$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/572d45e6-6a32-30de-a6e6-c4214389980b.roa File: 572d45e6-6a32-30de-a6e6-c4214389980b.roa (raw, json) Hash identifier: ozdZPup1Av19N5XLaaj8mYVG8PPJiFQeaJagzyZAkJQ= Subject key identifier: 79:83:49:41:AB:45:4A:BA:FA:10:B3:FF:7C:1A:00:C6:20:97:1D:BD Certificate issuer: /CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279 Certificate serial: 010D0C9F4328584A374AD14F5D3C98281F2AECC0 Authority key identifier: E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/572d45e6-6a32-30de-a6e6-c4214389980b.roa Signing time: Tue 17 Jun 2025 01:00:48 +0000 ROA not before: Tue 17 Jun 2025 01:00:48 +0000 ROA not after: Mon 15 Sep 2025 01:00:48 +0000 asID: 14618 IP address blocks: 170.225.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:37:4a:d1:4f:5d:3c:98:28:1f:2a:ec:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279 Validity Not Before: Jun 17 01:00:48 2025 GMT Not After : Sep 15 01:00:48 2025 GMT Subject: CN=f317b1de-6f0d-4fc5-be68-64f71884bdb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:51:46:ac:b6:c5:38:f5:94:a5:73:39:3b:9d: bb:a9:c5:91:9f:1f:8f:40:94:11:4a:2b:a1:87:89: 54:cd:04:df:aa:09:a9:fa:e7:49:10:a6:21:74:fe: 3d:cd:ec:4c:85:75:92:48:6b:ce:6c:56:76:c6:b8: f3:dd:f6:41:e3:ec:6d:8f:0a:b7:26:3e:66:5c:88: 1e:21:90:93:4f:4c:a1:3b:b1:3a:66:aa:a3:67:df: f5:0a:a1:52:9c:69:a3:06:61:c2:7f:5b:f9:57:fa: b2:7b:44:4f:c2:1a:a1:1b:30:c0:fb:5a:19:58:62: 56:f8:92:2d:7f:9c:5b:5b:79:62:ca:86:fb:8e:e8: a4:47:59:97:f3:d9:c6:5f:ee:ad:5d:a2:93:61:4c: 86:94:4b:2d:e6:20:a9:72:ce:10:a9:73:19:b9:7f: b3:43:70:85:00:ec:f9:b6:65:da:b0:0f:46:66:c8: 8f:b1:22:dd:71:06:ec:c2:11:a7:63:e3:82:d2:74: 15:f1:d1:47:49:e1:6c:04:d7:84:a4:bd:b6:c4:02: 93:dc:b9:1d:9c:2d:ac:80:7a:9a:ec:96:46:be:86: 04:5a:8b:0f:1f:42:b6:ee:88:29:f7:93:ea:68:e3: 1b:61:e0:ba:81:a2:f4:43:65:39:3c:27:74:20:f9: ab:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:83:49:41:AB:45:4A:BA:FA:10:B3:FF:7C:1A:00:C6:20:97:1D:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/572d45e6-6a32-30de-a6e6-c4214389980b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl X509v3 Authority Key Identifier: keyid:E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer sbgp-ipAddrBlock: critical IPv4: 170.225.