$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/77360824-da3b-363f-b777-38165a764b5a.roa File: 77360824-da3b-363f-b777-38165a764b5a.roa (raw, json) Hash identifier: yEaSpocOJ3SyyXgk1/fPExCM+Kkm1jryPc8pA9y0BMk= Subject key identifier: 94:5B:3F:A1:D0:80:3C:09:B8:9E:D2:81:B1:C7:36:61:A2:4C:E7:3B Certificate issuer: /CN=95a66ba6-9469-47f7-8328-e12b21a9be23 Certificate serial: 010D0C9F43285849B271682E32057E4B9B4E3F00 Authority key identifier: 6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/77360824-da3b-363f-b777-38165a764b5a.roa Signing time: Wed 30 Apr 2025 10:56:13 +0000 ROA not before: Wed 30 Apr 2025 10:56:13 +0000 ROA not after: Tue 29 Jul 2025 10:56:13 +0000 asID: 21433 IP address blocks: 170.248.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b2:71:68:2e:32:05:7e:4b:9b:4e:3f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95a66ba6-9469-47f7-8328-e12b21a9be23 Validity Not Before: Apr 30 10:56:13 2025 GMT Not After : Jul 29 10:56:13 2025 GMT Subject: CN=429a2dec-d453-4675-8d51-d9880e46f87d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:21:d0:7c:59:36:07:e1:86:05:6b:dc:58:c0: d4:ba:c8:08:4e:66:dc:de:0a:21:fd:bb:1b:c2:61: fa:25:59:c3:94:e0:74:f4:bb:98:ed:77:fd:78:0d: 9a:4d:aa:15:21:7b:d0:60:14:e1:e8:cb:0a:a3:f2: c3:b2:de:63:2b:8f:81:17:d6:d1:7a:9a:7c:6f:21: da:ac:28:d6:e2:35:5c:2c:2c:41:42:ae:df:5b:04: 58:06:26:b9:c6:c6:9a:b7:6c:cc:af:3d:ea:a2:c8: a9:a4:74:25:fa:23:6c:51:7a:5e:be:1a:04:be:51: 2b:7f:46:84:82:8e:82:dd:b8:b4:cb:11:18:8b:75: 52:4a:d7:da:4b:cb:98:8c:c9:65:41:4a:e6:db:f3: dd:bf:d3:08:df:bf:64:bb:ba:92:cf:6b:16:33:2a: 31:08:ac:50:5c:97:e4:89:f5:8c:b8:cf:77:05:9b: eb:09:54:ae:00:95:e6:51:6e:91:ef:fb:13:50:21: 27:12:16:ce:1d:e4:94:d0:d8:4a:e5:6b:a3:77:01: 1d:f8:d9:34:36:65:65:37:86:ba:89:5c:6e:b0:90: 44:23:ce:11:3a:23:39:bd:51:16:f4:5a:57:6a:71: f7:c3:ae:8e:06:9d:c0:6a:cb:22:9a:1d:4f:9d:cb: 4e:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:5B:3F:A1:D0:80:3C:09:B8:9E:D2:81:B1:C7:36:61:A2:4C:E7:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/77360824-da3b-363f-b777-38165a764b5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl X509v3 Authority Key Identifier: keyid:6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer sbgp-ipAddrBlock: critical IPv4: 170.248.49.