$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/5aaaeb9d-283c-36c1-8edf-be275994256c.roa File: 5aaaeb9d-283c-36c1-8edf-be275994256c.roa (raw, json) Hash identifier: DIOiUpqpC1yZYY4JyKHS9/ikmgEr195CkGlnKkbkA48= Subject key identifier: 47:0A:A5:9C:88:B4:5F:C2:FE:48:DF:27:E1:F8:C9:73:4B:1B:0E:FD Certificate issuer: /CN=cc3ad4cd-0893-42fc-a743-e36058983069 Certificate serial: 010D0C9F43285849F9DFC908EE3477381EB94340 Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/5aaaeb9d-283c-36c1-8edf-be275994256c.roa Signing time: Mon 26 May 2025 01:00:50 +0000 ROA not before: Mon 26 May 2025 01:00:50 +0000 ROA not after: Sun 24 Aug 2025 01:00:50 +0000 asID: 15290 IP address blocks: 172.110.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f9:df:c9:08:ee:34:77:38:1e:b9:43:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069 Validity Not Before: May 26 01:00:50 2025 GMT Not After : Aug 24 01:00:50 2025 GMT Subject: CN=2bc61503-fe70-462c-bb8a-10e54c950b9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:33:17:a3:be:6b:44:4c:fc:ac:a5:aa:db:f3: f0:f2:f4:3d:f9:ea:50:6e:90:f7:d3:fe:ed:3f:4b: f8:48:b9:ab:56:03:2b:44:61:88:71:ee:be:51:68: 0a:63:50:9b:ad:34:26:15:45:fb:a5:91:04:8b:fd: 3b:df:96:4c:f9:29:15:ae:16:cf:d2:2b:59:dd:90: 20:28:64:0f:e5:08:b9:87:5e:80:30:68:dc:ed:42: bd:d3:da:af:9f:d9:08:e3:bd:87:92:d6:83:9b:ff: a6:03:a1:39:56:29:78:66:21:88:b1:5c:f1:0e:eb: e5:59:90:f7:81:50:72:38:ad:0a:a9:74:3c:18:d8: c0:68:d8:20:42:20:15:e4:34:d4:dd:e7:d1:ee:89: a4:69:6b:ca:b7:33:d6:44:c8:db:1d:42:f6:bf:9c: cd:9f:7c:42:33:e9:cb:41:66:d8:e7:40:7d:26:54: e0:fa:70:92:d2:05:6a:5b:48:1d:5d:70:78:47:f1: 14:91:f4:fb:51:d3:81:2e:ab:fe:45:8c:e9:c2:12: b4:c8:f7:11:12:20:1b:ce:da:ce:75:7a:02:d7:f7: d4:af:af:a2:15:da:42:2e:ec:5e:23:56:4f:98:c8: c9:88:28:bb:52:d7:9b:da:05:27:8c:86:8e:5e:83: f4:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:0A:A5:9C:88:B4:5F:C2:FE:48:DF:27:E1:F8:C9:73:4B:1B:0E:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/5aaaeb9d-283c-36c1-8edf-be275994256c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl X509v3 Authority Key Identifier: keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer sbgp-ipAddrBlock: critical IPv4: 172.110.