$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/79240116-6214-30e5-83c0-513ce7a88981.roa File: 79240116-6214-30e5-83c0-513ce7a88981.roa (raw, json) Hash identifier: VBTmDbfJjZiICDZQbkVzx6bD0AgMLDh2JJrAeEkGozU= Subject key identifier: DC:90:E3:A3:B9:5D:ED:35:4C:58:B5:B7:E1:36:09:7D:0D:34:1B:A7 Certificate issuer: /CN=74a9db22-8d49-4938-9c6f-e3fd428c158e Certificate serial: 010D0C9F432858499F249F1F41EF814D84EEC480 Authority key identifier: 98:FB:A9:0E:C5:77:6A:E8:69:9A:83:85:57:54:2E:33:A0:1C:26:41 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/79240116-6214-30e5-83c0-513ce7a88981.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 170.10.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/74a9db22-8d49-4938-9c6f-e3fd428c158e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/74a9db22-8d49-4938-9c6f-e3fd428c158e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:9f:1f:41:ef:81:4d:84:ee:c4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74a9db22-8d49-4938-9c6f-e3fd428c158e Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=b2fa5492-93f5-46b9-827e-1e2d3b44592a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:6f:9f:b9:93:7b:7f:78:c2:f9:7d:4f:b3:c8: 79:eb:32:bd:41:c4:3d:0c:ac:7b:40:db:dc:31:f6: 4a:50:18:1e:75:d8:a9:27:e9:d1:2c:6c:f8:dc:2e: 36:d6:ac:d1:58:51:9d:c1:32:fe:1a:25:55:2f:b9: 59:ed:fa:ff:d7:96:29:0c:d9:01:ec:25:2d:f1:11: 5e:18:89:da:f5:16:55:e9:b0:ed:aa:9c:b8:3e:56: f3:ba:4c:c4:62:87:96:5b:d6:97:1e:dc:5a:dc:09: 69:ce:cc:12:b1:ca:7c:aa:a5:57:f0:ff:28:2b:0d: 64:1a:f5:b3:69:bb:3f:a2:a4:85:4b:14:41:f3:05: bf:b1:2d:f1:4f:71:ef:9e:7d:b7:cd:35:4f:7f:3e: d2:89:b9:0d:b5:0c:66:d1:ff:0e:aa:24:9e:f5:36: e4:81:7a:9e:c3:e1:8e:52:37:e1:d3:0f:d2:90:43: e5:56:64:62:83:97:42:8f:e1:ae:5e:12:98:d1:42: 60:f4:60:12:8a:5e:da:8c:c5:20:94:4f:df:eb:74: 06:fd:b0:f3:83:c0:e8:99:c2:a3:f0:14:b1:2a:7b: d7:15:16:b0:5b:4b:f8:6b:b1:e9:8d:75:20:a4:a1: 43:9e:64:b6:93:b3:98:70:14:ea:1f:6b:6c:98:96: e7:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:90:E3:A3:B9:5D:ED:35:4C:58:B5:B7:E1:36:09:7D:0D:34:1B:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/79240116-6214-30e5-83c0-513ce7a88981.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/74a9db22-8d49-4938-9c6f-e3fd428c158e.crl X509v3 Authority Key Identifier: keyid:98:FB:A9:0E:C5:77:6A:E8:69:9A:83:85:57:54:2E:33:A0:1C:26:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e.cer sbgp-ipAddrBlock: critical IPv4: 170.10.