$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/d212f7d8-713f-3286-9603-26498524616d.roa File: d212f7d8-713f-3286-9603-26498524616d.roa (raw, json) Hash identifier: 6DAE7TRLzpwrQ7P9QexXLT3mZwpW8zKL2R+VEwB7uv4= Subject key identifier: 6C:4B:54:7E:E5:1A:1C:31:0E:10:65:DD:4F:36:08:3A:42:FF:20:7E Certificate issuer: /CN=95a66ba6-9469-47f7-8328-e12b21a9be23 Certificate serial: 010D0C9F43285849B26DCB6F32357C46607F2C80 Authority key identifier: 6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/d212f7d8-713f-3286-9603-26498524616d.roa Signing time: Wed 30 Apr 2025 10:48:56 +0000 ROA not before: Wed 30 Apr 2025 10:48:56 +0000 ROA not after: Tue 29 Jul 2025 10:48:56 +0000 asID: 21433 IP address blocks: 170.248.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b2:6d:cb:6f:32:35:7c:46:60:7f:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95a66ba6-9469-47f7-8328-e12b21a9be23 Validity Not Before: Apr 30 10:48:56 2025 GMT Not After : Jul 29 10:48:56 2025 GMT Subject: CN=e7fb80ae-4ae9-4dab-b962-8b08796ca082 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:60:de:63:91:2e:63:17:47:02:d2:18:cc:3c: ac:c9:e8:b0:c4:31:e3:ea:75:e4:a6:ab:1e:1f:e3: 84:d6:73:66:7e:34:01:cf:20:90:18:4d:c6:1f:ec: 61:02:70:0d:c1:80:6d:45:f5:7b:7e:a5:aa:1c:31: 7e:47:62:be:c7:5e:4a:3c:22:25:05:eb:b1:90:1f: ea:e8:46:66:d6:f5:37:a0:09:4c:41:14:92:5e:a8: fc:92:de:dd:27:a8:66:cd:34:e2:eb:bc:7f:6e:8f: 0c:23:38:01:00:ad:f1:50:52:52:27:cb:29:d3:a7: fb:b6:a9:e7:6f:f7:d2:6d:d2:c9:66:bc:83:a4:c4: 5e:7c:94:09:e6:ae:f3:88:4b:62:d4:fb:98:4b:9f: be:ba:62:a4:fe:77:a7:c2:34:25:1a:05:f9:c0:0e: 5c:21:bc:06:36:b9:4d:08:13:4f:32:70:cc:c0:bf: 4c:4e:eb:5b:97:21:f5:27:f3:15:14:77:36:59:ef: 34:cb:71:f3:7b:2a:c9:bf:76:26:16:20:54:d1:57: f9:49:1d:17:88:4f:f8:c4:5b:55:a9:29:06:e6:14: cc:96:27:8d:11:4d:3c:fa:e8:44:e2:4e:1e:90:73: 85:60:57:6a:54:fb:1e:7f:1d:33:da:69:44:24:5a: 4c:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:4B:54:7E:E5:1A:1C:31:0E:10:65:DD:4F:36:08:3A:42:FF:20:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/d212f7d8-713f-3286-9603-26498524616d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl X509v3 Authority Key Identifier: keyid:6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer sbgp-ipAddrBlock: critical IPv4: 170.248.100.