$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/2ffe7fa3-e3e9-3e92-b90e-270471a89f9f.roa File: 2ffe7fa3-e3e9-3e92-b90e-270471a89f9f.roa (raw, json) Hash identifier: Ii8BGJO3qHPeq2OHfP6wNUApqVAq1Wnazd8T8sXC5nw= Subject key identifier: CA:85:AF:3A:4D:C9:16:C0:1C:33:62:16:5C:37:6A:DC:13:56:50:F3 Certificate issuer: /CN=3a8d6c4c-eb82-43f1-80cc-884c560bd0bd Certificate serial: 010D0C9F4328584A268AA9C1B3570F2B4EBF96C0 Authority key identifier: 6E:8B:F4:7D:E4:DB:28:26:29:13:4D:8E:C3:9D:0A:17:DC:6A:B2:01 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/2ffe7fa3-e3e9-3e92-b90e-270471a89f9f.roa Signing time: Wed 11 Jun 2025 01:00:50 +0000 ROA not before: Wed 11 Jun 2025 01:00:50 +0000 ROA not after: Tue 09 Sep 2025 01:00:50 +0000 asID: 17044 IP address blocks: 170.200.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:26:8a:a9:c1:b3:57:0f:2b:4e:bf:96:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a8d6c4c-eb82-43f1-80cc-884c560bd0bd Validity Not Before: Jun 11 01:00:50 2025 GMT Not After : Sep 9 01:00:50 2025 GMT Subject: CN=132e5034-dd02-4f5f-85b5-614a99f76c5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:98:d1:8d:9e:91:24:ac:b8:e5:cf:30:eb:25: 5c:ff:9d:05:58:a4:21:22:86:08:04:1d:78:2f:c5: 32:de:9c:68:e8:5d:e4:71:a1:e8:3b:d1:23:5e:2c: 35:75:98:3c:45:a8:11:b8:d6:53:e9:d7:79:65:02: d3:d2:7b:08:fd:a4:53:63:5e:ed:2d:6d:8e:34:fe: e1:27:ce:7e:8e:68:bc:f6:dc:ef:24:19:cd:d9:b8: 38:76:f7:56:23:5e:0b:df:ff:e0:68:57:ea:d9:ee: 1b:c6:93:3e:a0:df:9f:02:46:25:04:ec:db:7f:c7: e3:3c:b9:ce:fe:bb:f7:d1:21:2c:90:46:90:49:a7: 24:be:dd:4a:2e:50:17:19:14:5f:29:20:6e:49:d8: 68:cf:9e:de:4f:28:03:86:62:26:0a:67:ac:0d:02: e9:9c:f3:a5:82:1d:4d:c6:5f:f5:09:fa:6a:8d:e6: 27:fd:5b:e3:b5:39:00:4f:ad:89:4b:17:ef:b7:92: 9f:42:a3:e0:f9:1a:9c:dd:19:3c:22:a1:77:61:ff: d3:b0:32:bb:d9:fc:df:00:be:01:c2:ae:3c:77:b0: a6:69:23:7f:d2:b1:73:3f:a5:7b:2b:82:e2:56:07: 83:f6:3d:a8:8d:ca:cb:d3:c4:cf:f3:99:80:dc:c4: 76:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:85:AF:3A:4D:C9:16:C0:1C:33:62:16:5C:37:6A:DC:13:56:50:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/2ffe7fa3-e3e9-3e92-b90e-270471a89f9f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.crl X509v3 Authority Key Identifier: keyid:6E:8B:F4:7D:E4:DB:28:26:29:13:4D:8E:C3:9D:0A:17:DC:6A:B2:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.cer sbgp-ipAddrBlock: critical IPv4: 170.200.48.