$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/568b9ef2-c322-3fd7-ad2b-0246191da328.roa File: 568b9ef2-c322-3fd7-ad2b-0246191da328.roa (raw, json) Hash identifier: 5v2tVcyogfunw1VUqAQXKS6lcssyoetLLO7zfirHWY4= Subject key identifier: 43:2C:1D:2C:C9:AE:7E:74:7F:50:27:33:1F:65:48:C0:CB:CB:7A:AB Certificate issuer: /CN=4c5f6fb8-1f68-4792-8def-a616a53280be Certificate serial: 010D0C9F4328584A23C0144F344AEF349DFD2340 Authority key identifier: AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/568b9ef2-c322-3fd7-ad2b-0246191da328.roa Signing time: Tue 10 Jun 2025 01:00:50 +0000 ROA not before: Tue 10 Jun 2025 01:00:50 +0000 ROA not after: Mon 08 Sep 2025 01:00:50 +0000 asID: 9084 IP address blocks: 154.1.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:23:c0:14:4f:34:4a:ef:34:9d:fd:23:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c5f6fb8-1f68-4792-8def-a616a53280be Validity Not Before: Jun 10 01:00:50 2025 GMT Not After : Sep 8 01:00:50 2025 GMT Subject: CN=18a5f25d-df6e-4634-a3bd-1fd786131501 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:df:73:f8:00:41:bf:39:64:fe:55:f1:29:24: 80:82:72:ab:5c:05:bf:b5:e7:ce:9f:4e:a2:f0:ba: 8f:b5:2e:8f:41:05:81:40:c3:bf:e3:30:f6:53:ef: cf:bc:68:4c:5c:d9:0b:5f:89:14:c7:a9:f0:73:1b: b0:22:34:23:4a:96:bf:3a:6a:01:93:ad:c1:68:e9: f5:1a:1d:84:18:bf:53:fc:3c:62:57:f3:6f:d6:2a: 29:fe:fe:d4:3e:2d:c4:eb:d6:49:a2:ae:ac:38:51: 37:97:09:4a:f7:a4:f5:0a:b1:4b:89:44:ac:ca:4d: e3:92:a9:16:57:c1:fe:42:57:fa:96:b8:5a:e2:43: 66:bd:d4:a0:cb:5d:0e:f1:81:41:b4:cc:67:91:08: df:a4:0c:f9:b4:2f:25:f5:15:7e:2e:45:d6:b3:e2: c2:d9:a8:12:30:05:17:b1:85:7a:e0:52:38:c5:23: 46:6c:e5:00:d6:c3:e0:ea:c7:e7:61:9a:48:2d:c0: 2a:a9:aa:ef:6e:ac:05:6d:0e:11:c9:1c:c9:bb:3f: 78:39:cf:1c:16:a5:18:48:24:09:dc:d7:a7:6c:18: 47:3c:4e:2c:fb:10:48:d3:7a:10:af:44:08:03:94: a5:65:41:3b:18:59:a5:0d:1e:43:13:99:3d:91:6e: 84:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:2C:1D:2C:C9:AE:7E:74:7F:50:27:33:1F:65:48:C0:CB:CB:7A:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/568b9ef2-c322-3fd7-ad2b-0246191da328.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl X509v3 Authority Key Identifier: keyid:AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer sbgp-ipAddrBlock: critical IPv4: 154.1.