$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/24d8a457-1988-3f36-ba88-b2e8e106ac7f.roa File: 24d8a457-1988-3f36-ba88-b2e8e106ac7f.roa (raw, json) Hash identifier: aPUImH0iz3vFgfVTRKSMGqAvlgHXLmc2hQ3/qOuBDOE= Subject key identifier: 70:FD:84:CA:B5:33:A4:CE:47:C7:B6:1B:F0:91:21:54:F8:87:E5:C1 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A5CFB294D6DFA30A889212800 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/24d8a457-1988-3f36-ba88-b2e8e106ac7f.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 63949 IP address blocks: 170.187.208.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fb:29:4d:6d:fa:30:a8:89:21:28:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=71cc896a-752c-49b9-8a0b-c5fa1b74bd4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:94:fe:6d:74:92:dc:f7:d6:23:06:42:64:71: 5c:d5:0a:83:e7:9e:56:51:7d:12:ec:1a:84:90:66: 18:a8:bf:32:fd:ee:91:3f:8b:d2:df:88:07:48:74: 77:2a:78:51:0f:06:33:d3:8f:ac:64:3d:32:35:a9: 18:e4:65:17:17:82:2b:2a:32:8f:45:75:d3:ca:4e: 33:b5:d9:5b:c7:b3:e5:3a:72:7a:17:8f:c8:3a:b1: b2:d1:61:1a:9b:05:de:28:d4:91:32:2f:e5:db:87: 57:14:9c:9e:bd:89:a8:ea:c0:fd:32:af:5a:65:a9: 09:ac:12:34:48:0d:2f:81:46:08:49:18:a0:a1:bc: 3e:6d:3d:c2:65:c1:a0:b7:69:94:b6:ac:cd:62:b0: 74:0f:f0:0b:f7:89:d0:f7:92:c6:79:f4:e2:29:81: 61:36:35:e8:ce:74:6f:a2:59:76:89:d8:45:66:c0: 7d:92:87:6a:4b:35:ba:23:1f:be:ad:a4:c8:a3:6c: 7e:af:db:0f:d9:b7:47:a4:46:aa:96:e9:26:7d:8a: 9d:fc:53:f4:3a:c7:60:b0:14:22:33:97:39:fb:d3: 5b:50:7b:ae:39:ae:75:7c:ef:28:77:d4:36:8c:f2: 74:30:7b:f8:ae:60:67:9a:71:a8:a4:97:a5:2d:31: 1c:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:FD:84:CA:B5:33:A4:CE:47:C7:B6:1B:F0:91:21:54:F8:87:E5:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/24d8a457-1988-3f36-ba88-b2e8e106ac7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 170.187.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:eb:13:ff:a8:e0:32:8a:e3:be:b9:5d:3b:f2:2a:60:0b:c6: ea:f3:fb:e4:df:22:9b:6e:93:85:f5:a6:23:6d:eb:88:c6:50: f9:5c:c0:16:06:0a:42:94:ce:6a:17:9b:87:ac:eb:76:5e:04: f4:a7:78:b3:ba:4c:3f:8a:d6:a5:98:ef:3c:0b:6c:ac:10:c7: fa:6c:c3:17:07:4b:0b:7b:c4:41:bb:e1:57:85:fe:2e:ca:83: b2:1d:8b:41:07:12:02:06:6d:13:4e:57:c8:b5:7f:10:ad:9d: 0d:37:36:63:fa:c1:5c:90:f5:7b:f0:9d:79:5f:17:32:21:b9: 20:0b:c6:8e:4b:65:a1:74:de:ef:13:b8:40:3c:9f:66:3b:9d: ff:0c:60:ee:7e:b1:30:67:21:cb:36:21:9a:56:e3:e8:75:8e: 67:7c:f5:b7:29:c6:ba:ea:1b:4b:68:fb:0f:13:44:a3:1b:4c: 60:6d:97:11:ea:b8:06:ff:b6:15:01:df:8d:30:10:cb:17:a6: 55:b4:fe:a3:be:41:98:0a:19:35:0c:04:9a:1c:fe:3d:5a:bc: 25:f7:02:3d:cf:30:ee:2f:88:8f:be:36:8b:31:78:7d:96:05: 05:d5:4b:78:dd:9d:6d:a6:5d:8d:b8:85:bb:98:54:ce:3b:46: bc:cd:b5:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc+ylNbfowqIkhKAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk NzFjYzg5NmEtNzUyYy00OWI5LThhMGItYzVmYTFiNzRiZDRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZT+bXSS3PfWIwZCZHFc1QqD555WUX0S7BqE kGYYqL8y/e6RP4vS34gHSHR3KnhRDwYz04+sZD0yNakY5GUXF4IrKjKPRXXTyk4z tdlbx7PlOnJ6F4/IOrGy0WEamwXeKNSRMi/l24dXFJyevYmo6sD9Mq9aZakJrBI0 SA0vgUYISRigobw+bT3CZcGgt2mUtqzNYrB0D/AL94nQ95LGefTiKYFhNjXoznRv oll2idhFZsB9kodqSzW6Ix++raTIo2x+r9sP2bdHpEaqlukmfYqd/FP0OsdgsBQi M5c5+9NbUHuuOa51fO8od9Q2jPJ0MHv4rmBnmnGopJelLTEcuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHD9hMq1M6TOR8e2G/CRIVT4h+XBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjRkOGE0NTctMTk4OC0z ZjM2LWJhODgtYjJlOGUxMDZhYzdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEqrvQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJTrE/+o4DKK4765XTvyKmALxurz++TfIptuk4X1piNt64jGUPlcwBYG CkKUzmoXm4es63ZeBPSneLO6TD+K1qWY7zwLbKwQx/pswxcHSwt7xEG74VeF/i7K g7Idi0EHEgIGbRNOV8i1fxCtnQ03NmP6wVyQ9XvwnXlfFzIhuSALxo5LZaF03u8T uEA8n2Y7nf8MYO5+sTBnIcs2IZpW4+h1jmd89bcpxrrqG0to+w8TRKMbTGBtlxHq uAb/thUB340wEMsXplW0/qO+QZgKGTUMBJoc/j1avCX3Aj3PMO4viI++NosxeH2W BQXVS3jdnW2mXY24hbuYVM47RrzNtYI= -----END CERTIFICATE-----Generated at Tue Jul 1 07:05:43 2025 by rpki-client