$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386/b5c63bfd-1823-3439-89e5-1713f0194e5c.roa File: b5c63bfd-1823-3439-89e5-1713f0194e5c.roa (raw, json) Hash identifier: ekcjwcuU+Z/lCGcyJfjsa9DgNRKs1BFax+2zXdv9jlQ= Subject key identifier: 25:66:75:C0:B3:7F:3C:46:8C:DC:55:04:95:2E:68:F0:72:01:F1:A5 Certificate issuer: /CN=abf1f0ec-0f56-4356-9ce5-9c637405f386 Certificate serial: 010D0C9F4328584A66C068296F3541B8CA729900 Authority key identifier: 97:4B:C9:47:24:F4:DD:06:50:DF:1D:2A:91:89:75:26:29:90:DA:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386/b5c63bfd-1823-3439-89e5-1713f0194e5c.roa Signing time: Fri 04 Jul 2025 01:00:49 +0000 ROA not before: Fri 04 Jul 2025 01:00:49 +0000 ROA not after: Thu 02 Oct 2025 01:00:49 +0000 asID: 396338 IP address blocks: 170.100.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386/abf1f0ec-0f56-4356-9ce5-9c637405f386.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386/abf1f0ec-0f56-4356-9ce5-9c637405f386.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:66:c0:68:29:6f:35:41:b8:ca:72:99:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf1f0ec-0f56-4356-9ce5-9c637405f386 Validity Not Before: Jul 4 01:00:49 2025 GMT Not After : Oct 2 01:00:49 2025 GMT Subject: CN=8dabbbcc-3c60-4670-9147-da6be92679c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:be:c5:2d:bf:27:e8:79:69:86:f5:ca:46:46: ce:d5:fe:05:91:52:19:17:22:76:6f:21:76:a0:9a: 79:25:bc:a9:b2:01:9a:60:b4:ad:4a:f2:db:e2:30: c9:ad:02:8e:36:27:77:3f:b3:eb:75:6b:33:e8:44: 13:e5:39:1d:13:81:90:59:a7:28:4b:5e:e8:19:c2: 48:d8:6f:8c:9c:3c:b7:61:7e:a4:87:3a:61:cd:0b: 3f:8a:cd:0b:a1:c4:04:65:a1:5a:0b:77:d4:5e:ca: 52:1d:f4:c0:f2:46:08:6a:fb:df:5b:c8:84:7c:ea: 84:cc:e1:88:b0:6c:13:6f:78:d8:f6:3d:d8:58:92: 07:2d:15:b7:3a:ae:75:b9:e7:8f:0c:19:cb:2b:eb: b3:b9:ab:c3:40:7e:1c:69:21:bf:c7:cd:54:29:11: 14:05:1d:3f:c1:b0:19:d4:4d:f3:d2:74:4d:71:ad: 55:3f:0c:c9:1d:0a:95:98:7b:cd:52:33:f2:81:30: 56:ba:6d:cc:dc:21:a4:84:42:9c:33:04:98:e9:41: cd:4d:7c:13:1c:c8:14:98:64:7f:87:a3:97:ff:43: 7a:3b:59:11:41:16:7f:48:0f:43:40:5b:55:b7:d9: 71:35:72:ee:44:92:67:c0:da:60:84:1a:96:bc:b1: de:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:66:75:C0:B3:7F:3C:46:8C:DC:55:04:95:2E:68:F0:72:01:F1:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386/b5c63bfd-1823-3439-89e5-1713f0194e5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386/abf1f0ec-0f56-4356-9ce5-9c637405f386.crl X509v3 Authority Key Identifier: keyid:97:4B:C9:47:24:F4:DD:06:50:DF:1D:2A:91:89:75:26:29:90:DA:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386.cer sbgp-ipAddrBlock: critical IPv4: 170.100.