$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44c9f20f-94d3-45ab-b941-cca94fba4981/2383a987-7584-3a26-891c-3c54bc00eebe.roa File: 2383a987-7584-3a26-891c-3c54bc00eebe.roa (raw, json) Hash identifier: eqkkI/eX20uEmewmcPHcNZDcxYhmmLfLw8YZQbOULxY= Subject key identifier: 9F:79:FA:2F:6A:AF:4D:71:F5:97:48:77:63:3E:5D:35:69:A8:8F:89 Certificate issuer: /CN=44c9f20f-94d3-45ab-b941-cca94fba4981 Certificate serial: 010D0C9F4328584A4540342759B6FBA6D1818A00 Authority key identifier: 03:F6:F6:1C:42:4C:C7:52:8D:DD:05:02:7D:BD:F4:D8:FD:07:A3:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44c9f20f-94d3-45ab-b941-cca94fba4981.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44c9f20f-94d3-45ab-b941-cca94fba4981/2383a987-7584-3a26-891c-3c54bc00eebe.roa Signing time: Sun 22 Jun 2025 01:00:50 +0000 ROA not before: Sun 22 Jun 2025 01:00:50 +0000 ROA not after: Sat 20 Sep 2025 01:00:50 +0000 asID: 30337 IP address blocks: 170.194.134.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44c9f20f-94d3-45ab-b941-cca94fba4981/44c9f20f-94d3-45ab-b941-cca94fba4981.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44c9f20f-94d3-45ab-b941-cca94fba4981/44c9f20f-94d3-45ab-b941-cca94fba4981.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44c9f20f-94d3-45ab-b941-cca94fba4981.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:45:40:34:27:59:b6:fb:a6:d1:81:8a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44c9f20f-94d3-45ab-b941-cca94fba4981 Validity Not Before: Jun 22 01:00:50 2025 GMT Not After : Sep 20 01:00:50 2025 GMT Subject: CN=2cdac9cd-8727-415c-a9d1-58cdba079318 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:21:bf:89:3c:77:8d:10:6f:f1:eb:c6:01:b7: dc:05:46:6b:62:bb:84:da:20:7f:53:92:35:c6:61: af:d2:17:3a:c2:78:bd:83:d0:6e:1c:71:1f:71:1e: 48:8c:b7:26:d7:05:33:3f:47:17:da:f5:7b:ec:09: 25:d7:52:0d:f2:68:ab:fd:7b:39:ea:6f:25:97:62: 7a:ac:9a:53:7d:31:ca:33:2a:1a:c1:ad:80:fb:a2: 04:74:be:8b:0e:0f:69:c2:94:9d:7c:09:b9:76:a1: bd:4a:88:8c:5b:c0:80:aa:82:54:6c:5d:9f:6f:0e: fb:16:1e:42:88:ae:aa:70:d2:36:10:58:2b:5d:59: aa:6b:5f:3c:40:21:f8:b3:05:ae:db:a4:fe:c4:15: 07:ec:d7:f4:3e:e8:50:ed:4c:8d:4d:02:1b:07:ec: d1:e8:d9:a4:37:7b:28:c7:6a:4f:aa:f0:76:b3:fa: 6d:a8:27:b0:1b:24:f1:cf:0d:e7:84:5e:a0:b5:52: d0:1d:11:ac:da:58:1d:b0:77:bd:3f:2f:5d:07:50: f1:52:f3:bc:0b:40:6f:e9:0b:c3:bb:6c:31:87:ff: 0b:11:f1:69:a5:1d:e1:1d:94:4e:07:98:56:11:2e: cb:9b:d1:36:ac:6d:ef:c0:6b:2a:c4:42:68:d6:57: 9c:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:79:FA:2F:6A:AF:4D:71:F5:97:48:77:63:3E:5D:35:69:A8:8F:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44c9f20f-94d3-45ab-b941-cca94fba4981/2383a987-7584-3a26-891c-3c54bc00eebe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44c9f20f-94d3-45ab-b941-cca94fba4981/44c9f20f-94d3-45ab-b941-cca94fba4981.crl X509v3 Authority Key Identifier: keyid:03:F6:F6:1C:42:4C:C7:52:8D:DD:05:02:7D:BD:F4:D8:FD:07:A3:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44c9f20f-94d3-45ab-b941-cca94fba4981.cer sbgp-ipAddrBlock: critical IPv4: 170.194.134.