$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/7714f8b4-e08c-3ecd-b63d-aac5909ad71d.roa File: 7714f8b4-e08c-3ecd-b63d-aac5909ad71d.roa (raw, json) Hash identifier: f2f8UzTUdTvKDMRFgvYt38HWSLuUIwXz9F5zUmJF2Fk= Subject key identifier: AB:4F:63:D1:57:A9:ED:35:5A:45:9E:1A:73:E1:32:B5:47:22:17:62 Certificate issuer: /CN=b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1 Certificate serial: 010D0C9F43285849B14A0D6F540B2F20C66DAED0 Authority key identifier: DD:F6:09:95:17:8B:B7:4A:6E:9C:AA:DF:B0:69:85:38:26:70:0B:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/7714f8b4-e08c-3ecd-b63d-aac5909ad71d.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 398203 IP address blocks: 170.117.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:0d:6f:54:0b:2f:20:c6:6d:ae:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=3bc9cb74-1356-4791-8877-77a84c78c8ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:15:4e:6a:35:10:97:bf:d5:27:60:81:80:26: c9:fe:94:6e:06:92:40:35:eb:bf:21:7d:95:38:db: 31:5d:78:65:ee:37:41:7c:ad:cb:af:b1:a3:0a:59: 1e:89:84:bf:5f:1a:c9:e8:90:db:32:2a:f2:99:af: ea:e3:f5:c3:cf:af:03:8f:5b:d8:ec:92:dc:c3:3c: 2a:29:9a:7f:0d:78:6a:43:1f:06:a0:ad:53:3d:e1: 77:70:0d:af:07:98:76:8b:27:be:72:9b:3e:04:70: 83:70:2b:40:d9:98:06:34:53:3c:1c:68:f2:90:82: 3f:cc:d4:b3:d0:8b:39:ce:f1:4a:3d:18:49:93:6d: bb:9e:2e:80:4b:47:69:b1:5f:4e:a2:62:dc:67:40: e6:67:bc:1f:a5:b0:0a:e0:46:54:90:8f:05:3e:bf: 1d:17:c9:d8:c6:81:56:da:f5:f7:0a:9a:1a:3a:ff: 2a:80:2f:28:5f:95:2b:2b:70:57:04:0c:bf:d3:20: 12:80:09:33:47:ef:ab:c9:61:9f:38:b8:3f:4e:01: e4:8c:f6:fa:48:4b:41:d1:5a:5b:aa:24:79:f3:e1: d3:38:54:9a:2e:df:01:38:a8:90:93:64:b3:4d:40: 45:3f:2c:36:08:d5:be:11:f0:1a:d3:a2:a8:20:9e: e9:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:4F:63:D1:57:A9:ED:35:5A:45:9E:1A:73:E1:32:B5:47:22:17:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/7714f8b4-e08c-3ecd-b63d-aac5909ad71d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.crl X509v3 Authority Key Identifier: keyid:DD:F6:09:95:17:8B:B7:4A:6E:9C:AA:DF:B0:69:85:38:26:70:0B:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.cer sbgp-ipAddrBlock: critical IPv4: 170.117.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:e4:46:66:fa:b5:4a:06:12:3e:0d:e1:04:9b:d2:5d:e5:16: 75:de:44:d2:c6:a3:ef:70:14:c9:fa:1c:32:80:58:6c:40:8a: 3e:61:ee:8a:8d:be:c9:45:8b:3c:87:c5:d0:90:c0:7a:58:83: 36:d2:0c:85:20:b9:2e:43:65:77:c0:07:3c:99:47:71:2e:b9: d4:29:ac:04:ed:a2:73:01:c3:c2:b4:9c:5d:3d:b4:3c:62:43: 65:4f:fb:2d:5f:d2:32:8e:7e:29:02:9a:f0:c8:0b:58:6a:b9: 73:83:65:f8:7f:f5:60:a5:1c:0b:8e:3c:ad:e7:90:8c:7d:99: aa:c3:7a:00:24:72:45:c6:63:74:45:5a:0f:db:74:4c:0a:bc: d2:7c:d6:49:a4:a3:39:d9:0c:64:40:1a:c1:f9:26:1c:95:8c: 1b:b9:4c:44:2e:4a:84:bb:a7:3b:15:1c:d7:b5:b6:f2:d2:df: 1b:5b:8d:c6:62:b1:e3:05:99:90:c5:12:82:52:ed:3c:8f:a2: 6b:83:27:fb:5e:12:83:14:a6:d9:b3:a1:68:fe:30:7e:d2:92: d6:fd:47:de:f6:87:08:55:6b:20:48:4a:e7:19:97:79:e6:97: a8:7b:d2:bd:80:03:1d:3e:5e:8a:76:dd:eb:d9:d3:16:8a:4c: 9f:0e:04:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSg1vVAsvIMZtrtAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg2YTRlYzMtYTNiNS00ZDcyLWJlZTItZjU4YzNjZGUw MWExMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk M2JjOWNiNzQtMTM1Ni00NzkxLTg4NzctNzdhODRjNzhjOGNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRVOajUQl7/VJ2CBgCbJ/pRuBpJANeu/IX2V ONsxXXhl7jdBfK3Lr7GjClkeiYS/XxrJ6JDbMiryma/q4/XDz68Dj1vY7JLcwzwq KZp/DXhqQx8GoK1TPeF3cA2vB5h2iye+cps+BHCDcCtA2ZgGNFM8HGjykII/zNSz 0Is5zvFKPRhJk227ni6AS0dpsV9OomLcZ0DmZ7wfpbAK4EZUkI8FPr8dF8nYxoFW 2vX3CpoaOv8qgC8oX5UrK3BXBAy/0yASgAkzR++ryWGfOLg/TgHkjPb6SEtB0Vpb qiR58+HTOFSaLt8BOKiQk2SzTUBFPyw2CNW+EfAa06KoIJ7piwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKtPY9FXqe01WkWeGnPhMrVHIhdiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iODZh NGVjMy1hM2I1LTRkNzItYmVlMi1mNThjM2NkZTAxYTEvNzcxNGY4YjQtZTA4Yy0z ZWNkLWI2M2QtYWFjNTkwOWFkNzFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjg2YTRlYzMtYTNiNS00ZDcyLWJl ZTItZjU4YzNjZGUwMWExL2I4NmE0ZWMzLWEzYjUtNGQ3Mi1iZWUyLWY1OGMzY2Rl MDFhMS5jcmwwHwYDVR0jBBgwFoAU3fYJlReLt0punKrfsGmFOCZwCxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iODZhNGVjMy1hM2I1LTRkNzItYmVlMi1mNThj M2NkZTAxYTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEqnWwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAInkRmb6tUoGEj4N4QSb0l3lFnXeRNLGo+9wFMn6HDKAWGxAij5h7oqN vslFizyHxdCQwHpYgzbSDIUguS5DZXfABzyZR3EuudQprATtonMBw8K0nF09tDxi Q2VP+y1f0jKOfikCmvDIC1hquXODZfh/9WClHAuOPK3nkIx9marDegAkckXGY3RF Wg/bdEwKvNJ81kmkoznZDGRAGsH5JhyVjBu5TEQuSoS7pzsVHNe1tvLS3xtbjcZi seMFmZDFEoJS7TyPomuDJ/teEoMUptmzoWj+MH7Sktb9R972hwhVayBISucZl3nm l6h70r2AAx0+Xop23evZ0xaKTJ8OBJo= -----END CERTIFICATE-----Generated at Mon May 5 13:48:08 2025 by rpki-client