$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/06ec3548-40e7-370d-bd70-b74b5c67021e.roa File: 06ec3548-40e7-370d-bd70-b74b5c67021e.roa (raw, json) Hash identifier: Kzp2Isf/XTGVcEDbAXx9XxZZ9dqbJPFFIHBcKnKElTE= Subject key identifier: 22:20:E2:8D:C4:14:54:5A:E6:00:F8:0E:63:14:02:05:84:FF:EE:8A Certificate issuer: /CN=824dfb5f-8580-48ff-b32e-fd393fa7dcc4 Certificate serial: 010D0C9F43285849FE0FE5644B487F60A0A60C00 Authority key identifier: D9:84:FC:01:25:1A:F5:E5:ED:9B:B3:69:50:58:31:B7:12:47:29:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/06ec3548-40e7-370d-bd70-b74b5c67021e.roa Signing time: Tue 27 May 2025 13:01:05 +0000 ROA not before: Tue 27 May 2025 13:01:05 +0000 ROA not after: Mon 25 Aug 2025 13:01:05 +0000 asID: 14618 IP address blocks: 170.176.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fe:0f:e5:64:4b:48:7f:60:a0:a6:0c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=824dfb5f-8580-48ff-b32e-fd393fa7dcc4 Validity Not Before: May 27 13:01:05 2025 GMT Not After : Aug 25 13:01:05 2025 GMT Subject: CN=40a7159c-acf1-4aa4-83a8-6bcdf650590d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:8b:30:db:c4:3e:8b:2b:11:cb:47:59:f9:2f: bd:b8:97:6f:f5:f5:db:38:49:ca:07:b4:23:64:7b: bb:3a:f9:3e:d0:f0:63:84:07:95:87:a9:22:ff:91: 65:85:7c:7f:54:7d:bd:a9:4d:0f:97:e9:5f:0a:d4: de:e5:c1:96:eb:4f:c9:95:26:7d:2f:89:aa:11:de: 1a:eb:90:22:7f:91:8d:c2:f1:9e:99:2c:e1:34:37: 4b:cf:e4:f6:00:fb:58:2c:bb:e2:06:16:74:2c:34: a8:5a:1c:7f:6b:1b:d0:de:52:06:2c:0b:37:05:b0: 80:84:a1:02:a3:cf:12:00:eb:7c:0a:cb:3d:29:5c: c8:e4:65:f3:7a:76:37:c1:95:0f:36:56:76:f6:10: ac:e6:6e:15:10:a0:24:68:b3:dc:de:85:84:14:17: 06:d4:43:3b:f9:c7:07:31:f7:da:05:92:34:5d:1a: 9a:51:d8:0b:b4:c9:24:29:01:33:6a:9d:d4:86:8a: 02:39:f8:77:01:5f:68:72:87:b1:d6:59:91:7d:2e: 79:8e:36:2b:4c:06:c0:e1:9a:50:14:a1:5a:ba:6f: 86:11:96:a6:b9:8e:c0:11:50:1d:be:03:73:2c:cc: 7b:4f:7c:de:d9:3a:46:ef:86:b5:dc:12:31:c7:8c: e4:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:20:E2:8D:C4:14:54:5A:E6:00:F8:0E:63:14:02:05:84:FF:EE:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/06ec3548-40e7-370d-bd70-b74b5c67021e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.crl X509v3 Authority Key Identifier: keyid:D9:84:FC:01:25:1A:F5:E5:ED:9B:B3:69:50:58:31:B7:12:47:29:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer sbgp-ipAddrBlock: critical IPv4: 170.176.