$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/d024c0fe-f70d-3486-bd2c-a80515d83f4a.roa File: d024c0fe-f70d-3486-bd2c-a80515d83f4a.roa (raw, json) Hash identifier: k2kw5d6/am/+Y6pr9YGHGU+CeVTe7NhsdU78FafvtNY= Subject key identifier: BD:62:F6:8A:EC:E2:DC:4E:3C:E1:EB:9B:FD:2A:A2:85:9F:75:4D:36 Certificate issuer: /CN=3a8d6c4c-eb82-43f1-80cc-884c560bd0bd Certificate serial: 010D0C9F4328584A43DB0928721189CAC13BF180 Authority key identifier: 6E:8B:F4:7D:E4:DB:28:26:29:13:4D:8E:C3:9D:0A:17:DC:6A:B2:01 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/d024c0fe-f70d-3486-bd2c-a80515d83f4a.roa Signing time: Sat 21 Jun 2025 13:01:03 +0000 ROA not before: Sat 21 Jun 2025 13:01:03 +0000 ROA not after: Fri 19 Sep 2025 13:01:03 +0000 asID: 16509 IP address blocks: 170.200.188.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:43:db:09:28:72:11:89:ca:c1:3b:f1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a8d6c4c-eb82-43f1-80cc-884c560bd0bd Validity Not Before: Jun 21 13:01:03 2025 GMT Not After : Sep 19 13:01:03 2025 GMT Subject: CN=7b975528-0e90-4bc3-9410-8bb32106b15d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:43:f6:a6:bb:9a:83:8b:b3:f6:e3:56:b2:a4: 0d:5a:ce:7b:5b:c6:19:83:f8:66:99:aa:0d:ef:17: c3:d2:7e:da:43:83:ff:e7:18:e3:12:af:4b:58:e6: 3b:fd:a4:ca:70:2d:18:e0:0f:c5:8d:6b:bf:f9:3c: c6:14:5e:4d:07:57:92:96:ea:d9:db:70:89:c9:aa: d4:f4:85:27:9c:c3:bf:cc:b5:8d:f8:b5:4d:ce:5c: 67:da:bf:b4:25:5a:ea:af:cc:8d:66:13:49:c5:cf: 00:b4:0b:0a:6b:50:57:66:87:22:ab:c3:b0:ae:48: 6a:35:b2:a4:0a:ea:81:39:05:b0:03:01:4b:0f:e1: b7:ca:cc:60:62:de:ca:2d:ed:ea:ed:be:1b:3c:63: 60:aa:5b:7b:0b:d7:d2:8d:2e:b6:ef:60:84:b6:02: 99:b6:a1:5f:bf:21:b6:d8:d0:a8:f0:c8:a9:70:54: 62:9d:29:95:17:42:1e:5c:dd:8a:ef:23:86:0d:d5: e9:49:8b:0c:0c:03:02:ef:d6:0a:f6:ee:c7:64:cf: b0:d1:25:57:75:c0:e1:a5:84:1d:22:9e:43:36:80: 11:b4:2e:19:81:19:28:18:63:e2:ae:fe:4d:d6:43: 18:8c:32:4a:a0:0b:03:eb:b1:2d:03:11:ba:9e:ac: 7c:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:62:F6:8A:EC:E2:DC:4E:3C:E1:EB:9B:FD:2A:A2:85:9F:75:4D:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/d024c0fe-f70d-3486-bd2c-a80515d83f4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.crl X509v3 Authority Key Identifier: keyid:6E:8B:F4:7D:E4:DB:28:26:29:13:4D:8E:C3:9D:0A:17:DC:6A:B2:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.cer sbgp-ipAddrBlock: critical IPv4: 170.200.188.