$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/dc659b2e-e1ec-3398-a84f-1a0622493eed.roa File: dc659b2e-e1ec-3398-a84f-1a0622493eed.roa (raw, json) Hash identifier: cUOOGlthhVAufDkETFQHULMtd4GUPtsOfgFV3JhoSLg= Subject key identifier: 3D:B6:A9:57:B3:F7:AB:56:3E:51:8A:26:B7:0E:C5:55:43:E7:F1:D4 Certificate issuer: /CN=be3ff10d-9ac5-46a9-8eb4-823027607ca1 Certificate serial: 010D0C9F4328584A331AE4EDD7910E4A70641A20 Authority key identifier: C5:FD:6F:CD:D2:74:9A:00:05:9F:45:D5:49:E1:47:AE:5D:95:65:C6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/dc659b2e-e1ec-3398-a84f-1a0622493eed.roa Signing time: Sun 15 Jun 2025 13:01:02 +0000 ROA not before: Sun 15 Jun 2025 13:01:02 +0000 ROA not after: Sat 13 Sep 2025 13:01:02 +0000 asID: 14618 IP address blocks: 170.89.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/be3ff10d-9ac5-46a9-8eb4-823027607ca1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/be3ff10d-9ac5-46a9-8eb4-823027607ca1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:33:1a:e4:ed:d7:91:0e:4a:70:64:1a:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be3ff10d-9ac5-46a9-8eb4-823027607ca1 Validity Not Before: Jun 15 13:01:02 2025 GMT Not After : Sep 13 13:01:02 2025 GMT Subject: CN=6f6f9c56-0b83-4849-8827-a303327a29f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:a3:2b:02:f0:4d:82:9e:f7:c7:db:bb:f3:f7: 88:ac:a0:70:d3:c2:0d:76:04:ae:a3:9f:89:c8:a9: 10:71:09:30:81:a3:df:1c:75:0c:2a:0b:d0:13:0f: e7:18:36:1c:d5:6b:e4:af:58:a3:5d:10:4d:e5:ea: 27:c4:f6:f1:13:ec:37:df:1f:08:7a:3a:0f:3f:d3: f4:f0:54:ef:3d:03:7e:dd:27:38:4d:14:57:17:a2: 30:8c:00:14:ba:e6:24:38:f1:c8:70:81:47:34:f4: 11:a5:b5:53:0e:08:6e:a6:de:99:e2:17:fa:58:ec: 86:e8:30:d2:a9:61:f5:b9:dd:bd:22:ab:c4:92:b4: 3b:23:e2:49:2e:54:d4:17:7e:1e:d6:11:03:58:b3: e7:54:f2:04:41:be:fe:d7:a5:89:4e:44:54:73:f9: bf:ff:31:eb:dc:e8:95:28:63:94:1d:c1:d5:6a:0c: 16:73:1e:f4:6d:2e:32:11:55:45:6b:99:f9:00:30: 06:cf:43:d5:f4:ed:00:03:2c:1e:97:93:a8:64:86: 7f:15:af:a2:a9:1b:7b:13:b3:6b:e2:09:01:ab:ec: dd:2b:04:76:b6:83:1f:5c:a1:fa:97:f5:94:ad:03: 7a:44:9e:ef:d3:55:23:50:ce:0a:f5:48:e2:2e:02: 8a:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:B6:A9:57:B3:F7:AB:56:3E:51:8A:26:B7:0E:C5:55:43:E7:F1:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/dc659b2e-e1ec-3398-a84f-1a0622493eed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/be3ff10d-9ac5-46a9-8eb4-823027607ca1.crl X509v3 Authority Key Identifier: keyid:C5:FD:6F:CD:D2:74:9A:00:05:9F:45:D5:49:E1:47:AE:5D:95:65:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1.cer sbgp-ipAddrBlock: critical IPv4: 170.89.