$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/a3e5e8e1-aea7-3688-8270-bc1d775cb3b1.roa File: a3e5e8e1-aea7-3688-8270-bc1d775cb3b1.roa (raw, json) Hash identifier: 1GDxuTr5fcjp5ZiY5qWO1jkTbyu3pDzLuFcM3CQhAu8= Subject key identifier: 14:C4:09:45:4D:6D:B4:18:DE:C4:18:9B:D5:FB:05:56:03:96:74:35 Certificate issuer: /CN=b985122e-f2ff-4349-8e7b-d604ee2577f1 Certificate serial: 010D0C9F43285849C166F97C6D107C46C5C2D180 Authority key identifier: 32:43:E7:3C:F7:1B:05:DF:36:0A:46:4E:31:16:51:4B:87:61:26:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/a3e5e8e1-aea7-3688-8270-bc1d775cb3b1.roa Signing time: Mon 05 May 2025 19:32:19 +0000 ROA not before: Mon 05 May 2025 19:32:19 +0000 ROA not after: Sun 03 Aug 2025 19:32:19 +0000 asID: 203 IP address blocks: 170.188.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/b985122e-f2ff-4349-8e7b-d604ee2577f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/b985122e-f2ff-4349-8e7b-d604ee2577f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c1:66:f9:7c:6d:10:7c:46:c5:c2:d1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b985122e-f2ff-4349-8e7b-d604ee2577f1 Validity Not Before: May 5 19:32:19 2025 GMT Not After : Aug 3 19:32:19 2025 GMT Subject: CN=d48115d7-d643-45ab-bc87-ea2b7805a284 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:96:94:09:a2:fb:4d:93:db:ff:94:35:a6:eb: 40:20:fd:cc:cd:67:48:6b:30:0e:29:0f:76:96:48: 82:03:e4:d6:27:74:fe:84:83:02:05:65:f7:9c:9b: 9d:e9:ce:9b:1b:2d:72:f9:92:52:62:33:b7:3f:88: eb:e1:f3:12:cd:9a:74:6b:50:0a:a2:0a:02:4e:08: ec:73:0a:14:7e:4d:46:92:64:3d:76:20:6f:f7:69: c4:59:af:a2:cb:76:1c:1f:18:63:57:b3:60:b3:50: 98:38:55:2b:5d:e6:8d:e2:b2:93:6a:51:a7:f4:d4: 6b:ec:37:c0:53:a9:ed:1a:4c:01:da:0c:66:aa:17: 82:37:f6:ba:d0:39:18:74:21:66:e9:2f:ed:ef:72: 4a:5e:55:1b:2c:aa:f9:bd:d7:08:c2:49:9c:58:33: c4:5a:b4:d5:f2:ef:ee:c3:5e:91:15:76:1f:f7:62: 4b:fc:d6:b6:f3:6b:85:fe:d1:20:aa:2d:bc:ac:5f: 33:92:c0:be:47:b2:2d:b5:8e:96:4f:20:ba:29:f3: 97:2d:a3:21:e5:00:73:c5:d3:49:b2:11:3f:d6:91: e9:2c:ce:45:1f:bf:de:2a:b0:57:85:dc:b3:14:3e: 6f:a1:df:50:c1:3e:97:d8:92:4a:c8:d3:71:ff:89: 4c:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:C4:09:45:4D:6D:B4:18:DE:C4:18:9B:D5:FB:05:56:03:96:74:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/a3e5e8e1-aea7-3688-8270-bc1d775cb3b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/b985122e-f2ff-4349-8e7b-d604ee2577f1.crl X509v3 Authority Key Identifier: keyid:32:43:E7:3C:F7:1B:05:DF:36:0A:46:4E:31:16:51:4B:87:61:26:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1.cer sbgp-ipAddrBlock: critical IPv4: 170.188.