$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/cd2611c6-ffc3-3c8d-bb19-a52fc768874c.roa File: cd2611c6-ffc3-3c8d-bb19-a52fc768874c.roa (raw, json) Hash identifier: sX1NJ7S+DfWiUTYpok8fJ+Ne+BiREve5IR2dNGa+ksk= Subject key identifier: EA:15:CB:24:A0:E3:4F:EC:A3:9E:4A:9E:F4:E6:27:83:C9:FE:B3:FA Certificate issuer: /CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f Certificate serial: 010D0C9F4328584A268ABE8F48BBD7AA3E773108 Authority key identifier: AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/cd2611c6-ffc3-3c8d-bb19-a52fc768874c.roa Signing time: Wed 11 Jun 2025 01:00:50 +0000 ROA not before: Wed 11 Jun 2025 01:00:50 +0000 ROA not after: Tue 09 Sep 2025 01:00:50 +0000 asID: 393878 IP address blocks: 170.133.208.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:26:8a:be:8f:48:bb:d7:aa:3e:77:31:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f Validity Not Before: Jun 11 01:00:50 2025 GMT Not After : Sep 9 01:00:50 2025 GMT Subject: CN=d1924f64-b6d8-4786-9c55-9da985dda89c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:0a:e5:c0:be:7e:d7:ac:c4:be:b4:a0:4c:54: de:cf:30:98:bf:78:4a:0a:1a:52:2d:27:48:8e:d4: 01:48:26:2b:64:71:0e:9b:64:8f:ce:99:b2:d0:6c: 9f:4e:82:af:f7:3f:5a:20:28:9d:9e:b7:f2:08:b0: 0e:b1:ce:65:8b:71:f0:4d:5e:60:9c:c1:01:bc:59: 51:39:66:bd:58:53:54:19:1c:64:7c:e4:7a:54:e0: 92:87:70:37:fd:b3:da:e8:5a:52:89:ae:e3:dc:eb: 8c:cd:5b:7e:1f:0a:c6:19:b0:7d:08:b2:7e:1d:df: d8:0c:97:3f:1e:76:ac:07:78:c4:9a:71:10:6d:7d: 27:31:e7:94:fc:1b:79:0b:5d:35:23:08:6d:46:09: 1a:c5:7c:c6:ca:c7:0b:cb:c2:66:1e:7e:48:26:32: b8:b9:90:4f:e3:a3:9f:ae:86:d9:aa:51:1a:88:f9: 5c:93:90:05:26:c1:c7:78:66:0b:40:fb:fd:31:cb: 87:57:31:2b:8c:58:75:69:8a:04:28:4c:69:fe:72: 89:4b:52:cf:2a:40:da:79:78:97:34:a0:59:3a:07: e1:50:1e:b2:c8:78:95:0f:a1:24:bb:dc:94:48:20: 8a:36:93:5b:9d:af:be:c8:6a:1d:6c:6f:c2:12:53: b2:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:15:CB:24:A0:E3:4F:EC:A3:9E:4A:9E:F4:E6:27:83:C9:FE:B3:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/cd2611c6-ffc3-3c8d-bb19-a52fc768874c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl X509v3 Authority Key Identifier: keyid:AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer sbgp-ipAddrBlock: critical IPv4: 170.133.