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:94:a1:c4:4f:a2:c3:47:3b:1a:e0:6a:98:be:32:6a:49:0c: 9a:43:8f:dc:ec:17:9f:a5:60:9e:57:36:55:5f:7f:53:ac:6e: f4:cd:5b:ae:b1:5b:8a:cd:4d:c4:77:a7:57:5e:d8:51:1d:f2: ca:cd:32:16:c3:a0:f7:1a:80:f4:09:c3:54:20:07:31:78:4a: fc:98:88:89:41:dd:6f:0e:3d:1f:f1:6c:7a:12:a3:44:27:1e: 7d:b7:cd:30:6b:b7:04:d0:31:81:a8:22:bb:12:9b:15:c0:29: cb:25:7b:c4:3c:6b:e7:5b:51:11:23:36:2c:f1:33:dc:7d:fc: 66:98:47:f1:8e:73:1f:14:c5:ef:78:54:d3:c6:24:47:b7:af: f2:62:cc:6d:27:f6:e4:15:30:c1:eb:8e:9a:49:fa:8c:4d:f6: fb:8f:ed:db:b7:39:f7:42:59:fe:39:e8:fe:35:f4:45:2c:76: 12:5c:49:82:a3:ec:de:4a:bc:75:80:e7:a8:4f:82:d4:3b:b7: e5:a0:8f:9a:63:d2:cf:a9:26:af:f9:e0:44:5d:d7:57:1c:4a: 93:31:1c:99:4c:dd:87:69:ed:88:2e:af:12:52:79:99:18:b5: 2c:3a:64:82:03:60:99:f1:e7:10:f0:2a:c7:83:66:9a:a0:03: 2f:bd:62:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn538kI7jR3OB65Q0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2MzYWQ0Y2QtMDg5My00MmZjLWE3NDMtZTM2MDU4OTgz MDY5MB4XDTI1MDUyNjAxMDA1MFoXDTI1MDgyNDAxMDA1MFowLzEtMCsGA1UEAxMk MmJjNjE1MDMtZmU3MC00NjJjLWJiOGEtMTBlNTRjOTUwYjlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzMXo75rREz8rKWq2/Pw8vQ9+epQbpD30/7t P0v4SLmrVgMrRGGIce6+UWgKY1CbrTQmFUX7pZEEi/0735ZM+SkVrhbP0itZ3ZAg KGQP5Qi5h16AMGjc7UK909qvn9kI472HktaDm/+mA6E5Vil4ZiGIsVzxDuvlWZD3 gVByOK0KqXQ8GNjAaNggQiAV5DTU3efR7omkaWvKtzPWRMjbHUL2v5zNn3xCM+nL QWbY50B9JlTg+nCS0gVqW0gdXXB4R/EUkfT7UdOBLqv+RYzpwhK0yPcREiAbztrO dXoC1/fUr6+iFdpCLuxeI1ZPmMjJiCi7Uteb2gUnjIaOXoP0ZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEcKpZyItF/C/kjfJ+H4yXNLGw79MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jYzNh ZDRjZC0wODkzLTQyZmMtYTc0My1lMzYwNTg5ODMwNjkvNWFhYWViOWQtMjgzYy0z NmMxLThlZGYtYmUyNzU5OTQyNTZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2MzYWQ0Y2QtMDg5My00MmZjLWE3 NDMtZTM2MDU4OTgzMDY5L2NjM2FkNGNkLTA4OTMtNDJmYy1hNzQzLWUzNjA1ODk4 MzA2OS5jcmwwHwYDVR0jBBgwFoAU0BkzYCA5uLEoc26e1umhhrVK+64wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jYzNhZDRjZC0wODkzLTQyZmMtYTc0My1lMzYw NTg5ODMwNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG5HMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGiUocRPosNHOxrgapi+MmpJDJpDj9zsF5+lYJ5XNlVff1OsbvTNW66x W4rNTcR3p1de2FEd8srNMhbDoPcagPQJw1QgBzF4SvyYiIlB3W8OPR/xbHoSo0Qn Hn23zTBrtwTQMYGoIrsSmxXAKcsle8Q8a+dbUREjNizxM9x9/GaYR/GOcx8Uxe94 VNPGJEe3r/JizG0n9uQVMMHrjppJ+oxN9vuP7du3OfdCWf456P419EUsdhJcSYKj 7N5KvHWA56hPgtQ7t+Wgj5pj0s+pJq/54ERd11ccSpMxHJlM3Ydp7YgurxJSeZkY tSw6ZIIDYJnx5xDwKseDZpqgAy+9YvE= -----END CERTIFICATE-----Generated at Mon Jun 16 12:04:21 2025 by rpki-client