$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/871d7823-1dd5-38da-b042-77cd7f60d3d9.roa File: 871d7823-1dd5-38da-b042-77cd7f60d3d9.roa (raw, json) Hash identifier: zUXU+gGJyJY+WXoxHf6rvWbyGSTO7UQflyTF5k3SnGE= Subject key identifier: 2B:99:B1:0A:38:B5:30:76:65:D3:7F:30:D7:76:EB:8B:AA:7A:5C:A9 Certificate issuer: /CN=dc455e58-6189-4f28-b803-61a965a21c65 Certificate serial: 010D0C9F4328584A8B0B507978246564997F60E0 Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/871d7823-1dd5-38da-b042-77cd7f60d3d9.roa Signing time: Thu 17 Jul 2025 01:00:51 +0000 ROA not before: Thu 17 Jul 2025 01:00:51 +0000 ROA not after: Wed 15 Oct 2025 01:00:51 +0000 asID: 14618 IP address blocks: 170.114.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8b:0b:50:79:78:24:65:64:99:7f:60:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65 Validity Not Before: Jul 17 01:00:51 2025 GMT Not After : Oct 15 01:00:51 2025 GMT Subject: CN=156612b0-2dfa-4f21-8f77-9e34b0f57b5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:57:ff:7a:f3:7b:45:61:1f:1a:42:03:ae:51: 1a:13:84:7b:98:8b:64:87:9c:4c:17:cf:6a:38:a3: 8d:e7:e5:b2:b8:ad:5d:4a:94:a3:74:fd:ac:d0:3c: ca:59:02:bd:aa:07:fe:38:8a:ee:17:ba:c2:e4:2a: 4f:0a:e8:66:59:30:8d:63:b0:5c:ff:dc:25:8d:33: 65:27:e0:77:e4:d2:1b:f1:00:1a:4e:fd:63:5b:0d: 85:81:5b:2c:f2:21:ce:af:23:78:2e:fb:1b:38:19: 49:c6:9c:3b:01:3e:3d:05:6c:23:68:ff:b5:84:b9: f4:5c:a0:5d:fc:1b:55:06:aa:28:ae:7a:86:f7:dc: a4:c9:31:63:44:9f:6d:c2:d6:dc:22:43:a0:ce:16: 17:ca:a9:43:9d:fc:78:81:d7:6d:67:20:1e:4c:3e: 8a:b6:46:1a:79:7c:ad:83:e0:cf:df:58:6b:45:70: 53:b1:06:d1:a6:41:b3:39:93:a6:03:04:7e:28:2e: 64:ab:50:98:c0:1f:4d:b0:f8:7b:f3:2c:71:16:64: 84:8e:5e:af:23:2f:46:68:30:87:2d:c8:c1:33:60: 17:96:76:0d:f4:df:a1:a2:d5:f5:ff:47:6a:b9:66: 5f:65:13:91:2f:95:2b:d4:1c:ad:72:82:80:87:ad: e6:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:99:B1:0A:38:B5:30:76:65:D3:7F:30:D7:76:EB:8B:AA:7A:5C:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/871d7823-1dd5-38da-b042-77cd7f60d3d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl X509v3 Authority Key Identifier: keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer sbgp-ipAddrBlock: critical IPv4: 170.114.63.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:56:cb:ef:28:1e:26:ec:a2:84:fa:85:02:c3:9c:ec:73:9f: 7e:d5:0c:de:68:f6:07:1d:f0:ed:49:6e:99:cc:96:f5:4a:05: 56:10:c5:d4:8a:71:0e:17:ac:8f:cf:f7:fe:99:17:ec:fd:3a: 77:20:38:72:08:d0:42:67:41:84:b7:e0:27:38:f1:8e:53:b7: 6b:f6:bc:fa:cd:af:6f:71:f4:cf:47:f1:04:0a:b1:b3:ed:f8: 12:1a:bd:fc:0c:74:c3:bf:d8:a0:6a:5d:f8:6c:e8:6a:70:a0: 98:8f:33:f8:3b:c0:0a:75:17:37:4c:53:b6:25:0d:18:b0:cd: fe:ee:59:33:08:f3:10:8c:55:48:41:07:c5:d8:de:d9:28:aa: 95:7e:2e:08:59:36:d7:5f:7f:10:c5:05:10:c6:ac:5a:bd:da: 4b:76:02:a4:6d:89:47:23:6b:19:c2:b0:d6:5a:7c:cf:fd:37: e3:dc:2e:d6:4b:09:0a:21:38:72:c7:9d:92:04:91:df:68:91: 24:4a:5f:c7:89:1e:27:c5:e9:e9:8d:b9:b2:ab:1d:00:89:53: 76:d2:a1:41:6d:e5:50:6d:51:d3:58:90:af:b4:7d:7a:bb:ff: 59:14:53:ab:80:89:fa:46:20:e7:4a:15:f1:71:4a:be:36:6b: 40:50:fb:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqLC1B5eCRlZJl/YOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx YzY1MB4XDTI1MDcxNzAxMDA1MVoXDTI1MTAxNTAxMDA1MVowLzEtMCsGA1UEAxMk MTU2NjEyYjAtMmRmYS00ZjIxLThmNzctOWUzNGIwZjU3YjVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1f/evN7RWEfGkIDrlEaE4R7mItkh5xMF89q OKON5+WyuK1dSpSjdP2s0DzKWQK9qgf+OIruF7rC5CpPCuhmWTCNY7Bc/9wljTNl J+B35NIb8QAaTv1jWw2FgVss8iHOryN4LvsbOBlJxpw7AT49BWwjaP+1hLn0XKBd /BtVBqoornqG99ykyTFjRJ9twtbcIkOgzhYXyqlDnfx4gddtZyAeTD6KtkYaeXyt g+DP31hrRXBTsQbRpkGzOZOmAwR+KC5kq1CYwB9NsPh78yxxFmSEjl6vIy9GaDCH LcjBM2AXlnYN9N+hotX1/0dquWZfZRORL5Ur1BytcoKAh63mdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCuZsQo4tTB2ZdN/MNd264uqelypMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1 NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvODcxZDc4MjMtMWRkNS0z OGRhLWIwNDItNzdjZDdmNjBkM2Q5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4 MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5 NjVhMjFjNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqnI/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD9Wy+8oHibsooT6hQLDnOxzn37VDN5o9gcd8O1JbpnMlvVKBVYQxdSK cQ4XrI/P9/6ZF+z9OncgOHII0EJnQYS34Cc48Y5Tt2v2vPrNr29x9M9H8QQKsbPt +BIavfwMdMO/2KBqXfhs6GpwoJiPM/g7wAp1FzdMU7YlDRiwzf7uWTMI8xCMVUhB B8XY3tkoqpV+LghZNtdffxDFBRDGrFq92kt2AqRtiUcjaxnCsNZafM/9N+PcLtZL CQohOHLHnZIEkd9okSRKX8eJHifF6emNubKrHQCJU3bSoUFt5VBtUdNYkK+0fXq7 /1kUU6uAifpGIOdKFfFxSr42a0BQ+50= -----END CERTIFICATE-----Generated at Sun Jul 20 17:31:31 2025 by rpki-client