$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/64e6b2ae-03b1-35f3-a11e-91cc3ca0635b.roa File: 64e6b2ae-03b1-35f3-a11e-91cc3ca0635b.roa (raw, json) Hash identifier: JNChfBlyvQjzHArtHIhjkRS7XI9uF93KNqH1zhL4RMc= Subject key identifier: 71:3C:61:52:E3:B1:C9:27:EA:02:90:65:A9:BF:26:5F:8C:4B:E1:ED Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F43285849B565983E4616736DF4F84D80 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/64e6b2ae-03b1-35f3-a11e-91cc3ca0635b.roa Signing time: Thu 01 May 2025 12:19:50 +0000 ROA not before: Thu 01 May 2025 12:19:50 +0000 ROA not after: Wed 30 Jul 2025 12:19:50 +0000 asID: 55286 IP address blocks: 173.255.170.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:65:98:3e:46:16:73:6d:f4:f8:4d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: May 1 12:19:50 2025 GMT Not After : Jul 30 12:19:50 2025 GMT Subject: CN=a14b7153-943b-4500-b01a-8ae365fb8f91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:55:83:a2:32:ed:c9:b6:9e:0f:66:ff:75:28: 3f:5d:fc:c0:b6:a3:77:47:08:e1:b5:39:36:42:4c: 65:87:3c:da:05:05:c2:36:be:bc:0d:cf:3c:86:7b: 46:33:50:d4:b2:3e:cf:d0:fa:02:a1:27:f8:0c:26: a1:fc:c8:00:18:14:91:cb:25:f0:ff:44:11:fa:7e: e6:8a:7a:7b:c3:61:d2:3f:75:cd:f3:76:08:89:9c: b7:ec:85:8a:06:84:23:73:cf:2e:2b:3c:f8:ec:5b: 6f:a0:f9:28:1c:24:00:e1:d4:90:65:bf:17:0c:ed: e1:44:8e:67:3a:74:d6:fe:f0:27:8a:ad:79:00:1c: 20:ab:a3:67:3c:f5:7d:4a:20:9a:01:d9:d9:29:1e: 1f:dd:61:d0:96:4b:95:a1:10:68:7e:97:ae:42:39: 4b:a3:d0:da:42:5b:62:aa:54:08:70:61:61:16:66: ef:32:28:b2:5d:f7:94:a5:c2:79:db:ee:57:4b:cd: 0d:9b:f6:37:26:79:83:72:8a:ff:2f:9c:9f:77:f8: 7c:b3:d8:f9:db:57:5d:50:78:85:e4:da:8e:d2:aa: 77:ce:60:03:aa:02:cd:bd:86:6e:0b:62:94:4e:e2: b8:96:db:dd:2d:38:a6:65:c3:1b:43:64:28:b5:fc: ec:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:3C:61:52:E3:B1:C9:27:EA:02:90:65:A9:BF:26:5F:8C:4B:E1:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/64e6b2ae-03b1-35f3-a11e-91cc3ca0635b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 173.255.170.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:8d:cc:86:94:8d:e2:dd:e7:eb:99:fd:c9:4b:a3:79:13:f3: ea:92:e9:88:d6:fc:21:5c:d4:19:28:0f:58:34:13:da:45:83: 08:2a:a6:e6:a0:fc:bc:66:09:4a:8c:61:3a:08:d4:70:7a:6e: 28:a4:8d:f0:c7:b1:cc:ef:0d:84:ab:29:e8:b1:ae:f4:46:06: 4d:bc:5e:74:1a:33:6d:44:3e:e1:3f:d8:83:79:8a:2f:2d:8f: 80:7c:b6:37:09:6d:f1:27:bc:5e:20:07:d6:98:59:63:b2:03: d8:03:b2:04:cf:38:66:2d:90:26:dd:37:c3:03:24:2f:2f:e7: 08:87:86:56:5a:63:e7:9b:b2:cc:d8:cb:a2:69:97:9e:9a:63: 43:07:07:15:48:26:95:6f:bb:39:2e:1b:b4:86:ae:4e:06:cc: 47:d6:21:55:35:f1:30:40:42:de:fa:2f:a6:b3:20:5d:b3:02: aa:72:f5:92:bd:74:61:b5:d5:3d:e8:0b:9c:4b:21:e7:80:37: 53:6d:e8:9c:fa:b3:05:8b:1d:0b:43:5e:9f:bb:26:f7:fb:f7: 26:a5:e3:7f:54:00:01:a7:ef:08:3c:36:47:bb:29:32:bf:e8: de:fa:66:59:36:e6:89:31:c3:3f:9e:8c:4a:2d:f9:75:17:50: aa:85:6b:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1ZZg+RhZzbfT4TYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI1MDUwMTEyMTk1MFoXDTI1MDczMDEyMTk1MFowLzEtMCsGA1UEAxMk YTE0YjcxNTMtOTQzYi00NTAwLWIwMWEtOGFlMzY1ZmI4ZjkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgVWDojLtybaeD2b/dSg/XfzAtqN3RwjhtTk2 QkxlhzzaBQXCNr68Dc88hntGM1DUsj7P0PoCoSf4DCah/MgAGBSRyyXw/0QR+n7m inp7w2HSP3XN83YIiZy37IWKBoQjc88uKzz47FtvoPkoHCQA4dSQZb8XDO3hRI5n OnTW/vAniq15ABwgq6NnPPV9SiCaAdnZKR4f3WHQlkuVoRBofpeuQjlLo9DaQlti qlQIcGFhFmbvMiiyXfeUpcJ52+5XS80Nm/Y3JnmDcor/L5yfd/h8s9j521ddUHiF 5NqO0qp3zmADqgLNvYZuC2KUTuK4ltvdLTimZcMbQ2QotfzsQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHE8YVLjsckn6gKQZam/Jl+MS+HtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvNjRlNmIyYWUtMDNiMS0z NWYzLWExMWUtOTFjYzNjYTA2MzViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrf+qMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFqNzIaUjeLd5+uZ/clLo3kT8+qS6YjW/CFc1BkoD1g0E9pFgwgqpuag /LxmCUqMYToI1HB6biikjfDHsczvDYSrKeixrvRGBk28XnQaM21EPuE/2IN5ii8t j4B8tjcJbfEnvF4gB9aYWWOyA9gDsgTPOGYtkCbdN8MDJC8v5wiHhlZaY+ebsszY y6Jpl56aY0MHBxVIJpVvuzkuG7SGrk4GzEfWIVU18TBAQt76L6azIF2zAqpy9ZK9 dGG11T3oC5xLIeeAN1Nt6Jz6swWLHQtDXp+7Jvf79yal439UAAGn7wg8Nke7KTK/ 6N76Zlk25okxwz+ejEot+XUXUKqFays= -----END CERTIFICATE-----Generated at Sun May 11 22:30:23 2025 by rpki-client