$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/a38378ac-3414-304a-ba7c-5dd7bc6dab62.roa File: a38378ac-3414-304a-ba7c-5dd7bc6dab62.roa (raw, json) Hash identifier: qC9shc1PWl5a8zy3ormm6iWtminPClZchai9KqZhgMk= Subject key identifier: E7:BD:9E:13:8D:F6:64:3E:1F:52:1B:F6:35:B1:9D:D9:A6:51:37:95 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F43285849B57A119FB0162D8A9F347C40 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/a38378ac-3414-304a-ba7c-5dd7bc6dab62.roa Signing time: Thu 01 May 2025 13:00:58 +0000 ROA not before: Thu 01 May 2025 13:00:58 +0000 ROA not after: Wed 30 Jul 2025 13:00:58 +0000 asID: 14618 IP address blocks: 170.85.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:7a:11:9f:b0:16:2d:8a:9f:34:7c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: May 1 13:00:58 2025 GMT Not After : Jul 30 13:00:58 2025 GMT Subject: CN=03b60b74-ff3f-4978-ba88-e3b7c23a17e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:a5:a1:db:de:1c:2f:72:cf:b1:dc:7c:64:71: 10:61:0d:f8:e2:74:7a:74:ed:75:8e:10:b5:9b:90: 3b:1f:2f:65:0e:f0:86:2d:54:9c:69:f2:e5:9c:e3: 3e:ff:dc:72:d6:1f:3f:0f:ad:c9:e2:78:09:11:83: 15:be:82:96:74:e4:4a:2b:b2:1d:d6:94:40:92:9c: b2:91:a4:61:ab:ae:bc:ae:d2:34:56:1e:4f:d7:6d: 56:fc:0f:fe:0c:d6:5e:a9:cd:ed:4b:96:4f:15:d0: 9a:49:25:71:c6:ef:27:7e:95:c3:c9:b7:f2:b3:48: 6c:3b:25:fe:c1:5a:a2:f5:58:03:d0:aa:97:15:8c: 57:37:c5:2e:d3:d9:7d:c1:e2:77:a7:8b:9f:f9:ae: 9f:30:c4:74:d3:00:2b:c4:52:18:ea:72:d3:39:f9: da:22:3e:41:fb:d5:1d:91:cf:77:15:f3:11:47:34: ef:4e:8b:10:5a:df:e1:0e:87:13:92:86:b3:73:b2: cc:da:8b:0d:f6:d2:2e:35:d0:fd:04:8b:f9:5b:9c: 37:e0:05:c4:cc:6c:f0:ff:1f:03:8f:d4:85:67:b1: 13:c2:74:0c:f0:8c:25:7e:04:a1:a2:27:1d:e5:34: 95:65:8f:5f:9f:9b:c6:03:12:c7:74:fc:7b:15:61: f9:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:BD:9E:13:8D:F6:64:3E:1F:52:1B:F6:35:B1:9D:D9:A6:51:37:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/a38378ac-3414-304a-ba7c-5dd7bc6dab62.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:16:a8:9d:5f:f8:8a:e1:da:64:26:08:b6:37:9e:5f:e1:d0: b1:13:5d:9c:7e:68:69:61:b6:ce:ea:e5:87:48:56:c7:57:a0: 54:ee:2b:1e:ad:ec:06:c9:62:85:12:d9:01:af:eb:48:a3:4a: b5:92:46:ff:94:96:49:6a:02:c8:07:51:a8:e0:87:82:f8:45: 69:7f:7a:b6:bd:41:25:ad:34:b2:4f:26:79:85:92:47:f9:89: ff:86:a9:67:c8:30:e4:72:e9:1f:f8:3b:d5:6f:f2:dc:83:c3: 92:0c:57:b7:29:57:5e:fe:41:ca:3d:d4:c8:1d:a9:05:02:c0: af:8e:42:9b:88:b8:3b:54:72:a3:cb:55:bb:59:db:3e:07:3a: 3f:06:24:9d:fb:ba:3c:40:7c:cf:85:14:37:8b:cf:f8:ea:d7: 1b:95:b6:23:08:f6:bb:a3:b8:fc:1f:c4:b9:8f:03:9d:b6:10: 61:af:ae:cd:ab:14:f3:88:24:04:fa:a6:8d:b6:0f:48:dd:31: 16:db:72:5b:f9:3d:43:74:8d:e9:b4:47:46:f4:90:d3:33:de: 71:7e:63:8a:87:3c:b3:9b:e2:d2:44:ae:66:b4:d7:a2:af:7c: bd:1f:bf:60:6e:0c:39:52:d2:3b:83:c4:80:ec:1c:ae:26:aa: 7d:dc:da:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1ehGfsBYtip80fEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MDUwMTEzMDA1OFoXDTI1MDczMDEzMDA1OFowLzEtMCsGA1UEAxMk MDNiNjBiNzQtZmYzZi00OTc4LWJhODgtZTNiN2MyM2ExN2UxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi6Wh294cL3LPsdx8ZHEQYQ344nR6dO11jhC1 m5A7Hy9lDvCGLVScafLlnOM+/9xy1h8/D63J4ngJEYMVvoKWdORKK7Id1pRAkpyy kaRhq668rtI0Vh5P121W/A/+DNZeqc3tS5ZPFdCaSSVxxu8nfpXDybfys0hsOyX+ wVqi9VgD0KqXFYxXN8Uu09l9weJ3p4uf+a6fMMR00wArxFIY6nLTOfnaIj5B+9Ud kc93FfMRRzTvTosQWt/hDocTkoazc7LM2osN9tIuNdD9BIv5W5w34AXEzGzw/x8D j9SFZ7ETwnQM8IwlfgShoicd5TSVZY9fn5vGAxLHdPx7FWH5ewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOe9nhON9mQ+H1Ib9jWxndmmUTeVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvYTM4Mzc4YWMtMzQxNC0z MDRhLWJhN2MtNWRkN2JjNmRhYjYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqlV5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFkWqJ1f+Irh2mQmCLY3nl/h0LETXZx+aGlhts7q5YdIVsdXoFTuKx6t 7AbJYoUS2QGv60ijSrWSRv+UlklqAsgHUajgh4L4RWl/era9QSWtNLJPJnmFkkf5 if+GqWfIMORy6R/4O9Vv8tyDw5IMV7cpV17+Qco91MgdqQUCwK+OQpuIuDtUcqPL VbtZ2z4HOj8GJJ37ujxAfM+FFDeLz/jq1xuVtiMI9rujuPwfxLmPA522EGGvrs2r FPOIJAT6po22D0jdMRbbclv5PUN0jem0R0b0kNMz3nF+Y4qHPLOb4tJErma016Kv fL0fv2BuDDlS0juDxIDsHK4mqn3c2lI= -----END CERTIFICATE-----Generated at Sat May 10 22:11:34 2025 by rpki-client