$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386/b5c63bfd-1823-3439-89e5-1713f0194e5c.roa File: b5c63bfd-1823-3439-89e5-1713f0194e5c.roa (raw, json) Hash identifier: ltu3Pbr0IGKWR97Mvyln7aZ3r+9XOBKOpYc/VGvILho= Subject key identifier: 0A:82:99:AF:8C:8E:49:4E:96:4E:64:AD:5C:83:6E:E5:9A:54:73:49 Certificate issuer: /CN=abf1f0ec-0f56-4356-9ce5-9c637405f386 Certificate serial: 010D0C9F432858498769A5FE07186EAA72E62DA0 Authority key identifier: 97:4B:C9:47:24:F4:DD:06:50:DF:1D:2A:91:89:75:26:29:90:DA:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386/b5c63bfd-1823-3439-89e5-1713f0194e5c.roa Signing time: Tue 15 Apr 2025 01:00:47 +0000 ROA not before: Tue 15 Apr 2025 01:00:47 +0000 ROA not after: Mon 14 Jul 2025 01:00:47 +0000 asID: 396338 IP address blocks: 170.100.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386/abf1f0ec-0f56-4356-9ce5-9c637405f386.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386/abf1f0ec-0f56-4356-9ce5-9c637405f386.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:87:69:a5:fe:07:18:6e:aa:72:e6:2d:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf1f0ec-0f56-4356-9ce5-9c637405f386 Validity Not Before: Apr 15 01:00:47 2025 GMT Not After : Jul 14 01:00:47 2025 GMT Subject: CN=b0690f85-e508-45e9-a25a-2b8f953c54b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:86:63:ad:cd:28:5b:ac:b8:f8:35:b0:a0:5e: 87:17:23:6d:b2:3a:c0:04:da:be:8d:7a:b5:fb:f1: 90:d1:24:5c:ca:35:73:3a:ac:dc:27:28:ce:03:ba: ba:9e:0f:2a:5c:5e:b2:a8:8e:c6:b5:97:3c:22:46: c0:c7:00:88:b0:57:86:d3:f3:29:2b:70:46:4c:9f: 69:89:b9:a9:c7:c8:c1:3b:79:5c:77:ed:a4:70:8c: 96:64:c8:e5:f6:55:37:16:8a:d3:25:05:7b:ca:70: 56:92:04:d2:4f:30:e6:26:a9:32:62:01:18:04:17: 0c:41:e5:1a:08:ea:e2:01:39:ca:bb:4a:a4:b8:01: 18:98:c6:fd:a2:95:f3:7a:5f:d1:d8:09:7a:23:97: 6b:58:e2:a4:e3:ec:4b:c2:d1:c0:66:8c:4d:10:5c: b3:f1:f6:f4:4a:7f:23:4a:20:78:f5:5c:21:99:74: 91:6f:fd:a0:98:d4:71:57:c1:d5:fb:7e:56:51:7c: 0c:da:e7:83:66:c3:9c:a4:ef:fa:bf:50:da:0d:5e: 4b:ec:0d:41:2f:94:27:0a:a1:d2:cf:0a:64:11:6b: 9f:b3:b9:86:20:ef:6e:3b:55:f0:c6:76:38:c2:51: 94:c5:bc:42:0c:61:c3:44:fd:3d:73:28:0d:9e:49: 27:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:82:99:AF:8C:8E:49:4E:96:4E:64:AD:5C:83:6E:E5:9A:54:73:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386/b5c63bfd-1823-3439-89e5-1713f0194e5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386/abf1f0ec-0f56-4356-9ce5-9c637405f386.crl X509v3 Authority Key Identifier: keyid:97:4B:C9:47:24:F4:DD:06:50:DF:1D:2A:91:89:75:26:29:90:DA:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386.cer sbgp-ipAddrBlock: critical IPv4: 170.100.