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:d3:bb:e0:34:9a:95:ec:75:d9:4e:97:9f:1f:dd:8c:d8:58: 3b:f3:06:49:ef:1a:21:28:96:b4:38:80:a9:21:6f:18:84:73: 5f:4c:ed:90:f3:8b:ac:5c:ba:cf:43:36:8d:91:43:6c:53:c6: 14:f4:fb:a2:32:9f:d2:44:c7:b8:34:11:95:6d:fa:ae:60:b8: 2f:99:96:d3:fc:a5:4d:48:50:22:a8:ea:4c:da:a6:16:5b:b0: 14:2f:bb:16:e2:10:02:99:8f:a0:8a:f5:0c:46:79:98:2d:94: 62:71:11:70:63:4b:58:06:e4:64:e6:20:12:03:68:62:f1:3b: c3:7e:c1:02:48:0a:3a:0c:8c:0e:93:27:35:67:64:17:5f:3a: ce:fa:82:89:8b:45:27:3a:f7:5b:d7:1e:a5:d3:cc:97:5b:38: 60:ee:08:15:8b:a5:bc:7d:49:76:bb:15:ab:5b:98:d8:3d:72: 90:46:01:c6:93:5d:e3:ea:72:5f:12:29:fc:ad:a3:94:89:d9: ce:89:c8:0f:26:fd:c2:a4:85:ed:d9:8c:54:f5:8f:a2:f3:1c: fa:e6:af:ed:76:52:94:e9:59:c3:6a:fa:bc:76:b3:cb:2b:df: 38:67:52:1c:82:87:ec:31:40:19:6a:9f:46:80:49:2c:05:cd: cd:ed:e5:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEomir6PSLvXqj53MQgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTcxZmYzOTItZGQzMy00ZWE4LTljMWItOGFmZGQ0Mjk5 NzdmMB4XDTI1MDYxMTAxMDA1MFoXDTI1MDkwOTAxMDA1MFowLzEtMCsGA1UEAxMk ZDE5MjRmNjQtYjZkOC00Nzg2LTljNTUtOWRhOTg1ZGRhODljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwrlwL5+16zEvrSgTFTezzCYv3hKChpSLSdI jtQBSCYrZHEOm2SPzpmy0GyfToKv9z9aICidnrfyCLAOsc5li3HwTV5gnMEBvFlR OWa9WFNUGRxkfOR6VOCSh3A3/bPa6FpSia7j3OuMzVt+HwrGGbB9CLJ+Hd/YDJc/ HnasB3jEmnEQbX0nMeeU/Bt5C101IwhtRgkaxXzGyscLy8JmHn5IJjK4uZBP46Of robZqlEaiPlck5AFJsHHeGYLQPv9McuHVzErjFh1aYoEKExp/nKJS1LPKkDaeXiX NKBZOgfhUB6yyHiVD6Eku9yUSCCKNpNbna++yGodbG/CElOyowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOoVyySg40/so55KnvTmJ4PJ/rP6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hNzFm ZjM5Mi1kZDMzLTRlYTgtOWMxYi04YWZkZDQyOTk3N2YvY2QyNjExYzYtZmZjMy0z YzhkLWJiMTktYTUyZmM3Njg4NzRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTcxZmYzOTItZGQzMy00ZWE4LTlj MWItOGFmZGQ0Mjk5NzdmL2E3MWZmMzkyLWRkMzMtNGVhOC05YzFiLThhZmRkNDI5 OTc3Zi5jcmwwHwYDVR0jBBgwFoAUrknJUG2uUJbz62ommeoYPXRw8cUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9hNzFmZjM5Mi1kZDMzLTRlYTgtOWMxYi04YWZk ZDQyOTk3N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEqoXQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABPTu+A0mpXsddlOl58f3YzYWDvzBknvGiEolrQ4gKkhbxiEc19M7ZDz i6xcus9DNo2RQ2xTxhT0+6Iyn9JEx7g0EZVt+q5guC+ZltP8pU1IUCKo6kzaphZb sBQvuxbiEAKZj6CK9QxGeZgtlGJxEXBjS1gG5GTmIBIDaGLxO8N+wQJICjoMjA6T JzVnZBdfOs76gomLRSc691vXHqXTzJdbOGDuCBWLpbx9SXa7FatbmNg9cpBGAcaT XePqcl8SKfyto5SJ2c6JyA8m/cKkhe3ZjFT1j6LzHPrmr+12UpTpWcNq+rx2s8sr 3zhnUhyCh+wxQBlqn0aASSwFzc3t5VU= -----END CERTIFICATE-----Generated at Sun Jun 15 05:17:57 2025 by rpki-client