$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/cc8a387d-3916-3a5c-a366-228d5d779f1b.roa File: cc8a387d-3916-3a5c-a366-228d5d779f1b.roa (raw, json) Hash identifier: raeUdnlqFnmXfazudP9ND2Dyxf3svdqDgub6ZK2zVKw= Subject key identifier: 8D:FF:EF:45:CE:89:95:8F:A7:59:8B:84:79:90:81:0C:58:F1:52:19 Certificate issuer: /CN=2f9f859b-6735-4c5f-8f00-0526da777ec4 Certificate serial: 010D0C9F43285849806F249FA8D8A1C47A47A380 Authority key identifier: 58:8F:9F:47:4B:5A:E8:5E:4B:B6:F5:0F:6C:2E:BC:76:98:94:AB:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/cc8a387d-3916-3a5c-a366-228d5d779f1b.roa Signing time: Sat 12 Apr 2025 13:01:01 +0000 ROA not before: Sat 12 Apr 2025 13:01:01 +0000 ROA not after: Fri 11 Jul 2025 13:01:01 +0000 asID: 397966 IP address blocks: 170.205.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/2f9f859b-6735-4c5f-8f00-0526da777ec4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/2f9f859b-6735-4c5f-8f00-0526da777ec4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:80:6f:24:9f:a8:d8:a1:c4:7a:47:a3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f9f859b-6735-4c5f-8f00-0526da777ec4 Validity Not Before: Apr 12 13:01:01 2025 GMT Not After : Jul 11 13:01:01 2025 GMT Subject: CN=911ad0ae-4034-4266-ad10-9426d71efb69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d0:7f:e0:72:49:a7:1c:c5:49:e7:85:b2:2f: 08:a9:7b:70:8e:ed:f6:6a:5d:58:71:9c:cd:00:7f: f8:a7:49:18:79:b4:e4:c5:52:76:89:40:01:42:3e: 0a:f4:34:d1:95:ed:a8:b0:70:8d:eb:92:74:c6:1e: 08:6e:c2:fa:c8:3e:df:d7:aa:d3:e1:c8:47:8b:f9: 94:0b:cd:90:25:98:f9:4c:77:14:ce:27:5f:cd:8d: fc:c6:d9:08:58:6e:f0:48:61:67:71:38:18:c3:d1: f8:35:95:ce:e3:16:8a:6d:6e:6a:d1:1f:57:b6:47: 08:86:15:c8:6d:66:b1:67:93:53:58:80:97:02:25: b9:2e:eb:86:07:49:d2:f9:fb:ed:b4:f6:aa:4e:8d: b8:5e:9d:1b:ef:a2:93:43:e3:85:3b:ef:96:a9:76: 63:0c:ab:62:d4:5e:57:89:a5:40:44:56:3b:0d:dc: 17:c5:ad:c8:1a:bb:e0:02:f6:eb:fe:41:b9:9d:a1: db:1c:c6:a0:9b:33:d9:a4:2c:fd:41:0a:18:33:f4: 64:a0:c4:c8:cb:96:dd:b2:f7:a3:1e:d6:61:10:50: 22:36:53:f8:cb:80:6a:29:70:8d:59:32:6b:f5:94: 89:70:68:f9:41:39:6c:e4:bf:57:30:40:7b:f3:9a: eb:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:FF:EF:45:CE:89:95:8F:A7:59:8B:84:79:90:81:0C:58:F1:52:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/cc8a387d-3916-3a5c-a366-228d5d779f1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/2f9f859b-6735-4c5f-8f00-0526da777ec4.crl X509v3 Authority Key Identifier: keyid:58:8F:9F:47:4B:5A:E8:5E:4B:B6:F5:0F:6C:2E:BC:76:98:94:AB:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4.cer sbgp-ipAddrBlock: critical IPv4: 170.205.