$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7054e196-fda1-4988-82d5-4d2f5013150d/efb22e9b-1db1-3239-b2d3-65e0df4abd83.roa File: efb22e9b-1db1-3239-b2d3-65e0df4abd83.roa (raw, json) Hash identifier: bEFKqZFec+vqwP/2QR6BF1bqA4GA6AieSLYOhHELZ+8= Subject key identifier: 31:C9:90:EC:77:B9:BD:9A:93:A0:85:53:D6:36:7C:A8:B1:00:8E:5D Certificate issuer: /CN=7054e196-fda1-4988-82d5-4d2f5013150d Certificate serial: 010D0C9F43285849ED4FCB3BF8C55A5940F2DC00 Authority key identifier: 52:46:E6:08:EF:68:90:03:56:03:88:76:FC:E9:A7:67:C1:E4:B4:AC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7054e196-fda1-4988-82d5-4d2f5013150d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7054e196-fda1-4988-82d5-4d2f5013150d/efb22e9b-1db1-3239-b2d3-65e0df4abd83.roa Signing time: Wed 21 May 2025 13:01:04 +0000 ROA not before: Wed 21 May 2025 13:01:04 +0000 ROA not after: Tue 19 Aug 2025 13:01:04 +0000 asID: 14648 IP address blocks: 170.39.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7054e196-fda1-4988-82d5-4d2f5013150d/7054e196-fda1-4988-82d5-4d2f5013150d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7054e196-fda1-4988-82d5-4d2f5013150d/7054e196-fda1-4988-82d5-4d2f5013150d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7054e196-fda1-4988-82d5-4d2f5013150d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ed:4f:cb:3b:f8:c5:5a:59:40:f2:dc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7054e196-fda1-4988-82d5-4d2f5013150d Validity Not Before: May 21 13:01:04 2025 GMT Not After : Aug 19 13:01:04 2025 GMT Subject: CN=d8477771-b709-4b13-9bf3-98c4958d59e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:bb:64:22:37:dd:f9:c9:dc:5c:1d:4f:e0:2c: 31:72:f2:f0:57:39:91:cc:80:a1:79:eb:44:3a:82: 8f:68:61:bf:d2:99:09:a6:57:8c:6f:a4:fd:c9:9f: 33:e7:b8:00:4f:46:ef:ef:bc:2a:59:71:df:15:94: c1:63:f5:bd:8f:81:01:25:f4:d7:02:89:7c:84:9e: c8:4c:09:db:08:bc:2c:f1:b1:09:45:3b:49:37:39: a1:c9:7c:0a:e0:ad:d3:12:be:a9:e1:33:f4:12:d6: 48:3a:98:04:75:44:01:3a:6c:ba:03:0f:09:a3:76: 35:9d:3c:20:c8:4e:e4:f8:67:0a:ce:fe:b9:2f:ee: 5b:6e:78:b0:d9:43:d2:9c:3f:a2:1f:fc:26:43:a0: bb:3f:89:4e:f0:62:b8:83:b1:d2:be:f4:38:28:d3: e8:38:22:8c:91:f0:b8:66:b3:82:9a:42:7e:5d:5e: c2:8e:fd:3e:58:9a:c8:b1:08:a1:b2:32:ce:13:cc: 85:c6:20:1f:3c:ca:2f:14:05:a3:5a:40:b9:de:1f: d8:0b:ee:11:35:1c:e2:01:ab:02:ad:f7:70:64:99: 8e:a8:55:03:91:66:8b:12:9e:3a:04:db:72:21:74: 2c:92:57:06:84:be:51:8b:4d:be:4a:b7:cf:35:24: 21:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:C9:90:EC:77:B9:BD:9A:93:A0:85:53:D6:36:7C:A8:B1:00:8E:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7054e196-fda1-4988-82d5-4d2f5013150d/efb22e9b-1db1-3239-b2d3-65e0df4abd83.