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:c4:84:dd:8c:90:d3:d2:41:b4:dc:3c:9e:0a:0c:a3:7b:b5: 87:c4:ff:41:b4:a5:cb:f0:63:ad:b7:e2:b3:e7:3c:5b:2a:99: 2a:a5:68:97:e5:89:6c:f2:77:b0:ad:3d:f5:a0:4d:aa:63:d6: 5d:45:fb:45:18:17:3f:ac:27:98:6a:7e:00:4c:a5:ec:63:b9: c9:69:48:9d:09:8e:bd:91:06:18:69:c6:c1:8b:73:a7:69:49: e5:79:62:be:1e:28:a3:e2:22:a2:0c:dd:b2:90:e6:2d:09:0c: e1:c5:7c:52:d7:b9:df:45:52:41:ef:32:b7:8c:ff:e3:d2:0b: e9:23:e0:34:5e:e0:ec:7f:50:28:55:bb:e9:a9:d9:1a:49:36: 77:93:8b:00:0e:63:bf:df:11:92:ab:0e:e5:34:11:1a:3c:42: 6e:e3:62:39:07:e0:2c:09:cf:26:ea:99:8c:fb:61:af:b1:2b: ad:a6:1c:3e:33:17:d3:0f:49:b6:b8:8f:22:18:e0:a2:24:2a: ce:97:8e:4a:6e:27:cb:9d:aa:24:73:3e:59:60:cf:db:21:0a: 8c:88:27:3b:4c:79:81:ee:51:39:d5:fd:81:ac:7a:4f:85:37: c1:18:2d:31:16:73:12:33:3f:e7:14:01:e0:38:ec:5e:f5:58: a5:ff:ba:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo3StFPXTyYKB8q7MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGNjOTdkOTYtNTJkMC00OGE3LWE5ZWEtYTc3NDlkYzA4 Mjc5MB4XDTI1MDYxNzAxMDA0OFoXDTI1MDkxNTAxMDA0OFowLzEtMCsGA1UEAxMk ZjMxN2IxZGUtNmYwZC00ZmM1LWJlNjgtNjRmNzE4ODRiZGIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlFGrLbFOPWUpXM5O527qcWRnx+PQJQRSiuh h4lUzQTfqgmp+udJEKYhdP49zexMhXWSSGvObFZ2xrjz3fZB4+xtjwq3Jj5mXIge IZCTT0yhO7E6ZqqjZ9/1CqFSnGmjBmHCf1v5V/qye0RPwhqhGzDA+1oZWGJW+JIt f5xbW3liyob7juikR1mX89nGX+6tXaKTYUyGlEst5iCpcs4QqXMZuX+zQ3CFAOz5 tmXasA9GZsiPsSLdcQbswhGnY+OC0nQV8dFHSeFsBNeEpL22xAKT3LkdnC2sgHqa 7JZGvoYEWosPH0K27ogp95PqaOMbYeC6gaL0Q2U5PCd0IPmrpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHmDSUGrRUq6+hCz/3waAMYglx29MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Y2M5 N2Q5Ni01MmQwLTQ4YTctYTllYS1hNzc0OWRjMDgyNzkvNTcyZDQ1ZTYtNmEzMi0z MGRlLWE2ZTYtYzQyMTQzODk5ODBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGNjOTdkOTYtNTJkMC00OGE3LWE5 ZWEtYTc3NDlkYzA4Mjc5LzRjYzk3ZDk2LTUyZDAtNDhhNy1hOWVhLWE3NzQ5ZGMw ODI3OS5jcmwwHwYDVR0jBBgwFoAU4vrUb8NLZY1545Z6Y6GWz7mMjdUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80Y2M5N2Q5Ni01MmQwLTQ4YTctYTllYS1hNzc0 OWRjMDgyNzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAquHYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACDEhN2MkNPSQbTcPJ4KDKN7tYfE/0G0pcvwY6234rPnPFsqmSqlaJfl iWzyd7CtPfWgTapj1l1F+0UYFz+sJ5hqfgBMpexjuclpSJ0Jjr2RBhhpxsGLc6dp SeV5Yr4eKKPiIqIM3bKQ5i0JDOHFfFLXud9FUkHvMreM/+PSC+kj4DRe4Ox/UChV u+mp2RpJNneTiwAOY7/fEZKrDuU0ERo8Qm7jYjkH4CwJzybqmYz7Ya+xK62mHD4z F9MPSba4jyIY4KIkKs6XjkpuJ8udqiRzPllgz9shCoyIJztMeYHuUTnV/YGsek+F N8EYLTEWcxIzP+cUAeA47F71WKX/ugs= -----END CERTIFICATE-----Generated at Mon Jun 30 20:28:37 2025 by rpki-client