$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/3539260d-5c7b-3ea4-bdf5-2f08e88b3415.roa File: 3539260d-5c7b-3ea4-bdf5-2f08e88b3415.roa (raw, json) Hash identifier: fAjq5uk2hRvG6lB/Yvko8QDcD1zkr3x5WtO+rRIH4Xs= Subject key identifier: B8:F3:49:29:FB:D8:4C:4C:BB:53:1A:9C:87:F2:F5:D3:A1:D6:7E:AE Certificate issuer: /CN=dc455e58-6189-4f28-b803-61a965a21c65 Certificate serial: 010D0C9F4328584A5CFB3494A3A03DFF5EEFC580 Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/3539260d-5c7b-3ea4-bdf5-2f08e88b3415.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 14618 IP address blocks: 170.114.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fb:34:94:a3:a0:3d:ff:5e:ef:c5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=0b7bd0b7-d8a3-49ac-afef-935e68d40d5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:88:42:8c:9b:7f:80:cc:4b:f9:02:14:39:b0: 06:59:06:25:57:b2:45:a6:47:e6:b6:f4:88:0b:6a: b8:18:ce:e2:96:e7:3f:4c:67:2b:bc:d7:c5:48:b4: 07:ea:97:47:33:b9:13:1c:6b:0b:29:fc:be:5b:d7: 59:ea:91:fc:d5:4c:1b:23:e4:62:22:b8:a7:2b:c6: 51:9a:5a:26:9b:85:76:e5:36:f5:e6:f2:db:35:43: 32:82:e1:2d:e5:44:35:8e:f0:a7:8a:74:12:b4:66: 82:63:26:3e:f6:39:52:88:8a:67:c4:d7:f3:36:dc: 3e:88:63:6b:19:40:38:70:19:6d:b7:1e:17:9d:9a: 34:21:b8:07:3a:75:07:87:0e:e2:5f:c8:47:a1:30: 1b:21:00:52:db:fb:46:46:23:74:7a:d4:95:ac:bd: 82:3e:5f:17:a4:2d:60:0e:2a:8b:ee:ba:fb:78:63: 1e:6c:81:a1:34:8f:5b:31:68:74:00:28:0f:60:c5: ad:0e:df:09:5b:5d:31:b9:d7:d8:f7:03:50:33:4b: 56:70:17:e7:ca:ee:89:a4:1f:5b:8a:16:5d:54:01: 89:db:c6:bc:76:31:17:e9:29:c6:3e:86:30:f4:2b: a3:2b:ee:6f:a8:17:ab:13:6a:40:a2:31:8b:5c:e1: 30:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:F3:49:29:FB:D8:4C:4C:BB:53:1A:9C:87:F2:F5:D3:A1:D6:7E:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/3539260d-5c7b-3ea4-bdf5-2f08e88b3415.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl X509v3 Authority Key Identifier: keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer sbgp-ipAddrBlock: critical IPv4: 170.114.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:99:25:7a:aa:a2:95:6a:c1:f8:10:46:e8:eb:98:87:14:8f: be:d9:0a:f3:ef:c9:dc:d3:5a:45:d5:3a:6f:f7:32:9a:f3:a3: 7b:67:2d:58:d9:9f:41:47:cf:7b:12:7d:b6:35:7d:62:31:c2: e7:1d:02:32:3b:8c:b2:3d:b0:f3:82:e9:51:8b:17:be:08:d1: f7:0b:80:ee:4b:01:14:f1:f6:56:68:ed:ca:ba:17:37:27:c7: 5f:86:7b:76:3b:38:60:f2:a8:d0:5f:d5:cc:e0:cb:53:71:a8: ae:fa:56:b8:4d:f1:96:d4:72:31:80:ca:da:31:3f:ab:e5:a8: 0b:26:14:18:ab:08:d4:b8:08:e4:b3:4d:5e:7f:c9:5a:ef:e7: af:0c:de:e3:6d:33:19:ed:f1:d3:54:95:8a:a3:b4:be:ad:e9: 16:2d:d0:04:e8:88:b7:f8:04:cf:9e:53:0f:25:6d:85:37:4f: 55:2d:69:d1:67:35:2e:04:ad:f4:7b:81:39:0c:7f:f8:f9:af: 36:f5:96:a8:45:b6:39:ca:3d:19:2b:0e:53:5b:48:85:49:b8: bb:25:d7:59:38:8a:00:88:3a:4e:dc:3a:52:d7:ed:52:7a:dc: d4:92:52:0a:3d:5b:d2:0d:9e:6b:6c:cd:dd:50:59:e1:d3:fc: 31:ce:6e:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc+zSUo6A9/17vxYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx YzY1MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk MGI3YmQwYjctZDhhMy00OWFjLWFmZWYtOTM1ZTY4ZDQwZDVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4hCjJt/gMxL+QIUObAGWQYlV7JFpkfmtvSI C2q4GM7iluc/TGcrvNfFSLQH6pdHM7kTHGsLKfy+W9dZ6pH81UwbI+RiIrinK8ZR mlomm4V25Tb15vLbNUMyguEt5UQ1jvCninQStGaCYyY+9jlSiIpnxNfzNtw+iGNr GUA4cBlttx4XnZo0IbgHOnUHhw7iX8hHoTAbIQBS2/tGRiN0etSVrL2CPl8XpC1g DiqL7rr7eGMebIGhNI9bMWh0ACgPYMWtDt8JW10xudfY9wNQM0tWcBfnyu6JpB9b ihZdVAGJ28a8djEX6SnGPoYw9CujK+5vqBerE2pAojGLXOEw8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLjzSSn72ExMu1ManIfy9dOh1n6uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1 NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvMzUzOTI2MGQtNWM3Yi0z ZWE0LWJkZjUtMmYwOGU4OGIzNDE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4 MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5 NjVhMjFjNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqnJAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADGZJXqqopVqwfgQRujrmIcUj77ZCvPvydzTWkXVOm/3Mprzo3tnLVjZ n0FHz3sSfbY1fWIxwucdAjI7jLI9sPOC6VGLF74I0fcLgO5LARTx9lZo7cq6Fzcn x1+Ge3Y7OGDyqNBf1czgy1NxqK76VrhN8ZbUcjGAytoxP6vlqAsmFBirCNS4COSz TV5/yVrv568M3uNtMxnt8dNUlYqjtL6t6RYt0AToiLf4BM+eUw8lbYU3T1UtadFn NS4ErfR7gTkMf/j5rzb1lqhFtjnKPRkrDlNbSIVJuLsl11k4igCIOk7cOlLX7VJ6 3NSSUgo9W9INnmtszd1QWeHT/DHObrQ= -----END CERTIFICATE-----Generated at Sun Jul 20 17:13:50 2025 by rpki-client