$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/d534cf0f-6f7c-3b0f-b274-0e1bd736d45f.roa File: d534cf0f-6f7c-3b0f-b274-0e1bd736d45f.roa (raw, json) Hash identifier: UUm/jH/E3IJwAr8kMnM5lMs5hXjkXa2zijowx3zzJJw= Subject key identifier: 2B:28:F2:4D:40:5D:45:5E:C1:19:BD:A8:DF:C6:DD:C0:7D:AD:5B:FC Certificate issuer: /CN=df0cf6ff-6f69-41b4-aa67-26d0aba02e8e Certificate serial: 010D0C9F43285849D42FA4B9F0CA450FB39EC280 Authority key identifier: FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/d534cf0f-6f7c-3b0f-b274-0e1bd736d45f.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 25649 IP address blocks: 172.110.240.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:2f:a4:b9:f0:ca:45:0f:b3:9e:c2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df0cf6ff-6f69-41b4-aa67-26d0aba02e8e Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=17b416c3-ed47-41fc-9a30-c91db254c6d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:70:d8:fd:e0:28:0d:ba:ad:e8:07:c1:25:57: 26:24:ac:a3:ba:8c:45:06:ae:7b:47:ab:09:0e:fa: d3:0c:48:8f:a9:52:66:16:ff:c2:fd:ba:f5:a3:22: 51:9a:0d:43:a6:d3:85:97:f4:09:44:4a:62:85:6d: 39:49:7c:de:78:a6:77:bd:3a:66:aa:c4:54:85:55: 62:ba:0c:55:38:e5:ec:4d:47:ac:4d:e3:0b:76:c7: d2:de:6b:88:e2:91:7e:36:06:3e:36:60:47:e1:33: 68:f8:7f:13:94:c5:d4:de:98:7b:51:ab:38:29:f3: 9a:8a:dd:ea:37:36:2a:0a:85:7f:47:5c:03:5c:1e: f9:2d:50:0f:b3:e9:7f:97:bb:22:fd:16:64:b4:77: 9a:0b:49:00:f9:09:57:74:8b:94:27:08:28:0b:f1: 63:eb:ad:c3:53:04:5e:28:b4:50:47:10:57:46:4c: 31:ff:7b:21:b1:a6:7f:2a:fe:5d:f2:cc:78:18:a2: 14:1d:23:8c:67:89:d6:e4:fa:53:9b:bb:2b:0a:cb: 01:90:be:b5:18:d8:bd:0e:08:96:9f:92:94:52:87: a9:e9:b7:dc:17:8e:a0:3e:7d:7e:27:81:32:c5:e4: 3e:fe:e3:be:db:c9:93:89:56:de:19:51:c9:a7:d0: 5d:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:28:F2:4D:40:5D:45:5E:C1:19:BD:A8:DF:C6:DD:C0:7D:AD:5B:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/d534cf0f-6f7c-3b0f-b274-0e1bd736d45f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.crl X509v3 Authority Key Identifier: keyid:FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer sbgp-ipAddrBlock: critical IPv4: 172.110.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:db:9a:1c:89:83:56:c4:1a:0e:a4:16:6c:e6:b1:b4:7f:4c: 29:27:00:65:d1:e0:0a:35:ce:4b:50:4d:7e:bd:4a:d5:25:7d: 03:e5:1e:6f:47:3d:9c:c6:a4:8b:bc:0e:f9:77:ef:77:72:03: c7:4e:b6:91:f8:24:ce:f7:ec:97:90:5d:bd:42:4b:ee:0c:96: b2:71:24:1e:2e:e7:c2:ac:51:25:12:30:33:6c:54:ed:d4:25: c8:d2:3a:9e:51:b8:8b:6a:ae:d6:0e:91:71:2c:1d:ec:9a:41: f2:33:14:b1:cf:31:ba:9a:5b:50:cc:f3:24:91:29:0a:3c:7e: 12:9b:38:cf:57:88:67:0c:e8:9c:ec:18:30:3f:10:85:96:28: 32:10:a7:68:e2:33:99:08:2c:fe:b4:6b:6a:42:fc:51:bc:07: 6f:f4:5c:c8:84:57:9b:eb:0e:eb:bd:67:60:a0:1b:44:22:d7: 1c:6e:15:67:c8:79:30:98:46:ef:b9:54:c4:a5:6d:d7:30:7c: 0f:b3:70:13:8a:13:4e:0f:07:f8:fe:a9:92:4b:a5:eb:39:8f: 0a:b1:64:07:dd:fd:ee:de:4a:e3:6b:c5:8b:17:b9:eb:47:46: e5:cd:70:de:b1:09:97:71:17:a6:16:78:27:d2:8a:c9:ef:56: 34:e3:6c:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUL6S58MpFD7OewoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGYwY2Y2ZmYtNmY2OS00MWI0LWFhNjctMjZkMGFiYTAy ZThlMB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk MTdiNDE2YzMtZWQ0Ny00MWZjLTlhMzAtYzkxZGIyNTRjNmQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2nDY/eAoDbqt6AfBJVcmJKyjuoxFBq57R6sJ DvrTDEiPqVJmFv/C/br1oyJRmg1DptOFl/QJREpihW05SXzeeKZ3vTpmqsRUhVVi ugxVOOXsTUesTeMLdsfS3muI4pF+NgY+NmBH4TNo+H8TlMXU3ph7Uas4KfOait3q NzYqCoV/R1wDXB75LVAPs+l/l7si/RZktHeaC0kA+QlXdIuUJwgoC/Fj663DUwRe KLRQRxBXRkwx/3shsaZ/Kv5d8sx4GKIUHSOMZ4nW5PpTm7srCssBkL61GNi9DgiW n5KUUoep6bfcF46gPn1+J4EyxeQ+/uO+28mTiVbeGVHJp9BdGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCso8k1AXUVewRm9qN/G3cB9rVv8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjBj ZjZmZi02ZjY5LTQxYjQtYWE2Ny0yNmQwYWJhMDJlOGUvZDUzNGNmMGYtNmY3Yy0z YjBmLWIyNzQtMGUxYmQ3MzZkNDVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZGYwY2Y2ZmYtNmY2OS00MWI0LWFh NjctMjZkMGFiYTAyZThlL2RmMGNmNmZmLTZmNjktNDFiNC1hYTY3LTI2ZDBhYmEw MmU4ZS5jcmwwHwYDVR0jBBgwFoAU/GAffSctPt57SUZisgIHLGcDogIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjBjZjZmZi02ZjY5LTQxYjQtYWE2Ny0yNmQw YWJhMDJlOGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrG7wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADXbmhyJg1bEGg6kFmzmsbR/TCknAGXR4Ao1zktQTX69StUlfQPlHm9H PZzGpIu8Dvl373dyA8dOtpH4JM737JeQXb1CS+4MlrJxJB4u58KsUSUSMDNsVO3U JcjSOp5RuItqrtYOkXEsHeyaQfIzFLHPMbqaW1DM8ySRKQo8fhKbOM9XiGcM6Jzs GDA/EIWWKDIQp2jiM5kILP60a2pC/FG8B2/0XMiEV5vrDuu9Z2CgG0Qi1xxuFWfI eTCYRu+5VMSlbdcwfA+zcBOKE04PB/j+qZJLpes5jwqxZAfd/e7eSuNrxYsXuetH RuXNcN6xCZdxF6YWeCfSisnvVjTjbPc= -----END CERTIFICATE-----Generated at Mon Jun 16 00:07:12 2025 by rpki-client