$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/970fb05c-2346-393b-a7b7-10ed7f9bd285.roa File: 970fb05c-2346-393b-a7b7-10ed7f9bd285.roa (raw, json) Hash identifier: ltrCOT9niY2Hx5w6FdtJVvukX7CkmoTHR+AxNndNQbI= Subject key identifier: 3B:AA:8E:48:E9:58:C6:22:F2:92:C3:A9:33:16:F0:00:5F:C9:F3:40 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F43285849B57A198649F3C3DBEEFFD900 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/970fb05c-2346-393b-a7b7-10ed7f9bd285.roa Signing time: Thu 01 May 2025 13:00:58 +0000 ROA not before: Thu 01 May 2025 13:00:58 +0000 ROA not after: Wed 30 Jul 2025 13:00:58 +0000 asID: 16509 IP address blocks: 170.85.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:7a:19:86:49:f3:c3:db:ee:ff:d9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: May 1 13:00:58 2025 GMT Not After : Jul 30 13:00:58 2025 GMT Subject: CN=9e544816-42f5-49d9-b311-c32148e6ba8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:50:09:73:b3:a3:da:99:7f:45:9c:29:c0:5e: 22:20:2f:da:b2:3c:dc:0d:fd:8b:88:ec:e2:83:0a: 13:af:9e:83:c5:f8:fe:09:0c:35:38:11:e7:df:57: 32:67:26:2d:55:08:33:61:7b:1e:95:d9:c7:bc:2f: 87:f1:73:2f:c4:26:3b:e0:14:8d:84:2a:fc:c8:8c: 96:11:85:75:85:64:a0:01:61:23:fd:07:0e:44:52: f4:19:8d:12:00:35:6e:a4:f4:6e:b5:4f:68:a9:bf: 20:f4:b1:00:df:f0:5d:07:bd:e7:35:01:3d:60:db: 32:ac:55:67:75:74:61:24:da:cb:3c:2d:14:7c:12: c8:70:ce:75:0a:64:44:56:5c:cf:e3:06:c1:17:7e: e0:7d:51:dc:71:31:07:af:93:6b:8c:63:73:98:35: 65:35:3e:2f:82:ab:eb:54:3f:14:69:af:7b:a9:5c: 3b:66:98:f4:ed:87:99:d9:1a:2a:c0:f2:6c:b1:06: 8a:0b:cb:05:be:0f:b3:70:d8:75:1d:cd:21:d6:a7: f4:32:29:cd:1a:ec:b3:0f:9d:99:2c:2d:05:a4:ab: ba:5d:0a:e3:40:9b:34:83:0a:c5:1e:53:eb:f7:63: 5f:e7:d2:2d:a3:11:34:4f:f6:60:1a:6a:5b:f0:e6: 2a:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:AA:8E:48:E9:58:C6:22:F2:92:C3:A9:33:16:F0:00:5F:C9:F3:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/970fb05c-2346-393b-a7b7-10ed7f9bd285.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bb:da:bd:16:de:c6:43:45:67:25:3b:1e:ab:ea:9a:8d:bc:53: 0b:74:af:dc:7e:6c:4f:03:66:7c:66:b4:c2:13:22:0f:b2:a9: c8:b3:7b:02:46:7e:21:ee:13:fa:a1:72:41:4c:53:82:9f:dd: 41:1b:1b:c5:d5:13:84:c4:ad:79:f4:f9:0d:79:b0:b6:97:97: 48:ea:9a:c1:2b:3b:2e:e4:de:b0:e8:a3:76:76:a3:d1:2f:b0: 50:0c:3d:8a:50:9d:e7:30:63:63:96:e5:5b:a0:6f:b2:c4:87: ab:9e:ae:6f:7d:dc:8f:b6:8d:ce:31:ca:71:59:b9:a1:64:c6: 25:a1:d3:85:d2:dc:aa:27:e5:29:d9:58:9a:a2:0e:9a:77:a3: b5:56:1e:1a:84:09:8a:42:a0:83:8d:70:93:8b:f7:65:31:78: c1:9c:1b:64:a0:1a:a0:18:41:3e:7c:17:d4:5b:cb:a5:84:7d: 58:c4:1a:e9:5e:9f:be:24:bf:b6:8f:64:33:e7:1f:a4:14:ba: c3:b2:40:09:2b:24:07:c8:39:78:e5:8c:82:48:3e:31:41:de: df:98:77:49:7d:5e:13:8a:a2:10:cd:02:b4:0c:4f:47:d0:e3: aa:06:d3:1d:04:42:67:74:1b:e8:86:3c:9e:5b:f3:58:54:53: 9a:9f:f5:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1ehmGSfPD2+7/2QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MDUwMTEzMDA1OFoXDTI1MDczMDEzMDA1OFowLzEtMCsGA1UEAxMk OWU1NDQ4MTYtNDJmNS00OWQ5LWIzMTEtYzMyMTQ4ZTZiYThhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFAJc7Oj2pl/RZwpwF4iIC/asjzcDf2LiOzi gwoTr56Dxfj+CQw1OBHn31cyZyYtVQgzYXseldnHvC+H8XMvxCY74BSNhCr8yIyW EYV1hWSgAWEj/QcORFL0GY0SADVupPRutU9oqb8g9LEA3/BdB73nNQE9YNsyrFVn dXRhJNrLPC0UfBLIcM51CmREVlzP4wbBF37gfVHccTEHr5NrjGNzmDVlNT4vgqvr VD8Uaa97qVw7Zpj07YeZ2RoqwPJssQaKC8sFvg+zcNh1Hc0h1qf0MinNGuyzD52Z LC0FpKu6XQrjQJs0gwrFHlPr92Nf59ItoxE0T/ZgGmpb8OYqcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDuqjkjpWMYi8pLDqTMW8ABfyfNAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvOTcwZmIwNWMtMjM0Ni0z OTNiLWE3YjctMTBlZDdmOWJkMjg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqlV4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALvavRbexkNFZyU7Hqvqmo28Uwt0r9x+bE8DZnxmtMITIg+yqcizewJG fiHuE/qhckFMU4Kf3UEbG8XVE4TErXn0+Q15sLaXl0jqmsErOy7k3rDoo3Z2o9Ev sFAMPYpQnecwY2OW5Vugb7LEh6uerm993I+2jc4xynFZuaFkxiWh04XS3Kon5SnZ WJqiDpp3o7VWHhqECYpCoIONcJOL92UxeMGcG2SgGqAYQT58F9Rby6WEfVjEGule n74kv7aPZDPnH6QUusOyQAkrJAfIOXjljIJIPjFB3t+Yd0l9XhOKohDNArQMT0fQ 46oG0x0EQmd0G+iGPJ5b81hUU5qf9bE= -----END CERTIFICATE-----Generated at Mon May 5 05:35:17 2025 by rpki-client