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:88:da:d8:8b:d5:4c:8f:d1:8c:52:d5:a6:93:9f:c8:1d:79: f1:57:9a:2e:fd:20:27:9d:59:5a:3e:cc:91:0d:e8:a5:7c:63: c4:20:ee:a9:97:21:14:87:6e:ff:54:b2:43:b4:89:b6:5c:ea: 80:cb:e7:d3:81:c2:1c:2f:54:f3:59:a3:ac:b3:2a:ec:a5:77: 69:6f:98:29:17:b5:97:a2:cd:71:2e:f8:97:27:ac:ee:7c:53: 2f:04:ce:3f:71:96:95:3d:06:a7:64:4b:e4:ce:89:bc:e6:89: 08:1f:82:6d:9e:d1:dd:dd:bc:c2:2d:eb:6b:64:7a:c3:87:12: dc:ab:58:d6:55:fe:3a:c2:9f:77:b6:79:21:d8:01:1b:d2:b3: 11:b9:3a:79:e2:ea:50:22:68:43:a9:20:70:42:83:25:6c:5c: 57:7b:3c:61:b2:cf:40:1a:59:ca:71:b0:e5:c7:f4:78:f2:2b: cb:43:d2:a8:2a:f5:cd:3e:52:5f:52:2a:4f:30:d1:f4:59:7d: 19:a6:4d:1a:08:5c:89:97:9c:2e:a7:23:38:86:86:19:12:1f: c5:5e:a4:96:5d:c2:f3:0d:63:2f:7b:fd:fb:47:1b:e3:14:7b: 50:74:a1:88:f6:b3:33:64:8f:89:a8:13:83:9e:be:43:f5:51: 58:ed:b7:b6 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEnBZvl8bRB8RsXC0YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk4NTEyMmUtZjJmZi00MzQ5LThlN2ItZDYwNGVlMjU3 N2YxMB4XDTI1MDUwNTE5MzIxOVoXDTI1MDgwMzE5MzIxOVowLzEtMCsGA1UEAxMk ZDQ4MTE1ZDctZDY0My00NWFiLWJjODctZWEyYjc4MDVhMjg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/ZaUCaL7TZPb/5Q1putAIP3MzWdIazAOKQ92 lkiCA+TWJ3T+hIMCBWX3nJud6c6bGy1y+ZJSYjO3P4jr4fMSzZp0a1AKogoCTgjs cwoUfk1GkmQ9diBv92nEWa+iy3YcHxhjV7Ngs1CYOFUrXeaN4rKTalGn9NRr7DfA U6ntGkwB2gxmqheCN/a60DkYdCFm6S/t73JKXlUbLKr5vdcIwkmcWDPEWrTV8u/u w16RFXYf92JL/Na282uF/tEgqi28rF8zksC+R7IttY6WTyC6KfOXLaMh5QBzxdNJ shE/1pHpLM5FH7/eKrBXhdyzFD5vod9QwT6X2JJKyNNx/4lMdQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFBTECUVNbbQY3sQYm9X7BVYDlnQ1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iOTg1 MTIyZS1mMmZmLTQzNDktOGU3Yi1kNjA0ZWUyNTc3ZjEvYTNlNWU4ZTEtYWVhNy0z Njg4LTgyNzAtYmMxZDc3NWNiM2IxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYjk4NTEyMmUtZjJmZi00MzQ5LThl N2ItZDYwNGVlMjU3N2YxL2I5ODUxMjJlLWYyZmYtNDM0OS04ZTdiLWQ2MDRlZTI1 NzdmMS5jcmwwHwYDVR0jBBgwFoAUMkPnPPcbBd82CkZOMRZRS4dhJtswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9iOTg1MTIyZS1mMmZmLTQzNDktOGU3Yi1kNjA0 ZWUyNTc3ZjEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAqrwwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEASoja2IvVTI/RjFLVppOfyB158VeaLv0gJ51ZWj7MkQ3opXxjxCDuqZch FIdu/1SyQ7SJtlzqgMvn04HCHC9U81mjrLMq7KV3aW+YKRe1l6LNcS74lyes7nxT LwTOP3GWlT0Gp2RL5M6JvOaJCB+CbZ7R3d28wi3ra2R6w4cS3KtY1lX+OsKfd7Z5 IdgBG9KzEbk6eeLqUCJoQ6kgcEKDJWxcV3s8YbLPQBpZynGw5cf0ePIry0PSqCr1 zT5SX1IqTzDR9Fl9GaZNGghciZecLqcjOIaGGRIfxV6kll3C8w1jL3v9+0cb4xR7 UHShiPazM2SPiagTg56+Q/VRWO23tg== -----END CERTIFICATE-----Generated at Sat Jun 7 00:00:48 2025 by rpki-client