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:fc:37:cb:ec:b7:14:6e:3d:c4:5d:68:90:d3:34:3f:92:a5: ec:8f:3d:17:17:0f:b8:61:0e:b2:65:cb:43:b9:7c:9f:75:e7: ed:b3:72:0d:1a:d9:e8:ba:96:a7:41:d4:77:24:c2:51:b7:9c: ab:48:d9:47:14:07:31:c2:af:cb:12:59:9a:9f:ae:25:25:bb: 3e:ec:12:b3:c0:dc:14:2f:26:3c:61:fc:72:92:56:3e:33:45: 72:dd:e7:92:b7:74:74:4e:e8:30:a8:df:33:61:fd:9b:14:68: 92:5b:1d:10:15:1b:63:01:dd:e1:c2:d0:de:7e:87:5a:1a:31: 9c:57:af:83:67:b7:06:3b:8d:79:50:0e:01:e5:0d:cd:f8:8b: 03:47:b9:08:ab:7d:43:6b:a8:c0:93:d0:84:95:cd:ba:01:65: 3b:ad:76:9b:4f:eb:34:ec:0e:ed:4f:9f:17:ae:92:a3:14:22: 7d:c9:be:7a:a8:ba:b7:23:8f:2b:58:94:a4:16:be:3b:2e:de: 29:e0:c1:49:4b:0a:49:bf:76:74:29:eb:eb:61:45:65:80:6a: a9:f5:94:a2:61:94:a6:5e:d6:38:6c:24:3f:8a:63:cc:f6:bb: ca:a1:fd:aa:50:4f:9d:8d:c5:06:ec:68:7b:53:93:fe:63:24: d4:52:4f:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpFQDQnWbb7ptGBigAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDRjOWYyMGYtOTRkMy00NWFiLWI5NDEtY2NhOTRmYmE0 OTgxMB4XDTI1MDYyMjAxMDA1MFoXDTI1MDkyMDAxMDA1MFowLzEtMCsGA1UEAxMk MmNkYWM5Y2QtODcyNy00MTVjLWE5ZDEtNThjZGJhMDc5MzE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCG/iTx3jRBv8evGAbfcBUZrYruE2iB/U5I1 xmGv0hc6wni9g9BuHHEfcR5IjLcm1wUzP0cX2vV77Akl11IN8mir/Xs56m8ll2J6 rJpTfTHKMyoawa2A+6IEdL6LDg9pwpSdfAm5dqG9SoiMW8CAqoJUbF2fbw77Fh5C iK6qcNI2EFgrXVmqa188QCH4swWu26T+xBUH7Nf0PuhQ7UyNTQIbB+zR6NmkN3so x2pPqvB2s/ptqCewGyTxzw3nhF6gtVLQHRGs2lgdsHe9Py9dB1DxUvO8C0Bv6QvD u2wxh/8LEfFppR3hHZROB5hWES7Lm9E2rG3vwGsqxEJo1lecTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ95+i9qr01x9ZdId2M+XTVpqI+JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy80NGM5 ZjIwZi05NGQzLTQ1YWItYjk0MS1jY2E5NGZiYTQ5ODEvMjM4M2E5ODctNzU4NC0z YTI2LTg5MWMtM2M1NGJjMDBlZWJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNDRjOWYyMGYtOTRkMy00NWFiLWI5 NDEtY2NhOTRmYmE0OTgxLzQ0YzlmMjBmLTk0ZDMtNDVhYi1iOTQxLWNjYTk0ZmJh NDk4MS5jcmwwHwYDVR0jBBgwFoAUA/b2HEJMx1KN3QUCfb302P0Ho4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy80NGM5ZjIwZi05NGQzLTQ1YWItYjk0MS1jY2E5 NGZiYTQ5ODEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqsKGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHr8N8vstxRuPcRdaJDTND+SpeyPPRcXD7hhDrJly0O5fJ915+2zcg0a 2ei6lqdB1HckwlG3nKtI2UcUBzHCr8sSWZqfriUluz7sErPA3BQvJjxh/HKSVj4z RXLd55K3dHRO6DCo3zNh/ZsUaJJbHRAVG2MB3eHC0N5+h1oaMZxXr4NntwY7jXlQ DgHlDc34iwNHuQirfUNrqMCT0ISVzboBZTutdptP6zTsDu1PnxeukqMUIn3Jvnqo urcjjytYlKQWvjsu3ingwUlLCkm/dnQp6+thRWWAaqn1lKJhlKZe1jhsJD+KY8z2 u8qh/apQT52NxQbsaHtTk/5jJNRST0E= -----END CERTIFICATE-----Generated at Fri Jul 4 02:30:09 2025 by rpki-client