$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/a36891e5-8973-313b-a68a-6ede44be3f67.roa File: a36891e5-8973-313b-a68a-6ede44be3f67.roa (raw, json) Hash identifier: U3Qu2Ybf2NmeOInlMIEH3jNxCEf3u3fMchEFuGfK44k= Subject key identifier: 3F:22:B5:DD:B5:2F:CB:90:8C:98:79:73:EE:4B:2D:81:B1:DE:4D:FE Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F4328584A7FE0967804D20E3B0F9EFA00 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/a36891e5-8973-313b-a68a-6ede44be3f67.roa Signing time: Sun 13 Jul 2025 01:00:50 +0000 ROA not before: Sun 13 Jul 2025 01:00:50 +0000 ROA not after: Sat 11 Oct 2025 01:00:50 +0000 asID: 931 IP address blocks: 170.39.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7f:e0:96:78:04:d2:0e:3b:0f:9e:fa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: Jul 13 01:00:50 2025 GMT Not After : Oct 11 01:00:50 2025 GMT Subject: CN=71cbffad-9d72-4d60-8218-2b05f8ef4522 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b0:ae:f0:41:de:e6:23:d9:82:f8:e3:91:ad: 50:f4:48:cf:7d:26:d1:cd:e8:87:a5:97:23:05:7c: a3:08:7c:44:b8:0f:fc:6b:0d:62:3f:61:32:d3:f1: 56:f6:3e:ba:ec:b8:c2:15:2c:01:cd:33:06:52:b5: 1b:ad:40:d1:e5:f3:19:a6:84:d6:54:bc:6f:de:d9: df:6c:13:e6:68:5a:c8:c0:50:24:f5:bc:b5:31:0f: cc:19:2f:b2:25:4b:14:90:57:77:eb:12:d3:4c:2a: 3b:ff:2e:21:d9:39:89:e0:a8:46:35:fa:21:3b:fa: c8:82:31:12:3e:e1:10:d0:34:ad:86:c2:93:02:77: e6:fe:b2:6e:8d:ac:d1:4b:42:d1:7e:1a:c7:a1:35: c2:b3:b3:8b:b2:c2:ac:f2:53:91:d4:39:00:cf:63: 81:31:ea:e3:4b:40:5a:2d:01:c8:8e:d3:00:1b:f2: d5:68:d5:8e:2a:eb:c7:d5:8b:39:b4:71:05:da:bd: 38:09:98:27:e3:7d:6e:8c:cd:f5:2f:9b:44:c6:d6: 35:af:7e:b1:ce:46:10:33:4b:d0:4c:26:9f:eb:0a: 7d:b5:1e:07:a1:3a:32:4f:93:ac:82:68:3c:1d:f2: 1a:3f:59:1c:95:dd:22:38:4d:36:1f:4a:5e:32:63: 5b:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:22:B5:DD:B5:2F:CB:90:8C:98:79:73:EE:4B:2D:81:B1:DE:4D:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/a36891e5-8973-313b-a68a-6ede44be3f67.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 170.39.186.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:85:54:ee:ac:81:85:25:10:5a:5b:a3:1e:a3:3c:dc:0b:a2: 28:49:4a:18:ab:6e:92:33:b3:93:79:f7:12:ea:23:01:98:16: 07:dc:34:f6:55:98:53:74:fd:b0:c8:fa:88:09:49:75:2c:fb: 42:fe:54:fe:b2:e3:1d:f4:89:c2:de:b7:16:df:79:06:2f:61: e4:cd:d2:aa:88:ab:fd:95:81:43:97:fa:22:b1:a8:d8:f7:be: a8:0b:f9:09:2b:f3:76:b7:ad:8f:6b:ad:0f:3b:7d:9a:1d:a3: 10:6d:00:0a:ad:c8:47:bc:ee:16:81:13:74:c1:10:f5:2f:e6: a8:a1:58:8b:39:b1:37:1e:71:8d:85:d2:ef:05:be:06:76:47: 0c:7e:61:26:b5:e5:21:93:d7:2f:f6:e6:91:bb:9c:ca:c9:1d: 5c:0f:c8:20:a9:d8:cb:54:d6:34:6d:57:aa:88:11:d5:ac:42: 3f:0a:c1:49:d4:cb:ea:6b:d7:98:16:57:d3:a0:f0:bc:8b:be: d8:24:50:50:db:40:4f:39:57:e0:66:f9:98:ab:8a:df:1d:5d: 01:07:f2:0f:32:4f:6a:81:ef:9d:7d:67:b5:c1:c4:67:ee:b6: c4:73:06:90:d3:34:48:3f:94:c8:54:13:17:ee:4b:13:05:3f: d4:80:2c:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp/4JZ4BNIOOw+e+gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI1MDcxMzAxMDA1MFoXDTI1MTAxMTAxMDA1MFowLzEtMCsGA1UEAxMk NzFjYmZmYWQtOWQ3Mi00ZDYwLTgyMTgtMmIwNWY4ZWY0NTIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrCu8EHe5iPZgvjjka1Q9EjPfSbRzeiHpZcj BXyjCHxEuA/8aw1iP2Ey0/FW9j667LjCFSwBzTMGUrUbrUDR5fMZpoTWVLxv3tnf bBPmaFrIwFAk9by1MQ/MGS+yJUsUkFd36xLTTCo7/y4h2TmJ4KhGNfohO/rIgjES PuEQ0DSthsKTAnfm/rJujazRS0LRfhrHoTXCs7OLssKs8lOR1DkAz2OBMerjS0Ba LQHIjtMAG/LVaNWOKuvH1Ys5tHEF2r04CZgn431ujM31L5tExtY1r36xzkYQM0vQ TCaf6wp9tR4HoToyT5Osgmg8HfIaP1kcld0iOE02H0peMmNb9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD8itd21L8uQjJh5c+5LLYGx3k3+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvYTM2ODkxZTUtODk3My0z MTNiLWE2OGEtNmVkZTQ0YmUzZjY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqie6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH6FVO6sgYUlEFpbox6jPNwLoihJShirbpIzs5N59xLqIwGYFgfcNPZV mFN0/bDI+ogJSXUs+0L+VP6y4x30icLetxbfeQYvYeTN0qqIq/2VgUOX+iKxqNj3 vqgL+Qkr83a3rY9rrQ87fZodoxBtAAqtyEe87haBE3TBEPUv5qihWIs5sTcecY2F 0u8FvgZ2Rwx+YSa15SGT1y/25pG7nMrJHVwPyCCp2MtU1jRtV6qIEdWsQj8KwUnU y+pr15gWV9Og8LyLvtgkUFDbQE85V+Bm+Zirit8dXQEH8g8yT2qB7519Z7XBxGfu tsRzBpDTNEg/lMhUExfuSxMFP9SALLE= -----END CERTIFICATE-----Generated at Tue Jul 22 11:55:16 2025 by rpki-client