$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/b5934f7c-5b65-3efa-991f-cc82903aa949.roa File: b5934f7c-5b65-3efa-991f-cc82903aa949.roa (raw, json) Hash identifier: hww5s9vMa7vb+8BEMpusYjmUhzCIsc/5VxSM7tEsLXA= Subject key identifier: E1:F1:83:BC:79:6A:92:0A:D8:74:A8:82:FF:D5:27:DE:07:3C:B5:71 Certificate issuer: /CN=3a8d6c4c-eb82-43f1-80cc-884c560bd0bd Certificate serial: 010D0C9F4328584A43DB0937A106414546BCE900 Authority key identifier: 6E:8B:F4:7D:E4:DB:28:26:29:13:4D:8E:C3:9D:0A:17:DC:6A:B2:01 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/b5934f7c-5b65-3efa-991f-cc82903aa949.roa Signing time: Sat 21 Jun 2025 13:01:03 +0000 ROA not before: Sat 21 Jun 2025 13:01:03 +0000 ROA not after: Fri 19 Sep 2025 13:01:03 +0000 asID: 14618 IP address blocks: 170.200.188.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:43:db:09:37:a1:06:41:45:46:bc:e9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a8d6c4c-eb82-43f1-80cc-884c560bd0bd Validity Not Before: Jun 21 13:01:03 2025 GMT Not After : Sep 19 13:01:03 2025 GMT Subject: CN=a0698954-6d0d-4905-aadf-2c12bee4266e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:06:68:ab:2d:c2:0c:19:c4:6f:ae:7d:9c:12: 01:8e:7f:31:f8:68:5f:64:58:10:53:1d:95:19:17: 2d:bd:5f:61:a1:22:a2:0b:be:b8:f2:72:66:18:dc: 45:c9:26:98:27:d0:b3:8c:48:7e:9e:42:af:f4:05: ca:cf:45:99:a3:2f:58:5d:e0:8d:47:18:8b:b1:5f: 54:c5:63:0b:e1:ca:1b:7b:41:45:7b:ed:ab:27:af: b5:6c:5e:57:17:a4:96:15:4b:67:5b:c5:f7:3f:60: 25:b3:56:61:5d:87:de:d3:84:74:93:2e:b8:c0:cf: 85:4a:e2:68:b4:5b:b1:31:77:66:28:62:63:00:6c: 30:ed:36:79:bc:2e:0c:23:6a:76:4f:97:2b:5c:b3: 4d:53:94:a8:a8:32:05:c4:b0:92:af:e3:71:d8:02: 83:b8:10:4f:ea:7d:5a:b4:83:c0:d0:53:02:02:26: 1e:0b:6b:63:70:f8:ae:ef:53:83:fc:28:19:96:5c: 23:78:eb:c7:ae:17:e6:8d:ab:e7:03:98:c3:c8:b6: b7:59:69:6f:57:17:2b:db:e7:04:dd:42:e7:f1:c5: e1:34:ec:41:1d:30:36:10:7c:2c:32:6f:c4:c5:93: 58:06:02:64:32:50:a9:6e:53:5f:d6:8e:5f:bf:08: dd:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:F1:83:BC:79:6A:92:0A:D8:74:A8:82:FF:D5:27:DE:07:3C:B5:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/b5934f7c-5b65-3efa-991f-cc82903aa949.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.crl X509v3 Authority Key Identifier: keyid:6E:8B:F4:7D:E4:DB:28:26:29:13:4D:8E:C3:9D:0A:17:DC:6A:B2:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.cer sbgp-ipAddrBlock: critical IPv4: 170.200.188.