$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/995efe20-f339-3067-94d9-cb4ac509c5a8.roa File: 995efe20-f339-3067-94d9-cb4ac509c5a8.roa (raw, json) Hash identifier: zcYVt49URPpds2ORngjTgDMda+9KsAIzrsFUdfT43lQ= Subject key identifier: 46:36:2D:54:EA:F9:EB:A5:41:71:FA:57:1A:41:4E:65:95:68:CD:96 Certificate issuer: /CN=21adcbb8-b500-460f-90cb-bca0525aabcb Certificate serial: 010D0C9F43285849DDF4D8C9422B806B7CA60480 Authority key identifier: 62:2B:0A:1E:7B:53:D2:E2:2B:6B:5A:FF:1D:C1:AA:ED:0A:06:69:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/995efe20-f339-3067-94d9-cb4ac509c5a8.roa Signing time: Fri 16 May 2025 01:00:46 +0000 ROA not before: Fri 16 May 2025 01:00:46 +0000 ROA not after: Thu 14 Aug 2025 01:00:46 +0000 asID: 16509 IP address blocks: 170.176.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/21adcbb8-b500-460f-90cb-bca0525aabcb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/21adcbb8-b500-460f-90cb-bca0525aabcb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:dd:f4:d8:c9:42:2b:80:6b:7c:a6:04:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21adcbb8-b500-460f-90cb-bca0525aabcb Validity Not Before: May 16 01:00:46 2025 GMT Not After : Aug 14 01:00:46 2025 GMT Subject: CN=204a390b-7fa1-4231-819e-dc404483bc07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:c1:f4:55:78:40:9e:59:95:7d:9d:19:16:1a: 5a:6f:04:2e:31:ae:bc:da:0d:59:b7:38:e0:9c:7c: 44:7b:7e:a8:3f:18:02:ec:a2:e5:17:ba:0a:7d:c9: 9f:12:8c:04:7e:7a:ec:c1:30:88:04:ca:b1:8e:00: b3:43:f0:1d:6d:65:dc:51:5d:29:09:e7:4e:93:48: 12:05:19:b6:66:86:f8:18:35:51:bb:fc:82:60:d3: 96:09:67:1d:b9:06:e2:c6:a9:5c:0c:0c:19:d0:dd: 08:f6:7b:c5:f1:d0:8a:b3:85:6b:f9:a3:18:17:b3: 7a:89:d5:2e:14:ea:61:8d:11:10:b8:ae:cd:a4:ed: 7e:72:63:39:88:5c:bc:35:e2:56:7d:a3:3e:e7:74: 11:85:64:d5:77:b1:fa:1b:b8:c6:c8:9c:1b:de:f3: c5:eb:8d:00:20:b7:52:7c:a3:c2:a5:da:47:6d:71: 08:57:7b:6a:8d:dd:39:6a:26:d8:0c:6b:dc:49:4f: 03:f8:f6:70:ac:ef:11:c2:50:b6:99:a3:53:b3:a7: e1:03:18:4f:ca:56:3e:5f:04:6e:71:9e:08:fc:4d: c4:da:c6:c6:a7:5f:13:15:29:a5:7e:db:96:96:47: 8d:00:3a:08:a4:f1:c6:d1:26:dc:ab:ff:c3:71:1b: 24:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:36:2D:54:EA:F9:EB:A5:41:71:FA:57:1A:41:4E:65:95:68:CD:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/995efe20-f339-3067-94d9-cb4ac509c5a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/21adcbb8-b500-460f-90cb-bca0525aabcb.crl X509v3 Authority Key Identifier: keyid:62:2B:0A:1E:7B:53:D2:E2:2B:6B:5A:FF:1D:C1:AA:ED:0A:06:69:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb.cer sbgp-ipAddrBlock: critical IPv4: 170.176.199.