$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/d534cf0f-6f7c-3b0f-b274-0e1bd736d45f.roa File: d534cf0f-6f7c-3b0f-b274-0e1bd736d45f.roa (raw, json) Hash identifier: iKXlJBTJRVXT/TwlFsRnhOGSQyd6fFriWcLnjVkU3sI= Subject key identifier: 59:C6:3A:25:BA:21:19:88:1C:6B:5C:BD:10:14:C7:EA:51:65:75:B9 Certificate issuer: /CN=df0cf6ff-6f69-41b4-aa67-26d0aba02e8e Certificate serial: 010D0C9F4328584AB4EB6B1D4F068906A7B88F80 Authority key identifier: FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/d534cf0f-6f7c-3b0f-b274-0e1bd736d45f.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 25649 IP address blocks: 172.110.240.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:eb:6b:1d:4f:06:89:06:a7:b8:8f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df0cf6ff-6f69-41b4-aa67-26d0aba02e8e Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=d045c96f-6bf4-414c-ac5b-f7ace15e9494 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a9:56:57:c6:77:e3:db:af:f9:e4:ff:0f:22: a5:91:55:4c:2f:ee:87:a1:c9:7b:b2:34:7e:22:64: 88:13:95:8d:8b:80:6e:5a:72:c6:18:9c:a1:07:48: 25:ad:d7:e5:cf:be:4e:73:56:c9:5d:e6:e0:54:17: 58:90:96:09:87:4d:4a:d8:26:2c:7d:bf:57:6d:fa: b2:e4:f1:72:43:9f:a9:33:d9:a3:9d:1f:2c:c8:d2: 20:88:52:4e:44:46:3a:ac:62:ee:81:3b:20:92:0c: 6b:b9:d0:9d:1e:4d:b6:25:7d:82:46:7c:cc:e6:fe: 83:c6:95:7a:a5:9b:d3:73:b1:8a:b1:2a:89:1b:fa: 81:dd:34:8b:76:6d:9a:ba:6c:96:d7:a2:e4:eb:a9: c1:31:50:6b:bc:33:b4:bc:97:e9:e0:25:d3:43:dd: 2e:aa:8b:89:8d:0a:89:13:28:8b:da:43:64:e5:66: bd:ba:e9:0a:56:ea:0b:eb:ac:ba:4c:0f:c3:9d:14: 35:91:48:34:e5:9a:7d:ed:00:3c:af:7d:c3:35:7d: d5:76:28:32:30:b7:25:65:64:f3:fc:fe:7f:e6:0b: 40:b2:a3:11:11:ec:47:fc:2b:ad:e6:69:b2:81:34: 5a:92:d5:89:b1:92:8d:ed:81:3b:47:5d:6c:9f:5a: 35:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:C6:3A:25:BA:21:19:88:1C:6B:5C:BD:10:14:C7:EA:51:65:75:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/d534cf0f-6f7c-3b0f-b274-0e1bd736d45f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.crl X509v3 Authority Key Identifier: keyid:FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer sbgp-ipAddrBlock: critical IPv4: 172.110.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:af:d1:7b:64:53:2d:a6:e6:cf:9c:87:90:8a:2f:52:d9:7d: f5:59:d1:89:8a:6b:94:53:46:64:80:00:bf:93:45:4a:d3:ac: bf:9f:03:2c:c3:11:2d:b2:63:84:8c:b1:67:91:c8:33:12:fe: b2:42:54:46:a1:18:b8:54:1f:e4:c7:71:3f:6b:cb:1d:41:e0: 02:e1:57:40:40:03:99:e0:d5:f0:d7:17:73:48:06:61:2b:04: 0a:a6:84:bd:ca:a5:b9:0b:be:b9:d5:4f:2f:7f:51:1d:2b:6f: c0:d1:27:64:ed:59:47:0a:23:a8:12:7b:5f:85:2d:de:60:14: ce:33:63:b3:a1:62:d4:6e:2f:e4:54:9f:59:8d:b7:90:ae:9a: 5d:47:b3:89:af:fe:8b:13:36:de:be:24:61:b1:1e:51:71:d9: 79:90:00:b4:d8:e9:5c:ee:54:97:1f:42:1c:d9:af:71:21:65: f5:a1:9e:68:d1:fd:a8:52:22:9c:40:83:aa:75:82:65:ad:47: a3:e4:25:30:42:f4:a6:c2:ad:89:b7:5a:12:a7:f0:c4:78:41: 65:08:18:25:b3:6a:74:59:ae:e1:74:b6:4c:91:cf:52:1b:40: f7:3f:85:01:d6:74:29:f5:43:bb:26:ef:99:40:f2:69:99:f9: 1e:be:6e:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq062sdTwaJBqe4j4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGYwY2Y2ZmYtNmY2OS00MWI0LWFhNjctMjZkMGFiYTAy ZThlMB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk ZDA0NWM5NmYtNmJmNC00MTRjLWFjNWItZjdhY2UxNWU5NDk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqlWV8Z349uv+eT/DyKlkVVML+6Hocl7sjR+ ImSIE5WNi4BuWnLGGJyhB0glrdflz75Oc1bJXebgVBdYkJYJh01K2CYsfb9Xbfqy 5PFyQ5+pM9mjnR8syNIgiFJOREY6rGLugTsgkgxrudCdHk22JX2CRnzM5v6DxpV6 pZvTc7GKsSqJG/qB3TSLdm2aumyW16Lk66nBMVBrvDO0vJfp4CXTQ90uqouJjQqJ EyiL2kNk5Wa9uukKVuoL66y6TA/DnRQ1kUg05Zp97QA8r33DNX3VdigyMLclZWTz /P5/5gtAsqMREexH/Cut5mmygTRaktWJsZKN7YE7R11sn1o1lwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFnGOiW6IRmIHGtcvRAUx+pRZXW5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjBj ZjZmZi02ZjY5LTQxYjQtYWE2Ny0yNmQwYWJhMDJlOGUvZDUzNGNmMGYtNmY3Yy0z YjBmLWIyNzQtMGUxYmQ3MzZkNDVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZGYwY2Y2ZmYtNmY2OS00MWI0LWFh NjctMjZkMGFiYTAyZThlL2RmMGNmNmZmLTZmNjktNDFiNC1hYTY3LTI2ZDBhYmEw MmU4ZS5jcmwwHwYDVR0jBBgwFoAU/GAffSctPt57SUZisgIHLGcDogIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjBjZjZmZi02ZjY5LTQxYjQtYWE2Ny0yNmQw YWJhMDJlOGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrG7wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADOv0XtkUy2m5s+ch5CKL1LZffVZ0YmKa5RTRmSAAL+TRUrTrL+fAyzD ES2yY4SMsWeRyDMS/rJCVEahGLhUH+THcT9ryx1B4ALhV0BAA5ng1fDXF3NIBmEr BAqmhL3KpbkLvrnVTy9/UR0rb8DRJ2TtWUcKI6gSe1+FLd5gFM4zY7OhYtRuL+RU n1mNt5Cuml1Hs4mv/osTNt6+JGGxHlFx2XmQALTY6VzuVJcfQhzZr3EhZfWhnmjR /ahSIpxAg6p1gmWtR6PkJTBC9KbCrYm3WhKn8MR4QWUIGCWzanRZruF0tkyRz1Ib QPc/hQHWdCn1Q7sm75lA8mmZ+R6+bt0= -----END CERTIFICATE-----Generated at Mon Aug 4 14:01:55 2025 by rpki-client