$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/82ee65a1-8fcb-3733-99fe-c853616a309c.roa File: 82ee65a1-8fcb-3733-99fe-c853616a309c.roa (raw, json) Hash identifier: 4pARyBY3me1NEow603sCqvOvHMESTqVc+1DBCp6ERv0= Subject key identifier: 54:AC:79:CC:EC:96:B9:24:A7:10:CA:8A:10:3D:96:21:35:4F:24:E1 Certificate issuer: /CN=824dfb5f-8580-48ff-b32e-fd393fa7dcc4 Certificate serial: 010D0C9F43285849ABB49AA57D5906DA937D2900 Authority key identifier: D9:84:FC:01:25:1A:F5:E5:ED:9B:B3:69:50:58:31:B7:12:47:29:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/82ee65a1-8fcb-3733-99fe-c853616a309c.roa Signing time: Mon 28 Apr 2025 01:00:48 +0000 ROA not before: Mon 28 Apr 2025 01:00:48 +0000 ROA not after: Sun 27 Jul 2025 01:00:48 +0000 asID: 14618 IP address blocks: 170.176.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ab:b4:9a:a5:7d:59:06:da:93:7d:29:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=824dfb5f-8580-48ff-b32e-fd393fa7dcc4 Validity Not Before: Apr 28 01:00:48 2025 GMT Not After : Jul 27 01:00:48 2025 GMT Subject: CN=2085ffba-4384-48f4-a405-1afd3061bcb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:bc:3e:61:04:e5:9c:f7:a1:52:7c:7b:a3:61: ba:68:a1:83:89:43:55:96:e4:03:a3:f9:64:e6:f1: 6e:67:dd:43:0b:d0:69:61:d0:86:3e:e6:26:23:f1: d9:9f:25:55:8a:de:d1:40:67:cf:ed:5e:13:72:33: 85:91:4f:b8:ed:ce:d8:d7:97:6a:29:01:0e:fb:1e: 64:ef:13:55:7b:64:31:3c:25:78:89:ee:4b:e9:db: e7:12:30:e4:3d:8b:ae:81:93:f1:04:7f:95:1e:df: f2:fa:08:5c:a9:ec:82:bd:4d:a5:d9:16:7e:cf:7a: b6:c5:b9:0d:01:53:6f:3e:90:18:b1:76:6e:6c:92: 94:ba:2f:9f:22:68:bc:44:85:71:80:35:a4:a7:87: 55:88:5a:f4:fa:4c:64:e1:2a:8c:84:d6:c7:c5:af: da:f2:2d:d2:dc:9b:41:84:3f:ee:91:a1:d7:44:b1: 27:5d:6b:31:f4:dc:f8:b5:91:e3:0d:11:37:6f:98: 8c:d0:2c:8d:f7:75:82:a9:f5:b1:30:33:f3:1b:47: eb:b4:44:e0:87:95:b5:d0:96:d0:24:37:16:ca:5c: f2:ba:7b:55:06:46:1a:48:23:a8:2c:3e:67:a8:64: 2f:05:12:f2:4e:b8:b5:d8:c3:88:b7:e4:fb:ae:c1: d7:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:AC:79:CC:EC:96:B9:24:A7:10:CA:8A:10:3D:96:21:35:4F:24:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/82ee65a1-8fcb-3733-99fe-c853616a309c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.crl X509v3 Authority Key Identifier: keyid:D9:84:FC:01:25:1A:F5:E5:ED:9B:B3:69:50:58:31:B7:12:47:29:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer sbgp-ipAddrBlock: critical IPv4: 170.176.