$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/59c564f1-4ba5-32b0-9f5c-0604725cdce8.roa File: 59c564f1-4ba5-32b0-9f5c-0604725cdce8.roa (raw, json) Hash identifier: TyoscymyhEbVQ8+65u7DpD/bi6iQAQf53tqKOdJJpKc= Subject key identifier: CA:E4:AB:F1:2B:BE:55:03:1E:7A:73:85:FF:48:75:65:F7:4A:13:7A Certificate issuer: /CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52 Certificate serial: 010D0C9F4328584A4AD595DD33E6C71992C5BB40 Authority key identifier: 06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/59c564f1-4ba5-32b0-9f5c-0604725cdce8.roa Signing time: Tue 24 Jun 2025 01:00:50 +0000 ROA not before: Tue 24 Jun 2025 01:00:50 +0000 ROA not after: Mon 22 Sep 2025 01:00:50 +0000 asID: 22142 IP address blocks: 170.186.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4a:d5:95:dd:33:e6:c7:19:92:c5:bb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52 Validity Not Before: Jun 24 01:00:50 2025 GMT Not After : Sep 22 01:00:50 2025 GMT Subject: CN=be65aed5-5717-4d66-b9ec-9afef2342ca6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:98:7c:c7:b9:ac:bd:d5:35:e2:1c:69:19:32: 6d:76:60:20:68:9d:bf:ae:d1:ad:fa:2a:60:d1:5c: a9:c1:2f:74:bb:09:97:65:1f:47:2f:61:30:ed:a9: 76:52:f6:c6:1b:e6:6f:71:67:b4:35:23:19:02:3e: 42:4a:6b:81:b7:99:46:2d:11:17:3c:58:70:aa:af: 25:3d:0a:ef:26:f5:50:72:23:a7:ac:52:24:79:77: b9:51:21:d7:1b:87:98:3b:89:1b:da:32:6a:36:91: 85:7f:5d:dd:53:c7:45:0e:77:89:60:9d:c8:8c:0f: 0b:98:e9:46:54:9b:4c:50:3e:55:41:b9:fe:61:f6: 42:d4:b1:e8:32:14:42:5c:cd:ca:99:16:6d:0d:d6: 2c:a2:e0:3e:2f:db:b7:20:5e:52:4f:b4:8f:8f:5d: 1f:90:e5:53:22:83:cc:45:df:b0:67:ed:ef:4e:25: 78:25:4e:a5:bc:e2:9f:d8:07:8a:47:43:54:19:ff: fe:0a:57:75:c0:3d:dc:90:71:2f:e5:0c:c9:3d:6f: 13:84:5e:06:94:f0:f4:e4:fc:bd:99:82:b2:75:0f: d5:9d:60:56:7d:47:9b:e0:2d:b8:65:77:3a:e1:90: c3:84:83:4d:2d:bc:11:55:d2:13:01:76:48:80:26: 80:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:E4:AB:F1:2B:BE:55:03:1E:7A:73:85:FF:48:75:65:F7:4A:13:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/59c564f1-4ba5-32b0-9f5c-0604725cdce8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl X509v3 Authority Key Identifier: keyid:06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer sbgp-ipAddrBlock: critical IPv4: 170.186.