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7054e196-fda1-4988-82d5-4d2f5013150d/7054e196-fda1-4988-82d5-4d2f5013150d.crl X509v3 Authority Key Identifier: keyid:52:46:E6:08:EF:68:90:03:56:03:88:76:FC:E9:A7:67:C1:E4:B4:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7054e196-fda1-4988-82d5-4d2f5013150d.cer sbgp-ipAddrBlock: critical IPv4: 170.39.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:8f:ed:97:18:76:31:83:47:ed:42:b6:98:a5:15:be:79:79: 88:e2:c9:45:9a:c9:a0:45:9c:0d:d1:2c:67:3d:ff:94:ef:50: a5:d5:d7:6c:79:44:54:96:0e:ed:ed:82:e8:c5:e3:21:63:d6: da:25:fb:84:83:85:44:7a:ea:07:68:db:aa:d1:ba:48:56:9c: a2:23:68:bb:15:88:0c:c6:4e:da:c7:97:5e:95:a0:7e:35:4b: 84:d4:7f:c4:65:3c:eb:a1:f0:97:ac:c8:81:60:e2:ce:1f:df: fe:7e:97:14:56:5a:97:eb:15:77:03:ae:f1:a1:d6:2a:10:0d: 2e:15:02:f1:fa:ae:d5:e3:26:83:e4:cd:31:41:56:a2:5d:08: 0a:7d:46:e6:26:5b:c9:a8:e7:4f:00:c0:99:54:2d:17:1f:1b: 17:4f:0f:e3:e9:76:22:d1:d3:2a:ec:c1:a2:3a:7a:a0:7e:9f: ef:a5:06:b1:9a:05:cf:2a:df:01:1a:c7:7c:3e:98:7a:22:6a: 39:63:fd:56:73:20:a0:ac:8c:37:a6:46:b3:df:08:8a:c8:d8: 44:67:6b:a6:69:69:eb:0d:6c:31:5e:59:40:2e:15:ea:d8:0c: 08:19:c2:02:35:19:bf:d7:fa:27:6f:f5:5b:7f:fc:e6:d8:f3: 47:ba:53:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEntT8s7+MVaWUDy3AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzA1NGUxOTYtZmRhMS00OTg4LTgyZDUtNGQyZjUwMTMx NTBkMB4XDTI1MDUyMTEzMDEwNFoXDTI1MDgxOTEzMDEwNFowLzEtMCsGA1UEAxMk ZDg0Nzc3NzEtYjcwOS00YjEzLTliZjMtOThjNDk1OGQ1OWUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7tkIjfd+cncXB1P4CwxcvLwVzmRzICheetE OoKPaGG/0pkJpleMb6T9yZ8z57gAT0bv77wqWXHfFZTBY/W9j4EBJfTXAol8hJ7I TAnbCLws8bEJRTtJNzmhyXwK4K3TEr6p4TP0EtZIOpgEdUQBOmy6Aw8Jo3Y1nTwg yE7k+GcKzv65L+5bbniw2UPSnD+iH/wmQ6C7P4lO8GK4g7HSvvQ4KNPoOCKMkfC4 ZrOCmkJ+XV7Cjv0+WJrIsQihsjLOE8yFxiAfPMovFAWjWkC53h/YC+4RNRziAasC rfdwZJmOqFUDkWaLEp46BNtyIXQsklcGhL5Ri02+SrfPNSQhDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDHJkOx3ub2ak6CFU9Y2fKixAI5dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83MDU0 ZTE5Ni1mZGExLTQ5ODgtODJkNS00ZDJmNTAxMzE1MGQvZWZiMjJlOWItMWRiMS0z MjM5LWIyZDMtNjVlMGRmNGFiZDgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzA1NGUxOTYtZmRhMS00OTg4LTgy ZDUtNGQyZjUwMTMxNTBkLzcwNTRlMTk2LWZkYTEtNDk4OC04MmQ1LTRkMmY1MDEz MTUwZC5jcmwwHwYDVR0jBBgwFoAUUkbmCO9okANWA4h2/OmnZ8HktKwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83MDU0ZTE5Ni1mZGExLTQ5ODgtODJkNS00ZDJm NTAxMzE1MGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqieJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAWP7ZcYdjGDR+1CtpilFb55eYjiyUWayaBFnA3RLGc9/5TvUKXV12x5 RFSWDu3tgujF4yFj1tol+4SDhUR66gdo26rRukhWnKIjaLsViAzGTtrHl16VoH41 S4TUf8RlPOuh8JesyIFg4s4f3/5+lxRWWpfrFXcDrvGh1ioQDS4VAvH6rtXjJoPk zTFBVqJdCAp9RuYmW8mo508AwJlULRcfGxdPD+PpdiLR0yrswaI6eqB+n++lBrGa Bc8q3wEax3w+mHoiajlj/VZzIKCsjDemRrPfCIrI2ERna6ZpaesNbDFeWUAuFerY DAgZwgI1Gb/X+idv9Vt//ObY80e6U3U= -----END CERTIFICATE-----Generated at Tue Jun 17 15:31:11 2025 by rpki-client