$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7054e196-fda1-4988-82d5-4d2f5013150d/efb22e9b-1db1-3239-b2d3-65e0df4abd83.roa File: efb22e9b-1db1-3239-b2d3-65e0df4abd83.roa (raw, json) Hash identifier: Z+FnQIdra1cvgywlC3045raOlrFLceupjWFz1sAiPHQ= Subject key identifier: 68:18:77:63:A5:4B:50:C7:FC:E8:53:D6:9C:96:93:AE:98:3F:C1:71 Certificate issuer: /CN=7054e196-fda1-4988-82d5-4d2f5013150d Certificate serial: 010D0C9F4328584ACE0B984843209294CE564980 Authority key identifier: 52:46:E6:08:EF:68:90:03:56:03:88:76:FC:E9:A7:67:C1:E4:B4:AC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7054e196-fda1-4988-82d5-4d2f5013150d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7054e196-fda1-4988-82d5-4d2f5013150d/efb22e9b-1db1-3239-b2d3-65e0df4abd83.roa Signing time: Sun 10 Aug 2025 01:00:32 +0000 ROA not before: Sun 10 Aug 2025 01:00:32 +0000 ROA not after: Sat 08 Nov 2025 02:00:32 +0000 asID: 14648 IP address blocks: 170.39.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7054e196-fda1-4988-82d5-4d2f5013150d/7054e196-fda1-4988-82d5-4d2f5013150d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7054e196-fda1-4988-82d5-4d2f5013150d/7054e196-fda1-4988-82d5-4d2f5013150d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7054e196-fda1-4988-82d5-4d2f5013150d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 12 Aug 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ce:0b:98:48:43:20:92:94:ce:56:49:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7054e196-fda1-4988-82d5-4d2f5013150d Validity Not Before: Aug 10 01:00:32 2025 GMT Not After : Nov 8 02:00:32 2025 GMT Subject: CN=eb0ef810-036c-4028-a29b-9095047a1f41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:38:2d:db:d8:a9:db:67:dc:97:53:50:66:85: 7f:30:1c:68:fa:7f:5d:8a:99:6e:e4:57:29:29:ff: e5:82:a7:e8:58:42:89:9b:9e:86:1b:bb:46:42:97: be:d5:93:75:21:35:40:f4:c3:b7:fe:bf:21:79:8c: 3f:db:a2:ed:92:c2:8c:42:26:f6:b7:8c:fd:35:68: 27:3f:72:05:19:ed:0c:e8:7e:cf:b3:07:1e:f9:f6: d8:1a:ef:da:6e:6b:9a:4b:38:b0:99:cb:f3:ae:19: 7f:c3:cd:f7:9b:34:39:48:c0:d0:e4:10:c2:6e:aa: 1f:23:97:4a:8e:c6:d6:c0:b6:c0:63:0d:84:b7:32: 76:84:b9:6f:c3:8d:14:7b:35:5f:5d:84:5d:1d:d8: 40:f5:33:1b:87:f9:2f:b9:8f:d3:e9:bd:33:3c:7b: fb:54:10:f5:63:d9:7a:28:6b:bf:fc:4b:98:82:c6: c1:3f:c1:e9:18:9e:8c:db:0f:6a:b6:7d:9c:0f:c7: 44:76:f9:59:bd:93:23:f2:25:80:c9:d5:a9:32:26: 95:25:f1:90:26:34:21:b4:84:8e:73:d0:1b:08:ab: 08:f5:2a:01:78:ca:17:93:f4:b1:c7:ce:b2:f2:9a: 0c:93:21:71:03:fb:f3:0d:88:5a:bf:ea:4a:e6:f7: e6:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:18:77:63:A5:4B:50:C7:FC:E8:53:D6:9C:96:93:AE:98:3F:C1:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7054e196-fda1-4988-82d5-4d2f5013150d/efb22e9b-1db1-3239-b2d3-65e0df4abd83.