$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/e8d52976-1af5-3ee3-a528-24bbbd940160.roa File: e8d52976-1af5-3ee3-a528-24bbbd940160.roa (raw, json) Hash identifier: OiCF+dxOKhHgmxOJ7cMeMVkbDl2Gh621Cb9jW+VweCI= Subject key identifier: 3C:07:C8:8F:3E:2F:B3:40:60:38:93:4C:3C:9A:68:4F:FC:24:7C:BD Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F43285849AE32772B830CDBE6DA2BD800 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/e8d52976-1af5-3ee3-a528-24bbbd940160.roa Signing time: Mon 28 Apr 2025 22:26:10 +0000 ROA not before: Mon 28 Apr 2025 22:26:10 +0000 ROA not after: Sun 27 Jul 2025 22:26:10 +0000 asID: 8987 IP address blocks: 170.85.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ae:32:77:2b:83:0c:db:e6:da:2b:d8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Apr 28 22:26:10 2025 GMT Not After : Jul 27 22:26:10 2025 GMT Subject: CN=a884b0e6-c4a0-4e8d-99f8-cf3c4a16ae4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:1e:1c:a4:31:d3:6f:a9:aa:c4:05:36:2c:5e: d9:d1:39:f0:17:99:a7:f7:44:74:18:de:75:4a:46: b3:a1:e5:04:e2:01:27:1c:02:65:7a:a3:6c:80:04: 4d:af:fa:b3:3f:a1:a1:ad:c6:3b:94:e8:5a:e2:42: 4e:01:08:5d:e6:e6:c5:64:61:a3:52:69:f9:ee:1a: d2:44:34:b2:be:2d:31:bc:3d:b1:d9:6c:0b:8e:0d: 95:30:9a:8b:a4:f2:67:dc:31:6a:00:10:38:1d:cf: de:06:00:72:9e:05:fe:02:14:8e:12:68:f3:4d:44: 74:27:87:9e:ef:4e:f9:29:79:f1:48:07:77:97:bf: 94:e9:59:77:bb:d2:d7:00:48:b6:41:c7:b4:a6:fc: 46:46:c9:16:ac:c8:83:3f:3d:04:f8:fe:85:8c:35: 66:ef:e9:c2:25:58:15:fe:d9:61:46:fa:0b:bd:9d: c1:21:78:a9:7c:71:a9:43:7f:28:70:75:50:95:20: c7:5a:17:36:8f:31:c3:98:a2:f8:c8:d2:8f:77:9b: a4:20:66:18:de:dc:05:f2:33:2c:df:61:51:b2:5f: 3d:3a:cc:88:05:a5:a6:26:0d:8b:5a:d9:f4:ca:7d: ba:6d:14:ef:ec:b6:e1:4d:c5:b3:59:c3:a6:26:a7: cf:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:07:C8:8F:3E:2F:B3:40:60:38:93:4C:3C:9A:68:4F:FC:24:7C:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/e8d52976-1af5-3ee3-a528-24bbbd940160.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:62:ad:ec:ce:3d:aa:be:69:42:f4:fc:16:66:cf:e8:9e:b6: 63:1a:e2:5c:c3:f2:3e:93:77:e7:94:97:ad:b6:de:65:c2:f4: e2:1f:5f:c2:35:fd:43:3a:d7:16:1e:2e:0e:07:77:36:14:d4: d4:6e:88:b1:f8:ce:f2:86:f2:10:ad:ca:23:32:a4:d9:4a:06: 66:95:4e:05:30:39:06:dd:ae:22:23:fb:aa:91:da:ec:e9:25: d7:9f:5c:0c:ae:6d:86:0a:79:17:68:a9:0f:56:5c:cd:2d:7e: 03:0d:7d:4b:52:a6:60:96:b8:ec:4a:47:0e:b2:b2:68:8d:bd: aa:1c:77:97:1a:09:42:53:4b:fc:22:0e:d4:cf:e9:53:d5:04: a5:ed:d9:a1:63:90:7d:8f:98:47:5d:f7:9e:68:18:9a:98:b7: 4b:0d:8e:01:5f:00:a3:e9:b0:62:cf:ad:7a:7f:c0:2f:89:2c: be:8c:e3:73:27:7e:f6:b9:29:9d:06:17:2c:78:94:85:4b:c1: 25:e7:1d:7f:87:ad:a8:2f:c2:54:5b:a9:75:9d:f7:94:e7:90: 21:a0:77:54:44:92:31:ef:63:f2:eb:26:2f:89:cf:6e:ce:a6: 63:13:36:26:7f:1d:28:7f:bc:1c:c4:3c:cb:4c:c8:da:35:c7: 49:b9:5d:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmuMncrgwzb5tor2AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MDQyODIyMjYxMFoXDTI1MDcyNzIyMjYxMFowLzEtMCsGA1UEAxMk YTg4NGIwZTYtYzRhMC00ZThkLTk5ZjgtY2YzYzRhMTZhZTRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyh4cpDHTb6mqxAU2LF7Z0TnwF5mn90R0GN51 SkazoeUE4gEnHAJleqNsgARNr/qzP6GhrcY7lOha4kJOAQhd5ubFZGGjUmn57hrS RDSyvi0xvD2x2WwLjg2VMJqLpPJn3DFqABA4Hc/eBgByngX+AhSOEmjzTUR0J4ee 7075KXnxSAd3l7+U6Vl3u9LXAEi2Qce0pvxGRskWrMiDPz0E+P6FjDVm7+nCJVgV /tlhRvoLvZ3BIXipfHGpQ38ocHVQlSDHWhc2jzHDmKL4yNKPd5ukIGYY3twF8jMs 32FRsl89OsyIBaWmJg2LWtn0yn26bRTv7LbhTcWzWcOmJqfPiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDwHyI8+L7NAYDiTTDyaaE/8JHy9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvZThkNTI5NzYtMWFmNS0z ZWUzLWE1MjgtMjRiYmJkOTQwMTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqlXhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHlirezOPaq+aUL0/BZmz+ietmMa4lzD8j6Td+eUl6223mXC9OIfX8I1 /UM61xYeLg4HdzYU1NRuiLH4zvKG8hCtyiMypNlKBmaVTgUwOQbdriIj+6qR2uzp JdefXAyubYYKeRdoqQ9WXM0tfgMNfUtSpmCWuOxKRw6ysmiNvaocd5caCUJTS/wi DtTP6VPVBKXt2aFjkH2PmEdd955oGJqYt0sNjgFfAKPpsGLPrXp/wC+JLL6M43Mn fva5KZ0GFyx4lIVLwSXnHX+HragvwlRbqXWd95TnkCGgd1REkjHvY/LrJi+Jz27O pmMTNiZ/HSh/vBzEPMtMyNo1x0m5Xd4= -----END CERTIFICATE-----Generated at Mon May 5 12:17:52 2025 by rpki-client