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:39:e2:37:88:f2:8c:05:f6:cb:cd:df:41:30:36:c4:7e:1b: ba:17:27:51:af:fa:e0:29:44:d6:e0:6f:ea:71:c2:5b:e6:2f: db:42:22:dc:0b:15:1f:23:ec:14:a5:46:09:5f:1e:d2:ce:f3: 4f:b6:52:15:ef:c0:f0:71:17:dd:ce:f2:5e:f8:69:05:2e:cb: 2d:ff:a7:69:7c:03:99:b0:66:71:ea:14:7d:25:b8:b3:23:36: 3f:67:47:d8:71:a9:75:78:ef:9b:f4:de:78:89:5d:8f:71:19: 97:8c:e7:5e:a0:5c:33:46:16:21:3d:69:a8:95:0f:5d:01:44: 81:0b:1b:95:01:34:4f:e3:df:33:f9:d9:b9:fb:cd:cf:54:07: 9f:46:78:1b:7a:8e:3f:0b:9b:5a:0a:ff:7a:10:04:cd:9f:5e: 22:9a:91:92:4d:2b:99:36:6a:f9:53:ca:ff:55:84:97:14:b6: ae:b8:ff:a1:4f:d0:d8:dd:b6:0b:89:bf:9e:33:75:18:75:06: 97:c9:b9:a9:f4:3d:75:8a:96:e2:87:1c:5d:aa:29:b5:2c:a9: 1e:b1:8b:87:5e:05:d3:6f:a7:ae:5b:69:a9:13:17:dd:3d:92: dc:b7:50:34:3d:7c:90:49:5e:10:e0:2d:f6:8a:c3:1b:72:95: e0:f4:cc:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEomiqnBs1cPK06/lsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2E4ZDZjNGMtZWI4Mi00M2YxLTgwY2MtODg0YzU2MGJk MGJkMB4XDTI1MDYxMTAxMDA1MFoXDTI1MDkwOTAxMDA1MFowLzEtMCsGA1UEAxMk MTMyZTUwMzQtZGQwMi00ZjVmLTg1YjUtNjE0YTk5Zjc2YzVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+pjRjZ6RJKy45c8w6yVc/50FWKQhIoYIBB14 L8Uy3pxo6F3kcaHoO9EjXiw1dZg8RagRuNZT6dd5ZQLT0nsI/aRTY17tLW2ONP7h J85+jmi89tzvJBnN2bg4dvdWI14L3//gaFfq2e4bxpM+oN+fAkYlBOzbf8fjPLnO /rv30SEskEaQSackvt1KLlAXGRRfKSBuSdhoz57eTygDhmImCmesDQLpnPOlgh1N xl/1CfpqjeYn/VvjtTkAT62JSxfvt5KfQqPg+Rqc3Rk8IqF3Yf/TsDK72fzfAL4B wq48d7CmaSN/0rFzP6V7K4LiVgeD9j2ojcrL08TP85mA3MR2GQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMqFrzpNyRbAHDNiFlw3atwTVlDzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zYThk NmM0Yy1lYjgyLTQzZjEtODBjYy04ODRjNTYwYmQwYmQvMmZmZTdmYTMtZTNlOS0z ZTkyLWI5MGUtMjcwNDcxYTg5ZjlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvM2E4ZDZjNGMtZWI4Mi00M2YxLTgw Y2MtODg0YzU2MGJkMGJkLzNhOGQ2YzRjLWViODItNDNmMS04MGNjLTg4NGM1NjBi ZDBiZC5jcmwwHwYDVR0jBBgwFoAUbov0feTbKCYpE02Ow50KF9xqsgEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zYThkNmM0Yy1lYjgyLTQzZjEtODBjYy04ODRj NTYwYmQwYmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqsgwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI854jeI8owF9svN30EwNsR+G7oXJ1Gv+uApRNbgb+pxwlvmL9tCItwL FR8j7BSlRglfHtLO80+2UhXvwPBxF93O8l74aQUuyy3/p2l8A5mwZnHqFH0luLMj Nj9nR9hxqXV475v03niJXY9xGZeM516gXDNGFiE9aaiVD10BRIELG5UBNE/j3zP5 2bn7zc9UB59GeBt6jj8Lm1oK/3oQBM2fXiKakZJNK5k2avlTyv9VhJcUtq64/6FP 0NjdtguJv54zdRh1BpfJuan0PXWKluKHHF2qKbUsqR6xi4deBdNvp65baakTF909 kty3UDQ9fJBJXhDgLfaKwxtyleD0zLk= -----END CERTIFICATE-----Generated at Sun Jun 15 14:52:58 2025 by rpki-client