$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/5a7f92be-66b2-3204-8a8f-751f364e7c5f.roa File: 5a7f92be-66b2-3204-8a8f-751f364e7c5f.roa (raw, json) Hash identifier: vCxw41KtQ5cbAG1U0GdDC427dVu7p1OgJdljf2j40Iw= Subject key identifier: 61:F8:58:C0:2E:29:E2:31:0D:29:8C:12:92:54:6E:7B:86:E0:9A:34 Certificate issuer: /CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279 Certificate serial: 010D0C9F4328584A374AD1602C690C51DCEEC280 Authority key identifier: E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/5a7f92be-66b2-3204-8a8f-751f364e7c5f.roa Signing time: Tue 17 Jun 2025 01:00:48 +0000 ROA not before: Tue 17 Jun 2025 01:00:48 +0000 ROA not after: Mon 15 Sep 2025 01:00:48 +0000 asID: 16509 IP address blocks: 170.225.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:37:4a:d1:60:2c:69:0c:51:dc:ee:c2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279 Validity Not Before: Jun 17 01:00:48 2025 GMT Not After : Sep 15 01:00:48 2025 GMT Subject: CN=6c941a6e-f5aa-4927-a392-93bc49de9a0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:f5:56:1b:82:a6:3f:ac:64:ff:f9:95:f4:bb: a8:ac:ce:e6:66:8f:02:8f:de:c2:e8:e1:5b:57:bc: 64:42:1b:ba:ef:37:86:49:f8:f2:1d:12:c7:d8:f8: d9:cc:c4:40:43:9e:56:56:76:f9:a8:a4:a6:2d:69: af:05:5e:a1:b6:3e:db:ee:c0:88:7c:2e:37:22:aa: 87:2e:28:35:bd:65:aa:71:6f:ab:e1:8b:02:92:cc: 61:cd:27:7c:cd:38:88:7d:8a:78:ff:b9:84:30:71: 98:ef:e0:33:47:5a:c4:9b:f9:0e:ed:3a:c3:ee:3d: 00:1e:b6:36:ec:21:4d:50:aa:77:5e:84:88:0e:e1: e4:28:c9:58:87:df:72:74:53:8c:7d:8a:39:42:86: a8:53:51:78:f1:25:e9:dd:d5:93:bf:e9:6a:11:24: 81:82:ea:a5:b3:d4:11:d0:0d:26:62:05:1c:dd:bc: ce:39:a6:01:05:e6:67:9a:75:6c:25:18:78:b8:84: 8b:59:c2:6e:d0:30:ec:c5:43:03:e3:bd:e4:02:b6: 3e:e0:05:9e:f2:5c:15:41:44:fa:cf:28:9c:fe:19: bc:48:5d:ff:36:f5:09:51:90:18:9d:6a:d6:a0:95: e2:d0:9b:1c:d9:15:aa:45:37:42:eb:04:53:85:a3: 3d:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:F8:58:C0:2E:29:E2:31:0D:29:8C:12:92:54:6E:7B:86:E0:9A:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/5a7f92be-66b2-3204-8a8f-751f364e7c5f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl X509v3 Authority Key Identifier: keyid:E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer sbgp-ipAddrBlock: critical IPv4: 170.225.