$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/1d07058c-91e1-3e8c-b855-66b4e81e6476.roa File: 1d07058c-91e1-3e8c-b855-66b4e81e6476.roa (raw, json) Hash identifier: Hfq4aCne0/e459SlauXvVwKHDhuY0xWDJ8SsK47wkTk= Subject key identifier: D4:A1:62:7B:65:FD:05:14:48:B4:59:76:42:F1:83:3D:26:28:CD:17 Certificate issuer: /CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279 Certificate serial: 010D0C9F4328584A331AEDA0C974E126AC439A54 Authority key identifier: E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/1d07058c-91e1-3e8c-b855-66b4e81e6476.roa Signing time: Sun 15 Jun 2025 13:01:02 +0000 ROA not before: Sun 15 Jun 2025 13:01:02 +0000 ROA not after: Sat 13 Sep 2025 13:01:02 +0000 asID: 14618 IP address blocks: 170.225.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:33:1a:ed:a0:c9:74:e1:26:ac:43:9a:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279 Validity Not Before: Jun 15 13:01:02 2025 GMT Not After : Sep 13 13:01:02 2025 GMT Subject: CN=6b3f71c4-4327-4b35-b9c9-ff7c43af5e14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:cc:d3:a3:ad:32:ab:d4:d5:cd:2d:d4:c2:fd: 06:20:30:e8:da:93:ca:e6:e9:34:9c:d1:19:4e:ca: d6:96:7f:1a:5c:66:82:90:17:70:d8:1d:8b:cd:66: c3:39:27:a9:36:84:37:53:09:7a:b7:4b:6f:30:2c: 12:7a:8d:cf:6a:60:c0:bf:38:a9:c8:b6:66:1a:a2: 65:0f:9b:b2:60:06:96:d0:62:9e:b8:9c:75:13:e3: 6a:3a:e7:4c:37:39:ba:40:60:2b:7b:4b:80:8c:0d: 98:7d:bc:f1:eb:f2:82:15:a6:56:7c:5f:38:3a:ab: 19:ac:7b:a2:15:6f:b5:28:db:e4:1a:db:0f:58:04: 02:f9:4a:fe:7b:07:f5:ae:58:ca:5e:66:3d:fd:9b: e8:c9:e1:22:7d:fe:70:36:1a:f3:22:30:d3:d0:2e: 49:86:b4:a6:73:2d:34:51:c6:a9:0b:8c:be:a2:43: 85:f2:0f:70:fc:fb:cc:90:a9:55:2a:6c:b2:09:73: b3:0d:22:a9:39:b6:86:ad:ab:5f:4e:48:49:e9:f6: 32:86:4a:ff:d0:ea:6c:0f:b6:ae:a2:54:65:86:ac: c2:8e:59:89:ed:5b:82:13:c7:00:92:12:dc:84:a8: a1:60:ae:19:c2:6f:8c:b2:54:b7:57:93:dc:df:c3: ef:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:A1:62:7B:65:FD:05:14:48:B4:59:76:42:F1:83:3D:26:28:CD:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/1d07058c-91e1-3e8c-b855-66b4e81e6476.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl X509v3 Authority Key Identifier: keyid:E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer sbgp-ipAddrBlock: critical IPv4: 170.225.