$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/513ad2a0-8a15-3688-8173-779f97b22bad.roa File: 513ad2a0-8a15-3688-8173-779f97b22bad.roa (raw, json) Hash identifier: amCBrG1/IMeLO1jbmJlD4H0mV4NNQodJwN095zgbY4Q= Subject key identifier: F1:F7:30:7C:98:BB:BA:77:3F:DC:F3:64:C9:D1:7F:59:A8:F5:C0:BB Certificate issuer: /CN=74a9db22-8d49-4938-9c6f-e3fd428c158e Certificate serial: 010D0C9F43285849C4D4B260B0CED321635D3A40 Authority key identifier: 98:FB:A9:0E:C5:77:6A:E8:69:9A:83:85:57:54:2E:33:A0:1C:26:41 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/513ad2a0-8a15-3688-8173-779f97b22bad.roa Signing time: Wed 07 May 2025 01:00:46 +0000 ROA not before: Wed 07 May 2025 01:00:46 +0000 ROA not after: Tue 05 Aug 2025 01:00:46 +0000 asID: 63399 IP address blocks: 170.10.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/74a9db22-8d49-4938-9c6f-e3fd428c158e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/74a9db22-8d49-4938-9c6f-e3fd428c158e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c4:d4:b2:60:b0:ce:d3:21:63:5d:3a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74a9db22-8d49-4938-9c6f-e3fd428c158e Validity Not Before: May 7 01:00:46 2025 GMT Not After : Aug 5 01:00:46 2025 GMT Subject: CN=dcb2da71-7067-43b3-b6b3-6a85565bdf48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:fc:53:e8:65:91:f8:db:03:da:69:db:70:32: 92:c0:46:3c:e1:51:15:76:75:87:9c:d4:79:13:4a: 4e:cc:93:9d:09:87:b3:46:e4:f6:32:b0:a9:9e:c6: c8:21:f3:51:42:db:4d:4f:e9:79:d2:35:f9:15:7a: 09:d0:d1:ca:4a:ca:f8:49:72:46:6c:21:0c:f2:34: 36:7b:4d:2a:5e:87:28:18:38:ca:31:ff:d1:49:91: 96:55:ff:c5:70:ee:e8:90:a5:02:34:d2:cc:58:f8: 9a:c5:44:c6:a2:df:72:49:bc:e3:6f:26:a9:e8:d1: ce:8e:8e:09:b6:aa:5b:a5:fb:0d:d0:51:11:d1:59: e1:93:72:ed:de:7e:75:09:22:b1:09:bd:59:80:ee: 47:6c:7e:be:82:af:1e:a6:2c:c0:6c:17:76:43:c0: 1d:5d:e6:e6:65:80:ea:52:6b:25:0f:0d:c5:96:1b: 96:e5:9a:da:17:1c:3b:60:1b:08:64:56:11:46:d4: c2:dd:4e:72:5e:dc:d0:3c:b4:75:1f:49:fc:10:e4: d8:d5:f1:ac:13:d6:23:fc:ad:8e:9b:b2:53:8e:a0: 49:9d:b7:96:2f:58:68:b3:73:9b:68:16:5d:59:04: 3a:3f:af:f3:3f:03:40:6f:cc:b8:c6:df:72:16:27: 03:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:F7:30:7C:98:BB:BA:77:3F:DC:F3:64:C9:D1:7F:59:A8:F5:C0:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/513ad2a0-8a15-3688-8173-779f97b22bad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/74a9db22-8d49-4938-9c6f-e3fd428c158e.crl X509v3 Authority Key Identifier: keyid:98:FB:A9:0E:C5:77:6A:E8:69:9A:83:85:57:54:2E:33:A0:1C:26:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e.cer sbgp-ipAddrBlock: critical IPv4: 170.10.