$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/954248a7-1747-37a2-8e59-18157153fb0f.roa File: 954248a7-1747-37a2-8e59-18157153fb0f.roa (raw, json) Hash identifier: Z3njeA2gsc2iggi54pC7i2z/DCRyERVB3GeEPk3fYp0= Subject key identifier: A3:07:5E:B8:81:04:9B:30:D9:A5:DF:D2:67:40:74:AD:BE:FE:EF:32 Certificate issuer: /CN=824dfb5f-8580-48ff-b32e-fd393fa7dcc4 Certificate serial: 010D0C9F43285849002156454D63E5BA85265580 Authority key identifier: D9:84:FC:01:25:1A:F5:E5:ED:9B:B3:69:50:58:31:B7:12:47:29:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/954248a7-1747-37a2-8e59-18157153fb0f.roa Signing time: Tue 25 Feb 2025 14:00:52 +0000 ROA not before: Tue 25 Feb 2025 14:00:52 +0000 ROA not after: Mon 26 May 2025 13:00:52 +0000 asID: 16509 IP address blocks: 170.176.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:00:21:56:45:4d:63:e5:ba:85:26:55:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=824dfb5f-8580-48ff-b32e-fd393fa7dcc4 Validity Not Before: Feb 25 14:00:52 2025 GMT Not After : May 26 13:00:52 2025 GMT Subject: CN=2ae6acb9-47f5-4d79-91d8-548184dc17a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d6:98:d5:2a:6a:ec:dc:6d:ef:dc:14:a7:60: fd:f9:cc:ba:ab:f2:20:3d:db:70:1d:b6:53:7a:01: 40:a2:32:af:28:f8:92:49:be:17:74:f6:40:e6:6a: b1:ec:be:f6:a7:f1:04:2e:50:68:f1:79:ea:c0:57: 46:04:fe:6b:97:1f:36:2d:5a:7c:55:2e:bf:c8:6b: dc:62:3f:d8:05:1d:ca:0e:48:59:8f:47:1d:8f:ba: aa:ce:12:6b:b2:23:e1:99:3c:78:86:96:e6:9e:f6: 88:2e:d8:31:82:76:af:aa:6b:04:60:2f:b6:a5:27: aa:f0:f7:35:ba:4b:c8:9c:fb:6a:e4:ee:ef:82:b0: b4:31:ee:35:d6:ef:78:ef:e5:10:7d:4e:59:8d:20: 97:d7:ff:3b:bd:ee:e3:a8:c7:56:42:c8:98:ff:7e: 41:85:24:54:ec:95:b8:c0:e9:21:60:05:8c:77:a3: 2d:44:09:06:66:1f:cf:40:12:a9:28:9e:77:a4:e1: 4d:76:f4:c0:b2:c3:4b:e1:00:3c:cc:05:a3:c8:af: cb:25:26:8c:b1:e6:98:bd:50:46:ab:68:df:8b:03: 29:aa:aa:d1:36:13:96:be:3d:62:ba:36:65:2b:35: a4:5f:56:bb:95:bb:04:92:31:8d:e1:db:70:a8:68: 01:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:07:5E:B8:81:04:9B:30:D9:A5:DF:D2:67:40:74:AD:BE:FE:EF:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/954248a7-1747-37a2-8e59-18157153fb0f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.crl X509v3 Authority Key Identifier: keyid:D9:84:FC:01:25:1A:F5:E5:ED:9B:B3:69:50:58:31:B7:12:47:29:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer sbgp-ipAddrBlock: critical IPv4: 170.176.