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:53:dd:08:ed:57:69:ef:52:0b:2e:8d:35:12:67:33:86:ea: 5f:48:d6:75:e0:e1:62:0b:52:29:47:29:9a:69:70:b3:6f:5a: a5:19:3b:f2:cf:71:ff:16:32:25:65:55:c4:09:3c:cb:50:d0: db:2b:a7:68:2c:df:c0:cc:12:a3:26:21:3b:82:92:86:25:1c: eb:4a:7c:60:d6:04:52:b1:67:1c:c8:8f:40:f4:f3:7f:94:de: e0:5b:e3:cd:6a:ef:98:db:93:74:6f:e5:4a:af:f8:00:9a:05: c0:47:73:6b:53:d7:46:1f:ae:6d:d4:ef:a9:ee:ec:59:4d:13: 19:58:c9:35:33:32:03:79:4e:26:72:7f:eb:04:57:40:60:39: 3d:6f:f9:3e:85:b3:51:7e:fe:87:74:46:72:9d:2e:0f:18:13: a4:02:e9:8b:97:ba:17:9c:90:0f:c6:75:e0:fd:a8:42:a6:4a: d3:94:34:a6:f1:38:e6:33:7d:72:04:32:cb:6d:dc:64:b0:d6: 68:a1:2c:c1:cd:96:aa:b6:dd:9b:0d:f4:ce:0f:1b:fd:48:fa: 6a:6b:cc:c5:85:56:b7:66:aa:40:bd:5e:c7:c1:59:d7:12:41: 87:be:71:ab:48:96:9d:25:3b:c6:83:af:4c:3f:49:53:f1:28: 1e:b3:f9:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpmwGgpbzVBuMpymQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmMWYwZWMtMGY1Ni00MzU2LTljZTUtOWM2Mzc0MDVm Mzg2MB4XDTI1MDcwNDAxMDA0OVoXDTI1MTAwMjAxMDA0OVowLzEtMCsGA1UEAxMk OGRhYmJiY2MtM2M2MC00NjcwLTkxNDctZGE2YmU5MjY3OWMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgr7FLb8n6HlphvXKRkbO1f4FkVIZFyJ2byF2 oJp5JbypsgGaYLStSvLb4jDJrQKONid3P7PrdWsz6EQT5TkdE4GQWacoS17oGcJI 2G+MnDy3YX6khzphzQs/is0LocQEZaFaC3fUXspSHfTA8kYIavvfW8iEfOqEzOGI sGwTb3jY9j3YWJIHLRW3Oq51ueePDBnLK+uzuavDQH4caSG/x81UKREUBR0/wbAZ 1E3z0nRNca1VPwzJHQqVmHvNUjPygTBWum3M3CGkhEKcMwSY6UHNTXwTHMgUmGR/ h6OX/0N6O1kRQRZ/SA9DQFtVt9lxNXLuRJJnwNpghBqWvLHeZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCVmdcCzfzxGjNxVBJUuaPByAfGlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYmYx ZjBlYy0wZjU2LTQzNTYtOWNlNS05YzYzNzQwNWYzODYvYjVjNjNiZmQtMTgyMy0z NDM5LTg5ZTUtMTcxM2YwMTk0ZTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWJmMWYwZWMtMGY1Ni00MzU2LTlj ZTUtOWM2Mzc0MDVmMzg2L2FiZjFmMGVjLTBmNTYtNDM1Ni05Y2U1LTljNjM3NDA1 ZjM4Ni5jcmwwHwYDVR0jBBgwFoAUl0vJRyT03QZQ3x0qkYl1JimQ2r4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hYmYxZjBlYy0wZjU2LTQzNTYtOWNlNS05YzYz NzQwNWYzODYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEqmSwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF9T3QjtV2nvUgsujTUSZzOG6l9I1nXg4WILUilHKZppcLNvWqUZO/LP cf8WMiVlVcQJPMtQ0Nsrp2gs38DMEqMmITuCkoYlHOtKfGDWBFKxZxzIj0D083+U 3uBb481q75jbk3Rv5Uqv+ACaBcBHc2tT10Yfrm3U76nu7FlNExlYyTUzMgN5TiZy f+sEV0BgOT1v+T6Fs1F+/od0RnKdLg8YE6QC6YuXuheckA/GdeD9qEKmStOUNKbx OOYzfXIEMstt3GSw1mihLMHNlqq23ZsN9M4PG/1I+mprzMWFVrdmqkC9XsfBWdcS QYe+catIlp0lO8aDr0w/SVPxKB6z+VI= -----END CERTIFICATE-----Generated at Sat Aug 9 20:47:50 2025 by rpki-client