$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1d71aad6-87bb-4b95-b81e-5f6d95d05f03/ff94971f-87dc-357c-99a9-98110a2d1389.roa File: ff94971f-87dc-357c-99a9-98110a2d1389.roa (raw, json) Hash identifier: KH8qukdf22DOyUrkf4pwUfyqkalVCdh5zGlmGcToTHY= Subject key identifier: 3C:69:CF:DC:04:17:4B:D1:C9:F9:03:A7:A1:B4:EC:B1:F1:1C:65:59 Certificate issuer: /CN=1d71aad6-87bb-4b95-b81e-5f6d95d05f03 Certificate serial: 010D0C9F4328584A6172B012CC2D00C15CF96A00 Authority key identifier: 64:EB:9A:E0:63:A7:1F:14:5A:3B:C2:09:12:04:E7:85:81:F6:88:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1d71aad6-87bb-4b95-b81e-5f6d95d05f03.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1d71aad6-87bb-4b95-b81e-5f6d95d05f03/ff94971f-87dc-357c-99a9-98110a2d1389.roa Signing time: Wed 02 Jul 2025 00:32:50 +0000 ROA not before: Wed 02 Jul 2025 00:32:50 +0000 ROA not after: Tue 30 Sep 2025 00:32:50 +0000 asID: 53548 IP address blocks: 170.39.240.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1d71aad6-87bb-4b95-b81e-5f6d95d05f03/1d71aad6-87bb-4b95-b81e-5f6d95d05f03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1d71aad6-87bb-4b95-b81e-5f6d95d05f03/1d71aad6-87bb-4b95-b81e-5f6d95d05f03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1d71aad6-87bb-4b95-b81e-5f6d95d05f03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:61:72:b0:12:cc:2d:00:c1:5c:f9:6a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d71aad6-87bb-4b95-b81e-5f6d95d05f03 Validity Not Before: Jul 2 00:32:50 2025 GMT Not After : Sep 30 00:32:50 2025 GMT Subject: CN=06d179f4-df2a-43a2-9078-80db46eda213 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:5c:13:da:3c:fa:a7:1a:16:66:e0:fe:b5:7a: 04:7a:99:35:b2:49:36:ed:2b:fc:d2:b4:ad:49:a1: 74:5a:d1:5b:eb:60:e8:c3:55:98:f5:df:1e:c7:0c: dc:ce:db:41:0c:59:dc:b0:19:b0:1e:ef:86:a5:7d: e1:40:4d:28:2b:ba:bb:6c:36:19:f0:29:2f:5d:9a: 49:dc:cb:7f:d7:07:90:3f:a0:6b:dc:46:8a:30:b1: 65:1b:18:41:b6:1c:d9:eb:5d:16:be:4e:d1:f8:f1: ef:59:7a:b2:c7:d5:68:b4:47:1d:67:d0:ce:ed:c3: 63:de:d1:5d:b9:77:a0:08:6b:81:69:6e:60:29:c5: 80:0f:b8:1d:7e:92:7f:5a:7c:c5:15:10:4a:85:bc: 1e:81:0c:1f:5f:ad:ae:41:20:4b:0f:b0:1e:c5:eb: df:e4:11:68:59:a2:ff:e0:ba:b8:32:ae:26:b6:4d: 7b:54:ab:d6:78:70:f0:06:a8:4c:35:63:45:97:3f: fd:b6:aa:36:42:2b:fe:f2:e3:6a:f7:34:20:0a:4a: d3:bb:47:53:2b:2c:e7:e7:62:5b:46:1c:bc:1b:ee: 3a:4f:41:e8:81:b3:0f:0a:fe:cd:fe:2a:93:3f:26: 4b:ed:28:8b:00:d6:77:3b:96:29:d9:62:e0:99:38: 2f:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:69:CF:DC:04:17:4B:D1:C9:F9:03:A7:A1:B4:EC:B1:F1:1C:65:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1d71aad6-87bb-4b95-b81e-5f6d95d05f03/ff94971f-87dc-357c-99a9-98110a2d1389.