$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/d35fa800-6931-32b7-8fb1-22f6f8cb8456.roa File: d35fa800-6931-32b7-8fb1-22f6f8cb8456.roa (raw, json) Hash identifier: 3wNHvDARJhN4jgwQ1LwZNYc3AiHut7QZ3zbpjQ+kQNY= Subject key identifier: 63:57:BB:DF:23:2B:F2:96:13:77:A3:2E:65:10:7E:3A:E6:40:12:04 Certificate issuer: /CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279 Certificate serial: 010D0C9F4328584A331AEDB10D02290EB0454B44 Authority key identifier: E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/d35fa800-6931-32b7-8fb1-22f6f8cb8456.roa Signing time: Sun 15 Jun 2025 13:01:02 +0000 ROA not before: Sun 15 Jun 2025 13:01:02 +0000 ROA not after: Sat 13 Sep 2025 13:01:02 +0000 asID: 16509 IP address blocks: 170.225.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:33:1a:ed:b1:0d:02:29:0e:b0:45:4b:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279 Validity Not Before: Jun 15 13:01:02 2025 GMT Not After : Sep 13 13:01:02 2025 GMT Subject: CN=e7095e17-98d9-4328-9fdc-698ddf7e17fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:51:78:05:96:ff:5e:4e:c8:62:78:2e:d3:ea: 6b:97:fb:a0:87:83:02:7a:88:e3:1a:ee:ac:ff:ee: 51:72:1e:c4:6d:1b:e7:c1:55:66:10:c0:c8:5f:c4: 8e:ed:cf:06:f0:db:a5:3d:fa:54:66:5f:15:e7:23: 4e:62:2a:d0:43:51:5a:83:ac:80:aa:5c:78:61:4c: dc:49:2f:71:c9:3c:d9:84:e4:16:46:a8:c7:88:8c: c4:e3:01:9f:73:9c:24:ad:f6:c2:73:a3:bc:7a:ce: af:da:55:7d:4d:fb:d0:fd:02:b0:ef:e7:4e:54:0d: 4b:2d:bd:ab:01:94:8a:61:97:93:5e:d9:4a:e1:3b: ae:85:52:07:42:cd:33:51:ce:27:64:2c:c6:2c:f8: 05:64:97:e9:eb:64:ae:3c:4d:82:41:46:ca:1b:e1: 5a:cd:8b:7a:3d:2c:f8:32:38:f2:ae:72:c4:26:2d: 6f:34:83:35:25:25:b5:59:26:27:05:61:37:48:6a: 14:4e:62:6c:b6:2b:dd:0d:d4:be:3f:f8:bf:ff:b6: ab:b2:36:8d:ad:11:d1:14:08:51:ef:3c:af:65:59: d4:cd:c2:80:31:0e:05:fe:0d:09:9b:31:6c:8a:22: 7b:66:5e:90:b4:fd:36:6e:f1:20:d0:0d:d2:ac:e9: be:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:57:BB:DF:23:2B:F2:96:13:77:A3:2E:65:10:7E:3A:E6:40:12:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/d35fa800-6931-32b7-8fb1-22f6f8cb8456.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl X509v3 Authority Key Identifier: keyid:E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer sbgp-ipAddrBlock: critical IPv4: 170.225.