$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/2d2d1495-0cd5-38fe-9928-8e28c6255bee.roa File: 2d2d1495-0cd5-38fe-9928-8e28c6255bee.roa (raw, json) Hash identifier: hyO0fMMYUGdQt0NflUP0mA+y5gOGM3ZvNxJ1UAQg0vM= Subject key identifier: 43:19:AD:F5:D6:A4:A5:16:0A:1D:44:9E:DB:6E:2B:83:78:CA:81:4E Certificate issuer: /CN=dc455e58-6189-4f28-b803-61a965a21c65 Certificate serial: 010D0C9F432858499F9D5D11D1081D4661E05E80 Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/2d2d1495-0cd5-38fe-9928-8e28c6255bee.roa Signing time: Wed 23 Apr 2025 17:04:25 +0000 ROA not before: Wed 23 Apr 2025 17:04:25 +0000 ROA not after: Tue 22 Jul 2025 17:04:25 +0000 asID: 31898 IP address blocks: 170.114.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:9d:5d:11:d1:08:1d:46:61:e0:5e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65 Validity Not Before: Apr 23 17:04:25 2025 GMT Not After : Jul 22 17:04:25 2025 GMT Subject: CN=3519c649-8696-4e50-925d-809ed6a47daa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:99:55:66:eb:39:1f:c6:f2:0b:35:99:01:05: 6e:1d:4e:15:6a:55:ed:b2:9c:1c:6d:b0:9f:1c:3a: 42:70:49:1e:63:b5:36:a3:b0:fd:d0:bf:34:11:78: 89:84:d1:79:43:0f:5f:35:46:0e:a9:55:56:69:06: 19:58:6f:7f:d5:48:c7:a5:61:6f:2d:25:a3:3a:b5: 4c:fb:53:9d:87:5b:a9:29:f0:7b:67:69:23:76:09: 2c:d3:01:f5:36:33:6a:40:c4:b9:82:16:d6:3b:77: 24:46:29:30:37:79:1d:09:3c:27:ec:ad:0c:81:d1: 01:df:0b:c7:0a:4a:35:47:cb:8d:ef:a9:74:33:87: 56:90:59:68:5c:97:87:e9:dc:a7:ba:e3:68:33:67: 4e:50:4d:e9:45:65:b3:60:0f:71:f8:fb:91:e0:6b: 23:57:4e:f8:e4:d4:29:58:28:44:9b:84:8d:19:71: c1:4d:22:bf:d1:5b:08:70:3d:1a:ed:b6:dd:1c:b9: fe:7c:b7:f8:63:a2:03:2c:22:00:45:db:64:78:2c: cc:66:fd:1c:7d:67:ba:ec:d5:94:ac:af:9d:4f:e2: 5a:ac:d9:4e:60:ff:65:eb:eb:ad:cb:32:56:4a:02: f4:04:aa:fd:5e:9c:d5:c2:b0:b6:91:74:77:da:e3: 22:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:19:AD:F5:D6:A4:A5:16:0A:1D:44:9E:DB:6E:2B:83:78:CA:81:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/2d2d1495-0cd5-38fe-9928-8e28c6255bee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl X509v3 Authority Key Identifier: keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer sbgp-ipAddrBlock: critical IPv4: 170.114.101.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:16:82:a4:31:81:b0:67:88:e0:62:44:29:43:51:70:a3:5c: ac:12:ec:7f:27:9d:aa:6b:b9:4c:fb:c5:16:ae:93:20:ce:9d: f3:de:46:3f:e0:b7:8d:12:9a:f1:f8:3e:3c:07:4f:d6:dc:78: c8:42:41:6b:0b:23:28:99:a7:6d:9a:db:7d:80:53:a4:e4:d4: 0b:6c:42:20:67:7f:ec:83:1b:90:d5:e6:10:1f:d7:80:f4:90: 3c:47:9c:f6:b2:5a:6b:39:c5:17:69:af:c9:b2:3d:10:93:64: 0c:3e:3c:03:a2:d1:b4:32:a1:ac:72:13:5d:6e:cb:ce:07:ec: d5:c0:a5:62:da:fb:b7:7f:dd:83:5a:47:c7:95:2d:68:a5:7e: de:3a:64:e2:4a:be:df:bb:1a:3b:55:e7:0f:22:0d:2f:46:be: 22:30:18:52:ea:c3:5d:2b:f5:39:39:8b:46:35:d9:13:3f:75: 1f:d1:55:6f:bb:22:17:f4:bd:36:d9:46:ca:e5:f3:bf:aa:f7: 15:35:21:c5:24:eb:63:1e:33:0d:da:f5:92:f8:81:a6:f1:18: e7:e8:32:e9:f6:86:6f:7f:59:d5:2a:c7:61:84:47:2f:22:19: cf:32:45:05:56:1b:3d:0f:70:4d:f8:98:b6:28:c0:90:49:56: 10:2a:d8:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfnV0R0QgdRmHgXoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx YzY1MB4XDTI1MDQyMzE3MDQyNVoXDTI1MDcyMjE3MDQyNVowLzEtMCsGA1UEAxMk MzUxOWM2NDktODY5Ni00ZTUwLTkyNWQtODA5ZWQ2YTQ3ZGFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJlVZus5H8byCzWZAQVuHU4ValXtspwcbbCf HDpCcEkeY7U2o7D90L80EXiJhNF5Qw9fNUYOqVVWaQYZWG9/1UjHpWFvLSWjOrVM +1Odh1upKfB7Z2kjdgks0wH1NjNqQMS5ghbWO3ckRikwN3kdCTwn7K0MgdEB3wvH Cko1R8uN76l0M4dWkFloXJeH6dynuuNoM2dOUE3pRWWzYA9x+PuR4GsjV0745NQp WChEm4SNGXHBTSK/0VsIcD0a7bbdHLn+fLf4Y6IDLCIARdtkeCzMZv0cfWe67NWU rK+dT+JarNlOYP9l6+utyzJWSgL0BKr9XpzVwrC2kXR32uMi5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEMZrfXWpKUWCh1EnttuK4N4yoFOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1 NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvMmQyZDE0OTUtMGNkNS0z OGZlLTk5MjgtOGUyOGM2MjU1YmVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4 MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5 NjVhMjFjNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqnJlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF8WgqQxgbBniOBiRClDUXCjXKwS7H8nnapruUz7xRaukyDOnfPeRj/g t40SmvH4PjwHT9bceMhCQWsLIyiZp22a232AU6Tk1AtsQiBnf+yDG5DV5hAf14D0 kDxHnPayWms5xRdpr8myPRCTZAw+PAOi0bQyoaxyE11uy84H7NXApWLa+7d/3YNa R8eVLWilft46ZOJKvt+7GjtV5w8iDS9GviIwGFLqw10r9Tk5i0Y12RM/dR/RVW+7 Ihf0vTbZRsrl87+q9xU1IcUk62MeMw3a9ZL4gabxGOfoMun2hm9/WdUqx2GERy8i Gc8yRQVWGz0PcE34mLYowJBJVhAq2NA= -----END CERTIFICATE-----Generated at Mon May 5 15:36:02 2025 by rpki-client