$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/5c3108b3-4900-35c3-86a1-e25092452588.roa File: 5c3108b3-4900-35c3-86a1-e25092452588.roa (raw, json) Hash identifier: 9RYWQjXjyUPW1k8JeNA3pBfBD1UTI4nGCGG1R1hOKUo= Subject key identifier: 02:01:3C:DC:92:85:B1:0D:D9:3C:99:FE:82:50:7C:54:48:02:6C:98 Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F4328584A7FE09688D0F3647612502780 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/5c3108b3-4900-35c3-86a1-e25092452588.roa Signing time: Sun 13 Jul 2025 01:00:50 +0000 ROA not before: Sun 13 Jul 2025 01:00:50 +0000 ROA not after: Sat 11 Oct 2025 01:00:50 +0000 asID: 931 IP address blocks: 170.39.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7f:e0:96:88:d0:f3:64:76:12:50:27:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: Jul 13 01:00:50 2025 GMT Not After : Oct 11 01:00:50 2025 GMT Subject: CN=9b819265-1243-444d-9c55-5d6753a517b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:95:6a:46:27:9f:fa:82:52:9e:6b:5c:c7:8d: 94:97:f6:c9:a0:ec:7b:a4:26:ca:cb:e9:5f:f7:cc: 0f:46:c4:0e:6a:5f:17:50:47:d1:4a:40:59:87:52: db:d0:14:d9:85:f6:dc:30:ee:8b:45:08:98:9d:0c: 78:06:63:5b:9c:ed:f3:f8:29:c0:4e:c7:9f:49:80: 2f:2d:ec:a9:85:cc:98:35:1d:9f:d4:fe:fd:6e:18: c0:e1:f1:db:be:ca:83:8a:6d:d5:55:4e:5e:31:71: d3:32:ec:58:7e:d0:34:1f:6e:8a:ff:72:62:84:99: b8:b2:c4:b7:3c:b5:26:40:0f:73:c6:c2:b1:d4:cb: 07:5f:d1:c0:f2:f6:32:3c:88:9f:9a:f3:18:48:e1: 28:74:50:0f:6a:22:d2:81:fd:55:66:4e:72:f4:e6: 79:b9:68:be:6a:72:3a:83:cf:bb:04:7b:13:fb:d4: 9c:1f:15:f4:db:4c:4a:ab:a8:db:e1:b0:b5:b7:2e: 93:d7:b3:fd:97:27:13:ed:22:9c:2a:3e:55:74:b6: 5e:fd:87:8f:99:53:f1:a5:fa:ab:33:c8:cd:0f:4a: 95:2d:ce:e6:50:9a:7d:04:5a:23:cb:ad:87:4e:71: 0c:5d:42:05:fe:db:5a:8e:47:85:fb:e7:03:f8:aa: 3e:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:01:3C:DC:92:85:B1:0D:D9:3C:99:FE:82:50:7C:54:48:02:6C:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/5c3108b3-4900-35c3-86a1-e25092452588.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 170.39.187.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:0d:c0:a5:a4:46:49:28:bc:e8:66:24:26:2b:27:1d:3a:b6: a1:ee:1e:2a:6e:20:40:5c:0c:44:7e:86:ae:1f:a3:44:5f:5a: e5:0d:82:87:e4:6a:5c:52:57:57:1a:74:27:84:30:8f:c5:1e: cc:6c:21:51:ee:8c:c2:50:4e:02:37:18:c3:c9:7b:32:5f:60: 56:dc:dc:d8:a8:85:df:c9:2d:55:62:0d:d2:39:53:37:12:c4: df:cc:74:39:f2:5d:5c:f1:0d:b1:ad:e4:6b:97:80:87:c9:10: 02:f1:b3:2d:52:01:01:93:c7:5b:ad:2c:2b:75:aa:90:13:3e: 17:95:8b:7f:64:f8:f5:39:45:cd:f2:bb:3d:51:08:01:28:f9: 51:e7:b2:bc:74:83:02:74:cd:2b:fa:83:1b:1d:a7:26:91:03: c0:99:9e:a7:4c:25:bf:cc:7c:dc:19:5a:2c:f5:93:b4:c2:52: 3e:0e:25:f5:b2:3b:6c:1b:ca:cc:37:9b:9e:8f:51:9e:62:fb: 61:89:bc:36:4d:c8:1a:7d:ae:09:cb:8d:ed:ad:1e:13:90:ce: 47:24:3e:a5:ec:6a:b4:89:0d:78:01:af:22:e2:49:96:90:99: b3:02:dc:87:14:9a:9c:21:23:ea:cd:f2:16:11:a3:c8:e6:a1: d7:28:11:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp/4JaI0PNkdhJQJ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI1MDcxMzAxMDA1MFoXDTI1MTAxMTAxMDA1MFowLzEtMCsGA1UEAxMk OWI4MTkyNjUtMTI0My00NDRkLTljNTUtNWQ2NzUzYTUxN2I1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5VqRief+oJSnmtcx42Ul/bJoOx7pCbKy+lf 98wPRsQOal8XUEfRSkBZh1Lb0BTZhfbcMO6LRQiYnQx4BmNbnO3z+CnATsefSYAv LeyphcyYNR2f1P79bhjA4fHbvsqDim3VVU5eMXHTMuxYftA0H26K/3JihJm4ssS3 PLUmQA9zxsKx1MsHX9HA8vYyPIifmvMYSOEodFAPaiLSgf1VZk5y9OZ5uWi+anI6 g8+7BHsT+9ScHxX020xKq6jb4bC1ty6T17P9lycT7SKcKj5VdLZe/YePmVPxpfqr M8jND0qVLc7mUJp9BFojy62HTnEMXUIF/ttajkeF++cD+Ko+LQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAIBPNyShbEN2TyZ/oJQfFRIAmyYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvNWMzMTA4YjMtNDkwMC0z NWMzLTg2YTEtZTI1MDkyNDUyNTg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqie7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABINwKWkRkkovOhmJCYrJx06tqHuHipuIEBcDER+hq4fo0RfWuUNgofk alxSV1cadCeEMI/FHsxsIVHujMJQTgI3GMPJezJfYFbc3Niohd/JLVViDdI5UzcS xN/MdDnyXVzxDbGt5GuXgIfJEALxsy1SAQGTx1utLCt1qpATPheVi39k+PU5Rc3y uz1RCAEo+VHnsrx0gwJ0zSv6gxsdpyaRA8CZnqdMJb/MfNwZWiz1k7TCUj4OJfWy O2wbysw3m56PUZ5i+2GJvDZNyBp9rgnLje2tHhOQzkckPqXsarSJDXgBryLiSZaQ mbMC3IcUmpwhI+rN8hYRo8jmodcoEdo= -----END CERTIFICATE-----Generated at Thu Jul 24 12:10:49 2025 by rpki-client