$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583/a7cb96f8-798c-30b2-b971-ea00ffd4f8ec.roa File: a7cb96f8-798c-30b2-b971-ea00ffd4f8ec.roa (raw, json) Hash identifier: 5h0UdGaJOcUU1avKJvaTK5R594GAz4+zAAVuwllQpcQ= Subject key identifier: 5A:99:57:39:C0:99:37:A6:B2:A9:92:93:E7:0D:BE:C8:CE:94:E8:99 Certificate issuer: /CN=61939bbc-e50f-4ced-8482-e7c4008e3583 Certificate serial: 010D0C9F4328584A225AC4EC3CE2735AA2BCEC00 Authority key identifier: 3F:8D:F8:51:B6:E3:53:FA:6A:C1:CF:4A:DD:0E:91:CE:C3:DE:49:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583/a7cb96f8-798c-30b2-b971-ea00ffd4f8ec.roa Signing time: Mon 09 Jun 2025 13:01:01 +0000 ROA not before: Mon 09 Jun 2025 13:01:01 +0000 ROA not after: Sun 07 Sep 2025 13:01:01 +0000 asID: 397453 IP address blocks: 170.117.168.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583/61939bbc-e50f-4ced-8482-e7c4008e3583.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583/61939bbc-e50f-4ced-8482-e7c4008e3583.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:22:5a:c4:ec:3c:e2:73:5a:a2:bc:ec:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61939bbc-e50f-4ced-8482-e7c4008e3583 Validity Not Before: Jun 9 13:01:01 2025 GMT Not After : Sep 7 13:01:01 2025 GMT Subject: CN=a88906ce-b513-469b-b0c9-6733293043ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:fb:9f:f0:e6:c1:2d:73:e3:53:f9:b1:a1:92: fb:3b:3d:be:98:e3:e0:e3:bb:dd:dd:fd:52:d7:25: d8:67:e8:9d:05:9b:15:47:7c:cd:9c:c8:52:c3:94: ea:4c:95:5e:44:53:4d:c3:69:42:c0:7f:80:ca:89: ad:40:4d:c3:6d:1f:48:5a:9b:43:e9:85:a0:6d:f3: 5b:e5:ca:d9:c4:35:d2:3f:53:3a:86:d6:ba:a0:26: 44:d6:54:5d:02:fc:d7:37:7e:2c:ff:aa:6f:d4:24: af:f3:09:53:e9:a8:00:a2:a5:de:e1:27:d6:a0:d1: 33:8a:6a:d2:89:01:dd:b3:1f:fd:ef:f9:4f:11:fd: 7a:65:6d:3b:9f:94:3d:b8:19:0e:14:fa:7f:a7:df: 51:4b:be:51:61:32:ad:65:03:40:ad:0a:13:94:5b: 63:27:2a:13:5e:cc:b5:8f:5b:69:be:62:94:f7:cd: 24:2d:8d:b8:e0:d1:55:6f:03:aa:e7:41:aa:71:9e: 71:7e:dd:3f:27:bf:25:a1:b6:df:d6:ea:f9:33:b7: c5:eb:c5:ff:10:59:62:33:3a:85:73:b8:6b:fc:7a: 02:52:e7:d8:59:47:3c:90:14:a1:8d:ec:83:23:cc: d3:b7:17:f6:b1:39:1b:e8:68:93:ba:18:46:48:01: 28:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:99:57:39:C0:99:37:A6:B2:A9:92:93:E7:0D:BE:C8:CE:94:E8:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583/a7cb96f8-798c-30b2-b971-ea00ffd4f8ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583/61939bbc-e50f-4ced-8482-e7c4008e3583.crl X509v3 Authority Key Identifier: keyid:3F:8D:F8:51:B6:E3:53:FA:6A:C1:CF:4A:DD:0E:91:CE:C3:DE:49:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583.cer sbgp-ipAddrBlock: critical IPv4: 170.117.168.