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:71:7a:71:02:0d:c0:a7:db:c5:a5:98:9d:62:4a:b9:ed:dc: 44:97:01:9d:e1:c1:91:96:53:17:4c:96:b9:fe:fc:a6:81:af: 0d:ab:66:cf:0a:a6:ee:2b:66:69:34:d3:f7:ce:e3:ad:00:c0: e3:0c:8b:02:83:54:19:2f:3e:1b:fa:f9:23:c3:85:a5:0a:e1: d0:1d:38:9a:3e:1b:55:1c:5c:13:b3:b4:31:41:d7:dd:60:90: 38:15:c3:5a:a8:a0:11:d5:03:15:b4:df:f1:a1:b5:01:d4:69: 13:ec:a9:8c:f5:05:c5:9f:9e:92:1d:dd:f3:c2:d8:3f:1f:30: 4a:f1:17:65:e6:1c:11:37:21:cd:a8:b3:01:25:c9:3a:a4:58: 5b:8b:ff:61:8b:6f:b8:bf:49:9c:36:1f:66:51:2f:b9:41:76: 0e:17:99:bb:c0:18:80:a6:26:8e:65:e4:1b:d0:c9:24:6e:b6: cb:2a:3c:4b:e7:e5:12:20:c3:d3:7c:80:b1:9f:ca:35:b9:14: 12:14:e4:e8:6e:44:d3:21:1e:db:45:22:0c:01:4b:ce:7e:47: 7d:3b:88:5a:08:64:ca:55:45:7b:43:f9:73:7b:c6:62:be:ae: d8:7a:4c:ed:84:93:47:47:05:7f:53:1a:8e:6c:32:5d:a6:20: fc:5d:1a:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpD2wk3oQZBRUa86QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2E4ZDZjNGMtZWI4Mi00M2YxLTgwY2MtODg0YzU2MGJk MGJkMB4XDTI1MDYyMTEzMDEwM1oXDTI1MDkxOTEzMDEwM1owLzEtMCsGA1UEAxMk YTA2OTg5NTQtNmQwZC00OTA1LWFhZGYtMmMxMmJlZTQyNjZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhgZoqy3CDBnEb659nBIBjn8x+GhfZFgQUx2V GRctvV9hoSKiC7648nJmGNxFySaYJ9CzjEh+nkKv9AXKz0WZoy9YXeCNRxiLsV9U xWML4cobe0FFe+2rJ6+1bF5XF6SWFUtnW8X3P2Als1ZhXYfe04R0ky64wM+FSuJo tFuxMXdmKGJjAGww7TZ5vC4MI2p2T5crXLNNU5SoqDIFxLCSr+Nx2AKDuBBP6n1a tIPA0FMCAiYeC2tjcPiu71OD/CgZllwjeOvHrhfmjavnA5jDyLa3WWlvVxcr2+cE 3ULn8cXhNOxBHTA2EHwsMm/ExZNYBgJkMlCpblNf1o5fvwjddwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOHxg7x5apIK2HSogv/VJ94HPLVxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zYThk NmM0Yy1lYjgyLTQzZjEtODBjYy04ODRjNTYwYmQwYmQvYjU5MzRmN2MtNWI2NS0z ZWZhLTk5MWYtY2M4MjkwM2FhOTQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvM2E4ZDZjNGMtZWI4Mi00M2YxLTgw Y2MtODg0YzU2MGJkMGJkLzNhOGQ2YzRjLWViODItNDNmMS04MGNjLTg4NGM1NjBi ZDBiZC5jcmwwHwYDVR0jBBgwFoAUbov0feTbKCYpE02Ow50KF9xqsgEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zYThkNmM0Yy1lYjgyLTQzZjEtODBjYy04ODRj NTYwYmQwYmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqsi8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABFxenECDcCn28WlmJ1iSrnt3ESXAZ3hwZGWUxdMlrn+/KaBrw2rZs8K pu4rZmk00/fO460AwOMMiwKDVBkvPhv6+SPDhaUK4dAdOJo+G1UcXBOztDFB191g kDgVw1qooBHVAxW03/GhtQHUaRPsqYz1BcWfnpId3fPC2D8fMErxF2XmHBE3Ic2o swElyTqkWFuL/2GLb7i/SZw2H2ZRL7lBdg4XmbvAGICmJo5l5BvQySRutssqPEvn 5RIgw9N8gLGfyjW5FBIU5OhuRNMhHttFIgwBS85+R307iFoIZMpVRXtD+XN7xmK+ rth6TO2Ek0dHBX9TGo5sMl2mIPxdGiw= -----END CERTIFICATE-----Generated at Sun Jun 29 16:47:44 2025 by rpki-client