$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/f1e0eb8c-a3a0-3b44-9159-f00bd2b4de1e.roa File: f1e0eb8c-a3a0-3b44-9159-f00bd2b4de1e.roa (raw, json) Hash identifier: 0Rq9Z3MuF9ukrOs5MuQJQGKB6DWALAVfXEi+GZt22Us= Subject key identifier: 41:33:71:83:1B:37:BA:F6:65:D7:0A:BE:9F:B7:60:97:D8:EE:69:EF Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F4328584A7FE0983F59BB879C1E2D6C40 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/f1e0eb8c-a3a0-3b44-9159-f00bd2b4de1e.roa Signing time: Sun 13 Jul 2025 01:00:50 +0000 ROA not before: Sun 13 Jul 2025 01:00:50 +0000 ROA not after: Sat 11 Oct 2025 01:00:50 +0000 asID: 213122 IP address blocks: 170.39.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7f:e0:98:3f:59:bb:87:9c:1e:2d:6c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: Jul 13 01:00:50 2025 GMT Not After : Oct 11 01:00:50 2025 GMT Subject: CN=2c7fdd38-dbe5-4263-9f83-0bd6c9691797 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f4:95:69:0d:a5:85:10:06:37:6b:73:b3:29: 85:34:04:3c:c3:d9:ed:ff:7e:d4:2a:a6:7b:44:3e: 8b:1c:4d:e2:47:07:f3:b3:c3:dc:9f:51:f8:ef:30: 45:d8:6a:7b:c9:bb:cc:56:f9:1c:80:7c:95:ad:9b: 23:6c:98:f6:24:b1:e5:ae:18:97:18:1e:e5:25:dc: 65:ce:81:2c:65:11:7c:ab:6e:8f:d4:bb:7a:2a:1d: 24:65:0d:13:c9:d2:f9:47:3c:a5:52:fd:ad:f2:39: da:27:10:dd:fc:17:cf:bc:29:c4:6d:9f:b4:68:4e: 21:ac:ab:75:6b:4b:5d:13:fd:e0:90:ce:83:ca:e4: d5:2d:57:c4:1f:f5:e8:2d:d6:54:b8:0a:04:2c:70: 62:19:6b:f7:a3:86:a7:77:1e:72:5d:e2:32:23:11: df:1d:6b:06:2a:69:6b:42:43:1f:68:2b:62:d1:c2: 47:e9:af:7c:c4:49:67:80:87:7d:10:41:c6:7a:7a: 77:b7:a9:3d:2a:6b:dc:a5:3f:0d:cb:d8:a4:38:40: ed:c6:ef:f4:ee:75:63:ef:60:0b:79:85:77:60:e4: 1c:e9:c6:22:13:73:87:c9:86:7f:c0:a8:b2:1f:62: df:df:0b:a1:30:d3:db:72:52:a1:cd:4e:d9:a5:b4: 1b:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:33:71:83:1B:37:BA:F6:65:D7:0A:BE:9F:B7:60:97:D8:EE:69:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/f1e0eb8c-a3a0-3b44-9159-f00bd2b4de1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 170.39.186.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:88:a8:db:05:bf:99:ac:e3:4c:68:71:28:6c:ce:93:34:c9: 6b:2d:b0:31:24:93:42:82:8c:85:a4:03:e1:2a:de:a1:67:20: 7b:c7:af:7d:2a:21:b7:97:57:5f:83:36:57:34:c3:01:75:13: 95:ae:3e:7e:43:9d:7f:49:a6:39:7f:2b:e0:e3:73:01:bb:d2: fd:e5:8b:7e:2e:8a:da:88:f6:6f:9b:b7:02:b1:0b:f4:cb:81: e3:e8:57:53:b4:a8:1a:71:a3:f3:ed:8d:c2:48:70:d1:7e:66: 5f:d6:5d:84:6d:7b:f7:96:75:d9:5c:5a:8f:a9:a1:41:74:84: 59:cf:e4:76:41:c5:64:0d:6d:47:39:4d:b5:ab:03:fe:c6:a4: 20:d5:5d:d4:1c:12:77:2a:2e:12:19:e3:8c:52:cb:05:22:78: 19:df:5c:19:8c:32:0a:89:9c:c5:62:4c:f5:01:08:12:56:ac: 6b:bb:a3:c3:7a:9f:14:cc:a7:86:e6:8c:92:ad:73:2f:6d:80: 91:48:e7:a6:ce:a0:67:34:57:50:32:7d:a3:21:b2:45:c2:5d: 3f:6d:4e:d0:a8:a7:60:8c:e3:b6:90:1f:fa:69:4c:38:7a:23: 0f:83:e8:ce:64:2b:f5:9a:a4:cf:c4:0e:69:12:73:50:9e:cd: b6:53:ad:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp/4Jg/WbuHnB4tbEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI1MDcxMzAxMDA1MFoXDTI1MTAxMTAxMDA1MFowLzEtMCsGA1UEAxMk MmM3ZmRkMzgtZGJlNS00MjYzLTlmODMtMGJkNmM5NjkxNzk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyfSVaQ2lhRAGN2tzsymFNAQ8w9nt/37UKqZ7 RD6LHE3iRwfzs8Pcn1H47zBF2Gp7ybvMVvkcgHyVrZsjbJj2JLHlrhiXGB7lJdxl zoEsZRF8q26P1Lt6Kh0kZQ0TydL5RzylUv2t8jnaJxDd/BfPvCnEbZ+0aE4hrKt1 a0tdE/3gkM6DyuTVLVfEH/XoLdZUuAoELHBiGWv3o4andx5yXeIyIxHfHWsGKmlr QkMfaCti0cJH6a98xElngId9EEHGenp3t6k9KmvcpT8Ny9ikOEDtxu/07nVj72AL eYV3YOQc6cYiE3OHyYZ/wKiyH2Lf3wuhMNPbclKhzU7ZpbQbjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEEzcYMbN7r2ZdcKvp+3YJfY7mnvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvZjFlMGViOGMtYTNhMC0z YjQ0LTkxNTktZjAwYmQyYjRkZTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqie6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADGIqNsFv5ms40xocShszpM0yWstsDEkk0KCjIWkA+Eq3qFnIHvHr30q IbeXV1+DNlc0wwF1E5WuPn5DnX9Jpjl/K+DjcwG70v3li34uitqI9m+btwKxC/TL gePoV1O0qBpxo/PtjcJIcNF+Zl/WXYRte/eWddlcWo+poUF0hFnP5HZBxWQNbUc5 TbWrA/7GpCDVXdQcEncqLhIZ44xSywUieBnfXBmMMgqJnMViTPUBCBJWrGu7o8N6 nxTMp4bmjJKtcy9tgJFI56bOoGc0V1AyfaMhskXCXT9tTtCop2CM47aQH/ppTDh6 Iw+D6M5kK/WapM/EDmkSc1CezbZTrRk= -----END CERTIFICATE-----Generated at Sun Jul 20 14:47:03 2025 by rpki-client