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:99:aa:c2:c2:c1:f2:da:d3:43:26:af:bd:ab:5f:a4:b1:b2: d1:a8:99:96:ad:93:52:95:5e:2c:8e:98:20:81:4a:06:70:1f: 98:9b:a2:9c:f2:5c:ff:bc:43:d8:96:8b:3e:75:54:ff:b5:26: cd:33:13:23:fe:70:77:5f:46:c5:57:86:bc:e6:b6:34:8b:a5: 77:ba:da:2f:69:1e:43:a1:5d:db:ae:5e:be:73:4a:82:bf:5c: e1:c3:4d:cc:d0:52:bd:97:77:6b:d9:7f:e7:37:33:ab:b3:f9: 6e:6f:9a:5e:06:bc:5c:dc:de:e2:a3:e3:cc:a6:64:fa:b1:00: 6d:5f:b2:bd:36:3c:d4:44:63:31:04:da:48:d4:3d:de:68:c0: bf:8d:7e:91:1c:80:6b:d3:e8:50:b6:76:f3:92:e3:20:6a:2f: 2b:c3:bb:bc:51:11:19:7c:bf:a8:71:e2:87:aa:5e:3b:c4:0c: f9:11:79:53:9e:d7:17:01:1d:87:dd:c4:81:f8:d4:cf:52:9c: a1:22:da:d0:ce:d9:09:54:92:8b:e2:b9:eb:c7:36:68:ae:f5: 2e:d0:ff:c4:a9:58:9b:b3:4f:b0:2f:fa:13:6c:3e:c6:68:75: 26:c0:bc:4d:77:ed:19:2c:48:17:77:4b:1b:5b:15:a4:cf:6f: 54:8c:aa:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoiWsTsPOJzWqK87AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjE5MzliYmMtZTUwZi00Y2VkLTg0ODItZTdjNDAwOGUz NTgzMB4XDTI1MDYwOTEzMDEwMVoXDTI1MDkwNzEzMDEwMVowLzEtMCsGA1UEAxMk YTg4OTA2Y2UtYjUxMy00NjliLWIwYzktNjczMzI5MzA0M2FkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvuf8ObBLXPjU/mxoZL7Oz2+mOPg47vd3f1S 1yXYZ+idBZsVR3zNnMhSw5TqTJVeRFNNw2lCwH+AyomtQE3DbR9IWptD6YWgbfNb 5crZxDXSP1M6hta6oCZE1lRdAvzXN34s/6pv1CSv8wlT6agAoqXe4SfWoNEzimrS iQHdsx/97/lPEf16ZW07n5Q9uBkOFPp/p99RS75RYTKtZQNArQoTlFtjJyoTXsy1 j1tpvmKU980kLY244NFVbwOq50GqcZ5xft0/J78lobbf1ur5M7fF68X/EFliMzqF c7hr/HoCUufYWUc8kBShjeyDI8zTtxf2sTkb6GiTuhhGSAEoSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFqZVznAmTemsqmSk+cNvsjOlOiZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MTkz OWJiYy1lNTBmLTRjZWQtODQ4Mi1lN2M0MDA4ZTM1ODMvYTdjYjk2ZjgtNzk4Yy0z MGIyLWI5NzEtZWEwMGZmZDRmOGVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjE5MzliYmMtZTUwZi00Y2VkLTg0 ODItZTdjNDAwOGUzNTgzLzYxOTM5YmJjLWU1MGYtNGNlZC04NDgyLWU3YzQwMDhl MzU4My5jcmwwHwYDVR0jBBgwFoAUP434UbbjU/pqwc9K3Q6RzsPeSRYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MTkzOWJiYy1lNTBmLTRjZWQtODQ4Mi1lN2M0 MDA4ZTM1ODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqnWoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEuZqsLCwfLa00Mmr72rX6SxstGomZatk1KVXiyOmCCBSgZwH5ibopzy XP+8Q9iWiz51VP+1Js0zEyP+cHdfRsVXhrzmtjSLpXe62i9pHkOhXduuXr5zSoK/ XOHDTczQUr2Xd2vZf+c3M6uz+W5vml4GvFzc3uKj48ymZPqxAG1fsr02PNREYzEE 2kjUPd5owL+NfpEcgGvT6FC2dvOS4yBqLyvDu7xRERl8v6hx4oeqXjvEDPkReVOe 1xcBHYfdxIH41M9SnKEi2tDO2QlUkoviuevHNmiu9S7Q/8SpWJuzT7Av+hNsPsZo dSbAvE137RksSBd3SxtbFaTPb1SMqvY= -----END CERTIFICATE-----Generated at Mon Jun 16 12:36:08 2025 by rpki-client