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:4a:90:29:b2:a6:4f:20:25:f3:57:5e:45:49:54:54:dc:ba: 6d:79:12:1b:82:25:35:e2:25:77:fd:4d:f2:d9:ec:0f:02:65: bc:cc:16:e5:37:5a:23:85:19:da:7b:3f:53:aa:3d:b0:ce:e1: a1:f5:cf:ff:7e:da:34:34:78:71:32:42:c3:a5:66:76:ef:0a: 53:e7:63:33:24:a4:34:14:14:b7:26:68:6f:48:c9:c3:14:2d: e0:ff:cb:19:e2:a2:f1:fa:f2:f8:c8:51:16:5d:6e:7c:db:dd: 47:fa:cf:9a:8e:b8:13:1c:48:51:fc:6a:17:41:cb:19:d7:f3: 57:3f:f0:e2:67:2e:07:27:79:65:e3:ce:9b:f4:70:0d:42:ed: ab:44:13:db:3a:79:a9:3f:f4:d3:b2:38:68:98:96:1a:09:1d: 27:45:af:d4:80:28:96:be:b0:35:4b:3d:1d:df:09:74:8f:5d: 78:14:45:90:74:b8:4d:95:f4:64:2c:e7:09:87:a4:16:97:33: 22:57:d0:14:c9:f9:c7:a1:d8:40:06:b4:89:94:11:79:4b:98: a8:8e:b2:d0:0d:60:5d:9c:a8:de:61:51:1b:f5:14:1d:68:c8: 53:5e:14:66:8c:e7:61:26:f7:ae:9f:b1:fe:ef:a9:df:95:d4: cf:af:47:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmycWguMgV+S5tOPwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTVhNjZiYTYtOTQ2OS00N2Y3LTgzMjgtZTEyYjIxYTli ZTIzMB4XDTI1MDQzMDEwNTYxM1oXDTI1MDcyOTEwNTYxM1owLzEtMCsGA1UEAxMk NDI5YTJkZWMtZDQ1My00Njc1LThkNTEtZDk4ODBlNDZmODdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkSHQfFk2B+GGBWvcWMDUusgITmbc3goh/bsb wmH6JVnDlOB09LuY7Xf9eA2aTaoVIXvQYBTh6MsKo/LDst5jK4+BF9bRepp8byHa rCjW4jVcLCxBQq7fWwRYBia5xsaat2zMrz3qosippHQl+iNsUXpevhoEvlErf0aE go6C3bi0yxEYi3VSStfaS8uYjMllQUrm2/Pdv9MI379ku7qSz2sWMyoxCKxQXJfk ifWMuM93BZvrCVSuAJXmUW6R7/sTUCEnEhbOHeSU0NhK5WujdwEd+Nk0NmVlN4a6 iVxusJBEI84ROiM5vVEW9FpXanH3w66OBp3Aassimh1PnctO4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJRbP6HQgDwJuJ7SgbHHNmGiTOc7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85NWE2 NmJhNi05NDY5LTQ3ZjctODMyOC1lMTJiMjFhOWJlMjMvNzczNjA4MjQtZGEzYi0z NjNmLWI3NzctMzgxNjVhNzY0YjVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTVhNjZiYTYtOTQ2OS00N2Y3LTgz MjgtZTEyYjIxYTliZTIzLzk1YTY2YmE2LTk0NjktNDdmNy04MzI4LWUxMmIyMWE5 YmUyMy5jcmwwHwYDVR0jBBgwFoAUbVr2S8waBs0EFttNS+TmAqQIa4EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi85NWE2NmJhNi05NDY5LTQ3ZjctODMyOC1lMTJi MjFhOWJlMjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqvgxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFtKkCmypk8gJfNXXkVJVFTcum15EhuCJTXiJXf9TfLZ7A8CZbzMFuU3 WiOFGdp7P1OqPbDO4aH1z/9+2jQ0eHEyQsOlZnbvClPnYzMkpDQUFLcmaG9IycMU LeD/yxniovH68vjIURZdbnzb3Uf6z5qOuBMcSFH8ahdByxnX81c/8OJnLgcneWXj zpv0cA1C7atEE9s6eak/9NOyOGiYlhoJHSdFr9SAKJa+sDVLPR3fCXSPXXgURZB0 uE2V9GQs5wmHpBaXMyJX0BTJ+ceh2EAGtImUEXlLmKiOstANYF2cqN5hURv1FB1o yFNeFGaM52Em966fsf7vqd+V1M+vR4Q= -----END CERTIFICATE-----Generated at Fri May 9 23:54:30 2025 by rpki-client