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:97:3e:68:96:c3:bb:4c:5a:2b:0b:f6:bc:9d:7e:0a:af:d2: de:53:79:51:3f:b5:df:98:b6:2d:3d:74:6c:27:d6:94:ec:d8: 92:43:a4:30:bd:bc:e0:98:ea:96:8a:28:bd:d6:aa:45:63:d4: 14:5c:e1:de:f3:46:37:cb:90:ae:12:36:d8:4e:5d:64:a3:1f: 3f:9c:3a:42:72:98:f0:27:ff:8d:13:fd:4a:47:11:e6:57:df: 8b:15:d3:c8:25:53:cf:e2:fb:81:8f:e1:ed:e8:3c:78:29:55: 89:ac:3e:c2:c7:31:7e:25:66:01:23:64:6a:98:08:5e:3c:1b: 11:f3:e7:08:50:23:76:fa:ef:8c:2f:ae:5b:37:cd:8d:61:08: fe:ba:cd:52:02:71:f7:0c:d4:c8:17:c8:e4:02:43:0a:48:a4: 19:e2:1e:06:b3:79:97:11:8e:2a:97:5e:66:be:88:4f:f3:37: df:a0:a3:63:8d:0e:74:d0:97:f3:43:0c:84:ba:e1:90:0d:ed: 78:27:25:ba:64:c2:d2:f1:1b:8e:7e:9e:55:6c:45:d7:4b:01: 6e:89:d6:6e:a2:c9:d2:00:92:6a:2b:45:e1:bd:65:58:a9:93: 8f:36:20:9f:5b:d4:11:04:63:a8:ee:d7:b8:46:ee:e7:c9:dc: 8a:94:d8:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn+D+VkS0h/YKCmDAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODI0ZGZiNWYtODU4MC00OGZmLWIzMmUtZmQzOTNmYTdk Y2M0MB4XDTI1MDUyNzEzMDEwNVoXDTI1MDgyNTEzMDEwNVowLzEtMCsGA1UEAxMk NDBhNzE1OWMtYWNmMS00YWE0LTgzYTgtNmJjZGY2NTA1OTBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4sw28Q+iysRy0dZ+S+9uJdv9fXbOEnKB7Qj ZHu7Ovk+0PBjhAeVh6ki/5FlhXx/VH29qU0Pl+lfCtTe5cGW60/JlSZ9L4mqEd4a 65Aif5GNwvGemSzhNDdLz+T2APtYLLviBhZ0LDSoWhx/axvQ3lIGLAs3BbCAhKEC o88SAOt8Css9KVzI5GXzenY3wZUPNlZ29hCs5m4VEKAkaLPc3oWEFBcG1EM7+ccH MffaBZI0XRqaUdgLtMkkKQEzap3UhooCOfh3AV9ocoex1lmRfS55jjYrTAbA4ZpQ FKFaum+GEZamuY7AEVAdvgNzLMx7T3ze2TpG74a13BIxx4zkwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCIg4o3EFFRa5gD4DmMUAgWE/+6KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84MjRk ZmI1Zi04NTgwLTQ4ZmYtYjMyZS1mZDM5M2ZhN2RjYzQvMDZlYzM1NDgtNDBlNy0z NzBkLWJkNzAtYjc0YjVjNjcwMjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODI0ZGZiNWYtODU4MC00OGZmLWIz MmUtZmQzOTNmYTdkY2M0LzgyNGRmYjVmLTg1ODAtNDhmZi1iMzJlLWZkMzkzZmE3 ZGNjNC5jcmwwHwYDVR0jBBgwFoAU2YT8ASUa9eXtm7NpUFgxtxJHKZYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84MjRkZmI1Zi04NTgwLTQ4ZmYtYjMyZS1mZDM5 M2ZhN2RjYzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqrCBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFyXPmiWw7tMWisL9rydfgqv0t5TeVE/td+Yti09dGwn1pTs2JJDpDC9 vOCY6paKKL3WqkVj1BRc4d7zRjfLkK4SNthOXWSjHz+cOkJymPAn/40T/UpHEeZX 34sV08glU8/i+4GP4e3oPHgpVYmsPsLHMX4lZgEjZGqYCF48GxHz5whQI3b674wv rls3zY1hCP66zVICcfcM1MgXyOQCQwpIpBniHgazeZcRjiqXXma+iE/zN9+go2ON DnTQl/NDDIS64ZAN7XgnJbpkwtLxG45+nlVsRddLAW6J1m6iydIAkmorReG9ZVip k482IJ9b1BEEY6ju17hG7ufJ3IqU2KE= -----END CERTIFICATE-----Generated at Sat Jun 14 23:52:30 2025 by rpki-client