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:fb:94:90:31:31:f3:d2:4c:f8:7b:73:e4:25:24:7b:7b:ab: 93:b2:ed:56:f3:aa:4f:1b:db:28:f7:f9:cf:a7:47:3b:9c:f3: 8e:1f:5c:91:64:ac:72:a2:c7:37:f3:49:a4:9e:62:f9:1c:eb: 3b:c1:ea:08:68:bc:97:4e:2b:e8:04:97:c1:89:f2:27:2b:3a: 7b:51:0e:83:70:b7:69:fb:02:88:af:5d:b0:d2:bb:a1:b1:18: 51:58:a9:65:f8:a4:a3:24:ae:0d:47:11:db:7a:a5:69:bb:1b: 3f:be:a9:7f:b0:ec:02:dd:2d:17:97:d2:72:e9:9d:c4:8b:10: da:f1:93:59:99:10:af:8b:61:c3:ee:84:d5:24:b3:f9:f0:1d: c3:b2:ef:dd:55:44:63:c4:a4:2a:2b:5d:ec:d0:54:ba:87:9c: 49:66:78:87:40:ed:d7:11:57:db:82:61:d4:8c:3e:3a:6b:51: d5:0a:76:1a:64:1a:d4:c4:27:9a:45:86:7f:d1:80:f9:5b:2b: d6:3c:17:75:01:da:d0:dc:ee:47:7b:1f:1d:99:82:49:5a:a1: ad:af:1b:b1:59:b3:dd:ba:c8:ee:88:96:d2:f0:ad:f2:01:b5: 59:05:54:d1:53:a6:46:ce:f4:ab:97:0d:f3:de:ff:c0:7f:8f: bd:d2:39:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEozGu2gyXThJqxDmlQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGNjOTdkOTYtNTJkMC00OGE3LWE5ZWEtYTc3NDlkYzA4 Mjc5MB4XDTI1MDYxNTEzMDEwMloXDTI1MDkxMzEzMDEwMlowLzEtMCsGA1UEAxMk NmIzZjcxYzQtNDMyNy00YjM1LWI5YzktZmY3YzQzYWY1ZTE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMzTo60yq9TVzS3Uwv0GIDDo2pPK5uk0nNEZ TsrWln8aXGaCkBdw2B2LzWbDOSepNoQ3Uwl6t0tvMCwSeo3PamDAvzipyLZmGqJl D5uyYAaW0GKeuJx1E+NqOudMNzm6QGAre0uAjA2Yfbzx6/KCFaZWfF84OqsZrHui FW+1KNvkGtsPWAQC+Ur+ewf1rljKXmY9/ZvoyeEiff5wNhrzIjDT0C5JhrSmcy00 UcapC4y+okOF8g9w/PvMkKlVKmyyCXOzDSKpObaGratfTkhJ6fYyhkr/0OpsD7au olRlhqzCjlmJ7VuCE8cAkhLchKihYK4Zwm+MslS3V5Pc38PvhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNShYntl/QUUSLRZdkLxgz0mKM0XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Y2M5 N2Q5Ni01MmQwLTQ4YTctYTllYS1hNzc0OWRjMDgyNzkvMWQwNzA1OGMtOTFlMS0z ZThjLWI4NTUtNjZiNGU4MWU2NDc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGNjOTdkOTYtNTJkMC00OGE3LWE5 ZWEtYTc3NDlkYzA4Mjc5LzRjYzk3ZDk2LTUyZDAtNDhhNy1hOWVhLWE3NzQ5ZGMw ODI3OS5jcmwwHwYDVR0jBBgwFoAU4vrUb8NLZY1545Z6Y6GWz7mMjdUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80Y2M5N2Q5Ni01MmQwLTQ4YTctYTllYS1hNzc0 OWRjMDgyNzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAquHZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG37lJAxMfPSTPh7c+QlJHt7q5Oy7Vbzqk8b2yj3+c+nRzuc844fXJFk rHKixzfzSaSeYvkc6zvB6ghovJdOK+gEl8GJ8icrOntRDoNwt2n7AoivXbDSu6Gx GFFYqWX4pKMkrg1HEdt6pWm7Gz++qX+w7ALdLReX0nLpncSLENrxk1mZEK+LYcPu hNUks/nwHcOy791VRGPEpCorXezQVLqHnElmeIdA7dcRV9uCYdSMPjprUdUKdhpk GtTEJ5pFhn/RgPlbK9Y8F3UB2tDc7kd7Hx2Zgklaoa2vG7FZs926yO6IltLwrfIB tVkFVNFTpkbO9KuXDfPe/8B/j73SObI= -----END CERTIFICATE-----Generated at Sun Jun 29 07:55:35 2025 by rpki-client