$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/32a3a400-0c38-3e7e-8728-30557eb6f6aa.roa File: 32a3a400-0c38-3e7e-8728-30557eb6f6aa.roa (raw, json) Hash identifier: 7Hi+pR85sWPQkZYrd/PxHD8tlrPw4fXzr0IOaGthUTM= Subject key identifier: 51:58:AB:CC:D8:3A:94:BA:68:9A:AD:28:16:DB:EA:AA:30:01:A2:4E Certificate issuer: /CN=5fab6378-e15d-4471-b01f-be15fc5bfa04 Certificate serial: 010D0C9F4328584A2C2019B5B206CF9B08636940 Authority key identifier: 61:40:43:BF:E2:50:B3:47:64:FC:D1:73:0F:62:98:03:50:32:18:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/32a3a400-0c38-3e7e-8728-30557eb6f6aa.roa Signing time: Fri 13 Jun 2025 01:00:51 +0000 ROA not before: Fri 13 Jun 2025 01:00:51 +0000 ROA not after: Thu 11 Sep 2025 01:00:51 +0000 asID: 7018 IP address blocks: 207.170.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/5fab6378-e15d-4471-b01f-be15fc5bfa04.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/5fab6378-e15d-4471-b01f-be15fc5bfa04.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2c:20:19:b5:b2:06:cf:9b:08:63:69:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5fab6378-e15d-4471-b01f-be15fc5bfa04 Validity Not Before: Jun 13 01:00:51 2025 GMT Not After : Sep 11 01:00:51 2025 GMT Subject: CN=b386eeaa-ac12-4e78-b5e4-e2f04f846cba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:31:98:1c:5a:81:54:08:6c:27:14:3a:24:ec: 4f:e5:2a:37:61:7a:82:00:06:a0:b4:e8:97:c0:20: 4d:24:83:bc:16:ca:fa:8d:1d:2b:b7:b2:42:67:00: e4:41:d3:b0:a7:db:ef:7d:ff:5e:15:24:52:2f:aa: 4c:7a:05:ed:02:a4:7d:1a:71:48:97:df:5f:38:28: a2:9e:e7:ac:22:88:d4:ec:e6:72:aa:17:a9:01:ff: bf:f0:e3:7b:65:fc:78:0b:c5:92:67:55:61:99:3d: 35:b9:23:1b:97:5f:a7:95:92:e9:fa:bc:67:25:1d: 8d:fc:38:dc:ee:d2:68:3a:a1:d8:59:75:57:fb:f4: cd:35:34:f2:f1:0e:de:f6:41:40:cc:16:b9:b3:b5: d3:6e:8d:0d:71:a7:40:c5:5d:90:60:ab:bd:80:66: 28:95:cd:7e:44:c2:07:d7:6e:1b:ff:82:3c:d3:d4: 62:f8:63:45:9e:3a:a7:c3:10:51:ba:da:46:14:dc: 4c:17:08:f3:71:26:12:6f:19:51:18:59:71:c8:90: 6d:ad:98:ea:89:b1:fa:42:00:14:12:95:81:6f:5c: d1:f7:d6:98:8a:4b:39:84:dd:24:10:69:e4:6e:01: 4c:ae:51:15:0b:2e:67:56:f0:a1:ee:8d:a3:6a:b2: 0a:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:58:AB:CC:D8:3A:94:BA:68:9A:AD:28:16:DB:EA:AA:30:01:A2:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/32a3a400-0c38-3e7e-8728-30557eb6f6aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/5fab6378-e15d-4471-b01f-be15fc5bfa04.crl X509v3 Authority Key Identifier: keyid:61:40:43:BF:E2:50:B3:47:64:FC:D1:73:0F:62:98:03:50:32:18:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04.cer sbgp-ipAddrBlock: critical IPv4: 207.170.173.