$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/04ea0880-2156-4bff-9635-feb716ac6fae/e9e7f3ff-b648-37a2-8c6c-4cfadba2adcb.roa File: e9e7f3ff-b648-37a2-8c6c-4cfadba2adcb.roa (raw, json) Hash identifier: 2I2/js0+FmrbHxVFK4ueBo+rwnBm6MAXMoN3py8ATWc= Subject key identifier: 17:2E:A4:4E:31:98:72:1D:84:36:5B:CD:8D:AB:A1:71:9C:59:C6:94 Certificate issuer: /CN=04ea0880-2156-4bff-9635-feb716ac6fae Certificate serial: 010D0C9F4328584A23C00A8DBCD8C5B8A9313D80 Authority key identifier: 6E:3A:68:AB:A2:03:66:89:AF:ED:B5:C8:72:5A:38:C4:FD:E4:1C:BF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/04ea0880-2156-4bff-9635-feb716ac6fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/04ea0880-2156-4bff-9635-feb716ac6fae/e9e7f3ff-b648-37a2-8c6c-4cfadba2adcb.roa Signing time: Tue 10 Jun 2025 01:00:50 +0000 ROA not before: Tue 10 Jun 2025 01:00:50 +0000 ROA not after: Mon 08 Sep 2025 01:00:50 +0000 asID: 398419 IP address blocks: 170.39.22.0/24 maxlen: 24 2602:fd45::/36 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/04ea0880-2156-4bff-9635-feb716ac6fae/04ea0880-2156-4bff-9635-feb716ac6fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/04ea0880-2156-4bff-9635-feb716ac6fae/04ea0880-2156-4bff-9635-feb716ac6fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/04ea0880-2156-4bff-9635-feb716ac6fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:23:c0:0a:8d:bc:d8:c5:b8:a9:31:3d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04ea0880-2156-4bff-9635-feb716ac6fae Validity Not Before: Jun 10 01:00:50 2025 GMT Not After : Sep 8 01:00:50 2025 GMT Subject: CN=a7630ce5-55ca-456a-8f0d-7e9ecb460b94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:20:f1:d1:57:80:a5:51:db:46:82:82:aa:ec: d4:c5:2e:91:64:44:a4:9d:26:72:db:92:b3:e4:c0: 1f:be:78:e0:1b:a3:d8:e2:b0:b1:33:b7:26:d4:a6: 7b:07:a6:0a:b1:3c:3d:1a:56:51:6d:97:dd:34:c5: b5:a4:62:77:56:14:5d:3f:72:70:f4:ab:a5:e8:4f: df:f3:2e:40:e7:18:fd:29:d0:a7:5a:75:9d:e7:1b: c1:a1:84:17:c8:d6:fa:d7:8f:82:40:99:ba:b5:37: 99:6e:af:8b:ef:df:33:84:2b:9f:ef:a6:ee:7f:5a: 46:4e:7b:d8:ec:1e:ed:c4:44:83:d0:d3:fb:a8:59: ba:35:24:8c:e9:cb:ac:cf:bf:71:15:95:1c:a4:9b: c6:24:88:6f:72:4d:49:31:4c:1a:5c:72:94:c0:b4: 33:2b:ea:2d:7d:8a:1d:4d:03:8b:74:99:ce:38:0b: 6a:37:c2:b7:66:8f:98:a2:6a:af:f6:9b:ff:01:9a: 3d:fb:8a:73:3d:9f:c7:6d:ae:ed:ce:00:dd:50:0e: fc:2f:d3:c6:05:c3:af:a9:8a:3c:3f:d9:0e:72:c8: a5:84:29:f9:86:c8:06:69:7d:0e:ba:a6:f8:3b:05: 4a:e2:12:b0:75:61:da:37:fd:6e:a8:6f:c1:b0:ab: ec:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:2E:A4:4E:31:98:72:1D:84:36:5B:CD:8D:AB:A1:71:9C:59:C6:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/04ea0880-2156-4bff-9635-feb716ac6fae/e9e7f3ff-b648-37a2-8c6c-4cfadba2adcb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/04ea0880-2156-4bff-9635-feb716ac6fae/04ea0880-2156-4bff-9635-feb716ac6fae.crl X509v3 Authority Key