$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a60fbd0d-1e0a-4b8a-b467-0b6197d8b5d0/796a8503-13ba-3800-8978-3da85e63b13a.roa File: 796a8503-13ba-3800-8978-3da85e63b13a.roa (raw, json) Hash identifier: fRGJ4bgIg7ayfjfgHF+d7LGh3R2dadtsWWrXgnV51MU= Subject key identifier: 0F:CA:43:EB:78:F5:1C:23:F5:2E:82:0E:21:18:30:3A:BC:29:4E:7C Certificate issuer: /CN=a60fbd0d-1e0a-4b8a-b467-0b6197d8b5d0 Certificate serial: 010D0C9F4328584A3A157A502EE7C3C20E773000 Authority key identifier: 95:0E:F3:FC:09:32:41:BA:87:2F:DD:36:4C:32:2D:CA:15:15:3D:E1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a60fbd0d-1e0a-4b8a-b467-0b6197d8b5d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a60fbd0d-1e0a-4b8a-b467-0b6197d8b5d0/796a8503-13ba-3800-8978-3da85e63b13a.roa Signing time: Wed 18 Jun 2025 01:00:50 +0000 ROA not before: Wed 18 Jun 2025 01:00:50 +0000 ROA not after: Tue 16 Sep 2025 01:00:50 +0000 asID: 952 IP address blocks: 172.110.130.0/24 maxlen: 24 185.167.182.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a60fbd0d-1e0a-4b8a-b467-0b6197d8b5d0/a60fbd0d-1e0a-4b8a-b467-0b6197d8b5d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a60fbd0d-1e0a-4b8a-b467-0b6197d8b5d0/a60fbd0d-1e0a-4b8a-b467-0b6197d8b5d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a60fbd0d-1e0a-4b8a-b467-0b6197d8b5d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3a:15:7a:50:2e:e7:c3:c2:0e:77:30:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a60fbd0d-1e0a-4b8a-b467-0b6197d8b5d0 Validity Not Before: Jun 18 01:00:50 2025 GMT Not After : Sep 16 01:00:50 2025 GMT Subject: CN=dacaa3db-e9ba-4ff7-8bcf-ae684ed7924d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:2c:5b:db:f1:39:d2:45:b4:13:22:d0:f5:8e: 1e:90:42:17:47:e2:81:13:b3:19:37:aa:58:6a:c8: 42:7b:8b:0d:88:89:5e:d8:49:de:4d:3f:ab:e6:b0: a0:ce:d6:00:6c:47:44:fe:f2:f7:28:03:8a:29:76: 33:96:31:e7:e5:b2:f8:d0:c1:9f:10:6a:52:c0:f5: 22:48:28:e6:2f:2c:fd:01:e1:5d:9a:91:2c:84:89: dd:53:46:66:24:8d:8f:e0:a7:62:13:ef:f6:75:3a: d4:cf:14:60:68:c8:9f:ec:f6:25:1d:36:c1:8f:49: ac:f8:29:00:8e:01:7a:85:6d:d9:44:88:42:b0:e2: cb:4c:1b:bf:7c:43:f5:3b:82:3c:63:74:45:ee:3a: 28:ab:a8:a3:d3:94:c0:93:59:f5:c0:71:30:f3:be: 46:62:0d:b7:24:78:07:6a:12:55:ff:74:d7:bb:e0: f8:a1:14:ec:f5:98:2e:4f:57:7f:d8:ff:e2:5b:62: 03:eb:20:69:a5:09:c6:4c:99:80:da:3b:5a:db:ec: 0f:81:49:df:53:85:a7:e6:1a:28:20:0b:bd:e0:2f: 82:e8:68:8a:02:dc:9f:71:ad:13:cb:60:3d:97:df: 70:f3:69:15:ec:ce:f4:6c:1c:32:d2:42:a4:94:39: 41:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:CA:43:EB:78:F5:1C:23:F5:2E:82:0E:21:18:30:3A:BC:29:4E:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a60fbd0d-1e0a-4b8a-b467-0b6197d8b5d0/796a8503-13ba-3800-8978-3da85e63b13a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a60fbd0d-1e0a-4b8a-b467-0b6197d8b5d0/a60fbd0d-1e0a-4b8a-b467-0b6197d8b5d0.crl X509v3 Authority Key Identifier: keyid:95:0E:F3:FC:09:32:41:BA:87:2F:DD:36:4C:32:2D:CA:15:15:3D:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a60fbd0d-1e0a-4b8a-b467-0b6197d8b5d0.cer sbgp-ipAddrBlock: critical IPv4: 172.110.130.0/24 185.167.182.