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:67:60:3c:59:94:ab:44:85:2b:be:37:3b:1e:59:0b:9e:4c: f6:70:93:57:6d:40:6c:3a:9a:cd:de:68:e2:ec:ff:64:8e:ec: 37:2f:fd:03:18:4a:2a:77:c1:dd:fb:e6:22:e5:9c:af:a5:90: 17:ac:6b:c2:47:27:49:f7:a3:68:72:c0:b4:31:ab:d6:f4:21: c8:95:d4:57:60:85:a0:eb:ef:8d:ec:32:da:c7:96:c1:56:07: 56:50:8c:4a:bb:01:2c:f8:41:e2:df:57:75:31:e8:78:23:f6: ec:db:9b:5b:ed:1b:46:bf:ff:ff:5a:2b:c4:48:76:5e:ac:63: 61:fb:f2:99:98:dc:64:81:b5:1d:55:d7:f9:2d:31:a9:34:bc: 5c:95:e3:38:08:46:35:7b:50:4e:84:c5:e8:49:a1:3e:8f:9b: 36:2d:03:4d:43:77:79:f7:d0:39:e4:b1:30:6c:b1:0a:ae:12: 5f:10:6d:72:70:f4:ea:18:6f:45:ce:3a:f3:72:9c:91:d3:30: dd:cd:96:f5:80:43:62:12:2a:ed:41:aa:08:86:5b:c6:fe:f7: cc:fe:42:05:b6:ba:58:9b:f9:e3:90:4c:28:fc:0f:36:04:a9: 2c:11:f6:6d:ff:f7:5e:06:a5:f7:19:2e:1a:2a:22:c3:63:db: 5c:e4:9f:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnE1LJgsM7TIWNdOkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzRhOWRiMjItOGQ0OS00OTM4LTljNmYtZTNmZDQyOGMx NThlMB4XDTI1MDUwNzAxMDA0NloXDTI1MDgwNTAxMDA0NlowLzEtMCsGA1UEAxMk ZGNiMmRhNzEtNzA2Ny00M2IzLWI2YjMtNmE4NTU2NWJkZjQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2vxT6GWR+NsD2mnbcDKSwEY84VEVdnWHnNR5 E0pOzJOdCYezRuT2MrCpnsbIIfNRQttNT+l50jX5FXoJ0NHKSsr4SXJGbCEM8jQ2 e00qXocoGDjKMf/RSZGWVf/FcO7okKUCNNLMWPiaxUTGot9ySbzjbyap6NHOjo4J tqpbpfsN0FER0Vnhk3Lt3n51CSKxCb1ZgO5HbH6+gq8epizAbBd2Q8AdXebmZYDq UmslDw3FlhuW5ZraFxw7YBsIZFYRRtTC3U5yXtzQPLR1H0n8EOTY1fGsE9Yj/K2O m7JTjqBJnbeWL1hos3ObaBZdWQQ6P6/zPwNAb8y4xt9yFicDuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPH3MHyYu7p3P9zzZMnRf1mo9cC7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NGE5 ZGIyMi04ZDQ5LTQ5MzgtOWM2Zi1lM2ZkNDI4YzE1OGUvNTEzYWQyYTAtOGExNS0z Njg4LTgxNzMtNzc5Zjk3YjIyYmFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzRhOWRiMjItOGQ0OS00OTM4LTlj NmYtZTNmZDQyOGMxNThlLzc0YTlkYjIyLThkNDktNDkzOC05YzZmLWUzZmQ0Mjhj MTU4ZS5jcmwwHwYDVR0jBBgwFoAUmPupDsV3auhpmoOFV1QuM6AcJkEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NGE5ZGIyMi04ZDQ5LTQ5MzgtOWM2Zi1lM2Zk NDI4YzE1OGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqgreMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKJnYDxZlKtEhSu+NzseWQueTPZwk1dtQGw6ms3eaOLs/2SO7Dcv/QMY Sip3wd375iLlnK+lkBesa8JHJ0n3o2hywLQxq9b0IciV1FdghaDr743sMtrHlsFW B1ZQjEq7ASz4QeLfV3Ux6Hgj9uzbm1vtG0a///9aK8RIdl6sY2H78pmY3GSBtR1V 1/ktMak0vFyV4zgIRjV7UE6ExehJoT6PmzYtA01Dd3n30DnksTBssQquEl8QbXJw 9OoYb0XOOvNynJHTMN3NlvWAQ2ISKu1BqgiGW8b+98z+QgW2ulib+eOQTCj8DzYE qSwR9m3/914GpfcZLhoqIsNj21zkn2Y= -----END CERTIFICATE-----Generated at Mon May 12 10:24:38 2025 by rpki-client