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:a4:8e:be:7d:b4:5c:18:4f:b1:52:d5:09:e6:7e:7d:d0:49: 8c:cd:11:a2:83:87:f0:38:b6:e3:38:9c:ee:66:71:30:8f:08: 29:b3:11:3f:d4:a6:e2:22:d7:01:e3:d0:f0:78:e7:ab:36:9f: 8a:45:54:19:2e:e9:0b:22:cb:75:ed:a5:e6:4c:61:41:43:9d: ce:7b:4c:6e:87:d3:03:d2:ec:5a:1c:96:a4:9b:53:17:61:aa: ec:3c:e9:0a:a5:7c:72:0a:3d:57:1e:8b:de:34:9d:db:f2:a9: 8a:04:f6:80:0c:8c:64:f3:0d:63:ab:f7:21:6f:db:c6:ee:6b: 90:b0:f6:bf:3f:9c:42:03:ca:3b:ae:90:79:48:12:99:81:d0: 87:fd:0d:9d:e5:e1:64:53:7e:22:dc:d1:ec:bb:0b:ae:74:41: c4:70:e6:39:65:1f:2e:44:ce:f3:a9:74:dc:2d:af:a7:5e:6b: af:28:19:19:3c:ff:c3:7c:58:f5:8a:6b:81:21:07:76:21:2f: 7b:4b:8a:e1:dd:6a:16:7a:63:cb:de:aa:02:cc:1c:1c:1d:5f: 15:ed:00:bf:bf:ea:5c:b7:f8:55:23:ea:e6:c9:63:83:0d:ac: fb:ee:c8:bb:d1:a7:cb:eb:58:39:c1:47:73:e1:aa:28:fb:14: 67:91:91:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEozGu2xDQIpDrBFS0QwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGNjOTdkOTYtNTJkMC00OGE3LWE5ZWEtYTc3NDlkYzA4 Mjc5MB4XDTI1MDYxNTEzMDEwMloXDTI1MDkxMzEzMDEwMlowLzEtMCsGA1UEAxMk ZTcwOTVlMTctOThkOS00MzI4LTlmZGMtNjk4ZGRmN2UxN2ZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzlF4BZb/Xk7IYngu0+prl/ugh4MCeojjGu6s /+5Rch7EbRvnwVVmEMDIX8SO7c8G8NulPfpUZl8V5yNOYirQQ1Fag6yAqlx4YUzc SS9xyTzZhOQWRqjHiIzE4wGfc5wkrfbCc6O8es6v2lV9TfvQ/QKw7+dOVA1LLb2r AZSKYZeTXtlK4TuuhVIHQs0zUc4nZCzGLPgFZJfp62SuPE2CQUbKG+FazYt6PSz4 MjjyrnLEJi1vNIM1JSW1WSYnBWE3SGoUTmJstivdDdS+P/i//7arsjaNrRHRFAhR 7zyvZVnUzcKAMQ4F/g0JmzFsiiJ7Zl6QtP02bvEg0A3SrOm+mQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGNXu98jK/KWE3ejLmUQfjrmQBIEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Y2M5 N2Q5Ni01MmQwLTQ4YTctYTllYS1hNzc0OWRjMDgyNzkvZDM1ZmE4MDAtNjkzMS0z MmI3LThmYjEtMjJmNmY4Y2I4NDU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGNjOTdkOTYtNTJkMC00OGE3LWE5 ZWEtYTc3NDlkYzA4Mjc5LzRjYzk3ZDk2LTUyZDAtNDhhNy1hOWVhLWE3NzQ5ZGMw ODI3OS5jcmwwHwYDVR0jBBgwFoAU4vrUb8NLZY1545Z6Y6GWz7mMjdUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80Y2M5N2Q5Ni01MmQwLTQ4YTctYTllYS1hNzc0 OWRjMDgyNzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAquHZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADykjr59tFwYT7FS1Qnmfn3QSYzNEaKDh/A4tuM4nO5mcTCPCCmzET/U puIi1wHj0PB456s2n4pFVBku6Qsiy3XtpeZMYUFDnc57TG6H0wPS7FoclqSbUxdh quw86QqlfHIKPVcei940ndvyqYoE9oAMjGTzDWOr9yFv28bua5Cw9r8/nEIDyjuu kHlIEpmB0If9DZ3l4WRTfiLc0ey7C650QcRw5jllHy5EzvOpdNwtr6dea68oGRk8 /8N8WPWKa4EhB3YhL3tLiuHdahZ6Y8veqgLMHBwdXxXtAL+/6ly3+FUj6ubJY4MN rPvuyLvRp8vrWDnBR3Phqij7FGeRkRw= -----END CERTIFICATE-----Generated at Tue Jul 1 13:18:11 2025 by rpki-client