$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/420c59c6-76f5-3a1f-ad30-ade90f37c6f5.roa File: 420c59c6-76f5-3a1f-ad30-ade90f37c6f5.roa (raw, json) Hash identifier: pEY9+QORiI+wzoCWw8yOUO99o43sLSXr9c01eipgQ10= Subject key identifier: 58:DB:18:B9:2B:43:E2:CE:DD:B9:80:E1:86:07:40:0E:1B:80:0C:2C Certificate issuer: /CN=171c42a2-3dc6-43af-b734-e91956bdfe19 Certificate serial: 010D0C9F4328584A5765CE5B9CED6AA44ECA3380 Authority key identifier: EB:B0:D5:3C:A6:56:F6:56:4F:C5:16:70:B8:ED:89:90:DE:0F:26:D3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/420c59c6-76f5-3a1f-ad30-ade90f37c6f5.roa Signing time: Sat 28 Jun 2025 13:01:02 +0000 ROA not before: Sat 28 Jun 2025 13:01:02 +0000 ROA not after: Fri 26 Sep 2025 13:01:02 +0000 asID: 203 IP address blocks: 135.84.120.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/171c42a2-3dc6-43af-b734-e91956bdfe19.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/171c42a2-3dc6-43af-b734-e91956bdfe19.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:57:65:ce:5b:9c:ed:6a:a4:4e:ca:33:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=171c42a2-3dc6-43af-b734-e91956bdfe19 Validity Not Before: Jun 28 13:01:02 2025 GMT Not After : Sep 26 13:01:02 2025 GMT Subject: CN=27a072bc-3ccd-446f-9333-d58ec9a132f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:0a:64:27:63:a7:25:82:38:d0:a9:21:30:7c: 13:31:5b:1e:7c:b8:b0:63:28:5b:38:c2:17:ac:ea: c2:c1:d7:03:6d:06:58:fe:12:5d:d3:13:55:da:2b: 15:03:fd:68:a6:43:f7:93:87:4d:6e:76:87:ec:b2: 0c:15:b8:3b:9f:30:1e:8e:47:c7:2d:e8:76:cf:63: 7e:dd:10:7f:b4:ac:92:a8:a9:ae:d3:b0:fa:da:f4: 7c:bc:b8:85:09:6b:c5:74:a7:99:78:a9:c1:03:0d: a1:9b:4f:86:84:10:f1:d6:1a:c3:ef:40:de:05:a6: 14:b2:e3:91:e6:aa:f2:41:8c:44:e9:37:67:53:6b: 93:79:42:a7:d8:44:d8:07:e4:74:ab:23:ef:d5:3a: 76:ef:68:9d:c5:6b:97:d8:f6:7a:50:12:89:f7:a0: 99:bd:d6:8f:a2:24:bb:e4:6e:31:15:09:35:07:f5: 46:1f:7c:76:06:0c:06:07:1a:5b:03:c7:47:0c:33: d7:d1:20:15:5b:5c:50:ad:30:52:50:16:8f:f0:35: 3c:12:30:8c:c7:9a:35:81:ae:ca:4d:d3:1f:7f:f7: a1:d7:b4:b9:25:bc:e7:27:4d:b2:71:a6:8c:6c:79: 05:4c:ad:0d:e2:84:e2:96:ab:e8:93:cd:d3:a7:b8: bf:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:DB:18:B9:2B:43:E2:CE:DD:B9:80:E1:86:07:40:0E:1B:80:0C:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/420c59c6-76f5-3a1f-ad30-ade90f37c6f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/171c42a2-3dc6-43af-b734-e91956bdfe19.crl X509v3 Authority Key Identifier: keyid:EB:B0:D5:3C:A6:56:F6:56:4F:C5:16:70:B8:ED:89:90:DE:0F:26:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19.cer sbgp-ipAddrBlock: critical IPv4: 135.84.