Identifier: keyid:6E:3A:68:AB:A2:03:66:89:AF:ED:B5:C8:72:5A:38:C4:FD:E4:1C:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/04ea0880-2156-4bff-9635-feb716ac6fae.cer sbgp-ipAddrBlock: critical IPv4: 170.39.22.0/24 IPv6: 2602:fd45::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:86:db:6b:ff:3a:14:95:eb:c6:b0:d5:6b:16:24:6a:d0:1f: a2:fc:be:1b:08:2d:50:6d:4e:30:c0:77:03:4d:e0:44:5f:63: 52:14:55:cd:e9:cd:41:19:39:91:f8:d9:9e:85:79:39:2e:c0: 01:15:2d:db:da:88:3d:a7:22:de:4d:21:3c:9b:2e:95:7e:68: 0b:9e:51:ec:f9:0c:4c:59:d7:41:d7:19:4d:d6:3f:14:8f:5b: f1:0c:b8:ac:1a:65:f3:19:a7:e2:22:82:a6:0e:5b:5d:3b:6d: 52:bf:ae:c4:73:12:f4:43:f8:63:38:b2:bb:ba:a5:12:09:17: 6a:2f:7a:8d:9b:d7:93:12:30:be:c5:50:1f:59:48:5a:fa:d5: 2d:3e:ea:a7:5e:94:89:e4:e7:dd:01:73:fa:3f:27:31:7d:f8: 2a:0e:f5:ce:ed:fd:fc:b8:33:69:5d:62:cd:32:d0:17:9f:ad: fd:f1:e7:28:5b:93:19:8f:7b:f9:41:71:99:03:27:e7:d5:63: 1c:2a:94:46:63:4c:97:89:8c:73:b1:ed:f7:06:3d:e3:d9:2c: dd:bb:74:29:5a:82:e4:97:4d:ff:64:1b:b5:85:4f:65:b3:04: 7a:0a:46:0b:d5:fb:20:f1:fe:ff:33:55:a4:17:89:59:97:34: 9f:74:27:b0 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEojwAqNvNjFuKkxPYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDRlYTA4ODAtMjE1Ni00YmZmLTk2MzUtZmViNzE2YWM2 ZmFlMB4XDTI1MDYxMDAxMDA1MFoXDTI1MDkwODAxMDA1MFowLzEtMCsGA1UEAxMk YTc2MzBjZTUtNTVjYS00NTZhLThmMGQtN2U5ZWNiNDYwYjk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvyDx0VeApVHbRoKCquzUxS6RZESknSZy25Kz 5MAfvnjgG6PY4rCxM7cm1KZ7B6YKsTw9GlZRbZfdNMW1pGJ3VhRdP3Jw9Kul6E/f 8y5A5xj9KdCnWnWd5xvBoYQXyNb614+CQJm6tTeZbq+L798zhCuf76buf1pGTnvY 7B7txESD0NP7qFm6NSSM6cusz79xFZUcpJvGJIhvck1JMUwaXHKUwLQzK+otfYod TQOLdJnOOAtqN8K3Zo+Yomqv9pv/AZo9+4pzPZ/Hba7tzgDdUA78L9PGBcOvqYo8 P9kOcsilhCn5hsgGaX0Ouqb4OwVK4hKwdWHaN/1uqG/BsKvsnQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFBcupE4xmHIdhDZbzY2roXGcWcaUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wNGVh MDg4MC0yMTU2LTRiZmYtOTYzNS1mZWI3MTZhYzZmYWUvZTllN2YzZmYtYjY0OC0z N2EyLThjNmMtNGNmYWRiYTJhZGNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMDRlYTA4ODAtMjE1Ni00YmZmLTk2 MzUtZmViNzE2YWM2ZmFlLzA0ZWEwODgwLTIxNTYtNGJmZi05NjM1LWZlYjcxNmFj NmZhZS5jcmwwHwYDVR0jBBgwFoAUbjpoq6IDZomv7bXIclo4xP3kHL8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8wNGVhMDg4MC0yMTU2LTRiZmYtOTYzNS1mZWI3 MTZhYzZmYWUuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAqicWMA4E AgACMAgDBgQmAv1FADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCMhttr/zoUlevGsNVrFiRq0B+i/L4bCC1Q bU4wwHcDTeBEX2NSFFXN6c1BGTmR+NmehXk5LsABFS3b2og9pyLeTSE8my6VfmgL nlHs+QxMWddB1xlN1j8Uj1vxDLisGmXzGafiIoKmDltdO21Sv67EcxL0Q/hjOLK7 uqUSCRdqL3qNm9eTEjC+xVAfWUha+tUtPuqnXpSJ5OfdAXP6PycxffgqDvXO7f38 uDNpXWLNMtAXn6398ecoW5MZj3v5QXGZAyfn1WMcKpRGY0yXiYxzse33Bj3j2Szd u3QpWoLkl03/ZBu1hU9lswR6CkYL1fsg8f7/M1WkF4lZlzSfdCew -----END CERTIFICATE-----Generated at Wed Jul 2 00:16:39 2025 by rpki-client