$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/adddec8c-1d05-339f-b675-b8618f1a5da2.roa File: adddec8c-1d05-339f-b675-b8618f1a5da2.roa (raw, json) Hash identifier: lhaduCN969IKiN4uJgsm9shXN21mpd0eCnZeWkD+E70= Subject key identifier: B0:35:53:07:BF:8B:B8:BF:A0:0D:67:A8:8B:FD:17:16:8D:83:D5:FE Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285849B94C549E959BADCBF7A95E50 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/adddec8c-1d05-339f-b675-b8618f1a5da2.roa Signing time: Fri 02 May 2025 21:52:10 +0000 ROA not before: Fri 02 May 2025 21:52:10 +0000 ROA not after: Thu 31 Jul 2025 21:52:10 +0000 asID: 401152 IP address blocks: 170.62.152.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b9:4c:54:9e:95:9b:ad:cb:f7:a9:5e:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: May 2 21:52:10 2025 GMT Not After : Jul 31 21:52:10 2025 GMT Subject: CN=18bba175-621c-43e0-b1de-87e387eff0c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d5:30:01:eb:92:91:1a:c7:c0:bc:e2:aa:b2: a2:29:7c:1e:29:58:0e:dd:7a:7d:f0:91:88:8c:5a: cc:f7:d8:7a:17:f1:fd:2d:64:95:fc:d6:4b:33:fd: 60:a3:ed:5b:91:7e:1d:62:fb:24:14:01:a4:2d:5a: cb:fb:e2:b2:54:5e:d8:ea:f9:34:24:f7:5e:fa:ba: ce:95:61:a8:ff:17:ac:23:2c:c1:2e:a9:d7:ba:19: ba:39:c5:cc:a8:a8:f4:85:1b:bb:49:ff:4f:18:4e: 20:d7:65:e3:43:5d:8e:eb:b1:26:d4:d4:6b:a4:9a: 97:6d:3a:62:24:12:93:75:34:35:8a:b3:12:ff:46: 24:90:4a:00:82:df:aa:89:22:8b:b5:17:ed:5e:a8: 1a:76:d5:31:e0:43:b2:f8:cb:46:2b:58:2e:fe:fd: 77:8e:21:45:e4:3c:d4:b1:96:ad:91:e7:aa:19:e3: 1d:1e:23:20:ca:15:fc:a6:86:72:f3:3f:8a:c3:6e: 39:03:c3:06:62:94:32:87:b9:31:ed:04:4a:59:84: f9:03:51:8b:45:a0:45:14:58:77:77:78:2d:22:4b: 4c:c4:39:40:88:87:34:cf:17:24:4c:34:75:2a:f4: d5:1f:43:5c:0c:24:ec:ca:16:df:78:e5:8e:91:93: 8a:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:35:53:07:BF:8B:B8:BF:A0:0D:67:A8:8B:FD:17:16:8D:83:D5:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/adddec8c-1d05-339f-b675-b8618f1a5da2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 170.62.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:2c:ff:1e:df:58:8a:59:eb:15:09:5e:6e:f7:66:29:24:27: 49:25:14:25:09:fc:86:ba:ff:a2:9c:ed:c9:52:29:d5:dc:2c: 67:74:46:a6:f5:94:a8:9d:59:bc:4a:48:c9:c0:a3:15:0c:c7: 47:b5:21:61:b1:2a:e2:b1:87:cc:d6:83:83:99:11:8e:12:92: fd:36:cf:56:1e:7a:cf:32:a1:8c:dd:a2:ab:8e:43:e3:be:d0: 55:4f:97:dd:98:34:a1:72:90:18:f0:71:97:26:86:f3:95:01: e6:69:ce:57:d5:23:b5:7f:f2:9f:97:3c:1a:4e:b7:c1:5f:e6: 0e:ff:12:0e:74:7c:ea:5c:c4:8d:9a:cc:00:f9:c4:cc:63:1e: ca:cf:93:fc:97:2e:a2:14:c3:e5:ac:f9:bc:e9:42:c2:6b:c6: 29:b6:c4:e9:0c:70:27:7d:c0:69:30:b5:9a:6b:38:0d:c5:b3: 2e:a6:d5:de:cb:72:3c:b4:86:59:93:e7:ed:4e:98:40:17:93: 1d:0b:2c:91:6a:e7:28:00:8b:1d:e1:62:68:46:ad:91:ce:7a: cc:8a:bc:30:2d:46:d7:51:f3:08:aa:20:0b:68:e9:06:b7:b2: 5f:27:01:64:7e:2d:41:75:8c:72:b0:6e:f7:46:9b:f7:a3:21: a3:ff:fb:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm5TFSelZuty/epXlAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDUwMjIxNTIxMFoXDTI1MDczMTIxNTIxMFowLzEtMCsGA1UEAxMk MThiYmExNzUtNjIxYy00M2UwLWIxZGUtODdlMzg3ZWZmMGMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNUwAeuSkRrHwLziqrKiKXweKVgO3Xp98JGI jFrM99h6F/H9LWSV/NZLM/1go+1bkX4dYvskFAGkLVrL++KyVF7Y6vk0JPde+rrO lWGo/xesIyzBLqnXuhm6OcXMqKj0hRu7Sf9PGE4g12XjQ12O67Em1NRrpJqXbTpi JBKTdTQ1irMS/0YkkEoAgt+qiSKLtRftXqgadtUx4EOy+MtGK1gu/v13jiFF5DzU sZatkeeqGeMdHiMgyhX8poZy8z+Kw245A8MGYpQyh7kx7QRKWYT5A1GLRaBFFFh3 d3gtIktMxDlAiIc0zxckTDR1KvTVH0NcDCTsyhbfeOWOkZOKJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLA1Uwe/i7i/oA1nqIv9FxaNg9X+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYWRkZGVjOGMtMWQwNS0z MzlmLWI2NzUtYjg2MThmMWE1ZGEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqj6YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHws/x7fWIpZ6xUJXm73ZikkJ0klFCUJ/Ia6/6Kc7clSKdXcLGd0Rqb1 lKidWbxKSMnAoxUMx0e1IWGxKuKxh8zWg4OZEY4Skv02z1Yees8yoYzdoquOQ+O+ 0FVPl92YNKFykBjwcZcmhvOVAeZpzlfVI7V/8p+XPBpOt8Ff5g7/Eg50fOpcxI2a zAD5xMxjHsrPk/yXLqIUw+Ws+bzpQsJrxim2xOkMcCd9wGkwtZprOA3Fsy6m1d7L cjy0hlmT5+1OmEAXkx0LLJFq5ygAix3hYmhGrZHOesyKvDAtRtdR8wiqIAto6Qa3 sl8nAWR+LUF1jHKwbvdGm/ejIaP/+wk= -----END CERTIFICATE-----Generated at Thu May 8 09:10:06 2025 by rpki-client