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:d0:59:59:40:04:73:56:41:9d:f6:24:e5:45:07:bc:17:d7: 5a:51:62:54:9a:f0:2a:fa:bc:e9:8b:2a:19:df:6e:d7:0d:5e: 07:03:bb:18:4a:e5:c7:5a:a9:e1:1e:62:db:75:83:5c:61:51: 71:f4:29:26:34:c4:8f:88:69:de:5a:3f:ff:30:3e:69:b0:4e: 02:8f:74:82:b5:66:6c:2c:50:eb:04:ed:a3:0f:34:c1:63:eb: fd:65:e6:d9:3f:6a:ba:2a:c7:75:f3:da:3f:bf:22:46:97:4f: 78:78:4c:f3:e1:37:9e:c0:47:2e:e6:fd:3e:37:1f:88:95:a6: 62:e6:e6:5a:06:fa:fd:72:bf:4c:9a:f2:d4:ab:ee:7d:d4:1e: 9e:c1:51:5f:09:55:e0:ea:f3:e9:03:c2:89:5b:62:bb:e3:36: 68:94:c8:76:ad:d8:f2:55:0b:77:2b:4c:89:3d:51:ce:bb:37: bf:13:d1:30:39:ed:85:21:fe:64:3c:47:4a:61:18:f7:8f:d2: 86:37:dd:ce:b7:a5:75:f6:ee:ad:1f:f1:08:ed:35:f1:bc:5b: cd:de:d4:28:e0:c8:26:82:36:92:d9:47:b3:ac:dc:3e:c6:1f: 8e:b4:6b:be:01:d5:e3:68:c9:99:c0:14:9a:b1:61:64:57:9d: 76:af:76:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpXZc5bnO1qpE7KM4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTcxYzQyYTItM2RjNi00M2FmLWI3MzQtZTkxOTU2YmRm ZTE5MB4XDTI1MDYyODEzMDEwMloXDTI1MDkyNjEzMDEwMlowLzEtMCsGA1UEAxMk MjdhMDcyYmMtM2NjZC00NDZmLTkzMzMtZDU4ZWM5YTEzMmY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwpkJ2OnJYI40KkhMHwTMVsefLiwYyhbOMIX rOrCwdcDbQZY/hJd0xNV2isVA/1opkP3k4dNbnaH7LIMFbg7nzAejkfHLeh2z2N+ 3RB/tKySqKmu07D62vR8vLiFCWvFdKeZeKnBAw2hm0+GhBDx1hrD70DeBaYUsuOR 5qryQYxE6TdnU2uTeUKn2ETYB+R0qyPv1Tp272idxWuX2PZ6UBKJ96CZvdaPoiS7 5G4xFQk1B/VGH3x2BgwGBxpbA8dHDDPX0SAVW1xQrTBSUBaP8DU8EjCMx5o1ga7K TdMff/eh17S5JbznJ02ycaaMbHkFTK0N4oTilqvok83Tp7i/CQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFjbGLkrQ+LO3bmA4YYHQA4bgAwsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xNzFj NDJhMi0zZGM2LTQzYWYtYjczNC1lOTE5NTZiZGZlMTkvNDIwYzU5YzYtNzZmNS0z YTFmLWFkMzAtYWRlOTBmMzdjNmY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMTcxYzQyYTItM2RjNi00M2FmLWI3 MzQtZTkxOTU2YmRmZTE5LzE3MWM0MmEyLTNkYzYtNDNhZi1iNzM0LWU5MTk1NmJk ZmUxOS5jcmwwHwYDVR0jBBgwFoAU67DVPKZW9lZPxRZwuO2JkN4PJtMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xNzFjNDJhMi0zZGM2LTQzYWYtYjczNC1lOTE5 NTZiZGZlMTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBh1R4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEnQWVlABHNWQZ32JOVFB7wX11pRYlSa8Cr6vOmLKhnfbtcNXgcDuxhK 5cdaqeEeYtt1g1xhUXH0KSY0xI+Iad5aP/8wPmmwTgKPdIK1ZmwsUOsE7aMPNMFj 6/1l5tk/aroqx3Xz2j+/IkaXT3h4TPPhN57ARy7m/T43H4iVpmLm5loG+v1yv0ya 8tSr7n3UHp7BUV8JVeDq8+kDwolbYrvjNmiUyHat2PJVC3crTIk9Uc67N78T0TA5 7YUh/mQ8R0phGPeP0oY33c63pXX27q0f8QjtNfG8W83e1CjgyCaCNpLZR7Os3D7G H460a74B1eNoyZnAFJqxYWRXnXavdvQ= -----END CERTIFICATE-----Generated at Sun Jun 29 13:25:19 2025 by rpki-client