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:51:99:00:71:f2:b6:3b:f6:ba:b7:03:d3:01:95:8a:a3:48: 45:03:44:b2:51:0f:69:db:8b:a8:23:04:a2:97:05:95:60:2a: 0a:d4:29:ee:ad:b5:be:73:6c:ec:21:73:75:d8:6c:e0:c1:05: d9:fb:43:9a:d1:d7:69:e7:69:ec:a5:72:b7:81:31:c2:cd:61: 1d:1a:5b:71:f4:9a:68:1e:c5:29:92:11:76:a0:8d:1f:68:29: 7b:59:b0:58:2f:b1:f5:38:19:64:bd:d9:d4:44:19:d6:75:28: fa:ca:23:2c:a7:14:af:93:24:94:26:10:b5:5d:c0:1a:54:ee: 89:71:9c:6b:6d:6b:76:3e:c9:e7:1e:87:1f:c9:61:ea:f2:0e: 26:c1:f5:56:1d:52:3c:9e:a8:21:41:83:15:d7:f5:13:56:f1: 32:e8:98:33:01:90:e4:d2:01:e9:a4:fb:47:28:85:7a:cc:f1: 06:ed:49:00:96:ea:2c:ac:cd:aa:b8:c7:4c:4a:9d:82:d7:62: d9:25:35:20:fb:5b:b2:24:03:86:fe:0f:14:90:04:af:c8:62: 79:80:17:a7:17:6f:05:95:04:fb:d6:fb:ac:53:4d:ca:63:95: f2:54:c1:ec:63:d9:7d:9f:d5:80:03:34:d0:9a:0d:f0:9f:52: 97:5f:09:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEozGuTt15EOSnBkGiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmUzZmYxMGQtOWFjNS00NmE5LThlYjQtODIzMDI3NjA3 Y2ExMB4XDTI1MDYxNTEzMDEwMloXDTI1MDkxMzEzMDEwMlowLzEtMCsGA1UEAxMk NmY2ZjljNTYtMGI4My00ODQ5LTg4MjctYTMwMzMyN2EyOWY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6MrAvBNgp73x9u78/eIrKBw08INdgSuo5+J yKkQcQkwgaPfHHUMKgvQEw/nGDYc1Wvkr1ijXRBN5eonxPbxE+w33x8IejoPP9P0 8FTvPQN+3Sc4TRRXF6IwjAAUuuYkOPHIcIFHNPQRpbVTDghupt6Z4hf6WOyG6DDS qWH1ud29IqvEkrQ7I+JJLlTUF34e1hEDWLPnVPIEQb7+16WJTkRUc/m//zHr3OiV KGOUHcHVagwWcx70bS4yEVVFa5n5ADAGz0PV9O0AAywel5OoZIZ/Fa+iqRt7E7Nr 4gkBq+zdKwR2toMfXKH6l/WUrQN6RJ7v01UjUM4K9UjiLgKKLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD22qVez96tWPlGKJrcOxVVD5/HUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iZTNm ZjEwZC05YWM1LTQ2YTktOGViNC04MjMwMjc2MDdjYTEvZGM2NTliMmUtZTFlYy0z Mzk4LWE4NGYtMWEwNjIyNDkzZWVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYmUzZmYxMGQtOWFjNS00NmE5LThl YjQtODIzMDI3NjA3Y2ExL2JlM2ZmMTBkLTlhYzUtNDZhOS04ZWI0LTgyMzAyNzYw N2NhMS5jcmwwHwYDVR0jBBgwFoAUxf1vzdJ0mgAFn0XVSeFHrl2VZcYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iZTNmZjEwZC05YWM1LTQ2YTktOGViNC04MjMw Mjc2MDdjYTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGqlkAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI1RmQBx8rY79rq3A9MBlYqjSEUDRLJRD2nbi6gjBKKXBZVgKgrUKe6t tb5zbOwhc3XYbODBBdn7Q5rR12nnaeylcreBMcLNYR0aW3H0mmgexSmSEXagjR9o KXtZsFgvsfU4GWS92dREGdZ1KPrKIyynFK+TJJQmELVdwBpU7olxnGtta3Y+yece hx/JYeryDibB9VYdUjyeqCFBgxXX9RNW8TLomDMBkOTSAemk+0cohXrM8QbtSQCW 6iyszaq4x0xKnYLXYtklNSD7W7IkA4b+DxSQBK/IYnmAF6cXbwWVBPvW+6xTTcpj lfJUwexj2X2f1YADNNCaDfCfUpdfCac= -----END CERTIFICATE-----Generated at Sun Jun 29 09:21:39 2025 by rpki-client