$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd00198f-a530-490c-8ef5-5c31ac9b88ee/e3aa021b-4de7-3417-b140-22db633a4c46.roa File: e3aa021b-4de7-3417-b140-22db633a4c46.roa (raw, json) Hash identifier: 6h0LDSJZco6TyiAMPkGEOilzcpj0gbYSaomWH4lgZIA= Subject key identifier: 17:40:B6:C3:58:36:96:A0:2C:DF:CF:B1:DD:A6:9F:9A:6B:49:18:D9 Certificate issuer: /CN=cd00198f-a530-490c-8ef5-5c31ac9b88ee Certificate serial: 010D0C9F4328584A5E606381C10628F269DFB580 Authority key identifier: EE:B2:E7:54:17:4E:31:C9:7A:0D:15:E5:72:45:5D:67:1D:F3:92:BF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd00198f-a530-490c-8ef5-5c31ac9b88ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd00198f-a530-490c-8ef5-5c31ac9b88ee/e3aa021b-4de7-3417-b140-22db633a4c46.roa Signing time: Tue 01 Jul 2025 01:00:50 +0000 ROA not before: Tue 01 Jul 2025 01:00:50 +0000 ROA not after: Mon 29 Sep 2025 01:00:50 +0000 asID: 18540 IP address blocks: 170.62.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd00198f-a530-490c-8ef5-5c31ac9b88ee/cd00198f-a530-490c-8ef5-5c31ac9b88ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd00198f-a530-490c-8ef5-5c31ac9b88ee/cd00198f-a530-490c-8ef5-5c31ac9b88ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd00198f-a530-490c-8ef5-5c31ac9b88ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Jul 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5e:60:63:81:c1:06:28:f2:69:df:b5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd00198f-a530-490c-8ef5-5c31ac9b88ee Validity Not Before: Jul 1 01:00:50 2025 GMT Not After : Sep 29 01:00:50 2025 GMT Subject: CN=edf2da42-67b7-4e63-97f2-fc6ddc1b27fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b7:c3:d7:06:f0:94:e5:6c:88:79:37:88:b3: 88:92:37:a0:1e:d4:b8:0f:7e:25:a0:d0:69:70:8e: e8:f3:ed:4f:0d:4b:31:f4:2d:b5:3c:3e:ef:6c:f5: 22:a0:51:01:1e:f3:6f:cb:5e:65:84:e0:a8:54:2f: 4f:5e:80:45:2a:c6:fa:a7:e6:00:b6:37:90:2d:ec: b6:18:f0:10:8e:59:3e:79:d0:f8:95:df:0d:5f:a9: 78:2e:88:3c:93:73:2e:40:b8:b7:ec:d0:40:2c:31: 64:4a:b0:f3:d6:d5:b0:28:5e:51:98:b0:74:1f:0a: 33:ab:76:e2:2d:ae:1d:0b:15:f7:42:a1:08:3e:c0: 48:7b:c3:d8:9f:ca:f8:46:3a:b4:0d:6b:e6:66:50: a6:ff:94:ba:7c:4f:09:15:95:ff:2f:90:13:a4:98: e0:e4:e6:a5:3d:b8:f4:89:ba:81:26:f8:fd:84:a8: 7b:30:28:a9:95:ae:d6:be:98:d1:52:83:56:ac:a2: a0:ba:94:9d:94:e2:e8:8b:91:2b:a7:b4:49:34:ef: 2e:95:00:28:d3:12:3c:02:71:19:6a:49:88:8c:c5: 44:ec:01:69:49:83:99:c1:4a:61:a1:c8:d3:4e:2d: 15:07:3b:f6:1f:59:b1:30:18:4d:4b:22:5a:be:bb: dc:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:40:B6:C3:58:36:96:A0:2C:DF:CF:B1:DD:A6:9F:9A:6B:49:18:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd00198f-a530-490c-8ef5-5c31ac9b88ee/e3aa021b-4de7-3417-b140-22db633a4c46.