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:43:d5:a9:45:0a:54:8d:47:c7:fc:b4:41:a1:9e:56:2d:3f: be:a5:2f:29:a0:c7:d7:86:63:08:f6:9d:86:f1:bd:62:1b:ea: 76:d8:dd:bd:ae:46:ac:06:7a:50:97:c0:ba:d6:b2:bf:f9:18: 2d:4c:40:70:33:b3:62:89:05:8f:a2:c9:2f:4c:d9:df:ba:ed: 8e:14:64:eb:53:55:ca:9f:09:7f:36:ea:20:ad:ff:01:3c:68: 28:16:d2:01:5c:d0:d7:35:66:3d:3a:3b:50:1a:ce:d2:66:e2: 46:1b:c6:e9:44:66:8a:5b:f6:07:7f:9f:dc:23:db:ec:17:f8: 79:46:b0:32:0b:13:50:76:25:53:7f:96:5f:a8:6e:f8:fe:56: b5:a2:e4:84:1f:95:5b:6d:65:5a:a0:68:b8:76:f6:9a:2e:e0: c1:c8:0c:b8:87:3a:e9:c5:4c:31:6c:73:8b:47:c8:61:6d:22: 2f:01:15:b9:ad:4c:19:93:c6:7e:f4:5c:76:ca:48:89:4a:dc: cc:0b:6b:4e:5c:68:ea:d5:5d:55:61:2a:d5:2c:fd:2b:49:77: ac:9c:c6:40:96:d2:17:f9:7d:1c:32:30:29:11:30:a8:85:5e: db:6d:0c:6c:15:db:85:43:14:95:ff:9e:c1:93:eb:aa:27:69: b2:22:fd:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmybctvMjV8RmB/LIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTVhNjZiYTYtOTQ2OS00N2Y3LTgzMjgtZTEyYjIxYTli ZTIzMB4XDTI1MDQzMDEwNDg1NloXDTI1MDcyOTEwNDg1NlowLzEtMCsGA1UEAxMk ZTdmYjgwYWUtNGFlOS00ZGFiLWI5NjItOGIwODc5NmNhMDgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6mDeY5EuYxdHAtIYzDysyeiwxDHj6nXkpqse H+OE1nNmfjQBzyCQGE3GH+xhAnANwYBtRfV7fqWqHDF+R2K+x15KPCIlBeuxkB/q 6EZm1vU3oAlMQRSSXqj8kt7dJ6hmzTTi67x/bo8MIzgBAK3xUFJSJ8sp06f7tqnn b/fSbdLJZryDpMRefJQJ5q7ziEti1PuYS5++umKk/nenwjQlGgX5wA5cIbwGNrlN CBNPMnDMwL9MTutblyH1J/MVFHc2We80y3HzeyrJv3YmFiBU0Vf5SR0XiE/4xFtV qSkG5hTMlieNEU08+uhE4k4ekHOFYFdqVPsefx0z2mlEJFpM5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGxLVH7lGhwxDhBl3U82CDpC/yB+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85NWE2 NmJhNi05NDY5LTQ3ZjctODMyOC1lMTJiMjFhOWJlMjMvZDIxMmY3ZDgtNzEzZi0z Mjg2LTk2MDMtMjY0OTg1MjQ2MTZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTVhNjZiYTYtOTQ2OS00N2Y3LTgz MjgtZTEyYjIxYTliZTIzLzk1YTY2YmE2LTk0NjktNDdmNy04MzI4LWUxMmIyMWE5 YmUyMy5jcmwwHwYDVR0jBBgwFoAUbVr2S8waBs0EFttNS+TmAqQIa4EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi85NWE2NmJhNi05NDY5LTQ3ZjctODMyOC1lMTJi MjFhOWJlMjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqvhkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGtD1alFClSNR8f8tEGhnlYtP76lLymgx9eGYwj2nYbxvWIb6nbY3b2u RqwGelCXwLrWsr/5GC1MQHAzs2KJBY+iyS9M2d+67Y4UZOtTVcqfCX826iCt/wE8 aCgW0gFc0Nc1Zj06O1AaztJm4kYbxulEZopb9gd/n9wj2+wX+HlGsDILE1B2JVN/ ll+obvj+VrWi5IQflVttZVqgaLh29pou4MHIDLiHOunFTDFsc4tHyGFtIi8BFbmt TBmTxn70XHbKSIlK3MwLa05caOrVXVVhKtUs/StJd6ycxkCW0hf5fRwyMCkRMKiF XtttDGwV24VDFJX/nsGT66onabIi/cE= -----END CERTIFICATE-----Generated at Mon May 5 15:14:01 2025 by rpki-client