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7054e196-fda1-4988-82d5-4d2f5013150d/7054e196-fda1-4988-82d5-4d2f5013150d.crl X509v3 Authority Key Identifier: keyid:52:46:E6:08:EF:68:90:03:56:03:88:76:FC:E9:A7:67:C1:E4:B4:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7054e196-fda1-4988-82d5-4d2f5013150d.cer sbgp-ipAddrBlock: critical IPv4: 170.39.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:22:e3:1d:31:86:24:6b:7a:bc:50:67:f2:4e:fd:f8:91:b6: 82:d4:91:16:9e:45:46:f9:e7:95:bf:2d:f2:cd:a7:21:44:2e: 27:ea:36:50:aa:0b:ce:07:11:ce:9f:49:1c:57:be:79:e1:26: ac:ef:be:71:0c:8f:a8:81:a6:fb:4e:50:d5:a9:cf:65:98:80: c1:3e:25:3f:06:6c:fc:ae:60:30:81:53:c3:ad:c5:16:7f:67: 1c:db:ba:3a:1c:00:43:99:d1:fa:f9:05:74:94:6c:ae:30:6b: b7:62:25:06:30:d1:5f:31:96:7d:79:3f:73:5c:fc:31:b5:76: 07:3e:61:81:d6:1e:72:de:cd:bf:33:90:da:68:1c:9c:bc:0a: de:a7:d1:65:56:13:3b:35:66:d0:bd:d6:9b:25:8b:7c:fb:86: 8e:e5:3c:bf:52:39:5e:34:af:cc:12:bf:1a:3b:b0:e8:ed:92: cd:08:1a:32:2a:ee:45:82:16:c2:47:40:e9:6a:c5:b8:5a:1e: 2a:42:5f:6c:e6:0e:ff:7e:55:7a:7f:19:6c:cf:87:de:e1:91: 84:e3:35:f8:73:9a:64:88:c3:37:4d:f2:01:be:b2:05:42:f0: 77:15:0b:9f:0d:20:63:b4:8a:89:3e:4b:8a:ad:18:b9:e3:ac: f1:56:45:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErOC5hIQyCSlM5WSYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzA1NGUxOTYtZmRhMS00OTg4LTgyZDUtNGQyZjUwMTMx NTBkMB4XDTI1MDgxMDAxMDAzMloXDTI1MTEwODAyMDAzMlowLzEtMCsGA1UEAxMk ZWIwZWY4MTAtMDM2Yy00MDI4LWEyOWItOTA5NTA0N2ExZjQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDgt29ip22fcl1NQZoV/MBxo+n9diplu5Fcp Kf/lgqfoWEKJm56GG7tGQpe+1ZN1ITVA9MO3/r8heYw/26LtksKMQib2t4z9NWgn P3IFGe0M6H7Pswce+fbYGu/abmuaSziwmcvzrhl/w833mzQ5SMDQ5BDCbqofI5dK jsbWwLbAYw2EtzJ2hLlvw40UezVfXYRdHdhA9TMbh/kvuY/T6b0zPHv7VBD1Y9l6 KGu//EuYgsbBP8HpGJ6M2w9qtn2cD8dEdvlZvZMj8iWAydWpMiaVJfGQJjQhtISO c9AbCKsI9SoBeMoXk/Sxx86y8poMkyFxA/vzDYhav+pK5vfmuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGgYd2OlS1DH/OhT1pyWk66YP8FxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83MDU0 ZTE5Ni1mZGExLTQ5ODgtODJkNS00ZDJmNTAxMzE1MGQvZWZiMjJlOWItMWRiMS0z MjM5LWIyZDMtNjVlMGRmNGFiZDgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzA1NGUxOTYtZmRhMS00OTg4LTgy ZDUtNGQyZjUwMTMxNTBkLzcwNTRlMTk2LWZkYTEtNDk4OC04MmQ1LTRkMmY1MDEz MTUwZC5jcmwwHwYDVR0jBBgwFoAUUkbmCO9okANWA4h2/OmnZ8HktKwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83MDU0ZTE5Ni1mZGExLTQ5ODgtODJkNS00ZDJm NTAxMzE1MGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqieJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGQi4x0xhiRrerxQZ/JO/fiRtoLUkRaeRUb555W/LfLNpyFELifqNlCq C84HEc6fSRxXvnnhJqzvvnEMj6iBpvtOUNWpz2WYgME+JT8GbPyuYDCBU8OtxRZ/ ZxzbujocAEOZ0fr5BXSUbK4wa7diJQYw0V8xln15P3Nc/DG1dgc+YYHWHnLezb8z kNpoHJy8Ct6n0WVWEzs1ZtC91psli3z7ho7lPL9SOV40r8wSvxo7sOjtks0IGjIq 7kWCFsJHQOlqxbhaHipCX2zmDv9+VXp/GWzPh97hkYTjNfhzmmSIwzdN8gG+sgVC 8HcVC58NIGO0iok+S4qtGLnjrPFWRRE= -----END CERTIFICATE-----Generated at Mon Aug 11 04:10:06 2025 by rpki-client