$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/50af3546-f216-3326-8b7b-c1c5a9b3d113.roa File: 50af3546-f216-3326-8b7b-c1c5a9b3d113.roa (raw, json) Hash identifier: 3g2p0ZcauDqbsPQNi/FmUhD1CTl9N23DmbBO15keumE= Subject key identifier: 33:07:63:60:DB:99:11:91:67:69:90:A8:41:16:05:FB:2B:2C:28:B2 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A5A30732370D0971E2D12C240 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/50af3546-f216-3326-8b7b-c1c5a9b3d113.roa Signing time: Sun 29 Jun 2025 13:01:03 +0000 ROA not before: Sun 29 Jun 2025 13:01:03 +0000 ROA not after: Sat 27 Sep 2025 13:01:03 +0000 asID: 63949 IP address blocks: 170.187.128.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5a:30:73:23:70:d0:97:1e:2d:12:c2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 29 13:01:03 2025 GMT Not After : Sep 27 13:01:03 2025 GMT Subject: CN=295bd715-e86b-4a72-bf23-ec9241622bb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:86:86:19:78:32:bb:8f:89:15:56:0f:63:72: 8e:69:cf:03:47:66:1e:5f:2d:81:22:65:97:57:15: 55:7f:98:46:22:43:79:85:16:41:b1:a0:33:67:9c: 70:83:7e:d9:a6:fe:e0:0f:8d:5c:b0:d9:08:33:b9: bc:7b:2c:c7:fe:76:7c:2c:c1:06:6d:db:28:03:f2: 12:5f:cf:19:6d:dc:99:2b:d6:09:71:36:76:49:28: 98:7f:00:28:0d:35:55:17:08:10:08:1b:c5:69:30: 7f:42:f8:5a:4a:83:2e:2c:1b:a1:37:c1:ed:1c:39: e3:02:08:21:ec:c2:b6:8e:93:b6:c7:24:10:af:45: 84:1f:0c:fb:21:6b:39:cf:6a:fc:d8:fb:c6:3f:7e: 99:a0:36:16:de:da:a8:47:12:0a:92:b0:f1:4e:33: 8e:2e:8b:fe:70:36:a0:91:2b:0a:7a:2a:c9:c8:e1: a4:8c:25:b1:2b:35:3c:60:eb:45:bd:e1:a9:e5:a2: da:f6:80:44:e6:b0:24:14:7d:e2:cf:3c:cc:c5:d8: 4c:09:1b:19:71:40:03:53:ad:50:cf:ef:a8:ab:be: 2a:b9:89:62:e9:f2:d3:5f:3e:62:46:db:70:b4:f4: b4:dc:3b:e7:ed:be:55:ec:00:3d:68:a8:fa:07:78: ed:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:07:63:60:DB:99:11:91:67:69:90:A8:41:16:05:FB:2B:2C:28:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/50af3546-f216-3326-8b7b-c1c5a9b3d113.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 170.187.128.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:5d:c8:7d:38:ab:ee:12:b5:52:c9:cc:86:a2:be:4c:59:f5: a7:45:07:de:9a:31:e2:3c:54:0b:81:46:fb:8e:6e:44:d1:ce: 15:54:aa:27:8a:96:25:7b:0c:c7:e7:4a:34:6e:d3:5d:18:5f: 71:6c:00:de:7d:b8:02:32:cf:78:92:52:56:58:36:d6:6a:0f: ba:c5:de:89:6f:78:6d:e4:e3:10:70:89:50:8a:b2:eb:f2:3d: 35:79:b5:45:85:a6:50:ee:1c:cd:01:3d:33:66:b9:00:36:9e: f5:06:6e:26:0c:22:ab:14:e1:2d:cc:06:e3:f9:f6:98:42:10: 66:f5:53:49:18:09:e0:42:3f:95:e6:a8:57:86:fa:33:47:42: d7:0b:9a:74:1e:b8:0b:69:39:0c:5b:a0:7a:2c:4d:d0:f0:9e: 8e:ea:f0:40:a7:ee:48:31:f1:6a:89:6a:8a:2f:cd:10:a5:56: cd:a5:be:07:6e:df:81:b8:a5:dc:a7:f3:04:82:73:3a:4b:7a: c4:ec:68:48:87:5a:a1:51:08:77:dc:35:81:63:1e:94:05:98: 01:ad:3b:ba:be:3d:87:a3:c3:d7:dc:e0:31:2f:13:31:c4:b6: e8:35:e8:51:a9:49:6c:e0:ed:06:c7:e9:cc:8d:d4:56:2b:d1: 89:1e:42:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpaMHMjcNCXHi0SwkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYyOTEzMDEwM1oXDTI1MDkyNzEzMDEwM1owLzEtMCsGA1UEAxMk Mjk1YmQ3MTUtZTg2Yi00YTcyLWJmMjMtZWM5MjQxNjIyYmIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIaGGXgyu4+JFVYPY3KOac8DR2YeXy2BImWX VxVVf5hGIkN5hRZBsaAzZ5xwg37Zpv7gD41csNkIM7m8eyzH/nZ8LMEGbdsoA/IS X88ZbdyZK9YJcTZ2SSiYfwAoDTVVFwgQCBvFaTB/QvhaSoMuLBuhN8HtHDnjAggh 7MK2jpO2xyQQr0WEHwz7IWs5z2r82PvGP36ZoDYW3tqoRxIKkrDxTjOOLov+cDag kSsKeirJyOGkjCWxKzU8YOtFveGp5aLa9oBE5rAkFH3izzzMxdhMCRsZcUADU61Q z++oq74quYli6fLTXz5iRttwtPS03Dvn7b5V7AA9aKj6B3jtSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDMHY2DbmRGRZ2mQqEEWBfsrLCiyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTBhZjM1NDYtZjIxNi0z MzI2LThiN2ItYzFjNWE5YjNkMTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqruAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIpdyH04q+4StVLJzIaivkxZ9adFB96aMeI8VAuBRvuObkTRzhVUqieK liV7DMfnSjRu010YX3FsAN59uAIyz3iSUlZYNtZqD7rF3olveG3k4xBwiVCKsuvy PTV5tUWFplDuHM0BPTNmuQA2nvUGbiYMIqsU4S3MBuP59phCEGb1U0kYCeBCP5Xm qFeG+jNHQtcLmnQeuAtpOQxboHosTdDwno7q8ECn7kgx8WqJaoovzRClVs2lvgdu 34G4pdyn8wSCczpLesTsaEiHWqFRCHfcNYFjHpQFmAGtO7q+PYejw9fc4DEvEzHE tug16FGpSWzg7QbH6cyN1FYr0YkeQpI= -----END CERTIFICATE-----Generated at Sun Jun 29 17:44:51 2025 by rpki-client