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:39:1e:af:9e:d2:1b:cf:a6:12:73:91:41:ed:39:51:c8:87: 18:11:7f:f5:ab:70:00:82:b4:e6:1a:c8:76:70:1a:98:1c:f3: 9c:b1:33:73:a3:72:76:3b:e2:7e:94:76:b1:52:d9:72:78:da: ae:04:1f:2b:b8:11:bb:a3:ab:b4:22:67:72:23:c8:9f:d2:c0: 80:72:75:7e:16:4d:39:22:18:4a:12:09:78:e9:a5:01:f4:46: 66:ca:09:0e:1f:af:5a:a7:17:60:53:88:d2:61:26:27:1a:36: 3f:f9:18:ea:4d:0d:1c:0e:96:a4:25:c7:c6:8b:66:77:75:25: 71:f1:2c:91:a4:40:8b:e3:5d:0f:b1:17:f7:66:c6:34:bb:86: bc:26:46:57:e5:a0:71:3d:62:14:89:96:66:a3:26:46:f6:8b: 31:6a:95:86:52:47:74:53:cc:42:e5:38:f3:9e:e6:18:1e:22: 26:ff:24:e3:f1:14:8d:12:4b:c5:d5:2b:d6:25:d9:f9:22:be: a5:49:0a:04:cc:d9:ca:b7:c6:8b:66:e5:4d:e7:e4:2c:46:38: cc:fe:3c:05:6d:3d:c3:66:cb:73:62:46:dd:59:8c:ae:1f:7a: a3:51:9e:a4:bc:0e:ed:6e:70:ee:7b:0d:7d:59:b4:55:af:df: b3:56:eb:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpD2wkochGJysE78YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2E4ZDZjNGMtZWI4Mi00M2YxLTgwY2MtODg0YzU2MGJk MGJkMB4XDTI1MDYyMTEzMDEwM1oXDTI1MDkxOTEzMDEwM1owLzEtMCsGA1UEAxMk N2I5NzU1MjgtMGU5MC00YmMzLTk0MTAtOGJiMzIxMDZiMTVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0P2pruag4uz9uNWsqQNWs57W8YZg/hmmaoN 7xfD0n7aQ4P/5xjjEq9LWOY7/aTKcC0Y4A/FjWu/+TzGFF5NB1eSlurZ23CJyarU 9IUnnMO/zLWN+LVNzlxn2r+0JVrqr8yNZhNJxc8AtAsKa1BXZociq8OwrkhqNbKk CuqBOQWwAwFLD+G3ysxgYt7KLe3q7b4bPGNgqlt7C9fSjS6272CEtgKZtqFfvyG2 2NCo8MipcFRinSmVF0IeXN2K7yOGDdXpSYsMDAMC79YK9u7HZM+w0SVXdcDhpYQd Ip5DNoARtC4ZgRkoGGPirv5N1kMYjDJKoAsD67EtAxG6nqx8CQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL1i9ors4txOPOHrm/0qooWfdU02MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zYThk NmM0Yy1lYjgyLTQzZjEtODBjYy04ODRjNTYwYmQwYmQvZDAyNGMwZmUtZjcwZC0z NDg2LWJkMmMtYTgwNTE1ZDgzZjRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvM2E4ZDZjNGMtZWI4Mi00M2YxLTgw Y2MtODg0YzU2MGJkMGJkLzNhOGQ2YzRjLWViODItNDNmMS04MGNjLTg4NGM1NjBi ZDBiZC5jcmwwHwYDVR0jBBgwFoAUbov0feTbKCYpE02Ow50KF9xqsgEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zYThkNmM0Yy1lYjgyLTQzZjEtODBjYy04ODRj NTYwYmQwYmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqsi8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA05Hq+e0hvPphJzkUHtOVHIhxgRf/WrcACCtOYayHZwGpgc85yxM3Oj cnY74n6UdrFS2XJ42q4EHyu4Ebujq7QiZ3IjyJ/SwIBydX4WTTkiGEoSCXjppQH0 RmbKCQ4fr1qnF2BTiNJhJicaNj/5GOpNDRwOlqQlx8aLZnd1JXHxLJGkQIvjXQ+x F/dmxjS7hrwmRlfloHE9YhSJlmajJkb2izFqlYZSR3RTzELlOPOe5hgeIib/JOPx FI0SS8XVK9Yl2fkivqVJCgTM2cq3xotm5U3n5CxGOMz+PAVtPcNmy3NiRt1ZjK4f eqNRnqS8Du1ucO57DX1ZtFWv37NW668= -----END CERTIFICATE-----Generated at Sun Jun 29 07:44:48 2025 by rpki-client