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:2b:cf:88:70:1a:2d:6e:b2:29:62:0e:82:62:ae:ba:9a:6f: 69:99:ba:84:77:bd:89:3c:24:72:d3:9a:3b:c9:05:fc:04:3b: 2e:51:b9:53:01:d4:bd:55:c3:9d:e4:47:eb:d4:0e:33:e3:76: 01:75:1d:e6:8e:cb:f3:bf:aa:ff:00:89:15:ea:1a:fb:c6:9a: 58:5e:d2:2f:ce:0b:bd:93:85:7c:81:a4:1c:eb:09:e0:0e:7f: 93:fe:24:e6:89:08:11:c1:02:5b:ab:a8:4e:cb:63:38:54:68: 0f:a8:e3:b4:e2:ca:9f:85:b2:eb:f4:40:d3:ea:cb:2a:fc:c0: 60:68:9e:5f:8d:79:50:02:ab:a3:9d:e3:e1:68:81:08:99:79: 78:c7:c4:7b:3d:a5:5b:ec:c7:7a:e2:95:85:7a:96:f7:09:22: 4c:fe:73:cd:79:45:c8:0b:13:81:cc:71:8e:9f:d8:07:56:a7: 2f:6f:da:83:b9:04:ad:fe:a5:c2:fe:6c:5d:d6:cd:25:fa:98: c0:a3:bd:ab:f8:0c:56:cd:ed:79:9f:1c:a4:71:cf:87:3e:12: 2a:2e:aa:f5:6a:d2:f3:f2:d6:d3:94:f5:e4:6b:c7:16:17:5b: 8c:e0:b8:29:ba:57:e3:91:d9:87:a7:11:f4:25:33:e7:d2:36: 59:c0:2c:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo3StFgLGkMUdzuwoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGNjOTdkOTYtNTJkMC00OGE3LWE5ZWEtYTc3NDlkYzA4 Mjc5MB4XDTI1MDYxNzAxMDA0OFoXDTI1MDkxNTAxMDA0OFowLzEtMCsGA1UEAxMk NmM5NDFhNmUtZjVhYS00OTI3LWEzOTItOTNiYzQ5ZGU5YTBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgvVWG4KmP6xk//mV9LuorM7mZo8Cj97C6OFb V7xkQhu67zeGSfjyHRLH2PjZzMRAQ55WVnb5qKSmLWmvBV6htj7b7sCIfC43IqqH Lig1vWWqcW+r4YsCksxhzSd8zTiIfYp4/7mEMHGY7+AzR1rEm/kO7TrD7j0AHrY2 7CFNUKp3XoSIDuHkKMlYh99ydFOMfYo5QoaoU1F48SXp3dWTv+lqESSBguqls9QR 0A0mYgUc3bzOOaYBBeZnmnVsJRh4uISLWcJu0DDsxUMD473kArY+4AWe8lwVQUT6 zyic/hm8SF3/NvUJUZAYnWrWoJXi0Jsc2RWqRTdC6wRThaM9BQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGH4WMAuKeIxDSmMEpJUbnuG4Jo0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Y2M5 N2Q5Ni01MmQwLTQ4YTctYTllYS1hNzc0OWRjMDgyNzkvNWE3ZjkyYmUtNjZiMi0z MjA0LThhOGYtNzUxZjM2NGU3YzVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGNjOTdkOTYtNTJkMC00OGE3LWE5 ZWEtYTc3NDlkYzA4Mjc5LzRjYzk3ZDk2LTUyZDAtNDhhNy1hOWVhLWE3NzQ5ZGMw ODI3OS5jcmwwHwYDVR0jBBgwFoAU4vrUb8NLZY1545Z6Y6GWz7mMjdUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80Y2M5N2Q5Ni01MmQwLTQ4YTctYTllYS1hNzc0 OWRjMDgyNzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAquHYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADkrz4hwGi1usiliDoJirrqab2mZuoR3vYk8JHLTmjvJBfwEOy5RuVMB 1L1Vw53kR+vUDjPjdgF1HeaOy/O/qv8AiRXqGvvGmlhe0i/OC72ThXyBpBzrCeAO f5P+JOaJCBHBAlurqE7LYzhUaA+o47Tiyp+Fsuv0QNPqyyr8wGBonl+NeVACq6Od 4+FogQiZeXjHxHs9pVvsx3rilYV6lvcJIkz+c815RcgLE4HMcY6f2AdWpy9v2oO5 BK3+pcL+bF3WzSX6mMCjvav4DFbN7XmfHKRxz4c+EiouqvVq0vPy1tOU9eRrxxYX W4zguCm6V+OR2YenEfQlM+fSNlnALG0= -----END CERTIFICATE-----Generated at Mon Jun 30 19:32:45 2025 by rpki-client