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:c8:5e:74:53:30:30:bf:9a:b6:38:ec:4d:ea:70:06:d5:b3: fb:f4:8e:f7:d5:83:8f:35:73:71:8b:5f:4a:b9:9d:62:f1:70: 1c:3d:10:3f:1e:a6:c6:c4:33:94:08:f6:a1:21:41:d4:19:41: 2f:6f:83:d5:10:94:0f:c4:54:66:cc:05:1b:b7:e8:0b:cf:1b: 38:11:8c:71:a1:41:1c:59:e4:99:29:8c:6b:fb:d5:9e:6b:59: a2:cd:63:23:43:6e:9e:36:ae:17:a3:7f:4a:c9:90:d3:54:49: 9a:d5:29:92:1b:d1:04:9d:2f:f5:cc:a9:1a:e7:19:98:f5:53: d7:cb:f1:23:c9:2e:21:b7:6b:f8:f7:3d:c5:b6:84:29:50:b3: a4:5b:1c:1d:3b:64:3c:66:65:e8:23:93:d1:03:a7:23:10:8a: 6d:fa:d6:4f:c4:de:b2:97:0a:7b:81:d2:c5:0c:e8:cc:4f:89: 7f:f5:9b:0e:26:d2:30:b1:81:6f:9b:99:16:b3:9e:c2:27:d1: 69:4b:d8:52:2f:1c:e5:2b:47:20:fc:6f:2d:c2:ef:70:2d:0e: 9d:8b:aa:90:66:4f:dd:6f:8b:6b:b6:61:c2:e7:92:f2:d6:aa: 02:9d:5b:5a:72:49:13:58:f2:17:54:4d:de:58:55:be:64:04: 48:2a:6a:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJJ8fQe+BTYTuxIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzRhOWRiMjItOGQ0OS00OTM4LTljNmYtZTNmZDQyOGMx NThlMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk YjJmYTU0OTItOTNmNS00NmI5LTgyN2UtMWUyZDNiNDQ1OTJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgG+fuZN7f3jC+X1Ps8h56zK9QcQ9DKx7QNvc MfZKUBgeddipJ+nRLGz43C421qzRWFGdwTL+GiVVL7lZ7fr/15YpDNkB7CUt8RFe GIna9RZV6bDtqpy4PlbzukzEYoeWW9aXHtxa3AlpzswSscp8qqVX8P8oKw1kGvWz abs/oqSFSxRB8wW/sS3xT3Hvnn23zTVPfz7SibkNtQxm0f8OqiSe9TbkgXqew+GO Ujfh0w/SkEPlVmRig5dCj+GuXhKY0UJg9GASil7ajMUglE/f63QG/bDzg8DomcKj 8BSxKnvXFRawW0v4a7HpjXUgpKFDnmS2k7OYcBTqH2tsmJbnnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNyQ46O5Xe01TFi1t+E2CX0NNBunMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NGE5 ZGIyMi04ZDQ5LTQ5MzgtOWM2Zi1lM2ZkNDI4YzE1OGUvNzkyNDAxMTYtNjIxNC0z MGU1LTgzYzAtNTEzY2U3YTg4OTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzRhOWRiMjItOGQ0OS00OTM4LTlj NmYtZTNmZDQyOGMxNThlLzc0YTlkYjIyLThkNDktNDkzOC05YzZmLWUzZmQ0Mjhj MTU4ZS5jcmwwHwYDVR0jBBgwFoAUmPupDsV3auhpmoOFV1QuM6AcJkEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NGE5ZGIyMi04ZDQ5LTQ5MzgtOWM2Zi1lM2Zk NDI4YzE1OGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqgrfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF3IXnRTMDC/mrY47E3qcAbVs/v0jvfVg481c3GLX0q5nWLxcBw9ED8e psbEM5QI9qEhQdQZQS9vg9UQlA/EVGbMBRu36AvPGzgRjHGhQRxZ5JkpjGv71Z5r WaLNYyNDbp42rhejf0rJkNNUSZrVKZIb0QSdL/XMqRrnGZj1U9fL8SPJLiG3a/j3 PcW2hClQs6RbHB07ZDxmZegjk9EDpyMQim361k/E3rKXCnuB0sUM6MxPiX/1mw4m 0jCxgW+bmRaznsIn0WlL2FIvHOUrRyD8by3C73AtDp2LqpBmT91vi2u2YcLnkvLW qgKdW1pySRNY8hdUTd5YVb5kBEgqaqw= -----END CERTIFICATE-----Generated at Sat May 10 19:40:40 2025 by rpki-client