:6f:1b:8c:5f:de:47:92:80:4e: 99:54:34:66:a6:09:0c:2c:e8:6a:26:75:35:0a:df:05:cf:6a: b2:9c:be:b6:08:f2:8c:53:55:50:8f:b7:43:c9:87:9e:4d:15: b8:f1:d0:22:00:c6:23:f1:7d:31:f1:6a:62:35:21:27:d3:31: eb:65:a1:63:45:eb:46:9e:27:2a:53:79:4c:f1:a5:c4:a2:6c: 00:7a:5c:ee:36:a3:a3:55:dd:6b:2f:be:55:f6:2f:49:ee:16: 42:ab:31:3e:c9:9c:24:91:84:6d:7d:46:a8:42:92:0e:ac:b3: f4:c1:2f:b8:fb:ff:a2:a5:3e:99:78:a4:6f:7a:5c:9a:a2:30: 7a:29:79:df:7b:f9:64:ce:fa:74:41:9c:dc:54:78:1f:03:c4: f2:a1:96:95:96:a2:ba:7f:04:31:6f:97:e0:07:e5:56:4a:5b: b4:d4:09:6b:89:ff:8c:2a:c5:7d:ff:47:6c:64:1f:b4:a0:9c: 4e:ef:d6:4f:90:71:62:24:35:9a:9a:46:26:6c:46:95:0b:d2: 50:dd:f3:b6:e5:a9:b1:e5:7e:7d:d5:4d:ef:ef:ee:13:c1:97: 4d:7c:f9:56:7b:a2:b5:eb:5f:a7:b1:fb:22:da:6a:eb:8a:54: 83:b8:19:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmqT1WK89Yo9WyrWoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MDQyNzEzMDEwMVoXDTI1MDcyNjEzMDEwMVowLzEtMCsGA1UEAxMk OTI3YmMwM2ItNjI2YS00NjFhLWFkN2QtZDJkMjc5YmVjNmQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJBKldKO0vuu3Upmaftrd3WCJwWQYxWwf4Aq 5j6CPSssrLNYoKhpt4OUTRy43ep1WwFoQmadoum375ylQg/EWlEj4y+G5aX3EArz hMj4nzNvnh1mklyS5uO722ZyVUwv6H8EQ8A5cfoYVC4wiFRlIUeD57psSrlWl/Kh d+zA9mm4dXaO2iu+7+404kAhXD/ugKFUd51+2sjHHHbGybiuCL66eOea9KM93KFx AmbdQ2Z2qR6p3lDPgXTX0NqWx6hDxbdqyKecPJC/EFijQ1D6oXW5PGUihbOUmHiL EyrIo7Cz9qmTYfjPGNSt2HKU3OBaHGIQTsKCwYdZTo5LkrfNqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNc2xrOWPH6QnNEhXAjBsgnQkFJUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvMzVmNjkwNDQtNTgxMS0z ODlmLTk5NWEtZGJiMWY2NDY1YjllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqlXEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMCEiiVOHDRs+W8bjF/eR5KATplUNGamCQws6GomdTUK3wXParKcvrYI 8oxTVVCPt0PJh55NFbjx0CIAxiPxfTHxamI1ISfTMetloWNF60aeJypTeUzxpcSi bAB6XO42o6NV3WsvvlX2L0nuFkKrMT7JnCSRhG19RqhCkg6ss/TBL7j7/6KlPpl4 pG96XJqiMHoped97+WTO+nRBnNxUeB8DxPKhlpWWorp/BDFvl+AH5VZKW7TUCWuJ /4wqxX3/R2xkH7SgnE7v1k+QcWIkNZqaRiZsRpUL0lDd87blqbHlfn3VTe/v7hPB l018+VZ7orXrX6ex+yLaauuKVIO4GWY= -----END CERTIFICATE-----Generated at Mon May 5 07:09:32 2025 by rpki-client