$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/17321389-82c8-40ad-969d-f355a789f579/d428c59e-2516-3824-8041-36df18452c2d.roa File: d428c59e-2516-3824-8041-36df18452c2d.roa (raw, json) Hash identifier: JQGeEfyHhNmMxslbR2UamkhL0SxnvVMdzcF/Kq0uL3k= Subject key identifier: 83:C4:A6:02:81:28:F5:A2:11:A3:91:ED:EF:9C:5D:EB:4B:B4:03:1F Certificate issuer: /CN=17321389-82c8-40ad-969d-f355a789f579 Certificate serial: 010D0C9F4328584A4C3B0ECD433CE24117E76D40 Authority key identifier: F2:07:B2:81:1D:EE:20:A3:1B:D2:87:04:DA:9C:1D:80:CE:FA:B4:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/17321389-82c8-40ad-969d-f355a789f579.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/17321389-82c8-40ad-969d-f355a789f579/d428c59e-2516-3824-8041-36df18452c2d.roa Signing time: Tue 24 Jun 2025 13:01:03 +0000 ROA not before: Tue 24 Jun 2025 13:01:03 +0000 ROA not after: Mon 22 Sep 2025 13:01:03 +0000 asID: 16509 IP address blocks: 170.39.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/17321389-82c8-40ad-969d-f355a789f579/17321389-82c8-40ad-969d-f355a789f579.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/17321389-82c8-40ad-969d-f355a789f579/17321389-82c8-40ad-969d-f355a789f579.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/17321389-82c8-40ad-969d-f355a789f579.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4c:3b:0e:cd:43:3c:e2:41:17:e7:6d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17321389-82c8-40ad-969d-f355a789f579 Validity Not Before: Jun 24 13:01:03 2025 GMT Not After : Sep 22 13:01:03 2025 GMT Subject: CN=0696a4e6-41a1-4a03-b75f-ff868c6955a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:68:1a:78:d6:f3:a2:ae:7e:f0:c7:f7:bd:ca: 28:74:a9:cf:8a:87:f4:f2:66:e7:0b:bb:e2:3c:23: 78:78:2c:e1:4a:95:a4:9d:c3:81:f8:84:1e:1c:0d: 81:c9:50:b1:6a:1e:21:83:cb:14:69:1f:15:c7:50: 54:c2:ea:e6:c8:7b:f1:ff:11:af:aa:b2:e0:53:f8: 23:93:0c:3c:6d:35:29:bd:27:84:02:5c:39:b5:8a: ff:2d:ec:e3:96:e1:a3:28:fd:6c:4e:b8:2f:2c:7e: 5d:c7:e2:73:20:ae:ac:ba:3a:82:3e:bc:00:8c:5d: 73:7b:b1:8e:98:81:af:1d:26:d9:26:71:0c:67:7d: 13:45:d7:37:2a:79:de:01:9c:57:95:8e:f0:78:36: 40:ec:bd:b3:69:95:32:4a:08:4b:2f:57:c7:ec:23: 12:16:60:fb:7e:13:e7:54:29:0f:80:b0:f4:77:61: 8e:f0:54:13:84:7f:b8:14:b0:e2:d8:9e:d0:3c:28: 83:cd:5f:ed:6a:ad:3e:0e:e1:47:b1:b0:1d:dc:bf: 71:8d:9a:f2:47:87:49:3c:8d:e2:4f:17:7a:77:07: 1d:49:c4:5e:1d:fb:c0:9e:a6:b3:fe:8f:de:2a:b9: 7d:e2:12:18:ba:4e:9d:45:12:c5:17:97:1e:2a:ce: 83:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:C4:A6:02:81:28:F5:A2:11:A3:91:ED:EF:9C:5D:EB:4B:B4:03:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/17321389-82c8-40ad-969d-f355a789f579/d428c59e-2516-3824-8041-36df18452c2d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/17321389-82c8-40ad-969d-f355a789f579/17321389-82c8-40ad-969d-f355a789f579.crl X509v3 Authority Key Identifier: keyid:F2:07:B2:81:1D:EE:20:A3:1B:D2:87:04:DA:9C:1D:80:CE:FA:B4:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/17321389-82c8-40ad-969d-f355a789f579.cer sbgp-ipAddrBlock: critical IPv4: 170.39.