$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/a21c28df-3844-3c40-bf1b-c34b3db6eefe.roa File: a21c28df-3844-3c40-bf1b-c34b3db6eefe.roa (raw, json) Hash identifier: YxGbf1lTZiorbA3kuBOaariBzO0AnyT1Kov1Vl3MLv0= Subject key identifier: 49:E3:5B:06:1D:22:2A:7C:8D:E2:94:2C:AC:23:C5:56:61:37:41:3F Certificate issuer: /CN=dc455e58-6189-4f28-b803-61a965a21c65 Certificate serial: 010D0C9F43285849F71513B748283E091D295380 Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/a21c28df-3844-3c40-bf1b-c34b3db6eefe.roa Signing time: Sun 25 May 2025 01:00:49 +0000 ROA not before: Sun 25 May 2025 01:00:49 +0000 ROA not after: Sat 23 Aug 2025 01:00:49 +0000 asID: 16509 IP address blocks: 134.224.170.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f7:15:13:b7:48:28:3e:09:1d:29:53:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65 Validity Not Before: May 25 01:00:49 2025 GMT Not After : Aug 23 01:00:49 2025 GMT Subject: CN=c71e4e94-b7d8-4a73-9e9a-dc1d149d3e73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:d4:2e:4a:78:bf:ec:05:79:50:55:85:51:7f: 82:bb:ed:76:e8:7d:fd:16:a9:17:a2:d0:0d:ac:20: 7a:5e:eb:87:3f:e8:0a:b6:a1:9e:b1:7f:d6:e8:98: c0:a0:86:9b:76:b8:45:b9:85:a6:e1:f7:1a:80:47: e3:6d:56:51:09:0b:da:ac:a9:e4:5f:81:b1:f2:e7: 46:67:cf:5d:49:bb:5d:43:1a:fb:61:92:7e:75:71: 07:a8:f1:9f:db:bd:3a:f5:f2:30:ec:a7:29:75:01: 81:f7:45:d7:50:33:4a:df:62:62:02:f5:86:00:60: e3:8b:e8:21:c5:6d:f9:f1:3e:9b:6f:12:43:bb:69: a7:fe:10:9c:5e:2d:6f:90:20:88:39:41:ce:dd:6e: ee:0a:00:42:c4:73:9c:1a:cb:9f:1f:34:f5:bc:54: fd:03:f3:ba:2c:a2:1d:05:33:ff:9e:b7:8c:5d:de: 20:7d:bc:5b:45:9f:52:86:89:6d:c7:81:47:7d:65: 37:dd:74:bb:87:07:8a:d7:80:48:3e:82:75:e5:a7: 5e:75:5e:60:e9:d3:e8:4d:0e:8e:9f:67:1f:ce:45: 8d:2e:37:01:49:a8:42:ae:a7:26:24:79:c9:e4:e2: 58:25:a8:cc:95:ef:ae:c5:b4:e0:fd:f2:7d:89:a4: 82:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:E3:5B:06:1D:22:2A:7C:8D:E2:94:2C:AC:23:C5:56:61:37:41:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/a21c28df-3844-3c40-bf1b-c34b3db6eefe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl X509v3 Authority Key Identifier: keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer sbgp-ipAddrBlock: critical IPv4: 134.224.170.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:ca:93:ab:af:b9:bd:d2:07:76:7f:a0:62:b8:10:c0:57:29: d4:d8:af:45:07:0f:1e:48:da:06:70:a2:ce:ff:16:29:cd:b8: ad:4f:f9:8e:a6:24:bc:43:4e:77:82:fc:18:96:46:59:1a:29: ec:9d:c2:f0:60:ad:e1:fc:14:99:cf:c2:48:16:9f:78:72:a7: f1:aa:5b:ad:67:08:5d:57:ad:26:c1:bc:16:39:0e:5a:fc:af: 95:2c:7e:6b:9f:fc:d9:3d:f7:ac:84:0f:39:32:69:11:8d:1c: e4:b0:31:77:21:17:cf:f1:16:16:2f:5b:2b:22:ef:52:27:03: 27:c2:5e:b1:8e:08:22:0f:8f:ff:d9:ac:bc:97:39:ab:5e:17: 1f:6e:12:b5:94:60:bc:b1:20:0e:c8:05:1a:52:d2:b6:c3:59: 3a:e1:b5:b9:d9:c3:46:58:eb:e3:29:60:52:a1:6c:41:a6:54: 10:b2:81:cb:c2:72:e2:a1:f2:af:90:17:a8:85:22:e2:28:fe: a1:ea:87:b9:48:d2:23:d2:1e:90:f3:d9:9f:10:18:d3:03:89: 7a:fe:8d:f9:75:22:91:1a:5a:96:5d:e8:14:7e:b1:9d:df:df: 6d:bc:1e:d3:30:ad:40:89:76:a2:37:c4:b7:c1:bc:32:4b:18: 86:94:cf:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn3FRO3SCg+CR0pU4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx YzY1MB4XDTI1MDUyNTAxMDA0OVoXDTI1MDgyMzAxMDA0OVowLzEtMCsGA1UEAxMk YzcxZTRlOTQtYjdkOC00YTczLTllOWEtZGMxZDE0OWQzZTczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhtQuSni/7AV5UFWFUX+Cu+126H39FqkXotAN rCB6XuuHP+gKtqGesX/W6JjAoIabdrhFuYWm4fcagEfjbVZRCQvarKnkX4Gx8udG Z89dSbtdQxr7YZJ+dXEHqPGf27069fIw7KcpdQGB90XXUDNK32JiAvWGAGDji+gh xW358T6bbxJDu2mn/hCcXi1vkCCIOUHO3W7uCgBCxHOcGsufHzT1vFT9A/O6LKId BTP/nreMXd4gfbxbRZ9Sholtx4FHfWU33XS7hweK14BIPoJ15adedV5g6dPoTQ6O n2cfzkWNLjcBSahCrqcmJHnJ5OJYJajMle+uxbTg/fJ9iaSCawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEnjWwYdIip8jeKULKwjxVZhN0E/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1 NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvYTIxYzI4ZGYtMzg0NC0z YzQwLWJmMWItYzM0YjNkYjZlZWZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4 MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5 NjVhMjFjNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBhuCqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEfKk6uvub3SB3Z/oGK4EMBXKdTYr0UHDx5I2gZwos7/FinNuK1P+Y6m JLxDTneC/BiWRlkaKeydwvBgreH8FJnPwkgWn3hyp/GqW61nCF1XrSbBvBY5Dlr8 r5Usfmuf/Nk996yEDzkyaRGNHOSwMXchF8/xFhYvWysi71InAyfCXrGOCCIPj//Z rLyXOateFx9uErWUYLyxIA7IBRpS0rbDWTrhtbnZw0ZY6+MpYFKhbEGmVBCygcvC cuKh8q+QF6iFIuIo/qHqh7lI0iPSHpDz2Z8QGNMDiXr+jfl1IpEaWpZd6BR+sZ3f 3228HtMwrUCJdqI3xLfBvDJLGIaUz4I= -----END CERTIFICATE-----Generated at Sat Jun 14 06:13:02 2025 by rpki-client