$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d/a63530f0-6154-3c2a-80c7-10e826431502.roa File: a63530f0-6154-3c2a-80c7-10e826431502.roa (raw, json) Hash identifier: ZKeZ82GcTIjss2+b7mNkHD3EMLlfFQS2rhwMMbx/x9w= Subject key identifier: 81:C1:2B:78:23:BD:C2:76:31:76:5D:51:FD:58:C9:31:39:9B:3E:1E Certificate issuer: /CN=dd70c3a1-6ad0-4cdd-aad7-613381f0e60d Certificate serial: 010D0C9F4328584A9FFB993335F6A4D1B3E2B3BC Authority key identifier: 33:1B:5C:1A:CE:D6:7A:D6:BF:82:2F:90:2E:FA:46:1C:C1:51:5B:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d/a63530f0-6154-3c2a-80c7-10e826431502.roa Signing time: Thu 24 Jul 2025 13:01:02 +0000 ROA not before: Thu 24 Jul 2025 13:01:02 +0000 ROA not after: Wed 22 Oct 2025 13:01:02 +0000 asID: 46657 IP address blocks: 97.107.236.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9f:fb:99:33:35:f6:a4:d1:b3:e2:b3:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd70c3a1-6ad0-4cdd-aad7-613381f0e60d Validity Not Before: Jul 24 13:01:02 2025 GMT Not After : Oct 22 13:01:02 2025 GMT Subject: CN=c9aabbba-5c94-4d55-aae7-3b0370f069e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:65:a4:18:cb:05:67:cb:f9:7a:0c:fa:9c:2f: b5:05:54:58:eb:2e:41:01:67:48:8f:dc:a0:e1:6e: 00:08:59:a6:24:10:29:54:ef:90:08:9c:26:76:a9: cc:99:6a:77:1f:df:85:72:87:96:d7:57:95:a0:de: c1:45:9d:8b:3a:ab:25:ed:89:d7:43:56:01:d9:f2: a9:5e:df:2f:86:27:11:e7:49:30:b9:15:19:91:d4: 1f:fe:2a:f1:55:fc:bf:ec:e9:30:43:ac:73:74:1b: b6:e3:4b:db:17:ec:1c:32:17:ac:10:6f:48:7d:2d: 7a:b9:3c:7d:1c:35:9c:b4:bd:46:7e:3d:bf:fd:6a: e9:bc:ab:50:f3:d3:0d:8d:bf:9d:11:d7:66:5d:51: 9e:78:c8:ee:99:90:1f:b7:05:33:71:4f:46:8b:05: 8f:6b:7f:63:22:96:5e:69:2d:ec:55:74:cd:7d:dc: e7:0f:dc:a7:8f:32:5e:14:67:d7:4e:cf:ce:50:0e: 5f:b8:d5:e3:3f:c9:10:93:f9:df:12:ee:cc:a0:ad: 63:f5:28:1d:c7:f3:41:c4:d5:c0:54:39:40:48:fb: 88:28:7a:52:cc:39:ab:06:12:e9:3d:d0:f4:c7:ef: da:c6:e2:5f:51:96:5e:57:f5:12:52:60:f5:eb:a2: 23:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:C1:2B:78:23:BD:C2:76:31:76:5D:51:FD:58:C9:31:39:9B:3E:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d/a63530f0-6154-3c2a-80c7-10e826431502.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d.crl X509v3 Authority Key Identifier: keyid:33:1B:5C:1A:CE:D6:7A:D6:BF:82:2F:90:2E:FA:46:1C:C1:51:5B:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d.cer sbgp-ipAddrBlock: critical IPv4: 97.107.236.