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:75:b9:1a:23:8c:6f:13:cc:29:ca:bb:12:47:8d:02:86:ce: 60:26:7f:83:21:61:55:95:aa:08:34:98:fa:6c:8e:74:cf:8f: 86:b6:6b:ba:cb:78:04:c5:97:e5:94:9a:89:d2:54:63:76:a0: 8f:13:f3:5a:7f:c1:4d:c9:2b:84:f3:83:ab:d8:30:bd:fe:ef: 85:db:26:61:3b:6a:80:3d:d2:6b:b2:58:ef:d8:35:63:6e:13: d9:03:d9:7b:be:08:47:8e:4b:8a:48:db:c2:35:c0:2d:d2:db: 6e:9f:5d:11:29:53:76:7d:b3:ec:c0:95:66:8d:e1:dd:43:03: 95:b4:fd:1e:10:6f:1e:06:1e:d6:bf:8e:3f:57:0c:c0:9f:2b: ec:af:fd:fd:70:21:6f:ad:cf:aa:60:6e:82:89:5f:51:27:90: 4e:b9:b8:36:66:21:80:c2:e7:85:33:7c:73:2d:d2:da:7d:1b: 35:a8:94:2f:0e:cf:9a:85:2a:17:91:f5:5e:cc:68:27:f0:3a: de:7e:e4:dc:48:5f:ab:d4:51:f1:14:91:c3:9c:b3:56:84:69: 23:1a:c4:8a:b9:f7:39:42:5a:01:44:01:78:3f:b9:2d:ec:45: e7:72:e1:9c:65:45:ae:f4:a6:85:39:a7:e1:12:24:d4:73:a5: 4d:4d:24:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmAbySfqNihxHpHo4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmY5Zjg1OWItNjczNS00YzVmLThmMDAtMDUyNmRhNzc3 ZWM0MB4XDTI1MDQxMjEzMDEwMVoXDTI1MDcxMTEzMDEwMVowLzEtMCsGA1UEAxMk OTExYWQwYWUtNDAzNC00MjY2LWFkMTAtOTQyNmQ3MWVmYjY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNB/4HJJpxzFSeeFsi8IqXtwju32al1YcZzN AH/4p0kYebTkxVJ2iUABQj4K9DTRle2osHCN65J0xh4IbsL6yD7f16rT4chHi/mU C82QJZj5THcUzidfzY38xtkIWG7wSGFncTgYw9H4NZXO4xaKbW5q0R9XtkcIhhXI bWaxZ5NTWICXAiW5LuuGB0nS+fvttPaqTo24Xp0b76KTQ+OFO++WqXZjDKti1F5X iaVARFY7DdwXxa3IGrvgAvbr/kG5naHbHMagmzPZpCz9QQoYM/RkoMTIy5bdsvej HtZhEFAiNlP4y4BqKXCNWTJr9ZSJcGj5QTls5L9XMEB785rr+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI3/70XOiZWPp1mLhHmQgQxY8VIZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yZjlm ODU5Yi02NzM1LTRjNWYtOGYwMC0wNTI2ZGE3NzdlYzQvY2M4YTM4N2QtMzkxNi0z YTVjLWEzNjYtMjI4ZDVkNzc5ZjFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMmY5Zjg1OWItNjczNS00YzVmLThm MDAtMDUyNmRhNzc3ZWM0LzJmOWY4NTliLTY3MzUtNGM1Zi04ZjAwLTA1MjZkYTc3 N2VjNC5jcmwwHwYDVR0jBBgwFoAUWI+fR0ta6F5LtvUPbC68dpiUqyswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yZjlmODU5Yi02NzM1LTRjNWYtOGYwMC0wNTI2 ZGE3NzdlYzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqs00MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEp1uRojjG8TzCnKuxJHjQKGzmAmf4MhYVWVqgg0mPpsjnTPj4a2a7rL eATFl+WUmonSVGN2oI8T81p/wU3JK4Tzg6vYML3+74XbJmE7aoA90muyWO/YNWNu E9kD2Xu+CEeOS4pI28I1wC3S226fXREpU3Z9s+zAlWaN4d1DA5W0/R4Qbx4GHta/ jj9XDMCfK+yv/f1wIW+tz6pgboKJX1EnkE65uDZmIYDC54UzfHMt0tp9GzWolC8O z5qFKheR9V7MaCfwOt5+5NxIX6vUUfEUkcOcs1aEaSMaxIq59zlCWgFEAXg/uS3s Redy4ZxlRa70poU5p+ESJNRzpU1NJFQ= -----END CERTIFICATE-----Generated at Sat May 10 22:38:20 2025 by rpki-client