$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/cc943514-3509-33b3-b2dc-359af22b1dea.roa File: cc943514-3509-33b3-b2dc-359af22b1dea.roa (raw, json) Hash identifier: 63ZK75nuYQDygD7TJ5oECEihrlDCOmQ4r/uydUlDqLE= Subject key identifier: 88:B9:EE:B8:71:D4:08:4F:5A:89:48:A5:90:9F:FA:A0:D5:53:D0:9A Certificate issuer: /CN=171c42a2-3dc6-43af-b734-e91956bdfe19 Certificate serial: 010D0C9F4328584A5765CE2AD5D263C798B6B880 Authority key identifier: EB:B0:D5:3C:A6:56:F6:56:4F:C5:16:70:B8:ED:89:90:DE:0F:26:D3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/cc943514-3509-33b3-b2dc-359af22b1dea.roa Signing time: Sat 28 Jun 2025 13:01:02 +0000 ROA not before: Sat 28 Jun 2025 13:01:02 +0000 ROA not after: Fri 26 Sep 2025 13:01:02 +0000 asID: 202 IP address blocks: 216.168.136.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/171c42a2-3dc6-43af-b734-e91956bdfe19.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/171c42a2-3dc6-43af-b734-e91956bdfe19.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:57:65:ce:2a:d5:d2:63:c7:98:b6:b8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=171c42a2-3dc6-43af-b734-e91956bdfe19 Validity Not Before: Jun 28 13:01:02 2025 GMT Not After : Sep 26 13:01:02 2025 GMT Subject: CN=c740f037-5746-4763-81f1-73854bf92f2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:60:fe:89:4e:be:b4:25:31:d6:75:40:6e:d2: dc:4c:8b:57:23:2c:f5:c4:fc:3b:cf:4c:a7:de:9b: ec:63:79:d5:e5:f8:d8:00:21:2c:57:23:3b:49:69: 7b:74:4f:f8:53:72:f9:69:91:8f:06:86:71:6a:81: 22:17:50:73:72:2e:30:4c:f5:26:77:5d:97:6d:61: a2:2d:ec:81:87:f6:3e:46:b5:31:12:d7:ef:1c:ec: fe:f5:d3:c5:4f:a2:04:eb:55:0f:73:c0:7e:fc:53: 10:9a:1e:10:e0:81:c0:e4:d0:ca:84:18:3e:bf:98: a4:3c:e4:b4:f5:aa:55:f2:1e:19:39:ee:a8:c7:0d: f5:f6:e7:83:7f:dc:d5:1b:9d:c5:fd:e6:4f:32:25: ef:0f:48:ed:b6:02:a3:24:24:a8:03:ca:ed:00:6e: 55:f4:95:a3:72:5b:01:b6:f7:ac:09:67:40:1c:4f: 4d:65:9e:6e:58:7a:a5:af:c7:66:06:06:7a:a4:61: da:7e:0c:80:b4:f7:04:19:13:f0:cb:01:91:88:fc: bf:dd:5b:0f:57:29:c1:52:9e:dd:79:e4:df:ba:7d: e1:8b:6d:44:cb:ff:79:c9:8f:bb:4f:51:61:6b:14: 1b:aa:be:4f:dc:57:35:6c:f6:cd:75:a4:41:80:ea: a2:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:B9:EE:B8:71:D4:08:4F:5A:89:48:A5:90:9F:FA:A0:D5:53:D0:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/cc943514-3509-33b3-b2dc-359af22b1dea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/171c42a2-3dc6-43af-b734-e91956bdfe19.crl X509v3 Authority Key Identifier: keyid:EB:B0:D5:3C:A6:56:F6:56:4F:C5:16:70:B8:ED:89:90:DE:0F:26:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19.cer sbgp-ipAddrBlock: critical IPv4: 216.168.136.