$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/5c4f117d-45b9-3f38-be81-53b231ffe933.roa File: 5c4f117d-45b9-3f38-be81-53b231ffe933.roa (raw, json) Hash identifier: 9MZ2xJDgvvMog/24V/3u6hufr2drbgapD7qgBH665zw= Subject key identifier: 99:B5:29:F6:08:0A:0D:31:B8:4C:12:54:61:ED:E7:B5:74:BF:89:AD Certificate issuer: /CN=aa31a4a0-7b77-4f56-8f89-01525b506129 Certificate serial: 010D0C9F43285849C20A2454D520252CAAAD0E80 Authority key identifier: 58:89:4D:59:3D:A0:9D:73:D6:96:20:6E:85:EB:9B:B1:BA:9B:66:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/5c4f117d-45b9-3f38-be81-53b231ffe933.roa Signing time: Tue 06 May 2025 01:00:47 +0000 ROA not before: Tue 06 May 2025 01:00:47 +0000 ROA not after: Mon 04 Aug 2025 01:00:47 +0000 asID: 46687 IP address blocks: 170.253.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c2:0a:24:54:d5:20:25:2c:aa:ad:0e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa31a4a0-7b77-4f56-8f89-01525b506129 Validity Not Before: May 6 01:00:47 2025 GMT Not After : Aug 4 01:00:47 2025 GMT Subject: CN=26cbaffc-3277-4af8-9061-56a84c758738 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:f3:3e:a8:e7:62:db:dc:cd:d6:c6:18:59:e5: 2f:7b:5b:92:f0:44:51:a7:4d:c4:aa:31:f0:29:38: c9:f1:9e:2e:2b:3c:86:ad:a1:95:c7:d1:37:11:41: 55:ff:90:ca:c5:98:f6:26:b2:be:e6:98:19:0c:5e: 6b:a6:14:c8:58:06:53:ff:03:55:a7:8d:7b:bd:80: 86:fe:d9:5d:04:0f:d7:3e:19:eb:30:99:69:6d:cd: 77:55:1f:bb:fe:74:d8:32:33:be:17:75:41:f7:96: cf:52:28:47:59:e2:cc:7c:67:4b:66:72:a5:b4:83: 3e:1d:c1:39:f1:9e:31:d7:3f:72:d3:58:ef:3c:79: 3e:69:6f:db:90:08:82:86:bc:4a:9d:73:74:33:38: a4:f8:61:04:dc:de:86:c6:8c:67:e4:62:d8:64:e6: 46:23:63:9d:a9:9c:48:b3:cf:7e:c1:09:3a:62:d1: 45:75:a7:b5:76:2b:54:3a:48:84:e7:5a:38:31:77: cb:70:7f:a5:d0:39:52:22:1e:ec:f7:f0:3b:12:78: 19:13:eb:31:c9:ef:28:63:57:c3:a5:e9:c1:33:ab: 31:38:c3:2f:9f:2e:5d:b4:4f:7e:44:27:e9:97:6d: 6b:56:05:64:9b:ee:8c:1d:b2:04:fd:37:43:d5:03: b1:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:B5:29:F6:08:0A:0D:31:B8:4C:12:54:61:ED:E7:B5:74:BF:89:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/5c4f117d-45b9-3f38-be81-53b231ffe933.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.crl X509v3 Authority Key Identifier: keyid:58:89:4D:59:3D:A0:9D:73:D6:96:20:6E:85:EB:9B:B1:BA:9B:66:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer sbgp-ipAddrBlock: critical IPv4: 170.253.