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:22:96:1b:07:c1:ca:ba:89:74:60:a0:51:6d:68:7f:41:05: 98:de:80:fc:d5:c7:e2:bf:81:cf:f1:91:d7:d3:46:e4:55:de: f7:23:75:81:c4:38:fe:24:22:bf:6d:cf:16:4e:29:77:ae:e3: 4a:ed:66:e8:59:74:9b:b1:ab:0c:83:db:4a:03:2a:77:1d:ef: de:8c:49:76:89:0d:b3:c2:06:0a:ed:33:d3:69:59:77:93:ac: 37:0a:22:11:33:27:a8:07:6f:a5:95:a9:8f:92:87:ad:dc:54: ca:81:1e:0e:9c:9a:2f:c2:84:7b:da:1b:d2:4a:80:ed:6e:c6: 84:0a:6c:82:f7:e9:ba:c4:89:1c:68:40:5a:3b:d4:c6:09:e7: 3c:d8:b7:9f:af:77:33:02:1e:58:1c:6f:46:34:57:38:df:4f: 03:e8:6f:ba:c9:1b:bb:24:ba:83:e2:45:ed:ee:e2:76:2e:7b: bc:90:d5:ec:d7:ac:fe:ed:a8:69:c5:62:95:14:5e:dd:3d:58: c1:dd:b4:bf:ac:25:c3:25:eb:74:39:3c:96:5a:4e:f7:20:05: 43:5b:39:c5:5c:8a:38:1a:4f:26:2a:c0:9a:e2:eb:c9:6c:32: 6b:e2:96:cf:d0:1e:1c:ab:00:8c:fd:cb:73:a9:66:e8:f0:d5: 65:de:b7:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnd9NjJQiuAa3ymBIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFhZGNiYjgtYjUwMC00NjBmLTkwY2ItYmNhMDUyNWFh YmNiMB4XDTI1MDUxNjAxMDA0NloXDTI1MDgxNDAxMDA0NlowLzEtMCsGA1UEAxMk MjA0YTM5MGItN2ZhMS00MjMxLTgxOWUtZGM0MDQ0ODNiYzA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0MH0VXhAnlmVfZ0ZFhpabwQuMa682g1Ztzjg nHxEe36oPxgC7KLlF7oKfcmfEowEfnrswTCIBMqxjgCzQ/AdbWXcUV0pCedOk0gS BRm2Zob4GDVRu/yCYNOWCWcduQbixqlcDAwZ0N0I9nvF8dCKs4Vr+aMYF7N6idUu FOphjREQuK7NpO1+cmM5iFy8NeJWfaM+53QRhWTVd7H6G7jGyJwb3vPF640AILdS fKPCpdpHbXEIV3tqjd05aibYDGvcSU8D+PZwrO8RwlC2maNTs6fhAxhPylY+XwRu cZ4I/E3E2sbGp18TFSmlftuWlkeNADoIpPHG0Sbcq//DcRskJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEY2LVTq+eulQXH6VxpBTmWVaM2WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yMWFk Y2JiOC1iNTAwLTQ2MGYtOTBjYi1iY2EwNTI1YWFiY2IvOTk1ZWZlMjAtZjMzOS0z MDY3LTk0ZDktY2I0YWM1MDljNWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjFhZGNiYjgtYjUwMC00NjBmLTkw Y2ItYmNhMDUyNWFhYmNiLzIxYWRjYmI4LWI1MDAtNDYwZi05MGNiLWJjYTA1MjVh YWJjYi5jcmwwHwYDVR0jBBgwFoAUYisKHntT0uIra1r/HcGq7QoGaT0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yMWFkY2JiOC1iNTAwLTQ2MGYtOTBjYi1iY2Ew NTI1YWFiY2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqrDHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKgilhsHwcq6iXRgoFFtaH9BBZjegPzVx+K/gc/xkdfTRuRV3vcjdYHE OP4kIr9tzxZOKXeu40rtZuhZdJuxqwyD20oDKncd796MSXaJDbPCBgrtM9NpWXeT rDcKIhEzJ6gHb6WVqY+Sh63cVMqBHg6cmi/ChHvaG9JKgO1uxoQKbIL36brEiRxo QFo71MYJ5zzYt5+vdzMCHlgcb0Y0VzjfTwPob7rJG7skuoPiRe3u4nYue7yQ1ezX rP7tqGnFYpUUXt09WMHdtL+sJcMl63Q5PJZaTvcgBUNbOcVcijgaTyYqwJri68ls Mmvils/QHhyrAIz9y3OpZujw1WXetwc= -----END CERTIFICATE-----Generated at Sat Jun 14 06:30:30 2025 by rpki-client