$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/5f7675da-0235-3ef7-b2db-fd87fff5c5b6.roa File: 5f7675da-0235-3ef7-b2db-fd87fff5c5b6.roa (raw, json) Hash identifier: xZR2SZ+Bxd/kNBmvlobFN+KG43d7l02SjOyqn++rYPE= Subject key identifier: D5:3B:17:9F:2D:12:E4:08:0F:38:CA:4B:90:8E:31:71:B0:AB:99:9B Certificate issuer: /CN=dc455e58-6189-4f28-b803-61a965a21c65 Certificate serial: 010D0C9F4328584A03A54050A91330E198B965E4 Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/5f7675da-0235-3ef7-b2db-fd87fff5c5b6.roa Signing time: Thu 29 May 2025 13:01:03 +0000 ROA not before: Thu 29 May 2025 13:01:03 +0000 ROA not after: Wed 27 Aug 2025 13:01:03 +0000 asID: 16509 IP address blocks: 170.114.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:03:a5:40:50:a9:13:30:e1:98:b9:65:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65 Validity Not Before: May 29 13:01:03 2025 GMT Not After : Aug 27 13:01:03 2025 GMT Subject: CN=208c51d0-54be-477b-98d3-2f5a0bf40641 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c5:c9:de:e9:7f:64:ff:09:e9:aa:2f:31:02: 2f:d7:2a:67:7d:96:e4:51:28:1f:ab:d6:e9:8a:c4: f2:f3:ce:a2:4e:77:0d:26:b9:4e:26:91:a3:6c:c1: e7:9c:65:fd:3c:9f:2b:ae:5c:14:d3:f7:be:fb:b8: 50:ea:0c:f1:3f:21:1a:d1:c9:80:f1:81:57:db:70: 05:79:ef:c7:e2:ad:c9:56:b5:f5:0a:9c:de:a1:bd: 97:69:92:fd:59:46:74:82:f9:5b:84:eb:c6:71:b0: 6b:d4:ea:6b:40:86:27:44:f1:c0:34:b9:19:1a:ca: ab:b7:5d:f7:7d:70:df:72:45:0f:68:34:1c:45:89: a8:eb:df:0a:3b:98:25:6b:91:4f:8e:62:06:d8:ae: 6d:d3:d0:bc:1b:ea:0c:23:01:62:26:d3:56:6a:3b: 67:31:34:42:0a:14:8f:c2:e2:27:b6:27:3d:62:52: 34:85:ef:da:ab:f1:19:8b:40:ef:f6:8a:a7:6a:d4: eb:d3:24:0d:aa:ec:f5:cf:d2:20:90:7c:9f:d9:c2: c2:1c:cf:2a:33:c8:5a:ea:0b:76:76:81:eb:89:96: ab:f4:f3:cb:c7:9f:a0:58:6f:6a:95:ad:f7:00:c2: d6:32:ad:6e:71:4a:4b:37:ae:ea:59:7e:93:38:5f: d6:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:3B:17:9F:2D:12:E4:08:0F:38:CA:4B:90:8E:31:71:B0:AB:99:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/5f7675da-0235-3ef7-b2db-fd87fff5c5b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl X509v3 Authority Key Identifier: keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer sbgp-ipAddrBlock: critical IPv4: 170.114.34.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:50:1c:a6:52:39:ab:06:9e:d8:5c:b1:eb:8f:23:42:da:da: 4c:10:b5:c5:63:9f:c5:f9:23:fe:f3:0f:97:ee:62:df:7a:19: a9:0d:25:59:53:c9:d5:fa:71:81:26:68:51:65:6f:da:ed:a3: 32:b8:f0:22:d1:73:58:a6:c9:78:e5:2c:4d:16:0a:c5:58:f8: f1:71:be:84:23:52:31:49:eb:ad:b6:7c:50:9c:01:6c:d2:08: e6:d5:91:3c:1f:66:a3:e9:dd:95:16:93:0a:dd:ef:79:8f:8e: 70:6a:13:ec:74:93:a9:b1:da:9d:60:b7:86:5c:c3:60:c9:45: 1a:38:64:39:5f:6e:13:3c:8a:78:4a:24:94:3b:d0:60:dc:ac: 65:ee:04:bb:36:10:5a:7a:9d:b2:d8:9a:8c:b4:e3:01:6b:d0: cc:37:ce:f5:62:b7:62:06:7d:0d:2f:a5:ca:70:aa:d1:d1:3a: c8:7c:d9:85:e9:72:31:e4:e5:33:42:96:9c:45:9b:c6:59:38: 8c:ea:23:62:f1:fd:59:90:3e:29:3b:a3:77:5a:c3:72:33:15: ed:5a:4a:54:bb:0b:97:b6:2b:97:35:a8:3a:d1:08:2e:c8:72: ec:0d:ab:96:0b:d3:6b:89:d8:c8:d8:22:71:b7:c6:e9:41:b6: 74:d9:46:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoDpUBQqRMw4Zi5ZeQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx YzY1MB4XDTI1MDUyOTEzMDEwM1oXDTI1MDgyNzEzMDEwM1owLzEtMCsGA1UEAxMk MjA4YzUxZDAtNTRiZS00NzdiLTk4ZDMtMmY1YTBiZjQwNjQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscXJ3ul/ZP8J6aovMQIv1ypnfZbkUSgfq9bp isTy886iTncNJrlOJpGjbMHnnGX9PJ8rrlwU0/e++7hQ6gzxPyEa0cmA8YFX23AF ee/H4q3JVrX1Cpzeob2XaZL9WUZ0gvlbhOvGcbBr1OprQIYnRPHANLkZGsqrt133 fXDfckUPaDQcRYmo698KO5gla5FPjmIG2K5t09C8G+oMIwFiJtNWajtnMTRCChSP wuIntic9YlI0he/aq/EZi0Dv9oqnatTr0yQNquz1z9IgkHyf2cLCHM8qM8ha6gt2 doHriZar9PPLx5+gWG9qla33AMLWMq1ucUpLN67qWX6TOF/WZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNU7F58tEuQIDzjKS5COMXGwq5mbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1 NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvNWY3Njc1ZGEtMDIzNS0z ZWY3LWIyZGItZmQ4N2ZmZjVjNWI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4 MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5 NjVhMjFjNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqnIiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAJQHKZSOasGnthcseuPI0La2kwQtcVjn8X5I/7zD5fuYt96GakNJVlT ydX6cYEmaFFlb9rtozK48CLRc1imyXjlLE0WCsVY+PFxvoQjUjFJ6622fFCcAWzS CObVkTwfZqPp3ZUWkwrd73mPjnBqE+x0k6mx2p1gt4Zcw2DJRRo4ZDlfbhM8inhK JJQ70GDcrGXuBLs2EFp6nbLYmoy04wFr0Mw3zvVit2IGfQ0vpcpwqtHROsh82YXp cjHk5TNClpxFm8ZZOIzqI2Lx/VmQPik7o3daw3IzFe1aSlS7C5e2K5c1qDrRCC7I cuwNq5YL02uJ2MjYInG3xulBtnTZRhI= -----END CERTIFICATE-----Generated at Sat Jun 14 06:08:48 2025 by rpki-client