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d1:ab:16:be:fe:2a:a6:11:3d:d4:c0:93:34:e5:14:7c:ae:6e: db:81:fd:c9:18:2c:cd:c6:43:cb:46:e0:ac:ac:93:0f:53:12: 3f:7c:f2:f0:25:0d:15:16:21:7c:4c:be:8a:ee:55:54:38:ef: 53:98:d2:ea:6f:d3:bb:fd:ef:a5:ef:47:6a:a6:0b:31:48:a3: 74:08:54:15:08:15:45:0d:83:f1:cc:31:b0:d0:b5:ea:bc:d6: a7:8d:60:7b:7d:f6:73:eb:17:6d:0f:62:03:12:f9:df:b8:39: 9c:64:f0:45:10:24:91:5a:67:e4:d3:a4:8e:b3:a5:24:8a:31: 40:47:33:89:22:16:b3:75:ca:de:54:9e:ad:5b:f3:bd:7a:5f: ad:5b:d6:5b:d2:e6:6b:07:5d:77:1a:86:0c:27:26:11:91:14: 58:65:bb:ab:8b:7d:e5:51:82:42:5e:72:af:93:5e:d3:fa:64: 6f:fa:23:d5:fc:48:fc:94:7a:97:88:37:07:40:6c:a0:ec:43: 6a:81:d5:b4:1a:27:8f:27:1d:80:b4:85:d2:73:e7:e4:a5:fd: 97:b8:98:c6:c5:88:dc:ba:29:1b:71:a5:72:42:2b:d3:df:ab: 32:1b:7a:bf:46:8a:ff:29:11:85:8e:09:86:61:ec:60:19:85: 1a:08:f4:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnCCiRU1SAlLKqtDoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEzMWE0YTAtN2I3Ny00ZjU2LThmODktMDE1MjViNTA2 MTI5MB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk MjZjYmFmZmMtMzI3Ny00YWY4LTkwNjEtNTZhODRjNzU4NzM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPM+qOdi29zN1sYYWeUve1uS8ERRp03EqjHw KTjJ8Z4uKzyGraGVx9E3EUFV/5DKxZj2JrK+5pgZDF5rphTIWAZT/wNVp417vYCG /tldBA/XPhnrMJlpbc13VR+7/nTYMjO+F3VB95bPUihHWeLMfGdLZnKltIM+HcE5 8Z4x1z9y01jvPHk+aW/bkAiChrxKnXN0Mzik+GEE3N6Gxoxn5GLYZOZGI2OdqZxI s89+wQk6YtFFdae1ditUOkiE51o4MXfLcH+l0DlSIh7s9/A7EngZE+sxye8oY1fD penBM6sxOMMvny5dtE9+RCfpl21rVgVkm+6MHbIE/TdD1QOxkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJm1KfYICg0xuEwSVGHt57V0v4mtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYTMx YTRhMC03Yjc3LTRmNTYtOGY4OS0wMTUyNWI1MDYxMjkvNWM0ZjExN2QtNDViOS0z ZjM4LWJlODEtNTNiMjMxZmZlOTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWEzMWE0YTAtN2I3Ny00ZjU2LThm ODktMDE1MjViNTA2MTI5L2FhMzFhNGEwLTdiNzctNGY1Ni04Zjg5LTAxNTI1YjUw NjEyOS5jcmwwHwYDVR0jBBgwFoAUWIlNWT2gnXPWliBuheubsbqbZj0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYTMxYTRhMC03Yjc3LTRmNTYtOGY4OS0wMTUy NWI1MDYxMjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHqv2AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANGrFr7+KqYRPdTAkzTlFHyubtuB/ckYLM3GQ8tG4Kyskw9TEj988vAl DRUWIXxMvoruVVQ471OY0upv07v976XvR2qmCzFIo3QIVBUIFUUNg/HMMbDQteq8 1qeNYHt99nPrF20PYgMS+d+4OZxk8EUQJJFaZ+TTpI6zpSSKMUBHM4kiFrN1yt5U nq1b8716X61b1lvS5msHXXcahgwnJhGRFFhlu6uLfeVRgkJecq+TXtP6ZG/6I9X8 SPyUepeINwdAbKDsQ2qB1bQaJ48nHYC0hdJz5+Sl/Ze4mMbFiNy6KRtxpXJCK9Pf qzIber9Giv8pEYWOCYZh7GAZhRoI9GQ= -----END CERTIFICATE-----Generated at Mon May 12 03:51:58 2025 by rpki-client