$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/9040d02d-778a-3b95-8393-591a4376d574.roa File: 9040d02d-778a-3b95-8393-591a4376d574.roa (raw, json) Hash identifier: jDkKeLbtduYBHkUs2+VeHxJdk4osa8oL5nKukWe98s8= Subject key identifier: 4F:CE:FC:57:93:D6:B4:ED:4F:B1:FF:B7:29:54:AD:7A:DD:5C:7A:4C Certificate issuer: /CN=7daa4589-66d8-4675-8538-e075ba80ecd3 Certificate serial: 010D0C9F4328584A6F207DB4E8593DEE11263C00 Authority key identifier: BF:D4:FE:F7:0A:A9:40:EC:B8:54:09:F4:36:9B:34:3F:86:5A:0A:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/9040d02d-778a-3b95-8393-591a4376d574.roa Signing time: Mon 07 Jul 2025 01:00:50 +0000 ROA not before: Mon 07 Jul 2025 01:00:50 +0000 ROA not after: Sun 05 Oct 2025 01:00:50 +0000 asID: 7018 IP address blocks: 170.39.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/7daa4589-66d8-4675-8538-e075ba80ecd3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/7daa4589-66d8-4675-8538-e075ba80ecd3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6f:20:7d:b4:e8:59:3d:ee:11:26:3c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7daa4589-66d8-4675-8538-e075ba80ecd3 Validity Not Before: Jul 7 01:00:50 2025 GMT Not After : Oct 5 01:00:50 2025 GMT Subject: CN=d5433b6c-943f-4048-aefa-05881bcc6e7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ac:c7:84:9c:6a:7d:a6:31:44:31:92:52:66: e0:7c:de:f0:d1:9c:6a:b1:8d:04:fa:93:80:79:58: d0:64:d4:34:12:38:c4:ad:be:c7:ac:7c:79:4e:93: e2:84:e4:8b:5c:9c:60:0f:a2:1b:6c:ff:c6:57:07: 04:89:51:0d:d5:a7:1a:dd:32:35:31:e6:51:e8:c7: df:56:5a:be:a4:a9:69:fe:ac:40:87:17:f2:fc:7a: 86:73:22:8b:fc:c6:4b:99:91:99:c0:cb:48:fd:f1: a1:fd:b8:27:6c:33:8b:3e:9a:c0:4c:a8:0d:17:42: f5:eb:c1:3c:40:34:55:07:63:3a:86:4c:02:f0:12: ff:b7:f5:1d:77:0a:da:7e:43:28:91:d4:97:7c:7f: ea:22:b8:c6:ac:26:da:2d:87:03:79:e3:c8:d3:31: 5c:a3:3f:c2:8d:2c:99:c0:96:1f:81:82:77:85:e9: 1e:b4:0a:cb:07:13:38:bb:c1:bb:73:32:cd:2d:77: a1:06:53:fd:8b:77:41:9f:b7:3f:37:5d:22:3d:6f: f4:ec:3c:c7:a2:c7:b8:71:39:38:75:90:f4:ac:b4: 5a:91:58:34:3e:3c:08:80:00:0e:05:97:32:3c:92: b5:22:03:e4:14:fd:37:cf:05:8a:53:6b:0a:ed:db: d7:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:CE:FC:57:93:D6:B4:ED:4F:B1:FF:B7:29:54:AD:7A:DD:5C:7A:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/9040d02d-778a-3b95-8393-591a4376d574.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/7daa4589-66d8-4675-8538-e075ba80ecd3.crl X509v3 Authority Key Identifier: keyid:BF:D4:FE:F7:0A:A9:40:EC:B8:54:09:F4:36:9B:34:3F:86:5A:0A:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3.cer sbgp-ipAddrBlock: critical IPv4: 170.39.164.