$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8393c4ba-ecf3-3b67-aa36-bf87bcd67c00.roa File: 8393c4ba-ecf3-3b67-aa36-bf87bcd67c00.roa (raw, json) Hash identifier: IkrFISJ4r3h7YvalkHlxkejKrBLA9TKFIF2G1l8o5qU= Subject key identifier: 0A:07:6A:95:93:3F:3A:08:43:E2:28:51:E4:FC:73:92:1D:7E:F3:F7 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A5CFB293B82E27318D2798838 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8393c4ba-ecf3-3b67-aa36-bf87bcd67c00.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 63949 IP address blocks: 170.187.144.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fb:29:3b:82:e2:73:18:d2:79:88:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=b7a1ed41-f284-49a6-a618-51314cc5c944 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:e2:3d:ad:4a:5d:eb:e3:db:21:8f:f5:7b:69: 17:9b:5d:20:17:3b:ab:8e:bc:e6:3e:ca:e8:b4:20: 36:c0:1d:9d:a0:6f:4c:45:b7:5b:05:23:a7:bb:2e: bf:20:5b:75:9d:93:00:05:35:c8:26:b5:ce:92:79: a1:51:24:ab:6f:38:2c:0b:70:cb:01:fc:ca:c4:b1: 80:9a:d1:5e:a9:6f:6d:e2:d5:d8:3a:46:9c:da:c0: 4d:55:90:2f:c8:06:dc:c8:17:42:c8:21:40:78:e9: 6d:2b:66:08:e1:9f:ee:a2:55:5c:b6:1e:c4:10:9b: 18:92:69:81:07:93:9e:41:36:dd:ef:3b:40:10:b8: 45:64:83:46:af:6e:15:aa:6c:e3:0e:ec:d4:6b:39: 82:b6:b5:d4:3b:6d:73:ca:99:9e:f8:e5:29:23:b4: 5f:04:6a:9e:a7:6e:c3:cf:71:b9:df:06:8c:8d:58: 85:b7:b8:c4:8a:93:1b:37:43:da:5e:ce:66:18:97: 9e:44:b8:20:3c:73:6e:d6:6b:8a:11:d6:e3:df:df: 42:5b:bd:10:d9:66:82:e8:3d:61:df:35:53:c8:65: de:ef:6b:f7:c7:72:08:0c:b9:1a:82:df:64:3b:20: 44:21:6f:00:47:96:eb:17:ab:86:82:31:3e:0e:ee: 1c:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:07:6A:95:93:3F:3A:08:43:E2:28:51:E4:FC:73:92:1D:7E:F3:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8393c4ba-ecf3-3b67-aa36-bf87bcd67c00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 170.187.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:41:73:be:e4:c4:a4:d0:7f:09:36:87:74:2c:c3:a0:c3:8f: 98:2b:82:9b:ba:28:96:dc:bc:e9:cf:16:19:c0:2e:eb:01:ea: 11:2b:f5:03:cd:94:37:6e:a5:ee:40:22:1c:cf:a7:b5:8d:41: 3c:2d:39:e7:c6:68:ea:52:25:ea:57:55:28:ae:bc:66:75:6c: 78:e8:b6:ee:38:49:d9:63:ea:2e:d4:a8:03:54:e9:ae:33:10: 43:40:9f:e0:94:24:90:d4:fb:3d:60:74:e3:d5:67:bb:3e:16: 14:31:2d:01:67:b9:73:1c:ff:28:0d:fd:bf:5e:85:1a:c8:c8: 05:36:8a:b2:a4:8a:95:e6:26:58:04:c4:1a:14:9b:b4:c9:99: e9:51:a1:ba:dd:18:45:59:6d:4b:a7:a9:65:9f:62:cb:7b:69: 74:01:1b:89:39:10:f8:84:ab:b3:51:2b:92:41:48:33:14:03: 58:ae:fe:81:d4:67:a2:45:0f:8c:5b:a3:28:3d:06:ad:01:64: 9e:61:9d:d4:e5:53:11:4f:a6:37:0f:0d:71:af:aa:46:32:9d: 40:0c:81:c7:35:bb:93:ca:97:e5:7c:a3:1f:91:f0:36:37:ac: c7:68:7b:13:68:11:5a:7d:cc:9d:32:16:6e:8b:75:fc:4b:4e: 93:45:4a:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc+yk7guJzGNJ5iDgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk YjdhMWVkNDEtZjI4NC00OWE2LWE2MTgtNTEzMTRjYzVjOTQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjeI9rUpd6+PbIY/1e2kXm10gFzurjrzmPsro tCA2wB2doG9MRbdbBSOnuy6/IFt1nZMABTXIJrXOknmhUSSrbzgsC3DLAfzKxLGA mtFeqW9t4tXYOkac2sBNVZAvyAbcyBdCyCFAeOltK2YI4Z/uolVcth7EEJsYkmmB B5OeQTbd7ztAELhFZINGr24VqmzjDuzUazmCtrXUO21zypme+OUpI7RfBGqep27D z3G53waMjViFt7jEipMbN0PaXs5mGJeeRLggPHNu1muKEdbj399CW70Q2WaC6D1h 3zVTyGXe72v3x3IIDLkagt9kOyBEIW8AR5brF6uGgjE+Du4cNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAoHapWTPzoIQ+IoUeT8c5IdfvP3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODM5M2M0YmEtZWNmMy0z YjY3LWFhMzYtYmY4N2JjZDY3YzAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEqruQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC1Bc77kxKTQfwk2h3Qsw6DDj5grgpu6KJbcvOnPFhnALusB6hEr9QPN lDdupe5AIhzPp7WNQTwtOefGaOpSJepXVSiuvGZ1bHjotu44Sdlj6i7UqANU6a4z EENAn+CUJJDU+z1gdOPVZ7s+FhQxLQFnuXMc/ygN/b9ehRrIyAU2irKkipXmJlgE xBoUm7TJmelRobrdGEVZbUunqWWfYst7aXQBG4k5EPiEq7NRK5JBSDMUA1iu/oHU Z6JFD4xboyg9Bq0BZJ5hndTlUxFPpjcPDXGvqkYynUAMgcc1u5PKl+V8ox+R8DY3 rMdoexNoEVp9zJ0yFm6LdfxLTpNFSvM= -----END CERTIFICATE-----Generated at Tue Jul 22 19:49:01 2025 by rpki-client