$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/02145ab8-4176-3b7e-9f32-1fb7724f4798.roa File: 02145ab8-4176-3b7e-9f32-1fb7724f4798.roa (raw, json) Hash identifier: TsowxryRhV9MWOaI4tikQzkJT0frH7zxCdXVkv7Rfyw= Subject key identifier: D0:D6:66:23:D4:A4:57:85:F2:DE:46:19:FF:FF:77:BB:6B:A2:D3:66 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584A60A4D523AAACAF2804D14860 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/02145ab8-4176-3b7e-9f32-1fb7724f4798.roa Signing time: Tue 01 Jul 2025 20:30:29 +0000 ROA not before: Tue 01 Jul 2025 20:30:29 +0000 ROA not after: Mon 29 Sep 2025 20:30:29 +0000 asID: 401152 IP address blocks: 170.62.132.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:60:a4:d5:23:aa:ac:af:28:04:d1:48:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jul 1 20:30:29 2025 GMT Not After : Sep 29 20:30:29 2025 GMT Subject: CN=5f5675c4-9f6b-4174-80ae-fd906e383a11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:55:31:72:a3:c6:72:0c:06:c6:59:a8:34:c6: 95:8f:f6:87:b0:4a:a1:ec:af:72:3f:b3:43:0d:93: ef:2c:c8:9e:b7:57:43:bf:4f:7b:f8:c6:3d:93:a7: 4a:5e:d3:35:09:00:e2:5f:e6:4a:eb:75:bf:5b:bf: 41:0b:25:21:43:cd:26:25:26:5d:e3:b6:2d:60:cb: bd:dc:91:cf:f7:18:fe:f4:e4:3e:f3:7a:5e:5f:58: 07:bf:d2:92:bc:7a:a7:f8:9b:8c:c6:e2:81:b8:a5: d5:84:23:19:df:28:15:d3:80:24:8f:1d:23:82:cb: 25:2b:55:a4:b0:71:95:7b:68:f2:91:44:a3:5b:ee: e4:23:17:07:a2:d1:6f:c6:87:0e:ad:fa:49:b3:18: 89:85:76:1f:a5:ac:b5:22:69:63:77:55:d3:b7:71: b4:0b:15:48:f1:3e:35:f7:0d:3c:60:1f:c5:f9:e5: 22:e6:1d:3b:8b:78:e0:01:36:23:f5:c8:71:69:55: a0:1b:af:31:fe:cb:86:5b:3f:39:50:8a:af:6d:f6: 41:e0:56:38:90:fa:3a:96:8a:d8:e5:67:84:a2:0d: 92:33:15:a6:38:ae:78:3f:80:1a:54:82:a5:f0:7f: c3:94:c5:b0:43:77:0d:29:ad:20:75:fa:86:b9:bd: ed:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:D6:66:23:D4:A4:57:85:F2:DE:46:19:FF:FF:77:BB:6B:A2:D3:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/02145ab8-4176-3b7e-9f32-1fb7724f4798.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 170.62.132.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:19:39:8c:e8:e6:11:4e:09:09:f2:a3:1a:b8:aa:92:02:9d: 30:82:ee:d1:c0:bc:24:6e:97:95:16:05:ee:e7:44:92:17:d6: 4e:49:1f:4c:8d:0f:f6:2c:9f:10:c0:5c:0c:75:e1:94:47:80: 46:84:6d:cd:be:7c:fc:7a:37:c4:13:eb:c2:b9:b9:21:aa:d4: 64:80:d9:33:8e:d5:e5:92:75:6f:b7:c2:87:6a:87:dc:c0:79: fc:71:40:4a:7f:20:48:8f:bc:39:ba:15:10:bd:cc:96:00:db: 63:5f:4c:5b:e1:2b:33:5d:25:18:f7:31:12:e9:cf:60:aa:39: a9:0e:30:46:27:d4:47:12:54:38:45:99:cd:91:e6:22:e7:aa: dd:c7:d5:5c:66:ae:e8:8a:82:3d:b8:35:28:f6:9c:39:e1:4b: 19:af:91:73:80:bb:15:cc:2e:d7:6b:73:f2:02:5a:36:c3:69: b3:d3:51:6b:d1:ea:96:6d:a5:e5:7d:c8:ea:98:58:7e:6f:67: 7d:ff:d9:8e:6a:f9:f9:71:0e:5b:78:6d:02:da:40:21:2b:b1: 12:f5:aa:aa:8d:51:18:26:99:0c:46:18:6b:6c:fa:c9:56:9d: 09:4c:4e:80:0b:f2:30:99:c3:cc:96:26:fb:2f:25:90:4d:2e: 4e:1c:11:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpgpNUjqqyvKATRSGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDcwMTIwMzAyOVoXDTI1MDkyOTIwMzAyOVowLzEtMCsGA1UEAxMk NWY1Njc1YzQtOWY2Yi00MTc0LTgwYWUtZmQ5MDZlMzgzYTExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwlUxcqPGcgwGxlmoNMaVj/aHsEqh7K9yP7ND DZPvLMiet1dDv097+MY9k6dKXtM1CQDiX+ZK63W/W79BCyUhQ80mJSZd47YtYMu9 3JHP9xj+9OQ+83peX1gHv9KSvHqn+JuMxuKBuKXVhCMZ3ygV04Akjx0jgsslK1Wk sHGVe2jykUSjW+7kIxcHotFvxocOrfpJsxiJhXYfpay1Imljd1XTt3G0CxVI8T41 9w08YB/F+eUi5h07i3jgATYj9chxaVWgG68x/suGWz85UIqvbfZB4FY4kPo6lorY 5WeEog2SMxWmOK54P4AaVIKl8H/DlMWwQ3cNKa0gdfqGub3tuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNDWZiPUpFeF8t5GGf//d7trotNmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMDIxNDVhYjgtNDE3Ni0z YjdlLTlmMzItMWZiNzcyNGY0Nzk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqj6EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABoZOYzo5hFOCQnyoxq4qpICnTCC7tHAvCRul5UWBe7nRJIX1k5JH0yN D/YsnxDAXAx14ZRHgEaEbc2+fPx6N8QT68K5uSGq1GSA2TOO1eWSdW+3wodqh9zA efxxQEp/IEiPvDm6FRC9zJYA22NfTFvhKzNdJRj3MRLpz2CqOakOMEYn1EcSVDhF mc2R5iLnqt3H1VxmruiKgj24NSj2nDnhSxmvkXOAuxXMLtdrc/ICWjbDabPTUWvR 6pZtpeV9yOqYWH5vZ33/2Y5q+flxDlt4bQLaQCErsRL1qqqNURgmmQxGGGts+slW nQlMToAL8jCZw8yWJvsvJZBNLk4cEYQ= -----END CERTIFICATE-----Generated at Sun Jul 6 07:42:58 2025 by rpki-client