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:c6:2c:a1:35:04:4d:ab:eb:1c:f3:bf:45:90:9a:06:1e:d2: 21:71:23:8a:a6:21:39:df:92:18:4e:1c:53:31:79:35:4e:45: 6f:6d:dd:14:ba:97:65:fd:59:be:42:f1:48:e1:4b:5e:c3:77: 93:39:b6:29:17:15:08:68:ca:14:a2:7b:77:bc:9a:a2:0a:78: 5d:26:4e:81:47:14:8b:c0:72:c6:c6:a7:0c:92:8d:a2:7c:34: c1:f2:26:93:5f:d1:f1:6c:9c:82:a4:33:92:94:64:14:19:36: b5:ac:24:44:d0:af:98:3a:4b:e1:1f:52:76:1d:ab:c6:40:15: 6a:a3:de:99:91:57:79:d7:48:e4:9b:21:2f:39:06:de:f8:3d: a5:a8:a7:88:19:e1:0e:3d:36:60:f6:cf:63:e0:0c:cd:8c:c7: ae:e2:7b:a4:fc:11:64:6a:6a:e0:52:7f:4c:3d:0e:a3:31:df: 3d:ea:cf:56:3f:9e:fd:97:43:41:66:9c:49:55:b5:88:e7:28: 97:20:2a:fb:34:43:ef:67:47:d4:fa:76:71:11:1e:e2:0e:e6: c3:29:c4:e8:02:15:97:4a:7b:69:73:c1:20:6b:a3:d1:0b:44: 04:bc:61:d4:58:78:af:36:b6:55:d1:7c:96:0f:2a:c1:3c:b7: f1:c7:26:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpXZc4q1dJjx5i2uIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTcxYzQyYTItM2RjNi00M2FmLWI3MzQtZTkxOTU2YmRm ZTE5MB4XDTI1MDYyODEzMDEwMloXDTI1MDkyNjEzMDEwMlowLzEtMCsGA1UEAxMk Yzc0MGYwMzctNTc0Ni00NzYzLTgxZjEtNzM4NTRiZjkyZjJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2D+iU6+tCUx1nVAbtLcTItXIyz1xPw7z0yn 3pvsY3nV5fjYACEsVyM7SWl7dE/4U3L5aZGPBoZxaoEiF1Bzci4wTPUmd12XbWGi LeyBh/Y+RrUxEtfvHOz+9dPFT6IE61UPc8B+/FMQmh4Q4IHA5NDKhBg+v5ikPOS0 9apV8h4ZOe6oxw319ueDf9zVG53F/eZPMiXvD0jttgKjJCSoA8rtAG5V9JWjclsB tvesCWdAHE9NZZ5uWHqlr8dmBgZ6pGHafgyAtPcEGRPwywGRiPy/3VsPVynBUp7d eeTfun3hi21Ey/95yY+7T1FhaxQbqr5P3Fc1bPbNdaRBgOqiIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIi57rhx1AhPWolIpZCf+qDVU9CaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xNzFj NDJhMi0zZGM2LTQzYWYtYjczNC1lOTE5NTZiZGZlMTkvY2M5NDM1MTQtMzUwOS0z M2IzLWIyZGMtMzU5YWYyMmIxZGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMTcxYzQyYTItM2RjNi00M2FmLWI3 MzQtZTkxOTU2YmRmZTE5LzE3MWM0MmEyLTNkYzYtNDNhZi1iNzM0LWU5MTk1NmJk ZmUxOS5jcmwwHwYDVR0jBBgwFoAU67DVPKZW9lZPxRZwuO2JkN4PJtMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xNzFjNDJhMi0zZGM2LTQzYWYtYjczNC1lOTE5 NTZiZGZlMTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2KiIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEbGLKE1BE2r6xzzv0WQmgYe0iFxI4qmITnfkhhOHFMxeTVORW9t3RS6 l2X9Wb5C8UjhS17Dd5M5tikXFQhoyhSie3e8mqIKeF0mToFHFIvAcsbGpwySjaJ8 NMHyJpNf0fFsnIKkM5KUZBQZNrWsJETQr5g6S+EfUnYdq8ZAFWqj3pmRV3nXSOSb IS85Bt74PaWop4gZ4Q49NmD2z2PgDM2Mx67ie6T8EWRqauBSf0w9DqMx3z3qz1Y/ nv2XQ0FmnElVtYjnKJcgKvs0Q+9nR9T6dnERHuIO5sMpxOgCFZdKe2lzwSBro9EL RAS8YdRYeK82tlXRfJYPKsE8t/HHJlM= -----END CERTIFICATE-----Generated at Mon Jun 30 16:00:58 2025 by rpki-client