$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/0a1ff368-ad7a-3f30-9fdc-0946412cf449.roa File: 0a1ff368-ad7a-3f30-9fdc-0946412cf449.roa (raw, json) Hash identifier: 3Ba0AYmL+YW7Iaa1VyLrWRargVOTtawKD4WbZ6Gy7k0= Subject key identifier: A1:EF:F9:2A:2A:42:23:D3:13:03:16:CD:70:60:69:15:61:BF:49:94 Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F4328584A7FE0981F62B855CDE74E0480 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/0a1ff368-ad7a-3f30-9fdc-0946412cf449.roa Signing time: Sun 13 Jul 2025 01:00:50 +0000 ROA not before: Sun 13 Jul 2025 01:00:50 +0000 ROA not after: Sat 11 Oct 2025 01:00:50 +0000 asID: 213122 IP address blocks: 170.39.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7f:e0:98:1f:62:b8:55:cd:e7:4e:04:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: Jul 13 01:00:50 2025 GMT Not After : Oct 11 01:00:50 2025 GMT Subject: CN=12cfcee9-cf9c-439e-bf84-deac843fa247 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:59:f1:61:2b:ad:ae:f3:d5:cf:fb:68:b2:55: 4f:05:b1:45:1b:34:a7:22:a3:3b:f1:24:64:b0:d7: b1:fe:82:58:42:46:88:1a:79:36:39:ae:2e:23:6b: 3e:c4:dc:12:16:a7:92:26:d3:a9:e4:a6:ae:7b:c8: 81:0c:08:80:6e:de:38:22:4c:42:bf:10:95:3a:a2: 09:20:79:fd:b2:05:b0:e8:9a:80:34:86:c5:60:79: ef:ac:2a:34:f4:cf:a1:d0:53:50:fc:e3:07:b5:51: 86:fb:2d:63:0f:e9:9f:47:be:6c:50:17:e9:73:60: ae:78:2a:9e:c5:23:6c:55:69:68:ec:42:15:05:5c: 5a:8a:25:f1:c0:04:1e:f5:b9:b9:bc:66:c7:1c:95: e7:24:ea:63:2f:bc:8f:be:64:ba:53:0f:d1:c1:7c: a7:27:6f:ab:f6:d9:e1:a4:01:8a:38:f0:47:74:37: af:a1:41:75:e5:bb:89:0d:d7:2d:9e:28:a1:9b:5d: ed:97:90:83:64:3c:fc:f3:96:85:90:4b:08:36:bf: dc:7d:ba:98:8c:52:ba:63:d3:5b:46:f1:49:f9:4e: 8f:4f:ac:95:32:f4:a8:2f:af:0f:c5:4d:3f:d7:2d: a9:ab:8d:a7:30:64:89:02:b8:92:93:1f:f6:16:cb: 76:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:EF:F9:2A:2A:42:23:D3:13:03:16:CD:70:60:69:15:61:BF:49:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/0a1ff368-ad7a-3f30-9fdc-0946412cf449.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 170.39.184.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:c9:bc:63:17:7f:26:c0:c9:91:3b:52:0b:91:20:77:09:00: 1c:35:27:82:de:a6:62:5b:db:39:f7:4d:50:8a:d6:70:cf:3d: 0d:6e:5e:02:00:ad:08:3f:77:10:e5:b6:2b:8c:cd:d6:ee:16: 6a:24:ff:83:16:62:02:5a:3a:98:5a:24:7a:7f:ee:b0:0c:cd: 6f:57:78:92:a1:cf:f6:f6:c3:7c:e1:20:9f:d1:71:a1:ad:ce: 7b:62:52:b7:6f:dd:46:32:fa:8c:ea:10:89:33:6f:5c:10:fb: 7c:cf:15:c6:f2:43:42:f9:34:35:b9:b2:c7:78:76:90:2f:f3: bf:d6:f4:0f:47:e5:0c:11:50:b3:80:e4:fc:43:15:e2:00:6b: c5:d6:c1:0d:e7:62:3c:6d:da:5b:05:fd:38:3c:25:72:41:66: 5e:87:11:ba:e5:f1:81:60:34:8e:ae:e0:89:f0:2f:d5:7f:ef: f7:27:22:26:ff:07:9f:91:66:6f:65:6f:46:2d:d5:4c:bb:1c: 4a:5e:10:17:45:e9:6c:eb:09:1c:c1:01:8f:9c:54:6c:bb:82: d9:71:8c:7c:5a:a3:7f:d7:50:f5:8c:4e:9c:4e:3d:40:5a:f8: ab:ae:d6:4e:35:d9:60:0a:b0:ab:d3:99:97:f5:c0:b5:2b:cd: 10:99:90:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp/4JgfYrhVzedOBIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI1MDcxMzAxMDA1MFoXDTI1MTAxMTAxMDA1MFowLzEtMCsGA1UEAxMk MTJjZmNlZTktY2Y5Yy00MzllLWJmODQtZGVhYzg0M2ZhMjQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVnxYSutrvPVz/toslVPBbFFGzSnIqM78SRk sNex/oJYQkaIGnk2Oa4uI2s+xNwSFqeSJtOp5Kaue8iBDAiAbt44IkxCvxCVOqIJ IHn9sgWw6JqANIbFYHnvrCo09M+h0FNQ/OMHtVGG+y1jD+mfR75sUBfpc2CueCqe xSNsVWlo7EIVBVxaiiXxwAQe9bm5vGbHHJXnJOpjL7yPvmS6Uw/RwXynJ2+r9tnh pAGKOPBHdDevoUF15buJDdctniihm13tl5CDZDz885aFkEsINr/cfbqYjFK6Y9Nb RvFJ+U6PT6yVMvSoL68PxU0/1y2pq42nMGSJAriSkx/2Fst26QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKHv+SoqQiPTEwMWzXBgaRVhv0mUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvMGExZmYzNjgtYWQ3YS0z ZjMwLTlmZGMtMDk0NjQxMmNmNDQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqie4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACDJvGMXfybAyZE7UguRIHcJABw1J4LepmJb2zn3TVCK1nDPPQ1uXgIA rQg/dxDltiuMzdbuFmok/4MWYgJaOphaJHp/7rAMzW9XeJKhz/b2w3zhIJ/RcaGt zntiUrdv3UYy+ozqEIkzb1wQ+3zPFcbyQ0L5NDW5ssd4dpAv87/W9A9H5QwRULOA 5PxDFeIAa8XWwQ3nYjxt2lsF/Tg8JXJBZl6HEbrl8YFgNI6u4InwL9V/7/cnIib/ B5+RZm9lb0Yt1Uy7HEpeEBdF6WzrCRzBAY+cVGy7gtlxjHxao3/XUPWMTpxOPUBa +Kuu1k412WAKsKvTmZf1wLUrzRCZkEY= -----END CERTIFICATE-----Generated at Wed Aug 6 13:05:23 2025 by rpki-client