$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/d8a8de41-f511-3076-8f1b-f9b1ad4fec20.roa File: d8a8de41-f511-3076-8f1b-f9b1ad4fec20.roa (raw, json) Hash identifier: dzQFjpArbJAKoimXmCu/iO3heRomPAj6mIxxPsHhhb8= Subject key identifier: 27:83:E8:E6:45:FB:D1:5D:DD:0D:D9:70:22:0E:1F:A7:97:3E:E8:B0 Certificate issuer: /CN=dc455e58-6189-4f28-b803-61a965a21c65 Certificate serial: 010D0C9F4328584A23C01B9E00802616D34CE100 Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/d8a8de41-f511-3076-8f1b-f9b1ad4fec20.roa Signing time: Tue 10 Jun 2025 01:00:50 +0000 ROA not before: Tue 10 Jun 2025 01:00:50 +0000 ROA not after: Mon 08 Sep 2025 01:00:50 +0000 asID: 14618 IP address blocks: 170.114.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:23:c0:1b:9e:00:80:26:16:d3:4c:e1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65 Validity Not Before: Jun 10 01:00:50 2025 GMT Not After : Sep 8 01:00:50 2025 GMT Subject: CN=85fcf7c4-55a1-4bd6-8a82-d93848acff8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:76:d5:a8:33:5c:b6:2e:c3:9d:b6:84:a8:0c: f8:75:78:49:87:25:93:92:38:b4:3a:d0:f0:2a:eb: 5b:83:7a:6b:d3:8e:0c:bc:fa:94:8e:e6:54:61:99: 63:7a:5d:86:23:0b:43:cf:e1:96:58:8d:dd:67:d0: c0:42:a5:be:7c:9a:ce:3c:35:0d:73:4b:ed:86:ae: 97:bf:74:51:93:7d:38:d3:31:0d:26:f2:97:37:4a: 80:51:84:11:67:99:fd:6e:9d:0c:11:94:31:fe:87: 06:56:e1:8f:c0:6a:ad:6a:99:8a:f7:e5:bf:b5:b4: 17:79:81:40:f3:d9:b1:f1:e4:20:ee:e8:38:34:06: 5a:af:f8:ea:52:68:f1:a3:9f:4d:2e:60:ad:01:42: 96:49:e1:49:70:90:0a:98:c6:7c:bb:35:94:11:31: 08:bc:e8:44:c4:a1:a6:1f:c5:4e:b6:c9:2e:1b:bd: ad:bb:2e:3f:41:bc:87:bf:f8:23:25:11:b5:3a:1b: 02:75:42:dc:9a:2c:55:cc:1f:95:2d:85:44:d4:c7: 06:14:02:fd:1e:95:79:a2:14:ac:0d:1b:6a:6e:a6: 9f:00:2c:53:a0:a4:9f:e9:c0:c9:9b:dd:6c:41:de: c3:4d:a0:38:ed:22:6c:bf:a5:60:c3:d5:2e:cb:30: 8a:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:83:E8:E6:45:FB:D1:5D:DD:0D:D9:70:22:0E:1F:A7:97:3E:E8:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/d8a8de41-f511-3076-8f1b-f9b1ad4fec20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl X509v3 Authority Key Identifier: keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer sbgp-ipAddrBlock: critical IPv4: 170.114.84.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:fb:bb:ee:8f:03:70:6b:0a:1d:b4:b9:96:a4:6d:2c:19:2c: 46:f5:13:fc:4c:d3:27:e1:e5:2e:3c:40:64:3d:1b:c6:a5:f0: da:ab:32:24:0d:e7:d1:e6:50:70:0f:fe:da:2c:9e:59:6b:fc: 1e:c0:e9:2a:41:96:3b:22:a9:53:86:21:ca:4d:77:a3:4b:50: bc:7e:1f:c7:e7:a3:72:f7:d7:b3:43:34:3e:53:4a:95:71:65: 65:8b:86:30:59:9d:ae:e3:94:2b:d6:83:41:9f:e8:4e:2b:26: 8c:4f:5c:88:00:f5:44:68:06:bc:67:0f:21:01:78:28:83:36: a9:9d:a6:88:ba:ac:df:2b:13:de:e7:b6:36:6d:2a:41:e1:ac: 7b:f9:e8:da:27:dc:20:fe:57:88:9a:7a:99:2f:79:7b:97:d7: 83:27:ba:a2:de:e3:5a:de:40:80:e3:5c:40:78:1a:90:aa:d2: e6:1e:45:8b:29:87:5d:f1:15:29:29:24:8e:bd:50:c2:79:06: 59:1f:f0:57:28:cf:62:a1:cd:30:e5:b3:d7:14:44:09:1e:de: 48:97:73:9e:d8:92:96:34:63:70:46:5c:f4:ec:7d:9f:1b:5b: 4e:f5:f3:71:e3:03:c6:f8:93:42:dd:98:ae:51:bc:3a:8a:8f: d2:81:b0:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEojwBueAIAmFtNM4QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx YzY1MB4XDTI1MDYxMDAxMDA1MFoXDTI1MDkwODAxMDA1MFowLzEtMCsGA1UEAxMk ODVmY2Y3YzQtNTVhMS00YmQ2LThhODItZDkzODQ4YWNmZjhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk3bVqDNcti7DnbaEqAz4dXhJhyWTkji0OtDw Kutbg3pr044MvPqUjuZUYZljel2GIwtDz+GWWI3dZ9DAQqW+fJrOPDUNc0vthq6X v3RRk3040zENJvKXN0qAUYQRZ5n9bp0MEZQx/ocGVuGPwGqtapmK9+W/tbQXeYFA 89mx8eQg7ug4NAZar/jqUmjxo59NLmCtAUKWSeFJcJAKmMZ8uzWUETEIvOhExKGm H8VOtskuG72tuy4/QbyHv/gjJRG1OhsCdULcmixVzB+VLYVE1McGFAL9HpV5ohSs DRtqbqafACxToKSf6cDJm91sQd7DTaA47SJsv6Vgw9UuyzCKaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCeD6OZF+9Fd3Q3ZcCIOH6eXPuiwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1 NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvZDhhOGRlNDEtZjUxMS0z MDc2LThmMWItZjliMWFkNGZlYzIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4 MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5 NjVhMjFjNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqnJUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHf7u+6PA3BrCh20uZakbSwZLEb1E/xM0yfh5S48QGQ9G8al8NqrMiQN 59HmUHAP/tosnllr/B7A6SpBljsiqVOGIcpNd6NLULx+H8fno3L317NDND5TSpVx ZWWLhjBZna7jlCvWg0Gf6E4rJoxPXIgA9URoBrxnDyEBeCiDNqmdpoi6rN8rE97n tjZtKkHhrHv56Non3CD+V4iaepkveXuX14MnuqLe41reQIDjXEB4GpCq0uYeRYsp h13xFSkpJI69UMJ5Blkf8Fcoz2KhzTDls9cURAke3kiXc57YkpY0Y3BGXPTsfZ8b W07183HjA8b4k0LdmK5RvDqKj9KBsBM= -----END CERTIFICATE-----Generated at Sun Jun 15 13:02:14 2025 by rpki-client