$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/6bf2b9a4-3ddc-3a38-afed-f2a517d47b25.roa File: 6bf2b9a4-3ddc-3a38-afed-f2a517d47b25.roa (raw, json) Hash identifier: F2nAEKLQZwJnLWQkSx44A7W1TLuDd/ZWSyZlrI/yl1Y= Subject key identifier: 31:48:03:E4:25:82:0C:4A:3E:DE:37:CF:B7:D0:98:D2:FA:2B:51:BE Certificate issuer: /CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f Certificate serial: 010D0C9F4328584A146556516DFC747EA7154100 Authority key identifier: AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/6bf2b9a4-3ddc-3a38-afed-f2a517d47b25.roa Signing time: Wed 04 Jun 2025 13:01:04 +0000 ROA not before: Wed 04 Jun 2025 13:01:04 +0000 ROA not after: Tue 02 Sep 2025 13:01:04 +0000 asID: 198949 IP address blocks: 170.133.208.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:14:65:56:51:6d:fc:74:7e:a7:15:41:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f Validity Not Before: Jun 4 13:01:04 2025 GMT Not After : Sep 2 13:01:04 2025 GMT Subject: CN=56a2c96a-4fef-4d0c-8b35-52be42187049 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:ac:73:7f:c5:1d:66:b4:b1:bf:67:d1:d2:c7: 4c:27:4f:59:30:2f:e0:88:c9:7a:dd:cd:4c:1a:f0: c0:45:5e:32:91:19:a2:e9:15:4f:f0:32:79:2f:bc: cf:c0:e0:85:6c:83:57:02:c0:d3:30:65:6d:8f:6e: 96:6e:71:db:ae:4a:7b:e7:64:9f:84:10:32:52:4d: c5:57:93:cd:be:7c:ea:2f:a6:dd:98:73:27:ab:2b: c0:06:9c:90:71:0d:8f:eb:1f:7d:5f:80:34:ca:61: b5:61:ed:bd:fb:29:b9:94:cd:46:b1:4c:dd:aa:bc: 6a:a9:7f:e7:3c:26:5f:c0:14:79:37:22:29:7e:8d: 8e:fe:3c:c1:91:ca:37:71:11:e5:7b:0c:8f:86:49: 83:0a:6f:a6:62:ca:89:cc:7c:fd:fb:2f:2b:b0:de: 4c:14:c1:c3:17:a0:c4:25:9d:30:ad:e5:a7:0d:73: df:3f:01:03:7b:08:d4:5d:77:42:80:a2:08:4a:9c: 1b:f6:8d:35:92:64:1c:ce:93:8b:3a:04:18:d9:8c: 90:7e:01:4c:b8:92:82:61:b8:f0:25:01:da:d8:6d: 4c:07:b3:81:31:70:51:2e:42:68:71:78:4c:41:44: 28:80:e8:dd:0f:29:0e:ed:70:4d:4f:ba:68:5b:00: e6:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:48:03:E4:25:82:0C:4A:3E:DE:37:CF:B7:D0:98:D2:FA:2B:51:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/6bf2b9a4-3ddc-3a38-afed-f2a517d47b25.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl X509v3 Authority Key Identifier: keyid:AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer sbgp-ipAddrBlock: critical IPv4: 170.133.