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:d8:5f:2e:e8:06:46:5a:db:11:a6:2a:0a:94:57:0b:d3:8c: d4:ba:68:7b:df:bd:d1:aa:ee:7e:57:a4:3e:65:e7:bb:ef:ad: db:c6:73:da:e5:3c:b1:12:44:bc:e2:66:f0:09:06:2d:c1:21: b5:ab:55:ad:e9:d6:3b:42:ae:17:b0:c4:3f:06:35:01:f3:eb: 22:35:61:10:e2:7e:48:4b:19:18:a3:6b:41:bb:10:23:6f:74: 8d:4c:45:13:ae:20:c2:1c:60:00:60:59:b9:af:71:96:64:86: 1a:e6:f8:c5:e0:de:20:69:49:67:3b:5a:37:65:d6:06:2b:51: 86:ac:d8:51:33:18:a3:6d:44:06:61:b6:57:39:03:45:60:3b: cf:58:e4:f7:4b:16:24:4e:9b:e0:c1:f7:76:7e:6f:81:1b:4f: f0:2e:db:a1:c0:c1:1c:b2:cb:e6:6e:84:5a:c4:4e:7d:80:09: 9f:99:af:44:2a:42:57:c3:18:d8:f9:15:a1:46:bb:de:e5:d5: 1d:4e:10:c5:fc:dc:36:e5:82:9f:00:85:3f:da:ca:3b:05:f6: db:67:b6:41:81:38:ae:22:3e:b5:32:a7:a7:05:15:6d:ae:b2: 29:5e:0b:f4:1a:ce:83:b4:54:fb:79:a5:60:c4:60:2f:dc:72: b8:5c:9d:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpvIH206Fk97hEmPAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2RhYTQ1ODktNjZkOC00Njc1LTg1MzgtZTA3NWJhODBl Y2QzMB4XDTI1MDcwNzAxMDA1MFoXDTI1MTAwNTAxMDA1MFowLzEtMCsGA1UEAxMk ZDU0MzNiNmMtOTQzZi00MDQ4LWFlZmEtMDU4ODFiY2M2ZTdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6zHhJxqfaYxRDGSUmbgfN7w0ZxqsY0E+pOA eVjQZNQ0EjjErb7HrHx5TpPihOSLXJxgD6IbbP/GVwcEiVEN1aca3TI1MeZR6Mff Vlq+pKlp/qxAhxfy/HqGcyKL/MZLmZGZwMtI/fGh/bgnbDOLPprATKgNF0L168E8 QDRVB2M6hkwC8BL/t/UddwrafkMokdSXfH/qIrjGrCbaLYcDeePI0zFcoz/CjSyZ wJYfgYJ3heketArLBxM4u8G7czLNLXehBlP9i3dBn7c/N10iPW/07DzHose4cTk4 dZD0rLRakVg0PjwIgAAOBZcyPJK1IgPkFP03zwWKU2sK7dvXyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE/O/FeT1rTtT7H/tylUrXrdXHpMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83ZGFh NDU4OS02NmQ4LTQ2NzUtODUzOC1lMDc1YmE4MGVjZDMvOTA0MGQwMmQtNzc4YS0z Yjk1LTgzOTMtNTkxYTQzNzZkNTc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvN2RhYTQ1ODktNjZkOC00Njc1LTg1 MzgtZTA3NWJhODBlY2QzLzdkYWE0NTg5LTY2ZDgtNDY3NS04NTM4LWUwNzViYTgw ZWNkMy5jcmwwHwYDVR0jBBgwFoAUv9T+9wqpQOy4VAn0Nps0P4ZaCgIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC83ZGFhNDU4OS02NmQ4LTQ2NzUtODUzOC1lMDc1 YmE4MGVjZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqiekMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJPYXy7oBkZa2xGmKgqUVwvTjNS6aHvfvdGq7n5XpD5l57vvrdvGc9rl PLESRLziZvAJBi3BIbWrVa3p1jtCrhewxD8GNQHz6yI1YRDifkhLGRija0G7ECNv dI1MRROuIMIcYABgWbmvcZZkhhrm+MXg3iBpSWc7Wjdl1gYrUYas2FEzGKNtRAZh tlc5A0VgO89Y5PdLFiROm+DB93Z+b4EbT/Au26HAwRyyy+ZuhFrETn2ACZ+Zr0Qq QlfDGNj5FaFGu97l1R1OEMX83Dblgp8AhT/ayjsF9ttntkGBOK4iPrUyp6cFFW2u sileC/QazoO0VPt5pWDEYC/ccrhcnV0= -----END CERTIFICATE-----Generated at Sun Jul 20 12:32:23 2025 by rpki-client