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:ed:81:ac:19:e6:0f:b6:16:fa:45:84:93:03:9e:51:d7:c9: 5e:ca:a0:4c:48:ff:50:a9:e6:62:6c:09:24:3d:01:0e:84:0e: 21:25:ed:27:95:a2:aa:e3:09:ab:2f:86:e9:97:3f:e9:11:07: 6e:43:fb:a5:e9:c2:a2:90:d9:8d:27:8e:be:31:27:8a:fd:19: a4:0c:1d:3e:31:16:0f:a5:0e:43:3c:ec:35:07:40:7a:37:de: 19:cf:40:83:b1:20:8d:3e:fb:4b:67:34:1c:15:d5:39:1f:f9: 83:de:20:04:1c:08:0f:16:24:93:95:e7:f4:84:81:cf:fc:de: 11:b4:a8:27:91:be:79:c6:e0:71:5a:b1:60:0e:6d:f5:6a:ae: 1a:95:ad:11:a4:c8:56:cf:88:f3:2f:6b:a1:b8:b2:47:9e:98: 4e:b2:f0:aa:ea:1f:38:16:2b:db:8c:cf:dc:2a:2b:63:65:0d: 60:aa:b6:80:c4:38:82:de:9c:14:d4:47:ae:ae:35:d6:67:36: a1:5a:ae:c1:74:49:bf:dc:90:f5:90:3e:ed:17:cb:83:17:c9: 78:77:66:8b:0d:2a:69:60:d3:22:c3:d6:52:53:f4:4b:53:a7: 90:f3:1b:f2:58:c3:23:05:0f:69:1c:3d:36:23:77:4c:c5:08: 01:ac:b7:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpMOw7NQzziQRfnbUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTczMjEzODktODJjOC00MGFkLTk2OWQtZjM1NWE3ODlm NTc5MB4XDTI1MDYyNDEzMDEwM1oXDTI1MDkyMjEzMDEwM1owLzEtMCsGA1UEAxMk MDY5NmE0ZTYtNDFhMS00YTAzLWI3NWYtZmY4NjhjNjk1NWEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlmgaeNbzoq5+8Mf3vcoodKnPiof08mbnC7vi PCN4eCzhSpWkncOB+IQeHA2ByVCxah4hg8sUaR8Vx1BUwurmyHvx/xGvqrLgU/gj kww8bTUpvSeEAlw5tYr/LezjluGjKP1sTrgvLH5dx+JzIK6sujqCPrwAjF1ze7GO mIGvHSbZJnEMZ30TRdc3KnneAZxXlY7weDZA7L2zaZUySghLL1fH7CMSFmD7fhPn VCkPgLD0d2GO8FQThH+4FLDi2J7QPCiDzV/taq0+DuFHsbAd3L9xjZryR4dJPI3i Txd6dwcdScReHfvAnqaz/o/eKrl94hIYuk6dRRLFF5ceKs6DtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIPEpgKBKPWiEaOR7e+cXetLtAMfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xNzMy MTM4OS04MmM4LTQwYWQtOTY5ZC1mMzU1YTc4OWY1NzkvZDQyOGM1OWUtMjUxNi0z ODI0LTgwNDEtMzZkZjE4NDUyYzJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMTczMjEzODktODJjOC00MGFkLTk2 OWQtZjM1NWE3ODlmNTc5LzE3MzIxMzg5LTgyYzgtNDBhZC05NjlkLWYzNTVhNzg5 ZjU3OS5jcmwwHwYDVR0jBBgwFoAU8geygR3uIKMb0ocE2pwdgM76tF4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xNzMyMTM4OS04MmM4LTQwYWQtOTY5ZC1mMzU1 YTc4OWY1NzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqieDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJLtgawZ5g+2FvpFhJMDnlHXyV7KoExI/1Cp5mJsCSQ9AQ6EDiEl7SeV oqrjCasvhumXP+kRB25D+6XpwqKQ2Y0njr4xJ4r9GaQMHT4xFg+lDkM87DUHQHo3 3hnPQIOxII0++0tnNBwV1Tkf+YPeIAQcCA8WJJOV5/SEgc/83hG0qCeRvnnG4HFa sWAObfVqrhqVrRGkyFbPiPMva6G4skeemE6y8KrqHzgWK9uMz9wqK2NlDWCqtoDE OILenBTUR66uNdZnNqFarsF0Sb/ckPWQPu0Xy4MXyXh3ZosNKmlg0yLD1lJT9EtT p5DzG/JYwyMFD2kcPTYjd0zFCAGst38= -----END CERTIFICATE-----Generated at Tue Jul 1 17:14:55 2025 by rpki-client