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1d71aad6-87bb-4b95-b81e-5f6d95d05f03/1d71aad6-87bb-4b95-b81e-5f6d95d05f03.crl X509v3 Authority Key Identifier: keyid:64:EB:9A:E0:63:A7:1F:14:5A:3B:C2:09:12:04:E7:85:81:F6:88:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1d71aad6-87bb-4b95-b81e-5f6d95d05f03.cer sbgp-ipAddrBlock: critical IPv4: 170.39.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:4e:ab:0a:6a:34:25:2a:a7:f3:91:0d:1c:da:ea:c5:0a:ae: d3:03:87:ed:1b:af:39:f4:d5:aa:29:88:a0:f5:b2:25:04:92: 49:6e:fc:66:65:04:18:71:62:a2:0f:be:fe:ab:ed:90:3e:2c: e7:1a:2c:65:ac:fd:d0:09:02:66:e2:a6:e4:78:09:ad:0e:1d: 2c:b1:ff:00:4b:f9:51:54:1f:58:cf:21:24:3f:2f:14:4e:1e: 20:ac:05:aa:a2:e9:56:87:08:1b:3f:93:2a:cf:6c:1f:2e:c0: d3:0b:94:6c:85:64:98:0c:e0:9e:13:d3:8d:e1:19:2b:70:1d: 9d:61:e0:9b:80:a8:2e:1e:64:61:7b:7c:3a:97:32:fc:23:e4: 7e:c0:54:21:bf:58:96:18:6b:f6:5c:34:38:3e:26:eb:c3:c4: 6d:56:26:01:30:3b:e8:fb:0c:a3:8b:7a:d2:d8:ce:f6:7a:46: b8:b9:8c:5f:b8:4e:a7:c0:4e:16:59:bf:af:f9:f3:a7:11:a5: 87:df:f8:60:0f:bd:70:aa:18:e3:be:d8:59:5a:4b:5f:f5:3d: c3:a2:47:c3:96:ad:b1:1d:73:91:3b:99:c0:52:25:5c:5d:63: e1:35:32:2b:54:ec:29:93:c3:5d:05:20:75:9f:60:0c:6e:1b: 12:d8:73:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEphcrASzC0AwVz5agAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQ3MWFhZDYtODdiYi00Yjk1LWI4MWUtNWY2ZDk1ZDA1 ZjAzMB4XDTI1MDcwMjAwMzI1MFoXDTI1MDkzMDAwMzI1MFowLzEtMCsGA1UEAxMk MDZkMTc5ZjQtZGYyYS00M2EyLTkwNzgtODBkYjQ2ZWRhMjEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFwT2jz6pxoWZuD+tXoEepk1skk27Sv80rSt SaF0WtFb62Dow1WY9d8exwzczttBDFncsBmwHu+GpX3hQE0oK7q7bDYZ8CkvXZpJ 3Mt/1weQP6Br3EaKMLFlGxhBthzZ610Wvk7R+PHvWXqyx9VotEcdZ9DO7cNj3tFd uXegCGuBaW5gKcWAD7gdfpJ/WnzFFRBKhbwegQwfX62uQSBLD7Aexevf5BFoWaL/ 4Lq4Mq4mtk17VKvWeHDwBqhMNWNFlz/9tqo2Qiv+8uNq9zQgCkrTu0dTKyzn52Jb Rhy8G+46T0HogbMPCv7N/iqTPyZL7SiLANZ3O5Yp2WLgmTgvbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDxpz9wEF0vRyfkDp6G07LHxHGVZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8xZDcx YWFkNi04N2JiLTRiOTUtYjgxZS01ZjZkOTVkMDVmMDMvZmY5NDk3MWYtODdkYy0z NTdjLTk5YTktOTgxMTBhMmQxMzg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMWQ3MWFhZDYtODdiYi00Yjk1LWI4 MWUtNWY2ZDk1ZDA1ZjAzLzFkNzFhYWQ2LTg3YmItNGI5NS1iODFlLTVmNmQ5NWQw NWYwMy5jcmwwHwYDVR0jBBgwFoAUZOua4GOnHxRaO8IJEgTnhYH2iG8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8xZDcxYWFkNi04N2JiLTRiOTUtYjgxZS01ZjZk OTVkMDVmMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqifwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHpOqwpqNCUqp/ORDRza6sUKrtMDh+0brzn01aopiKD1siUEkklu/GZl BBhxYqIPvv6r7ZA+LOcaLGWs/dAJAmbipuR4Ca0OHSyx/wBL+VFUH1jPISQ/LxRO HiCsBaqi6VaHCBs/kyrPbB8uwNMLlGyFZJgM4J4T043hGStwHZ1h4JuAqC4eZGF7 fDqXMvwj5H7AVCG/WJYYa/ZcNDg+JuvDxG1WJgEwO+j7DKOLetLYzvZ6Rri5jF+4 TqfAThZZv6/586cRpYff+GAPvXCqGOO+2FlaS1/1PcOiR8OWrbEdc5E7mcBSJVxd Y+E1MitU7CmTw10FIHWfYAxuGxLYczE= -----END CERTIFICATE-----Generated at Thu Jul 3 23:09:10 2025 by rpki-client