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:ef:bd:31:da:d1:fd:29:1b:e4:62:f6:44:cb:64:4b:d6:30: 93:f8:70:a8:ec:6e:a6:84:41:8f:45:bd:18:dc:6e:cd:f0:63: 3b:07:4a:cd:01:e9:62:e7:33:b1:73:ed:65:54:37:db:10:05: 32:a5:d0:b0:4e:5e:95:b7:4b:03:a5:42:68:46:b8:27:f5:a0: 63:cd:33:29:63:cc:ac:fa:d9:9d:14:c6:3d:43:51:e7:30:23: 35:a3:41:41:a7:e5:10:e3:24:f8:7d:ae:d9:75:8c:f8:b5:d5: 7a:d9:ec:92:1a:28:09:84:bf:3e:aa:96:b4:99:e5:0b:b1:cc: 52:37:c4:92:cc:85:86:14:55:7f:2b:c0:01:1a:58:ee:5b:ed: f7:11:58:6a:5d:47:92:26:90:6a:88:16:bf:2a:93:1b:44:85: 67:9b:8d:1c:9b:af:69:82:d3:4c:8e:68:f6:6e:27:2a:43:a9: c6:bf:67:b0:7c:11:4f:84:43:96:97:4c:21:1d:17:6d:c5:85: 93:91:9d:3e:77:34:53:9f:57:d4:9e:ce:3f:c2:46:f7:a1:b6: 01:1a:e7:94:5e:3f:da:15:21:81:c0:ec:d7:b2:56:9d:bf:f0: 77:37:12:d7:6b:46:8f:5e:28:6e:c2:d4:61:16:60:55:c5:ff: 5d:6b:fd:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEosIBm1sgbPmwhjaUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWZhYjYzNzgtZTE1ZC00NDcxLWIwMWYtYmUxNWZjNWJm YTA0MB4XDTI1MDYxMzAxMDA1MVoXDTI1MDkxMTAxMDA1MVowLzEtMCsGA1UEAxMk YjM4NmVlYWEtYWMxMi00ZTc4LWI1ZTQtZTJmMDRmODQ2Y2JhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTGYHFqBVAhsJxQ6JOxP5So3YXqCAAagtOiX wCBNJIO8Fsr6jR0rt7JCZwDkQdOwp9vvff9eFSRSL6pMegXtAqR9GnFIl99fOCii nuesIojU7OZyqhepAf+/8ON7Zfx4C8WSZ1VhmT01uSMbl1+nlZLp+rxnJR2N/Djc 7tJoOqHYWXVX+/TNNTTy8Q7e9kFAzBa5s7XTbo0NcadAxV2QYKu9gGYolc1+RMIH 124b/4I809Ri+GNFnjqnwxBRutpGFNxMFwjzcSYSbxlRGFlxyJBtrZjqibH6QgAU EpWBb1zR99aYiks5hN0kEGnkbgFMrlEVCy5nVvCh7o2jarIKdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFFYq8zYOpS6aJqtKBbb6qowAaJOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS81ZmFi NjM3OC1lMTVkLTQ0NzEtYjAxZi1iZTE1ZmM1YmZhMDQvMzJhM2E0MDAtMGMzOC0z ZTdlLTg3MjgtMzA1NTdlYjZmNmFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNWZhYjYzNzgtZTE1ZC00NDcxLWIw MWYtYmUxNWZjNWJmYTA0LzVmYWI2Mzc4LWUxNWQtNDQ3MS1iMDFmLWJlMTVmYzVi ZmEwNC5jcmwwHwYDVR0jBBgwFoAUYUBDv+JQs0dk/NFzD2KYA1AyGNIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS81ZmFiNjM3OC1lMTVkLTQ0NzEtYjAxZi1iZTE1 ZmM1YmZhMDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz6qtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA3vvTHa0f0pG+Ri9kTLZEvWMJP4cKjsbqaEQY9FvRjcbs3wYzsHSs0B 6WLnM7Fz7WVUN9sQBTKl0LBOXpW3SwOlQmhGuCf1oGPNMyljzKz62Z0Uxj1DUecw IzWjQUGn5RDjJPh9rtl1jPi11XrZ7JIaKAmEvz6qlrSZ5QuxzFI3xJLMhYYUVX8r wAEaWO5b7fcRWGpdR5ImkGqIFr8qkxtEhWebjRybr2mC00yOaPZuJypDqca/Z7B8 EU+EQ5aXTCEdF23FhZORnT53NFOfV9Sezj/CRvehtgEa55ReP9oVIYHA7NeyVp2/ 8Hc3EtdrRo9eKG7C1GEWYFXF/11r/S4= -----END CERTIFICATE-----Generated at Sun Jun 15 11:37:29 2025 by rpki-client