$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/41be0ceb-ff50-3eb0-b345-6be8100276cc.roa File: 41be0ceb-ff50-3eb0-b345-6be8100276cc.roa (raw, json) Hash identifier: 4AKxZmAAZizYEqPfxFShgj5VpHM5a1i4AiNQHwKsC/U= Subject key identifier: F2:AF:45:FB:20:89:C6:1C:61:64:21:75:4D:5A:CE:31:D9:F3:BE:4C Certificate issuer: /CN=dc455e58-6189-4f28-b803-61a965a21c65 Certificate serial: 010D0C9F43285849AD1A0A37D25392759E237200 Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/41be0ceb-ff50-3eb0-b345-6be8100276cc.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 31898 IP address blocks: 170.114.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:0a:37:d2:53:92:75:9e:23:72:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65 Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=9289fa3c-a42a-4a8f-aee2-40ea4b9f6142 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e3:85:ea:7b:8c:07:e9:12:e7:02:f1:bc:79: c9:a9:65:df:42:1b:7b:f5:a5:6c:96:59:d9:d5:b4: ed:37:23:8a:0a:f1:f4:32:95:56:63:bd:a5:4c:4c: f0:38:11:bd:a7:1c:23:79:f1:74:71:10:d4:43:56: ab:43:53:a7:2f:24:9f:00:c1:db:65:97:72:e7:05: 96:1e:88:6c:77:65:6a:1a:3a:b0:ce:f8:9a:8d:54: 6c:cc:af:14:d4:e2:f5:26:cd:d5:e7:cf:b6:17:57: 0f:3a:1a:a3:54:1e:48:d0:83:eb:2d:2d:ea:a0:58: d9:f4:0e:58:ab:0e:1b:34:2d:fd:b2:57:f3:da:df: 49:93:15:52:23:a2:32:29:2d:f2:28:f9:a1:dc:7a: 23:f9:79:56:f6:8d:1a:65:f6:51:9e:2e:bd:8d:06: f0:0e:a3:0a:53:a6:c3:4c:e3:6c:fa:18:cf:1f:47: 07:c2:60:51:d2:59:7c:4b:15:e5:3b:67:42:52:8e: 82:dc:27:6e:9d:6f:28:c1:f6:45:d1:17:e1:21:05: b5:59:f4:b7:8d:19:f5:6c:a0:75:d9:68:fe:a9:79: 77:cf:24:15:40:c4:78:03:7a:06:48:a9:a2:55:bc: 56:36:b7:e6:44:51:e9:2b:6b:ab:99:fa:62:d0:3e: ae:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:AF:45:FB:20:89:C6:1C:61:64:21:75:4D:5A:CE:31:D9:F3:BE:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/41be0ceb-ff50-3eb0-b345-6be8100276cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl X509v3 Authority Key Identifier: keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer sbgp-ipAddrBlock: critical IPv4: 170.114.76.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:dd:a7:82:f8:7d:74:4b:66:82:e0:67:dc:d6:03:52:80:f5: 03:6b:13:06:20:28:4c:b6:24:18:11:46:27:2a:29:92:4e:ba: f2:1a:b5:82:84:fb:25:f6:14:7c:a5:17:49:a8:9b:60:9b:24: 02:4a:a1:cc:db:e4:bc:7c:d1:21:36:77:9f:6f:da:4b:ed:7e: c3:40:6a:d2:f6:8a:ae:42:b4:bb:5a:1e:56:40:aa:08:6c:0e: 12:ec:ef:81:1c:cb:b6:01:62:24:54:72:80:9b:0a:37:99:68: 37:34:02:9e:0c:0f:ed:86:7e:50:2b:e9:ae:23:fc:28:8b:e5: d5:98:c4:7e:b9:6a:cb:44:be:86:61:43:a2:9d:6b:a6:2d:28: f1:de:ef:14:f4:21:08:d2:35:2d:63:d0:66:02:af:20:ae:d0: 95:9e:79:0e:73:3a:90:0f:a9:25:60:6c:ca:28:2f:df:84:77: f6:d9:2b:b4:9b:de:ae:7e:1d:21:f6:e7:44:ac:9d:b3:f9:b6: e8:aa:ee:4e:73:e7:33:51:b9:81:49:e7:09:15:85:99:a8:72: ef:59:59:9a:a4:5c:02:37:7d:c9:47:62:a6:d2:94:24:bf:54: d4:b9:21:00:f2:35:7c:c1:b3:cd:11:7a:f6:b4:aa:f2:ae:b7: e1:d2:05:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmtGgo30lOSdZ4jcgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx YzY1MB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk OTI4OWZhM2MtYTQyYS00YThmLWFlZTItNDBlYTRiOWY2MTQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOOF6nuMB+kS5wLxvHnJqWXfQht79aVsllnZ 1bTtNyOKCvH0MpVWY72lTEzwOBG9pxwjefF0cRDUQ1arQ1OnLySfAMHbZZdy5wWW Hohsd2VqGjqwzviajVRszK8U1OL1Js3V58+2F1cPOhqjVB5I0IPrLS3qoFjZ9A5Y qw4bNC39slfz2t9JkxVSI6IyKS3yKPmh3Hoj+XlW9o0aZfZRni69jQbwDqMKU6bD TONs+hjPH0cHwmBR0ll8SxXlO2dCUo6C3CdunW8owfZF0RfhIQW1WfS3jRn1bKB1 2Wj+qXl3zyQVQMR4A3oGSKmiVbxWNrfmRFHpK2urmfpi0D6uxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPKvRfsgicYcYWQhdU1azjHZ875MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1 NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvNDFiZTBjZWItZmY1MC0z ZWIwLWIzNDUtNmJlODEwMDI3NmNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4 MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5 NjVhMjFjNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqnJMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJTdp4L4fXRLZoLgZ9zWA1KA9QNrEwYgKEy2JBgRRicqKZJOuvIatYKE +yX2FHylF0mom2CbJAJKoczb5Lx80SE2d59v2kvtfsNAatL2iq5CtLtaHlZAqghs DhLs74Ecy7YBYiRUcoCbCjeZaDc0Ap4MD+2GflAr6a4j/CiL5dWYxH65astEvoZh Q6Kda6YtKPHe7xT0IQjSNS1j0GYCryCu0JWeeQ5zOpAPqSVgbMooL9+Ed/bZK7Sb 3q5+HSH250SsnbP5tuiq7k5z5zNRuYFJ5wkVhZmocu9ZWZqkXAI3fclHYqbSlCS/ VNS5IQDyNXzBs80Reva0qvKut+HSBQE= -----END CERTIFICATE-----Generated at Thu May 8 10:06:59 2025 by rpki-client