$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/aca8707a-936e-31c6-9bed-9ddd4677f562.roa File: aca8707a-936e-31c6-9bed-9ddd4677f562.roa (raw, json) Hash identifier: D/OypegoV5Lz8FPQZ1r0DRswTFzWnVw6ir0wbAmn9gs= Subject key identifier: 1E:BB:A1:9A:83:51:D6:1D:9F:AB:E4:70:2F:9B:EB:07:DF:13:33:0D Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584A02F6431EE2364B7E2C567400 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/aca8707a-936e-31c6-9bed-9ddd4677f562.roa Signing time: Thu 29 May 2025 07:08:34 +0000 ROA not before: Thu 29 May 2025 07:08:34 +0000 ROA not after: Wed 27 Aug 2025 07:08:34 +0000 asID: 3257 IP address blocks: 173.44.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:02:f6:43:1e:e2:36:4b:7e:2c:56:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: May 29 07:08:34 2025 GMT Not After : Aug 27 07:08:34 2025 GMT Subject: CN=68f29a53-be4d-459a-82c3-45644c3380e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:5b:87:64:25:9e:05:f7:fd:18:3c:28:6a:82: a5:ab:70:c2:c4:9e:57:95:ec:21:02:d4:02:56:26: b8:91:23:49:f1:65:c0:b9:fd:6e:b5:d3:30:0e:53: 00:1d:70:c3:c9:06:5d:97:3c:1c:98:1a:46:64:43: 57:12:90:49:c6:46:3f:11:af:96:c3:44:d0:ec:ec: 06:4d:03:56:50:b5:13:7b:1f:ca:2c:1d:99:5d:89: 77:95:cd:80:2a:c0:ba:eb:d9:6b:53:6c:83:23:45: 72:67:ad:35:32:d4:49:69:aa:94:33:57:76:e2:a8: 30:6c:5f:20:53:92:bb:08:6e:04:ae:9e:37:ee:df: 90:c4:5c:cb:a9:7d:35:6b:4a:0f:f0:63:ef:a6:75: af:ef:39:e7:f4:8d:d0:cc:bb:18:f6:d6:1e:fe:29: 2b:4a:15:6f:5c:15:b9:ca:51:f9:ef:c8:1e:79:e2: a0:7f:e6:af:4d:6b:4c:0c:dd:7b:83:f0:ee:16:38: c8:03:eb:43:d0:b9:50:6f:71:74:be:f0:55:91:08: 25:47:fd:f2:b1:97:c3:63:bc:59:55:e3:33:58:09: ed:3f:9d:9b:6b:58:01:a6:bf:cc:cc:11:a6:8e:fa: 28:68:20:35:f7:e5:21:0c:52:71:c9:8b:e8:9b:3c: 65:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:BB:A1:9A:83:51:D6:1D:9F:AB:E4:70:2F:9B:EB:07:DF:13:33:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/aca8707a-936e-31c6-9bed-9ddd4677f562.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 173.44.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:a3:e2:fd:05:8d:fb:25:c9:cf:97:b5:56:85:1d:12:e3:74: fe:d2:f5:a1:69:03:02:b6:27:83:fa:cd:99:0e:1f:77:58:72: 68:23:08:ec:0e:0d:cc:51:89:89:ab:10:96:5b:82:10:10:5e: d9:41:16:03:d3:48:dc:73:51:24:ad:b1:08:6b:d3:aa:5d:52: 77:aa:da:11:7f:9b:ca:1a:9c:82:c2:bb:d8:07:62:1f:8a:32: 60:3d:cf:9f:c6:6a:72:ed:01:35:7e:a2:be:44:3e:5f:aa:17: ac:1b:69:3d:81:43:fa:08:5d:df:d1:c3:df:ab:10:56:85:55: 53:74:0e:d2:15:53:7f:55:3d:a7:f1:bd:2f:c0:ab:57:54:0b: d3:d1:18:c4:30:c9:5b:7e:0d:29:11:7d:a9:80:ef:46:b0:ef: 36:e5:64:37:04:70:f2:8f:41:d5:95:bb:e4:be:11:d7:d9:63: 4d:87:13:47:cd:91:c8:13:b5:bf:ad:aa:59:52:12:97:a3:31: 0f:2a:51:37:95:09:7a:0b:02:66:2f:d0:b9:85:ed:7f:61:fb: 43:4d:39:5c:7f:3f:eb:6a:2d:1d:02:c5:78:4f:ae:64:1a:26: 49:7b:99:0e:4d:12:a7:6b:d8:ac:b9:13:94:10:83:39:f3:70: 05:1d:ce:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoC9kMe4jZLfixWdAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI1MDUyOTA3MDgzNFoXDTI1MDgyNzA3MDgzNFowLzEtMCsGA1UEAxMk NjhmMjlhNTMtYmU0ZC00NTlhLTgyYzMtNDU2NDRjMzM4MGUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgFuHZCWeBff9GDwoaoKlq3DCxJ5XlewhAtQC Via4kSNJ8WXAuf1utdMwDlMAHXDDyQZdlzwcmBpGZENXEpBJxkY/Ea+Ww0TQ7OwG TQNWULUTex/KLB2ZXYl3lc2AKsC669lrU2yDI0VyZ601MtRJaaqUM1d24qgwbF8g U5K7CG4Erp437t+QxFzLqX01a0oP8GPvpnWv7znn9I3QzLsY9tYe/ikrShVvXBW5 ylH578geeeKgf+avTWtMDN17g/DuFjjIA+tD0LlQb3F0vvBVkQglR/3ysZfDY7xZ VeMzWAntP52ba1gBpr/MzBGmjvooaCA19+UhDFJxyYvomzxlXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB67oZqDUdYdn6vkcC+b6wffEzMNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvYWNhODcwN2EtOTM2ZS0z MWM2LTliZWQtOWRkZDQ2NzdmNTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArSy9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADSj4v0Fjfslyc+XtVaFHRLjdP7S9aFpAwK2J4P6zZkOH3dYcmgjCOwO DcxRiYmrEJZbghAQXtlBFgPTSNxzUSStsQhr06pdUneq2hF/m8oanILCu9gHYh+K MmA9z5/GanLtATV+or5EPl+qF6wbaT2BQ/oIXd/Rw9+rEFaFVVN0DtIVU39VPafx vS/Aq1dUC9PRGMQwyVt+DSkRfamA70aw7zblZDcEcPKPQdWVu+S+EdfZY02HE0fN kcgTtb+tqllSEpejMQ8qUTeVCXoLAmYv0LmF7X9h+0NNOVx/P+tqLR0CxXhPrmQa Jkl7mQ5NEqdr2Ky5E5QQgznzcAUdznE= -----END CERTIFICATE-----Generated at Fri Jun 6 14:22:23 2025 by rpki-client