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:24:55:58:b7:c5:be:ae:25:8e:63:92:c3:60:f5:bf:a5:c7: 67:b3:ce:47:7e:dd:2a:e0:a1:40:8c:ac:22:c2:d9:1e:22:43: 34:e4:6e:70:9e:f1:21:a1:de:91:69:59:73:46:63:af:12:80: d2:1a:86:c2:14:8c:f7:1a:23:0e:d0:6e:bb:e4:c9:ff:74:c7: 9e:cf:a3:a0:d0:a4:ed:51:83:16:81:1f:83:a1:44:62:33:f0: af:21:82:ba:51:87:e4:a5:78:c2:77:2f:38:a9:be:f0:71:11: b4:f7:7f:f7:bf:c4:f4:a6:45:0e:b4:88:75:19:c0:cc:c4:a0: 4e:57:3d:d6:58:cf:70:97:0e:f4:82:a6:31:f2:87:0d:d2:26: 2d:3e:db:51:59:dc:66:af:6a:d3:eb:33:a5:75:87:26:26:af: e8:36:b0:6f:c2:49:99:c6:d8:65:0b:47:af:3c:04:d3:e4:a3: 67:04:eb:26:26:20:f5:ff:ad:7e:07:6b:2d:96:d9:3f:0b:64: 65:45:9a:ed:91:42:6c:69:1a:52:63:17:b9:e5:db:8c:ea:52: 71:d0:63:77:71:fa:47:51:2e:46:30:1e:24:c1:c0:5d:e8:f3: 0c:d5:8a:9a:0d:a3:cc:b3:91:45:ec:c5:42:17:7b:a6:c2:fe: be:80:ab:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoUZVZRbfx0fqcVQQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTcxZmYzOTItZGQzMy00ZWE4LTljMWItOGFmZGQ0Mjk5 NzdmMB4XDTI1MDYwNDEzMDEwNFoXDTI1MDkwMjEzMDEwNFowLzEtMCsGA1UEAxMk NTZhMmM5NmEtNGZlZi00ZDBjLThiMzUtNTJiZTQyMTg3MDQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqxzf8UdZrSxv2fR0sdMJ09ZMC/giMl63c1M GvDARV4ykRmi6RVP8DJ5L7zPwOCFbINXAsDTMGVtj26WbnHbrkp752SfhBAyUk3F V5PNvnzqL6bdmHMnqyvABpyQcQ2P6x99X4A0ymG1Ye29+ym5lM1GsUzdqrxqqX/n PCZfwBR5NyIpfo2O/jzBkco3cRHlewyPhkmDCm+mYsqJzHz9+y8rsN5MFMHDF6DE JZ0wreWnDXPfPwEDewjUXXdCgKIISpwb9o01kmQczpOLOgQY2YyQfgFMuJKCYbjw JQHa2G1MB7OBMXBRLkJocXhMQUQogOjdDykO7XBNT7poWwDmHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDFIA+QlggxKPt43z7fQmNL6K1G+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hNzFm ZjM5Mi1kZDMzLTRlYTgtOWMxYi04YWZkZDQyOTk3N2YvNmJmMmI5YTQtM2RkYy0z YTM4LWFmZWQtZjJhNTE3ZDQ3YjI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTcxZmYzOTItZGQzMy00ZWE4LTlj MWItOGFmZGQ0Mjk5NzdmL2E3MWZmMzkyLWRkMzMtNGVhOC05YzFiLThhZmRkNDI5 OTc3Zi5jcmwwHwYDVR0jBBgwFoAUrknJUG2uUJbz62ommeoYPXRw8cUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9hNzFmZjM5Mi1kZDMzLTRlYTgtOWMxYi04YWZk ZDQyOTk3N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEqoXQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGAkVVi3xb6uJY5jksNg9b+lx2ezzkd+3SrgoUCMrCLC2R4iQzTkbnCe 8SGh3pFpWXNGY68SgNIahsIUjPcaIw7Qbrvkyf90x57Po6DQpO1RgxaBH4OhRGIz 8K8hgrpRh+SleMJ3LzipvvBxEbT3f/e/xPSmRQ60iHUZwMzEoE5XPdZYz3CXDvSC pjHyhw3SJi0+21FZ3GavatPrM6V1hyYmr+g2sG/CSZnG2GULR688BNPko2cE6yYm IPX/rX4Hay2W2T8LZGVFmu2RQmxpGlJjF7nl24zqUnHQY3dx+kdRLkYwHiTBwF3o 8wzVipoNo8yzkUXsxUIXe6bC/r6Aq2k= -----END CERTIFICATE-----Generated at Thu Jun 5 18:33:23 2025 by rpki-client