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:be:10:cd:ef:e9:30:56:72:bd:55:89:a7:f2:34:7c:c1:d3: a6:68:b4:dd:0b:92:2a:f3:13:ef:00:51:00:d3:52:26:e9:cc: cc:4f:4a:08:d3:6e:21:f5:fa:80:f7:e6:42:6e:3a:1b:d1:f0: 69:9b:86:fb:e7:9e:32:76:fe:84:25:af:86:06:26:ba:9f:16: f7:ab:d3:09:02:f8:30:af:a6:06:1b:0e:a3:4f:61:cf:2c:53: f0:11:01:45:cc:fe:f0:22:52:1a:2f:c9:7d:bf:8e:43:bd:47: 02:0d:8a:d9:19:56:2a:4c:5e:23:22:d6:02:b3:6c:7f:34:3a: 20:f5:e8:6a:4e:51:33:52:ca:ae:08:2e:0f:66:fa:9f:46:b8: 1d:f5:9f:36:1d:db:0b:34:8e:58:7c:a3:7c:2c:d8:ac:97:96: 47:b7:b3:3c:6a:3a:f5:43:d6:e4:68:2a:fb:80:9f:56:bf:f6: 63:38:a0:75:97:b0:48:db:0a:cd:0c:0a:a3:82:41:71:2e:61: cd:74:bb:cd:7c:2d:73:9e:f6:5a:d5:36:e2:05:18:fa:37:a3: e6:8e:cd:af:cb:26:c2:e4:4b:7a:e0:30:da:98:fa:f5:0b:fd: d2:57:d6:bc:34:25:bf:b2:2a:d3:a7:4f:32:25:8e:de:91:7d: 3a:a6:b0:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpK1ZXdM+bHGZLFu0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjhhZWVlNzItYmM5Yy00YTAxLWE5ZjUtMzhhODBhYzg0 ZDUyMB4XDTI1MDYyNDAxMDA1MFoXDTI1MDkyMjAxMDA1MFowLzEtMCsGA1UEAxMk YmU2NWFlZDUtNTcxNy00ZDY2LWI5ZWMtOWFmZWYyMzQyY2E2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz5h8x7msvdU14hxpGTJtdmAgaJ2/rtGt+ipg 0VypwS90uwmXZR9HL2Ew7al2UvbGG+ZvcWe0NSMZAj5CSmuBt5lGLREXPFhwqq8l PQrvJvVQciOnrFIkeXe5USHXG4eYO4kb2jJqNpGFf13dU8dFDneJYJ3IjA8LmOlG VJtMUD5VQbn+YfZC1LHoMhRCXM3KmRZtDdYsouA+L9u3IF5ST7SPj10fkOVTIoPM Rd+wZ+3vTiV4JU6lvOKf2AeKR0NUGf/+Cld1wD3ckHEv5QzJPW8ThF4GlPD05Py9 mYKydQ/VnWBWfUeb4C24ZXc64ZDDhINNLbwRVdITAXZIgCaA8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMrkq/ErvlUDHnpzhf9IdWX3ShN6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yOGFl ZWU3Mi1iYzljLTRhMDEtYTlmNS0zOGE4MGFjODRkNTIvNTljNTY0ZjEtNGJhNS0z MmIwLTlmNWMtMDYwNDcyNWNkY2U4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjhhZWVlNzItYmM5Yy00YTAxLWE5 ZjUtMzhhODBhYzg0ZDUyLzI4YWVlZTcyLWJjOWMtNGEwMS1hOWY1LTM4YTgwYWM4 NGQ1Mi5jcmwwHwYDVR0jBBgwFoAUBlg76lfW1Hc6X/ENdO9tmux2QfUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yOGFlZWU3Mi1iYzljLTRhMDEtYTlmNS0zOGE4 MGFjODRkNTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqrqYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD2+EM3v6TBWcr1ViafyNHzB06ZotN0LkirzE+8AUQDTUibpzMxPSgjT biH1+oD35kJuOhvR8GmbhvvnnjJ2/oQlr4YGJrqfFver0wkC+DCvpgYbDqNPYc8s U/ARAUXM/vAiUhovyX2/jkO9RwINitkZVipMXiMi1gKzbH80OiD16GpOUTNSyq4I Lg9m+p9GuB31nzYd2ws0jlh8o3ws2KyXlke3szxqOvVD1uRoKvuAn1a/9mM4oHWX sEjbCs0MCqOCQXEuYc10u818LXOe9lrVNuIFGPo3o+aOza/LJsLkS3rgMNqY+vUL /dJX1rw0Jb+yKtOnTzIljt6RfTqmsGQ= -----END CERTIFICATE-----Generated at Sun Jun 29 22:49:56 2025 by rpki-client