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:db:45:8b:c3:93:cb:03:2b:9b:87:a9:54:27:91:a1:e5:45: 5b:07:04:c0:59:07:36:9e:14:7e:3a:b3:61:4a:53:23:b3:5b: cc:4a:01:e4:c0:de:58:85:f0:0b:04:66:ae:f0:3e:26:1b:c3: 4b:51:4c:62:af:26:9e:a9:9c:e4:b8:d2:df:60:29:66:3a:8b: 3e:85:3c:dc:fc:2d:82:8d:b7:a3:cb:00:32:1a:dc:d4:b0:51: b0:2e:99:72:5a:ba:9a:ae:4f:f9:50:cb:9f:60:84:84:e3:8b: 58:d2:cf:79:8f:2f:65:c7:88:9b:00:52:dd:6b:25:14:b4:10: 20:aa:4f:71:43:e4:f5:77:9c:3c:75:fa:03:80:f1:58:8e:48: f0:64:71:6a:30:59:45:ef:03:27:e3:dc:eb:41:37:34:da:65: 07:d0:44:3a:1b:57:0a:7e:3c:c9:81:80:cc:1e:c4:c6:d4:d5: ab:3f:44:11:d8:a9:2d:a4:f3:7d:c2:8e:b5:0e:a9:9b:e7:e4: 58:6e:0b:b1:8e:e7:3b:84:0a:c0:04:00:c8:40:b6:16:72:33: 19:08:d2:75:65:c9:8c:bc:86:ee:13:49:da:8d:ef:d5:71:1b: a2:6a:a6:fc:78:02:5d:65:ae:ec:c2:5d:28:a0:93:4d:24:3b: c7:e0:eb:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmHaaX+BxhuqnLmLaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmMWYwZWMtMGY1Ni00MzU2LTljZTUtOWM2Mzc0MDVm Mzg2MB4XDTI1MDQxNTAxMDA0N1oXDTI1MDcxNDAxMDA0N1owLzEtMCsGA1UEAxMk YjA2OTBmODUtZTUwOC00NWU5LWEyNWEtMmI4Zjk1M2M1NGI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiIZjrc0oW6y4+DWwoF6HFyNtsjrABNq+jXq1 +/GQ0SRcyjVzOqzcJyjOA7q6ng8qXF6yqI7GtZc8IkbAxwCIsFeG0/MpK3BGTJ9p ibmpx8jBO3lcd+2kcIyWZMjl9lU3ForTJQV7ynBWkgTSTzDmJqkyYgEYBBcMQeUa COriATnKu0qkuAEYmMb9opXzel/R2Al6I5drWOKk4+xLwtHAZoxNEFyz8fb0Sn8j SiB49VwhmXSRb/2gmNRxV8HV+35WUXwM2ueDZsOcpO/6v1DaDV5L7A1BL5QnCqHS zwpkEWufs7mGIO9uO1XwxnY4wlGUxbxCDGHDRP09cygNnkkn7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAqCma+MjklOlk5krVyDbuWaVHNJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYmYx ZjBlYy0wZjU2LTQzNTYtOWNlNS05YzYzNzQwNWYzODYvYjVjNjNiZmQtMTgyMy0z NDM5LTg5ZTUtMTcxM2YwMTk0ZTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWJmMWYwZWMtMGY1Ni00MzU2LTlj ZTUtOWM2Mzc0MDVmMzg2L2FiZjFmMGVjLTBmNTYtNDM1Ni05Y2U1LTljNjM3NDA1 ZjM4Ni5jcmwwHwYDVR0jBBgwFoAUl0vJRyT03QZQ3x0qkYl1JimQ2r4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hYmYxZjBlYy0wZjU2LTQzNTYtOWNlNS05YzYz NzQwNWYzODYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEqmSwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHzbRYvDk8sDK5uHqVQnkaHlRVsHBMBZBzaeFH46s2FKUyOzW8xKAeTA 3liF8AsEZq7wPiYbw0tRTGKvJp6pnOS40t9gKWY6iz6FPNz8LYKNt6PLADIa3NSw UbAumXJaupquT/lQy59ghITji1jSz3mPL2XHiJsAUt1rJRS0ECCqT3FD5PV3nDx1 +gOA8ViOSPBkcWowWUXvAyfj3OtBNzTaZQfQRDobVwp+PMmBgMwexMbU1as/RBHY qS2k833CjrUOqZvn5FhuC7GO5zuECsAEAMhAthZyMxkI0nVlyYy8hu4TSdqN79Vx G6Jqpvx4Al1lruzCXSigk00kO8fg6xw= -----END CERTIFICATE-----Generated at Sun May 11 08:11:13 2025 by rpki-client