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:75:6d:bc:4c:98:db:ec:5a:c9:0d:ed:2a:0c:52:30:4c:1b: 5d:6e:5a:57:f9:07:b1:2a:56:79:18:b4:38:5b:a3:a2:52:51: f4:54:2a:35:9e:cf:1c:f5:12:96:1f:67:f0:9f:3e:fb:01:bc: 67:c9:5d:c3:39:65:60:8a:be:65:9e:bc:95:13:5b:c0:37:e8: c9:95:0b:05:d5:8e:8d:f5:90:8f:a6:06:d5:99:00:75:58:85: d0:95:a3:55:da:36:0f:2f:f1:2a:b2:00:c7:cf:60:aa:c7:ff: 15:2a:9d:d4:bf:40:97:0c:ee:84:35:c5:57:c9:fc:58:f1:8a: 7e:88:6c:d1:e7:bc:8a:65:66:23:93:0f:f7:85:ef:52:7d:8a: bf:34:cd:4e:93:0f:bb:56:da:15:e1:49:25:fd:9c:bf:be:b5: a6:ac:18:7b:01:90:db:83:59:6f:12:f4:7a:1a:ef:5c:bc:0b: 79:26:4d:a3:a4:7c:37:ff:b8:60:16:d9:74:46:d4:e0:40:10: a1:5e:8c:23:9f:26:c2:c5:d7:71:9f:2a:80:9c:33:b4:22:24: 20:9d:3f:9d:4c:0f:30:c2:8b:c0:ea:fe:42:53:13:d9:fb:13: 19:26:84:b7:50:29:cb:8a:ee:bf:6a:59:a3:81:b2:47:29:8e: 8c:c5:a8:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEojwBRPNErvNJ39I0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGM1ZjZmYjgtMWY2OC00NzkyLThkZWYtYTYxNmE1MzI4 MGJlMB4XDTI1MDYxMDAxMDA1MFoXDTI1MDkwODAxMDA1MFowLzEtMCsGA1UEAxMk MThhNWYyNWQtZGY2ZS00NjM0LWEzYmQtMWZkNzg2MTMxNTAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjt9z+ABBvzlk/lXxKSSAgnKrXAW/tefOn06i 8LqPtS6PQQWBQMO/4zD2U+/PvGhMXNkLX4kUx6nwcxuwIjQjSpa/OmoBk63BaOn1 Gh2EGL9T/DxiV/Nv1iop/v7UPi3E69ZJoq6sOFE3lwlK96T1CrFLiUSsyk3jkqkW V8H+Qlf6lrha4kNmvdSgy10O8YFBtMxnkQjfpAz5tC8l9RV+LkXWs+LC2agSMAUX sYV64FI4xSNGbOUA1sPg6sfnYZpILcAqqarvbqwFbQ4RyRzJuz94Oc8cFqUYSCQJ 3NenbBhHPE4s+xBI03oQr0QIA5SlZUE7GFmlDR5DE5k9kW6EewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEMsHSzJrn50f1AnMx9lSMDLy3qrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80YzVm NmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2YTUzMjgwYmUvNTY4YjllZjItYzMyMi0z ZmQ3LWFkMmItMDI0NjE5MWRhMzI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNGM1ZjZmYjgtMWY2OC00NzkyLThk ZWYtYTYxNmE1MzI4MGJlLzRjNWY2ZmI4LTFmNjgtNDc5Mi04ZGVmLWE2MTZhNTMy ODBiZS5jcmwwHwYDVR0jBBgwFoAUqu/U+Zezd94fL8XYAsEplL9Ek5owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS80YzVmNmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2 YTUzMjgwYmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmgGqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEp1bbxMmNvsWskN7SoMUjBMG11uWlf5B7EqVnkYtDhbo6JSUfRUKjWe zxz1EpYfZ/CfPvsBvGfJXcM5ZWCKvmWevJUTW8A36MmVCwXVjo31kI+mBtWZAHVY hdCVo1XaNg8v8SqyAMfPYKrH/xUqndS/QJcM7oQ1xVfJ/Fjxin6IbNHnvIplZiOT D/eF71J9ir80zU6TD7tW2hXhSSX9nL++taasGHsBkNuDWW8S9Hoa71y8C3kmTaOk fDf/uGAW2XRG1OBAEKFejCOfJsLF13GfKoCcM7QiJCCdP51MDzDCi8Dq/kJTE9n7 ExkmhLdQKcuK7r9qWaOBskcpjozFqFg= -----END CERTIFICATE-----Generated at Mon Jun 30 00:56:09 2025 by rpki-client