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd00198f-a530-490c-8ef5-5c31ac9b88ee/cd00198f-a530-490c-8ef5-5c31ac9b88ee.crl X509v3 Authority Key Identifier: keyid:EE:B2:E7:54:17:4E:31:C9:7A:0D:15:E5:72:45:5D:67:1D:F3:92:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd00198f-a530-490c-8ef5-5c31ac9b88ee.cer sbgp-ipAddrBlock: critical IPv4: 170.62.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:16:02:c2:62:56:61:2b:4b:07:a8:06:0d:d9:58:00:c0:fd: a6:3a:83:40:79:e9:08:67:5c:20:16:72:af:96:bc:08:14:3b: 4b:2d:cb:c1:25:34:24:44:4c:97:4b:e3:c6:2c:3f:41:79:50: a5:8a:58:ec:90:d4:6c:5e:09:5a:72:3a:6b:51:1c:e7:25:b9: f4:bd:64:79:b1:b9:73:d5:4f:02:08:46:ea:ae:26:54:0e:66: 6c:8b:a7:d0:9a:77:71:fa:8d:08:e1:d9:5d:8b:10:9f:47:92: a0:58:ec:01:9c:e9:ee:f8:12:6c:31:62:cb:8e:92:9d:5c:5e: 5c:11:ed:0d:92:e1:85:a5:a2:68:b0:0f:e8:44:f9:ec:65:c7: 06:b8:2d:11:a4:3d:de:2b:7d:a7:d9:e0:1f:b0:53:3c:4c:82: e7:db:d8:df:fb:e7:2e:cb:2a:13:5e:84:8e:ed:66:03:87:a1: c8:76:73:63:e9:5f:4f:3e:9f:69:99:bf:bc:47:59:14:61:d4: 53:ca:c0:5b:43:91:b8:cf:a6:f1:31:49:30:93:1b:f4:32:21: 9c:0b:c1:2f:67:59:7e:03:d4:10:33:e3:8d:5a:6d:ae:4e:9d: 5a:5b:a5:3c:cc:69:8b:16:f1:d5:1c:92:13:cb:98:07:5c:d1: 53:1f:32:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpeYGOBwQYo8mnftYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2QwMDE5OGYtYTUzMC00OTBjLThlZjUtNWMzMWFjOWI4 OGVlMB4XDTI1MDcwMTAxMDA1MFoXDTI1MDkyOTAxMDA1MFowLzEtMCsGA1UEAxMk ZWRmMmRhNDItNjdiNy00ZTYzLTk3ZjItZmM2ZGRjMWIyN2ZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurfD1wbwlOVsiHk3iLOIkjegHtS4D34loNBp cI7o8+1PDUsx9C21PD7vbPUioFEBHvNvy15lhOCoVC9PXoBFKsb6p+YAtjeQLey2 GPAQjlk+edD4ld8NX6l4Log8k3MuQLi37NBALDFkSrDz1tWwKF5RmLB0Hwozq3bi La4dCxX3QqEIPsBIe8PYn8r4Rjq0DWvmZlCm/5S6fE8JFZX/L5ATpJjg5OalPbj0 ibqBJvj9hKh7MCipla7WvpjRUoNWrKKgupSdlOLoi5Erp7RJNO8ulQAo0xI8AnEZ akmIjMVE7AFpSYOZwUphocjTTi0VBzv2H1mxMBhNSyJavrvcuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBdAtsNYNpagLN/Psd2mn5prSRjZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jZDAw MTk4Zi1hNTMwLTQ5MGMtOGVmNS01YzMxYWM5Yjg4ZWUvZTNhYTAyMWItNGRlNy0z NDE3LWIxNDAtMjJkYjYzM2E0YzQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvY2QwMDE5OGYtYTUzMC00OTBjLThl ZjUtNWMzMWFjOWI4OGVlL2NkMDAxOThmLWE1MzAtNDkwYy04ZWY1LTVjMzFhYzli ODhlZS5jcmwwHwYDVR0jBBgwFoAU7rLnVBdOMcl6DRXlckVdZx3zkr8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jZDAwMTk4Zi1hNTMwLTQ5MGMtOGVmNS01YzMx YWM5Yjg4ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqj4hMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEYWAsJiVmErSweoBg3ZWADA/aY6g0B56QhnXCAWcq+WvAgUO0sty8El NCRETJdL48YsP0F5UKWKWOyQ1GxeCVpyOmtRHOclufS9ZHmxuXPVTwIIRuquJlQO ZmyLp9Cad3H6jQjh2V2LEJ9HkqBY7AGc6e74EmwxYsuOkp1cXlwR7Q2S4YWlomiw D+hE+exlxwa4LRGkPd4rfafZ4B+wUzxMgufb2N/75y7LKhNehI7tZgOHoch2c2Pp X08+n2mZv7xHWRRh1FPKwFtDkbjPpvExSTCTG/QyIZwLwS9nWX4D1BAz441aba5O nVpbpTzMaYsW8dUckhPLmAdc0VMfMio= -----END CERTIFICATE-----Generated at Mon Jul 7 17:24:41 2025 by rpki-client