$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/9ed91600-ca1c-38ba-9e87-40a9de312fe9.roa File: 9ed91600-ca1c-38ba-9e87-40a9de312fe9.roa (raw, json) Hash identifier: E0ILeIawlIQ1DJn4k3ruFTC5ULabLuf3ec4FJTLbNcY= Subject key identifier: AE:C7:62:E9:8E:9B:0F:F8:22:87:EE:5E:C9:45:70:E1:C1:AA:B3:DE Certificate issuer: /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58 Certificate serial: 010D0C9F4328584A89A61ABFBB97B5EA64DDEF00 Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/9ed91600-ca1c-38ba-9e87-40a9de312fe9.roa Signing time: Wed 16 Jul 2025 13:01:03 +0000 ROA not before: Wed 16 Jul 2025 13:01:03 +0000 ROA not after: Tue 14 Oct 2025 13:01:03 +0000 asID: 55293 IP address blocks: 170.0.4.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Jul 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:89:a6:1a:bf:bb:97:b5:ea:64:dd:ef:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58 Validity Not Before: Jul 16 13:01:03 2025 GMT Not After : Oct 14 13:01:03 2025 GMT Subject: CN=709eca9d-a05b-47be-9585-85e359674f21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:8f:43:4b:86:ab:73:a7:d4:3e:5a:58:1d:f4: d6:62:fa:3b:42:03:98:a3:ca:4e:3e:d5:bc:64:c9: 29:42:49:0d:85:e5:7a:70:47:b3:a6:64:ca:87:44: 88:ee:3b:87:56:28:a7:49:36:54:ab:7f:6b:50:64: 33:6e:87:a1:34:dd:72:06:cd:21:3a:76:43:34:a1: 82:3b:dc:4e:9a:09:c3:d6:27:bd:c3:57:7a:fa:54: d6:17:39:91:4c:54:9f:fa:b7:64:58:a3:06:d9:22: 41:2d:8a:b4:38:ad:6e:37:68:25:d3:36:45:de:fd: 4e:a4:d8:7b:8c:17:40:98:45:18:e4:5d:07:fe:fc: 9d:54:0a:cd:2a:ce:4d:e8:f9:76:43:aa:62:99:1c: 91:b4:01:0f:95:5f:3a:02:74:59:17:99:63:65:30: df:c9:4f:30:93:7f:8e:e2:17:c0:b2:19:ee:67:cc: ee:9d:0d:5b:a9:4a:2d:a8:78:0c:27:c9:76:0f:25: 1b:51:c0:43:b1:3c:e0:ee:bd:d6:55:dc:76:d7:d6: 66:9f:f1:10:e1:8e:37:57:51:ce:ca:7d:97:61:86: f6:26:86:31:0a:0d:ce:90:10:82:7c:ef:1e:96:d7: 40:7a:38:55:8b:e3:7b:6a:bc:26:d7:b3:21:c8:04: 9c:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:C7:62:E9:8E:9B:0F:F8:22:87:EE:5E:C9:45:70:E1:C1:AA:B3:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/9ed91600-ca1c-38ba-9e87-40a9de312fe9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl X509v3 Authority Key Identifier: keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer sbgp-ipAddrBlock: critical IPv4: 170.0.4.