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:e8:62:3c:1f:dd:6a:52:37:41:dd:47:97:e0:4c:3f:e3:9e: 6d:32:c3:41:b3:19:d5:e1:a5:7a:60:d6:a5:1b:d8:7f:e3:c7: 2c:19:18:6c:c8:6e:25:de:c1:6c:13:06:d9:39:ff:71:35:1c: a6:11:43:3b:3a:df:06:3e:9d:32:84:62:e2:89:13:e0:0d:0d: b5:3b:c8:d5:d3:f4:9f:e0:e3:74:03:a9:96:0b:6c:9a:d3:c9: 4f:74:e3:8b:11:9d:d9:8d:3c:59:b3:75:dd:58:ee:7e:31:f1: e7:c5:76:85:bf:23:f4:48:78:2f:75:24:7b:30:17:8c:c8:26: e8:33:6f:fe:14:6f:29:a6:e8:3f:86:cc:04:70:ee:6c:e9:fb: ba:4f:40:d9:fa:14:6a:ba:82:36:3e:95:6a:5c:3c:58:95:17: fa:b3:6f:86:74:52:0e:18:6e:08:8a:c1:1c:36:8f:3a:52:88: 8c:1c:cc:ce:ce:c2:c4:5b:7a:29:5f:b5:58:96:7e:79:e8:a7: 73:3f:93:9c:43:d4:79:ec:5f:7e:80:40:28:cb:3d:6e:38:b9: a5:42:1e:7e:2d:94:6b:1a:df:89:6d:72:7f:cc:1a:96:38:85: e0:d5:aa:68:c4:17:b0:ec:a2:53:28:47:c0:38:bd:c3:c7:95: 20:3d:bb:8c -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEo6FXpQLufDwg53MAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTYwZmJkMGQtMWUwYS00YjhhLWI0NjctMGI2MTk3ZDhi NWQwMB4XDTI1MDYxODAxMDA1MFoXDTI1MDkxNjAxMDA1MFowLzEtMCsGA1UEAxMk ZGFjYWEzZGItZTliYS00ZmY3LThiY2YtYWU2ODRlZDc5MjRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnixb2/E50kW0EyLQ9Y4ekEIXR+KBE7MZN6pY ashCe4sNiIle2EneTT+r5rCgztYAbEdE/vL3KAOKKXYzljHn5bL40MGfEGpSwPUi SCjmLyz9AeFdmpEshIndU0ZmJI2P4KdiE+/2dTrUzxRgaMif7PYlHTbBj0ms+CkA jgF6hW3ZRIhCsOLLTBu/fEP1O4I8Y3RF7jooq6ij05TAk1n1wHEw875GYg23JHgH ahJV/3TXu+D4oRTs9ZguT1d/2P/iW2ID6yBppQnGTJmA2jta2+wPgUnfU4Wn5hoo IAu94C+C6GiKAtyfca0Ty2A9l99w82kV7M70bBwy0kKklDlB9QIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFA/KQ+t49Rwj9S6CDiEYMDq8KU58MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hNjBm YmQwZC0xZTBhLTRiOGEtYjQ2Ny0wYjYxOTdkOGI1ZDAvNzk2YTg1MDMtMTNiYS0z ODAwLTg5NzgtM2RhODVlNjNiMTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYTYwZmJkMGQtMWUwYS00YjhhLWI0 NjctMGI2MTk3ZDhiNWQwL2E2MGZiZDBkLTFlMGEtNGI4YS1iNDY3LTBiNjE5N2Q4 YjVkMC5jcmwwHwYDVR0jBBgwFoAUlQ7z/AkyQbqHL902TDItyhUVPeEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hNjBmYmQwZC0xZTBhLTRiOGEtYjQ2Ny0wYjYx OTdkOGI1ZDAuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQArG6CAwQA uae2MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAA3oYjwf3WpSN0HdR5fgTD/jnm0yw0GzGdXhpXpg1qUb2H/j xywZGGzIbiXewWwTBtk5/3E1HKYRQzs63wY+nTKEYuKJE+ANDbU7yNXT9J/g43QD qZYLbJrTyU9044sRndmNPFmzdd1Y7n4x8efFdoW/I/RIeC91JHswF4zIJugzb/4U bymm6D+GzARw7mzp+7pPQNn6FGq6gjY+lWpcPFiVF/qzb4Z0Ug4YbgiKwRw2jzpS iIwczM7OwsRbeilftViWfnnop3M/k5xD1HnsX36AQCjLPW44uaVCHn4tlGsa34lt cn/MGpY4heDVqmjEF7DsolMoR8A4vcPHlSA9u4w= -----END CERTIFICATE-----Generated at Mon Jun 30 15:50:38 2025 by rpki-client