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:c5:52:f6:fe:3e:3e:87:e8:b8:b0:02:c8:f9:11:a8:7f:c1: ea:81:d4:bc:22:d3:18:38:85:d5:45:8c:6e:b7:cb:14:0b:f9: 7f:8a:97:f7:ee:e6:52:f6:81:ba:7c:f4:55:43:d3:58:13:d1: 92:e4:81:3a:b9:50:91:ae:e4:6a:13:c2:1a:21:c8:0a:67:d4: bb:64:19:32:08:80:eb:b2:34:0d:cd:dc:e5:98:14:77:8c:05: 4f:fe:44:75:f2:cf:ed:d8:ae:7a:cb:2b:d6:b0:39:70:37:93: 1e:33:95:4e:73:06:f4:13:22:96:be:83:08:49:0c:c1:8d:8a: ab:b7:c7:8d:0b:90:6b:34:5b:8f:e0:13:b4:78:07:5b:76:95: 80:ff:1c:a6:20:f2:03:e7:a5:18:64:c7:df:b7:ba:89:2e:d0: d7:27:b6:0d:c6:30:9a:09:c7:b4:ea:3f:df:20:af:d4:cc:39: 2c:44:85:25:2d:3c:b1:e4:c1:ff:f6:74:2c:c9:42:50:1e:ec: 76:10:88:b2:bc:7d:93:e4:32:6f:00:80:45:6c:ed:a0:72:3d: 15:f2:32:0e:09:2d:24:34:0e:53:02:1a:3c:c5:86:d6:c7:e7: 39:89:0c:99:18:72:b3:30:b1:07:f2:35:3c:f0:f4:b0:24:56: 31:b9:fa:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkAIVZFTWPluoUmVYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODI0ZGZiNWYtODU4MC00OGZmLWIzMmUtZmQzOTNmYTdk Y2M0MB4XDTI1MDIyNTE0MDA1MloXDTI1MDUyNjEzMDA1MlowLzEtMCsGA1UEAxMk MmFlNmFjYjktNDdmNS00ZDc5LTkxZDgtNTQ4MTg0ZGMxN2E2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNaY1Spq7Nxt79wUp2D9+cy6q/IgPdtwHbZT egFAojKvKPiSSb4XdPZA5mqx7L72p/EELlBo8XnqwFdGBP5rlx82LVp8VS6/yGvc Yj/YBR3KDkhZj0cdj7qqzhJrsiPhmTx4hpbmnvaILtgxgnavqmsEYC+2pSeq8Pc1 ukvInPtq5O7vgrC0Me411u947+UQfU5ZjSCX1/87ve7jqMdWQsiY/35BhSRU7JW4 wOkhYAWMd6MtRAkGZh/PQBKpKJ53pOFNdvTAssNL4QA8zAWjyK/LJSaMseaYvVBG q2jfiwMpqqrRNhOWvj1iujZlKzWkX1a7lbsEkjGN4dtwqGgBewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKMHXriBBJsw2aXf0mdAdK2+/u8yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84MjRk ZmI1Zi04NTgwLTQ4ZmYtYjMyZS1mZDM5M2ZhN2RjYzQvOTU0MjQ4YTctMTc0Ny0z N2EyLThlNTktMTgxNTcxNTNmYjBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODI0ZGZiNWYtODU4MC00OGZmLWIz MmUtZmQzOTNmYTdkY2M0LzgyNGRmYjVmLTg1ODAtNDhmZi1iMzJlLWZkMzkzZmE3 ZGNjNC5jcmwwHwYDVR0jBBgwFoAU2YT8ASUa9eXtm7NpUFgxtxJHKZYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84MjRkZmI1Zi04NTgwLTQ4ZmYtYjMyZS1mZDM5 M2ZhN2RjYzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqrCZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGjFUvb+Pj6H6LiwAsj5Eah/weqB1Lwi0xg4hdVFjG63yxQL+X+Kl/fu 5lL2gbp89FVD01gT0ZLkgTq5UJGu5GoTwhohyApn1LtkGTIIgOuyNA3N3OWYFHeM BU/+RHXyz+3YrnrLK9awOXA3kx4zlU5zBvQTIpa+gwhJDMGNiqu3x40LkGs0W4/g E7R4B1t2lYD/HKYg8gPnpRhkx9+3uoku0Ncntg3GMJoJx7TqP98gr9TMOSxEhSUt PLHkwf/2dCzJQlAe7HYQiLK8fZPkMm8AgEVs7aByPRXyMg4JLSQ0DlMCGjzFhtbH 5zmJDJkYcrMwsQfyNTzw9LAkVjG5+kA= -----END CERTIFICATE-----Generated at Mon May 5 02:34:51 2025 by rpki-client