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:00:44:8d:4e:e8:6d:80:ed:c6:9b:44:90:f1:fe:06:35:c0: 74:a1:5a:3f:4b:3c:4d:c9:c2:53:d7:95:d2:1d:61:4b:0e:c2: 72:8d:09:ab:b7:5f:72:52:dd:c2:c0:ea:e7:8d:f6:c3:0f:a6: d3:f6:20:b5:02:cf:f6:97:a0:ae:89:e9:2a:6c:d7:ff:84:45: cd:44:1c:dc:ac:99:22:f1:a9:38:c9:0d:f0:8d:28:d6:3d:cc: 2d:2e:3f:59:78:91:d5:5b:58:f0:50:be:49:45:51:20:e3:2d: c7:8b:ed:7a:df:b8:5d:b6:9f:8c:2f:9b:f2:ef:ba:fc:d6:a0: 58:b0:d1:5e:89:07:11:6f:94:0c:98:b9:aa:3f:d4:c7:7c:78: ec:25:95:16:88:60:83:9a:03:47:98:2a:90:b0:9b:30:30:b7: 39:9f:24:df:15:c2:d7:95:ac:29:7e:62:1b:70:22:3e:13:fb: 5c:97:03:de:8e:b7:17:fc:c4:ae:47:73:10:51:16:d4:50:3a: 39:4e:ac:2b:5a:77:36:af:f3:13:0a:91:f5:d4:17:10:69:b1: b3:30:76:9a:38:2d:d2:bc:39:2c:14:de:2f:31:53:11:46:95: ad:61:41:9e:59:e3:31:01:29:eb:71:e1:62:ff:7a:55:4d:05: 9e:1a:28:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqJphq/u5e16mTd7wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2M5MzgzZTQtMmM1MS00ZmZkLWJmZTktNjllOWZkNmM1 YjU4MB4XDTI1MDcxNjEzMDEwM1oXDTI1MTAxNDEzMDEwM1owLzEtMCsGA1UEAxMk NzA5ZWNhOWQtYTA1Yi00N2JlLTk1ODUtODVlMzU5Njc0ZjIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxo9DS4arc6fUPlpYHfTWYvo7QgOYo8pOPtW8 ZMkpQkkNheV6cEezpmTKh0SI7juHViinSTZUq39rUGQzboehNN1yBs0hOnZDNKGC O9xOmgnD1ie9w1d6+lTWFzmRTFSf+rdkWKMG2SJBLYq0OK1uN2gl0zZF3v1OpNh7 jBdAmEUY5F0H/vydVArNKs5N6Pl2Q6pimRyRtAEPlV86AnRZF5ljZTDfyU8wk3+O 4hfAshnuZ8zunQ1bqUotqHgMJ8l2DyUbUcBDsTzg7r3WVdx219Zmn/EQ4Y43V1HO yn2XYYb2JoYxCg3OkBCCfO8eltdAejhVi+N7arwm17MhyASc2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK7HYumOmw/4IofuXslFcOHBqrPeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jYzkz ODNlNC0yYzUxLTRmZmQtYmZlOS02OWU5ZmQ2YzViNTgvOWVkOTE2MDAtY2ExYy0z OGJhLTllODctNDBhOWRlMzEyZmU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvY2M5MzgzZTQtMmM1MS00ZmZkLWJm ZTktNjllOWZkNmM1YjU4L2NjOTM4M2U0LTJjNTEtNGZmZC1iZmU5LTY5ZTlmZDZj NWI1OC5jcmwwHwYDVR0jBBgwFoAUJtGbtQL9y3VNYKC7ao9HB+JMFzswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9jYzkzODNlNC0yYzUxLTRmZmQtYmZlOS02OWU5 ZmQ2YzViNTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqgAEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG8ARI1O6G2A7cabRJDx/gY1wHShWj9LPE3JwlPXldIdYUsOwnKNCau3 X3JS3cLA6ueN9sMPptP2ILUCz/aXoK6J6Sps1/+ERc1EHNysmSLxqTjJDfCNKNY9 zC0uP1l4kdVbWPBQvklFUSDjLceL7XrfuF22n4wvm/LvuvzWoFiw0V6JBxFvlAyY uao/1Md8eOwllRaIYIOaA0eYKpCwmzAwtzmfJN8VwteVrCl+YhtwIj4T+1yXA96O txf8xK5HcxBRFtRQOjlOrCtadzav8xMKkfXUFxBpsbMwdpo4LdK8OSwU3i8xUxFG la1hQZ5Z4zEBKetx4WL/elVNBZ4aKEE= -----END CERTIFICATE-----Generated at Fri Jul 25 13:00:58 2025 by rpki-client