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:d7:37:98:b1:65:98:e5:b1:68:3c:58:82:63:fd:55:93:3c: 10:a9:01:a5:68:91:8c:e5:a0:c9:42:dc:0e:8d:ef:6c:ca:e3: f6:07:a3:f5:ed:f9:34:56:f4:f6:e9:d2:66:3c:f3:f7:11:2e: f6:66:6e:d7:c7:1a:1f:24:dc:a0:0e:dd:a3:20:a6:3d:47:fd: bc:8d:d6:ba:3c:ff:79:27:d7:e3:15:99:95:aa:65:2c:d8:ba: df:cb:17:fb:7f:7e:93:06:03:54:a3:3e:1e:95:43:19:17:d3: 15:10:fd:ca:c4:ea:4a:93:a0:a9:6c:12:88:f5:1f:20:cb:03: 0b:b9:aa:b4:8e:b7:dc:24:6f:f3:8e:1b:fe:52:85:c2:32:51: e8:c6:60:c4:e3:dd:cb:c0:25:bc:60:4f:e2:5f:25:a3:dc:bb: 2e:04:2e:c8:a3:76:ce:23:31:5a:86:ac:27:8a:43:e0:8e:87: 46:ec:af:d5:a1:d9:1f:e8:c1:7c:4b:1b:d9:62:12:b2:2d:be: 28:10:aa:29:4e:69:14:9c:5b:d1:54:fc:dd:53:03:7a:fa:6e: b6:50:e1:50:66:34:3f:65:da:cd:61:cb:96:92:c1:81:19:a8: 88:0f:6e:67:94:25:5a:f1:e2:9e:df:22:48:0c:01:cd:c4:db: 43:3f:6d:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmrtJqlfVkG2pN9KQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODI0ZGZiNWYtODU4MC00OGZmLWIzMmUtZmQzOTNmYTdk Y2M0MB4XDTI1MDQyODAxMDA0OFoXDTI1MDcyNzAxMDA0OFowLzEtMCsGA1UEAxMk MjA4NWZmYmEtNDM4NC00OGY0LWE0MDUtMWFmZDMwNjFiY2IxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6rw+YQTlnPehUnx7o2G6aKGDiUNVluQDo/lk 5vFuZ91DC9BpYdCGPuYmI/HZnyVVit7RQGfP7V4TcjOFkU+47c7Y15dqKQEO+x5k 7xNVe2QxPCV4ie5L6dvnEjDkPYuugZPxBH+VHt/y+ghcqeyCvU2l2RZ+z3q2xbkN AVNvPpAYsXZubJKUui+fImi8RIVxgDWkp4dViFr0+kxk4SqMhNbHxa/a8i3S3JtB hD/ukaHXRLEnXWsx9Nz4tZHjDRE3b5iM0CyN93WCqfWxMDPzG0frtETgh5W10JbQ JDcWylzyuntVBkYaSCOoLD5nqGQvBRLyTri12MOIt+T7rsHXrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFSseczslrkkpxDKihA9liE1TyThMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84MjRk ZmI1Zi04NTgwLTQ4ZmYtYjMyZS1mZDM5M2ZhN2RjYzQvODJlZTY1YTEtOGZjYi0z NzMzLTk5ZmUtYzg1MzYxNmEzMDljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODI0ZGZiNWYtODU4MC00OGZmLWIz MmUtZmQzOTNmYTdkY2M0LzgyNGRmYjVmLTg1ODAtNDhmZi1iMzJlLWZkMzkzZmE3 ZGNjNC5jcmwwHwYDVR0jBBgwFoAU2YT8ASUa9eXtm7NpUFgxtxJHKZYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84MjRkZmI1Zi04NTgwLTQ4ZmYtYjMyZS1mZDM5 M2ZhN2RjYzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqrCaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD7XN5ixZZjlsWg8WIJj/VWTPBCpAaVokYzloMlC3A6N72zK4/YHo/Xt +TRW9Pbp0mY88/cRLvZmbtfHGh8k3KAO3aMgpj1H/byN1ro8/3kn1+MVmZWqZSzY ut/LF/t/fpMGA1SjPh6VQxkX0xUQ/crE6kqToKlsEoj1HyDLAwu5qrSOt9wkb/OO G/5ShcIyUejGYMTj3cvAJbxgT+JfJaPcuy4ELsijds4jMVqGrCeKQ+COh0bsr9Wh 2R/owXxLG9liErItvigQqilOaRScW9FU/N1TA3r6brZQ4VBmND9l2s1hy5aSwYEZ qIgPbmeUJVrx4p7fIkgMAc3E20M/baw= -----END CERTIFICATE-----Generated at Mon May 5 08:43:39 2025 by rpki-client