$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfba3e15-3fe1-4634-8e3b-838e9f2ae647/a54a8459-0e0e-3ac7-a09c-54965f63560e.roa File: a54a8459-0e0e-3ac7-a09c-54965f63560e.roa (raw, json) Hash identifier: 1h4/0Ed+k9FK9TcXLCV2cg8xFkGndNQKQ7Aew1FzEU4= Subject key identifier: B0:E4:1F:54:86:59:68:67:99:A1:58:DF:2D:6C:F8:A7:D1:77:F9:6A Certificate issuer: /CN=cfba3e15-3fe1-4634-8e3b-838e9f2ae647 Certificate serial: 010D0C9F4328584A963606D9CC37B3CEE17B0AA0 Authority key identifier: 17:8A:2C:4A:22:5C:75:BB:7A:7B:F4:B0:8E:30:51:B7:20:11:35:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfba3e15-3fe1-4634-8e3b-838e9f2ae647.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfba3e15-3fe1-4634-8e3b-838e9f2ae647/a54a8459-0e0e-3ac7-a09c-54965f63560e.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 30562 IP address blocks: 168.100.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfba3e15-3fe1-4634-8e3b-838e9f2ae647/cfba3e15-3fe1-4634-8e3b-838e9f2ae647.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfba3e15-3fe1-4634-8e3b-838e9f2ae647/cfba3e15-3fe1-4634-8e3b-838e9f2ae647.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfba3e15-3fe1-4634-8e3b-838e9f2ae647.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:06:d9:cc:37:b3:ce:e1:7b:0a:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfba3e15-3fe1-4634-8e3b-838e9f2ae647 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=8e5c0516-92c2-419d-8289-acd49f0198e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:19:92:a4:c7:45:c8:c5:a1:9e:fb:62:52:4a: 26:46:ca:b9:57:b3:1c:0f:f4:d7:af:bf:28:67:18: 5b:bc:57:e0:8a:71:71:28:cf:e9:ff:9f:67:51:8e: 00:6b:6a:8f:cf:33:9c:44:19:77:be:56:61:27:b2: 5e:c1:d6:c2:c1:e5:ae:77:a7:2f:10:68:72:c5:18: 0a:0a:37:02:91:2e:9a:05:aa:17:e7:7b:15:46:8b: c6:12:6a:2d:1e:68:fa:9a:4e:56:01:96:30:16:d4: ec:58:83:0e:e1:47:ea:16:bd:c5:cd:61:1a:4d:7e: ea:d0:b2:27:dc:a4:86:c8:2e:c9:23:8d:c6:c4:b4: 1b:36:2e:01:88:ae:d9:17:34:79:35:db:9f:4f:2d: cc:04:6b:4e:b9:09:61:fc:a3:89:52:0a:45:08:70: 96:a4:7e:13:47:ed:1b:64:49:75:ed:e5:20:69:24: a2:70:05:d0:d6:23:5b:b4:62:52:d9:e8:c2:35:c6: 71:4b:ea:db:f7:65:ed:70:02:d8:6d:5f:c2:c2:c9: ae:71:97:4a:fb:30:70:fe:f6:46:ee:6d:50:3f:49: 74:fc:76:18:ae:fd:d7:5d:e2:4f:9e:1f:67:c3:dd: f0:5b:24:25:08:9f:ac:a1:cd:25:13:9d:d6:25:a0: d1:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:E4:1F:54:86:59:68:67:99:A1:58:DF:2D:6C:F8:A7:D1:77:F9:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfba3e15-3fe1-4634-8e3b-838e9f2ae647/a54a8459-0e0e-3ac7-a09c-54965f63560e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfba3e15-3fe1-4634-8e3b-838e9f2ae647/cfba3e15-3fe1-4634-8e3b-838e9f2ae647.crl X509v3 Authority Key Identifier: keyid:17:8A:2C:4A:22:5C:75:BB:7A:7B:F4:B0:8E:30:51:B7:20:11:35:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfba3e15-3fe1-4634-8e3b-838e9f2ae647.cer sbgp-ipAddrBlock: critical IPv4: 168.100.