$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/0177ee73-5ebb-3ef9-b3fb-b2c06748c642.roa File: 0177ee73-5ebb-3ef9-b3fb-b2c06748c642.roa (raw, json) Hash identifier: qP0ADLhqa3N4Bk+QCjpjbYPVg2MNQFnWJ53W3+AefNA= Subject key identifier: 13:C1:0C:9D:C9:3A:CA:A3:58:B0:3A:67:A2:04:C8:88:CC:EB:EB:20 Certificate issuer: /CN=dc455e58-6189-4f28-b803-61a965a21c65 Certificate serial: 010D0C9F4328584961B98EA6DFD865B8581FF980 Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/0177ee73-5ebb-3ef9-b3fb-b2c06748c642.roa Signing time: Tue 01 Apr 2025 13:01:00 +0000 ROA not before: Tue 01 Apr 2025 13:01:00 +0000 ROA not after: Mon 30 Jun 2025 13:01:00 +0000 asID: 31898 IP address blocks: 170.114.112.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:61:b9:8e:a6:df:d8:65:b8:58:1f:f9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65 Validity Not Before: Apr 1 13:01:00 2025 GMT Not After : Jun 30 13:01:00 2025 GMT Subject: CN=50f1247e-9669-49e2-8cd2-0eb5a999ce23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:30:7e:ff:b1:66:40:6a:61:c6:23:ec:09:7e: 96:bd:64:23:b0:91:b3:b5:0d:d8:ad:d2:1e:c5:1c: b7:94:23:95:04:39:a0:a3:60:74:0e:4a:57:b0:6e: ca:61:09:d0:db:db:3f:cc:1f:85:64:81:34:3d:d7: 3f:d0:4c:d7:51:bb:18:4b:42:f1:c5:88:55:c6:fd: cb:cd:e5:80:ee:fb:6b:4b:14:e4:fc:6e:b1:0f:7a: b0:58:45:33:98:c1:9d:d7:54:d9:c5:51:9d:02:42: 7a:a0:c4:9e:8a:63:d9:a1:3b:1f:9b:7e:de:9c:a6: ab:84:b0:6f:14:ca:a1:3f:7e:72:ce:a2:c9:2e:a8: cb:48:21:cf:34:5b:99:e4:c0:7a:86:d6:17:8d:bc: 41:51:f6:70:1b:01:7b:e0:a9:93:0f:51:b3:bd:0a: 66:06:cf:95:23:d1:59:4f:56:23:91:da:bc:fc:75: e8:19:b6:89:ea:69:0b:a0:ac:e8:ca:99:90:27:5e: 11:b0:2d:15:11:77:a9:b0:48:43:57:10:a6:23:5f: 5a:cd:19:af:04:74:ad:63:4c:ee:26:5d:73:0c:ad: ea:34:a5:8a:ac:48:75:36:d5:49:44:2d:14:17:8e: 47:6e:52:a9:4a:5a:08:7f:6c:7a:60:dc:01:f2:38: 3b:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:C1:0C:9D:C9:3A:CA:A3:58:B0:3A:67:A2:04:C8:88:CC:EB:EB:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/0177ee73-5ebb-3ef9-b3fb-b2c06748c642.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl X509v3 Authority Key Identifier: keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer sbgp-ipAddrBlock: critical IPv4: 170.114.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:3f:34:74:6d:02:58:13:dd:29:72:5c:cb:ae:6a:30:91:57: f7:03:66:81:1a:87:e3:48:5c:90:8f:34:a5:27:cf:68:92:c3: c4:b2:25:34:f0:48:86:a6:af:36:02:64:c3:b1:9e:1c:bf:ef: 3a:f7:37:ac:b4:15:70:57:96:54:41:f0:b3:81:f3:95:6c:5c: 65:ad:96:28:be:eb:67:7f:d8:42:39:cb:2b:34:4b:76:d6:9e: e9:09:ae:e8:2d:03:9c:37:63:fa:cd:cc:ab:c3:47:18:a5:2e: a9:b9:51:07:7b:18:ce:54:e3:d7:41:83:bd:6c:31:10:fb:14: 2e:c0:11:0c:b8:49:f9:31:1a:bf:e8:0a:60:54:bb:ed:62:15: 6a:17:d0:f9:40:0e:90:72:9d:d2:e6:45:76:69:ae:d1:dd:d5: d2:a8:ed:66:1c:62:a1:0c:4e:ce:d7:b1:d0:5b:27:12:d8:61: 75:3c:45:8a:79:9f:ae:95:c8:7c:bf:b1:e8:a2:95:fc:6b:d5: 78:96:9b:2a:fc:d9:08:14:09:22:ae:b4:5c:bd:55:e7:80:e1: b3:b1:ef:b4:80:6f:3a:34:11:eb:d2:1a:36:6f:49:14:4e:6f: 78:95:e7:43:56:78:90:c3:c4:09:ac:52:eb:54:ba:f1:87:04: 6e:4b:1b:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElhuY6m39hluFgf+YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx YzY1MB4XDTI1MDQwMTEzMDEwMFoXDTI1MDYzMDEzMDEwMFowLzEtMCsGA1UEAxMk NTBmMTI0N2UtOTY2OS00OWUyLThjZDItMGViNWE5OTljZTIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjB+/7FmQGphxiPsCX6WvWQjsJGztQ3YrdIe xRy3lCOVBDmgo2B0DkpXsG7KYQnQ29s/zB+FZIE0Pdc/0EzXUbsYS0LxxYhVxv3L zeWA7vtrSxTk/G6xD3qwWEUzmMGd11TZxVGdAkJ6oMSeimPZoTsfm37enKarhLBv FMqhP35yzqLJLqjLSCHPNFuZ5MB6htYXjbxBUfZwGwF74KmTD1GzvQpmBs+VI9FZ T1Yjkdq8/HXoGbaJ6mkLoKzoypmQJ14RsC0VEXepsEhDVxCmI19azRmvBHStY0zu Jl1zDK3qNKWKrEh1NtVJRC0UF45HblKpSloIf2x6YNwB8jg7iwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBPBDJ3JOsqjWLA6Z6IEyIjM6+sgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1 NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvMDE3N2VlNzMtNWViYi0z ZWY5LWIzZmItYjJjMDY3NDhjNjQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4 MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5 NjVhMjFjNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqnJwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABg/NHRtAlgT3SlyXMuuajCRV/cDZoEah+NIXJCPNKUnz2iSw8SyJTTw SIamrzYCZMOxnhy/7zr3N6y0FXBXllRB8LOB85VsXGWtlii+62d/2EI5yys0S3bW nukJrugtA5w3Y/rNzKvDRxilLqm5UQd7GM5U49dBg71sMRD7FC7AEQy4SfkxGr/o CmBUu+1iFWoX0PlADpByndLmRXZprtHd1dKo7WYcYqEMTs7XsdBbJxLYYXU8RYp5 n66VyHy/seiilfxr1XiWmyr82QgUCSKutFy9VeeA4bOx77SAbzo0EevSGjZvSRRO b3iV50NWeJDDxAmsUutUuvGHBG5LG74= -----END CERTIFICATE-----Generated at Tue May 6 18:57:59 2025 by rpki-client