$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/89eb4a2e-99f2-3a78-bf19-ad260014a446.roa File: 89eb4a2e-99f2-3a78-bf19-ad260014a446.roa (raw, json) Hash identifier: AqMGIaGiTQ/4TOgxmX5QBBtIEabV8EAvtR0sQkC+1Fk= Subject key identifier: F2:EC:54:78:8F:2F:9D:9B:25:F7:10:72:3E:B3:CE:85:62:55:22:F7 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F43285849B57A11C14D5239DB42BFD380 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/89eb4a2e-99f2-3a78-bf19-ad260014a446.roa Signing time: Thu 01 May 2025 13:00:58 +0000 ROA not before: Thu 01 May 2025 13:00:58 +0000 ROA not after: Wed 30 Jul 2025 13:00:58 +0000 asID: 16509 IP address blocks: 170.85.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:7a:11:c1:4d:52:39:db:42:bf:d3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: May 1 13:00:58 2025 GMT Not After : Jul 30 13:00:58 2025 GMT Subject: CN=8525b1a7-e4c9-4c35-8b80-40c4eafd9706 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:31:97:f0:14:5b:85:8d:54:c9:2c:ed:a7:ef: a8:4f:fe:c3:1b:8e:2e:50:e3:69:39:4c:4a:52:a7: 6f:17:57:c2:f5:b8:02:dd:9f:90:00:45:e2:fe:17: b4:60:50:96:75:11:d9:83:30:11:0d:4e:77:48:2f: 0a:e1:d9:12:6e:be:e8:c9:c0:62:97:0b:12:82:3e: dc:db:11:d2:ac:7e:cc:d6:84:27:e7:28:df:ae:16: e6:fc:77:0f:11:8e:6d:f2:48:48:57:89:d0:7d:e5: 36:99:dd:ef:1f:6b:31:f8:c3:6c:56:86:cb:be:3b: d8:3d:4e:37:17:71:7d:47:23:24:89:76:10:d1:c6: fc:80:4e:40:b8:8d:21:94:f5:81:d2:2d:dd:03:36: b5:5e:34:e2:5b:97:b8:a5:8c:6e:09:83:21:f9:40: 85:f2:cc:12:b0:f1:8b:12:1b:3a:be:af:1a:21:3e: 72:df:8c:4c:f4:d3:74:31:8f:e1:f1:2b:20:9f:1a: 90:fb:39:69:98:53:4b:b5:8d:7f:81:53:51:79:bc: cf:00:ff:d5:70:c3:2f:f3:a7:03:57:89:77:eb:69: 0e:b3:6c:65:57:2d:74:b9:01:f4:44:64:c0:22:f0: f6:53:0a:d4:43:0a:04:62:b6:e0:c4:50:db:ed:c2: 57:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:EC:54:78:8F:2F:9D:9B:25:F7:10:72:3E:B3:CE:85:62:55:22:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/89eb4a2e-99f2-3a78-bf19-ad260014a446.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption be:c6:b0:9a:4d:06:9f:45:b9:08:2e:58:2b:af:7e:4b:3b:b0: 79:89:ea:5d:c1:c9:4d:fe:43:ca:6c:f1:fc:cd:d2:cf:19:0a: 06:2b:23:93:cf:cc:d4:c7:38:f5:20:6f:4f:77:ab:d0:45:f1: 77:61:33:c4:0b:7a:65:53:d1:0d:2b:1d:87:51:be:58:03:8c: 8c:8f:a5:fd:23:62:c2:4d:d8:e7:3c:a3:c8:bb:81:f4:e2:13: fe:ec:b7:03:d2:80:4f:ee:e0:99:4d:85:d2:05:c7:2e:75:56: 79:4e:0f:37:72:7a:16:34:b0:1c:6a:a0:34:ad:ba:32:56:26: e7:00:2b:6e:12:5e:25:dd:e9:47:03:9c:41:d7:6e:ed:7b:7c: 61:b6:8d:f8:b3:60:ce:31:04:5e:19:da:c1:c2:2c:a5:48:bc: c8:2f:da:34:11:97:55:ed:78:a4:37:09:7b:97:0e:62:6d:24: 68:5c:ca:78:23:83:af:65:41:6d:4e:a8:16:5d:20:ad:91:67: 16:3b:9c:ae:53:f2:52:c8:17:e6:52:8a:54:2b:3e:c6:ec:90: a3:e0:c2:11:24:a4:65:16:11:2b:58:57:97:74:be:1a:bc:ca: 88:95:e3:82:4e:5d:dc:ed:2a:10:21:2b:f6:02:70:d8:f1:80: 8c:42:c6:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1ehHBTVI520K/04AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MDUwMTEzMDA1OFoXDTI1MDczMDEzMDA1OFowLzEtMCsGA1UEAxMk ODUyNWIxYTctZTRjOS00YzM1LThiODAtNDBjNGVhZmQ5NzA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTGX8BRbhY1UySztp++oT/7DG44uUONpOUxK UqdvF1fC9bgC3Z+QAEXi/he0YFCWdRHZgzARDU53SC8K4dkSbr7oycBilwsSgj7c 2xHSrH7M1oQn5yjfrhbm/HcPEY5t8khIV4nQfeU2md3vH2sx+MNsVobLvjvYPU43 F3F9RyMkiXYQ0cb8gE5AuI0hlPWB0i3dAza1XjTiW5e4pYxuCYMh+UCF8swSsPGL Ehs6vq8aIT5y34xM9NN0MY/h8SsgnxqQ+zlpmFNLtY1/gVNRebzPAP/VcMMv86cD V4l362kOs2xlVy10uQH0RGTAIvD2UwrUQwoEYrbgxFDb7cJXpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPLsVHiPL52bJfcQcj6zzoViVSL3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvODllYjRhMmUtOTlmMi0z YTc4LWJmMTktYWQyNjAwMTRhNDQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqlV5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL7GsJpNBp9FuQguWCuvfks7sHmJ6l3ByU3+Q8ps8fzN0s8ZCgYrI5PP zNTHOPUgb093q9BF8XdhM8QLemVT0Q0rHYdRvlgDjIyPpf0jYsJN2Oc8o8i7gfTi E/7stwPSgE/u4JlNhdIFxy51VnlODzdyehY0sBxqoDStujJWJucAK24SXiXd6UcD nEHXbu17fGG2jfizYM4xBF4Z2sHCLKVIvMgv2jQRl1XteKQ3CXuXDmJtJGhcyngj g69lQW1OqBZdIK2RZxY7nK5T8lLIF+ZSilQrPsbskKPgwhEkpGUWEStYV5d0vhq8 yoiV44JOXdztKhAhK/YCcNjxgIxCxrM= -----END CERTIFICATE-----Generated at Mon May 5 05:03:49 2025 by rpki-client