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:1b:88:f6:30:9d:78:7d:f0:4b:4a:ab:ef:59:8f:a4:57:9e: 96:96:af:0a:c7:7a:8e:fe:4c:d4:6a:9b:6e:62:c0:49:a1:04: f0:38:a6:3b:99:a9:92:68:2b:4c:99:49:c6:f1:21:94:25:2f: c5:d5:b6:6a:3a:97:4e:cf:c8:49:10:49:e9:88:54:8f:ba:5a: ec:ac:cb:d2:74:fd:a6:b6:eb:6c:3b:d4:a3:d2:b7:7e:25:fe: 2d:43:f8:dd:b9:cb:92:1b:4b:a9:59:29:10:f4:a8:1f:c1:9e: 48:ff:68:b7:47:93:87:f2:3b:25:5f:96:20:12:26:c0:8f:50: 34:43:8f:ec:e8:54:e4:9f:e4:e1:92:8e:f8:cd:68:a8:5c:89: 6c:22:ee:de:7e:95:36:95:46:34:62:54:66:68:54:6a:21:cb: 3a:bc:a1:2e:3a:9c:93:bb:f2:67:3f:4f:19:bf:90:f2:b6:a7: 35:70:19:df:65:73:ac:90:a6:87:92:e9:48:d3:a6:2f:7d:0d: 22:de:b9:f3:71:0f:f1:4e:65:c6:5f:1d:d8:07:13:ed:00:ad: 36:8d:64:4d:77:1c:45:2f:d3:14:73:dd:e0:90:c5:7b:78:db: b4:77:6e:c4:ae:48:8f:33:03:00:a0:7e:04:f3:23:5f:4f:e0: a1:fa:be:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNgbZzDezzuF7CqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2ZiYTNlMTUtM2ZlMS00NjM0LThlM2ItODM4ZTlmMmFl NjQ3MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk OGU1YzA1MTYtOTJjMi00MTlkLTgyODktYWNkNDlmMDE5OGUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshmSpMdFyMWhnvtiUkomRsq5V7McD/TXr78o ZxhbvFfginFxKM/p/59nUY4Aa2qPzzOcRBl3vlZhJ7JewdbCweWud6cvEGhyxRgK CjcCkS6aBaoX53sVRovGEmotHmj6mk5WAZYwFtTsWIMO4UfqFr3FzWEaTX7q0LIn 3KSGyC7JI43GxLQbNi4BiK7ZFzR5NdufTy3MBGtOuQlh/KOJUgpFCHCWpH4TR+0b ZEl17eUgaSSicAXQ1iNbtGJS2ejCNcZxS+rb92XtcALYbV/CwsmucZdK+zBw/vZG 7m1QP0l0/HYYrv3XXeJPnh9nw93wWyQlCJ+soc0lE53WJaDRgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLDkH1SGWWhnmaFY3y1s+KfRd/lqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jZmJh M2UxNS0zZmUxLTQ2MzQtOGUzYi04MzhlOWYyYWU2NDcvYTU0YTg0NTktMGUwZS0z YWM3LWEwOWMtNTQ5NjVmNjM1NjBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvY2ZiYTNlMTUtM2ZlMS00NjM0LThl M2ItODM4ZTlmMmFlNjQ3L2NmYmEzZTE1LTNmZTEtNDYzNC04ZTNiLTgzOGU5ZjJh ZTY0Ny5jcmwwHwYDVR0jBBgwFoAUF4osSiJcdbt6e/SwjjBRtyARNSowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jZmJhM2UxNS0zZmUxLTQ2MzQtOGUzYi04Mzhl OWYyYWU2NDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqGSrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABsbiPYwnXh98EtKq+9Zj6RXnpaWrwrHeo7+TNRqm25iwEmhBPA4pjuZ qZJoK0yZScbxIZQlL8XVtmo6l07PyEkQSemIVI+6Wuysy9J0/aa262w71KPSt34l /i1D+N25y5IbS6lZKRD0qB/Bnkj/aLdHk4fyOyVfliASJsCPUDRDj+zoVOSf5OGS jvjNaKhciWwi7t5+lTaVRjRiVGZoVGohyzq8oS46nJO78mc/Txm/kPK2pzVwGd9l c6yQpoeS6UjTpi99DSLeufNxD/FOZcZfHdgHE+0ArTaNZE13HEUv0xRz3eCQxXt4 27R3bsSuSI8zAwCgfgTzI19P4KH6vos= -----END CERTIFICATE-----Generated at Thu Aug 7 20:10:40 2025 by rpki-client