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bc:7b:86:91:a4:ba:2d:d9:38:fa:58:7c:12:f5:d6:03:18:2c: b3:8b:0e:18:fc:ea:bb:5e:ac:96:d3:6c:8e:82:d2:78:9a:c6: ad:52:30:d9:2d:64:5f:34:41:38:fc:60:6c:49:f3:d3:52:e0: 6e:23:1b:41:f8:95:72:4c:92:20:60:83:e9:ed:ed:f5:eb:d1: e0:84:7d:06:26:b3:81:30:90:8d:65:5c:c9:ca:d7:38:6a:af: f4:04:47:41:ee:76:0b:95:4b:4b:97:0c:e6:bf:6b:21:48:ba: 46:b5:ea:a5:50:ec:96:0c:e5:f3:c2:8a:23:50:67:bf:ff:07: 9c:f7:5f:fc:8b:a5:4b:6e:85:00:5b:c4:cf:6d:93:3d:dd:4d: 82:6f:a2:6d:33:54:3f:b1:57:11:85:a2:18:2f:74:41:6c:98: 18:6d:23:84:2e:1f:3d:f5:7e:ac:a4:0c:3a:63:f8:de:55:ec: a9:96:50:70:49:ab:90:ed:f0:bd:cc:1a:df:53:f7:e8:9e:93: a6:f6:3e:14:3d:25:be:e9:1c:b6:9c:5e:96:52:ba:7a:35:2d: 88:11:bb:44:15:d3:80:44:89:ca:47:c0:14:69:3d:30:bb:84: df:fb:ad:c1:22:5d:ba:a9:1b:e5:73:c7:4f:91:c7:13:5f:2d: 2c:98:0b:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqf+5kzNfak0bPis7wwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGQ3MGMzYTEtNmFkMC00Y2RkLWFhZDctNjEzMzgxZjBl NjBkMB4XDTI1MDcyNDEzMDEwMloXDTI1MTAyMjEzMDEwMlowLzEtMCsGA1UEAxMk YzlhYWJiYmEtNWM5NC00ZDU1LWFhZTctM2IwMzcwZjA2OWUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzWWkGMsFZ8v5egz6nC+1BVRY6y5BAWdIj9yg 4W4ACFmmJBApVO+QCJwmdqnMmWp3H9+FcoeW11eVoN7BRZ2LOqsl7YnXQ1YB2fKp Xt8vhicR50kwuRUZkdQf/irxVfy/7OkwQ6xzdBu240vbF+wcMhesEG9IfS16uTx9 HDWctL1Gfj2//WrpvKtQ89MNjb+dEddmXVGeeMjumZAftwUzcU9GiwWPa39jIpZe aS3sVXTNfdznD9ynjzJeFGfXTs/OUA5fuNXjP8kQk/nfEu7MoK1j9Sgdx/NBxNXA VDlASPuIKHpSzDmrBhLpPdD0x+/axuJfUZZeV/USUmD166IjNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIHBK3gjvcJ2MXZdUf1YyTE5mz4eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kZDcw YzNhMS02YWQwLTRjZGQtYWFkNy02MTMzODFmMGU2MGQvYTYzNTMwZjAtNjE1NC0z YzJhLTgwYzctMTBlODI2NDMxNTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZGQ3MGMzYTEtNmFkMC00Y2RkLWFh ZDctNjEzMzgxZjBlNjBkL2RkNzBjM2ExLTZhZDAtNGNkZC1hYWQ3LTYxMzM4MWYw ZTYwZC5jcmwwHwYDVR0jBBgwFoAUMxtcGs7Weta/gi+QLvpGHMFRW2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kZDcwYzNhMS02YWQwLTRjZGQtYWFkNy02MTMz ODFmMGU2MGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYWvsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALx7hpGkui3ZOPpYfBL11gMYLLOLDhj86rterJbTbI6C0niaxq1SMNkt ZF80QTj8YGxJ89NS4G4jG0H4lXJMkiBgg+nt7fXr0eCEfQYms4EwkI1lXMnK1zhq r/QER0HudguVS0uXDOa/ayFIuka16qVQ7JYM5fPCiiNQZ7//B5z3X/yLpUtuhQBb xM9tkz3dTYJvom0zVD+xVxGFohgvdEFsmBhtI4QuHz31fqykDDpj+N5V7KmWUHBJ q5Dt8L3MGt9T9+iek6b2PhQ9Jb7pHLacXpZSuno1LYgRu0QV04BEicpHwBRpPTC7 hN/7rcEiXbqpG+Vzx0+RxxNfLSyYC9Y= -----END CERTIFICATE-----Generated at Tue Aug 5 17:10:36 2025 by rpki-client