$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f/daea1d32-9330-32a9-8559-afb521212b02.roa File: daea1d32-9330-32a9-8559-afb521212b02.roa (raw, json) Hash identifier: VehuCGku7dnWzCBZrb7uIZf23ij1KLaZ6ZaGvffUctc= Subject key identifier: 15:51:F0:CA:9F:FE:AF:0A:16:60:F4:2E:D3:CD:A3:A8:36:F2:6D:24 Certificate issuer: /CN=dafe2535-2dc5-4d47-b03e-d44eea26032f Certificate serial: 010D0C9F43285849E7BA7FE33F7D4F94B48F58C0 Authority key identifier: 37:CB:75:8C:3B:39:D9:B9:FA:2F:B5:1C:EF:99:10:67:97:B9:EB:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f/daea1d32-9330-32a9-8559-afb521212b02.roa Signing time: Mon 19 May 2025 13:01:01 +0000 ROA not before: Mon 19 May 2025 13:01:01 +0000 ROA not after: Sun 17 Aug 2025 13:01:01 +0000 asID: 3257 IP address blocks: 76.10.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f/dafe2535-2dc5-4d47-b03e-d44eea26032f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f/dafe2535-2dc5-4d47-b03e-d44eea26032f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Jun 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e7:ba:7f:e3:3f:7d:4f:94:b4:8f:58:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dafe2535-2dc5-4d47-b03e-d44eea26032f Validity Not Before: May 19 13:01:01 2025 GMT Not After : Aug 17 13:01:01 2025 GMT Subject: CN=45318fc9-163f-4e30-a7d9-431d72402f39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:27:5e:00:70:7b:d0:fb:ba:46:9e:0d:62:c7: f9:3c:9f:0b:d4:92:3a:38:ee:0d:d2:57:73:03:44: 31:12:76:17:85:ca:b9:83:fb:e8:23:fc:39:eb:ab: 74:27:85:e0:3b:1c:ad:99:47:e5:3e:9b:f1:d8:79: 1e:16:1a:59:f1:6a:62:d1:9e:63:a3:e2:8b:1a:75: e2:0b:92:dd:14:9f:77:11:39:78:38:f0:0b:6d:af: 12:53:97:1b:4f:2f:a1:d0:18:c4:34:5b:90:17:70: 18:36:e9:27:d9:9d:4b:6b:a3:c1:f2:35:33:06:45: 3c:97:28:60:a7:1a:a0:14:c1:4f:bd:8a:27:4f:12: 29:eb:d1:bb:82:8b:fb:3f:ca:b9:65:4e:69:86:a0: ed:43:bf:71:04:9e:1f:de:39:08:c1:93:c8:bf:75: 82:32:ab:9c:41:6b:ad:56:c8:a9:d6:90:46:3d:42: 42:ca:e3:77:bd:4b:df:1e:2b:1a:95:64:e7:12:b9: 26:15:c3:20:6a:95:de:b6:92:6e:37:51:f6:d9:80: 06:c4:6b:1d:1a:08:25:01:94:ba:d6:79:b8:68:f7: 72:8b:52:ce:40:f3:de:50:32:09:49:1c:18:46:f8: e3:11:f9:e6:ae:7f:87:8b:9f:eb:c0:fd:3d:15:e0: 25:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:51:F0:CA:9F:FE:AF:0A:16:60:F4:2E:D3:CD:A3:A8:36:F2:6D:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f/daea1d32-9330-32a9-8559-afb521212b02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f/dafe2535-2dc5-4d47-b03e-d44eea26032f.crl X509v3 Authority Key Identifier: keyid:37:CB:75:8C:3B:39:D9:B9:FA:2F:B5:1C:EF:99:10:67:97:B9:EB:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f.cer sbgp-ipAddrBlock: critical IPv4: 76.10.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:fa:25:60:00:08:0d:fc:3d:33:af:3f:02:fd:b2:fb:1d:32: b3:05:17:a1:67:01:00:5a:68:b1:25:1a:17:93:5e:7b:d9:9b: 27:15:c7:3c:4e:7c:cf:c5:73:e2:cd:11:06:1d:3b:5b:0d:e3: 86:32:ff:13:5e:1c:ec:c0:02:5b:3d:81:01:b3:30:7c:99:f8: bd:c2:eb:42:1b:5a:48:39:2a:c2:b6:72:aa:08:16:74:c8:06: 5e:f1:96:09:78:b8:3f:da:8a:61:09:e9:ba:df:0c:5b:1a:59: 0e:19:6e:a0:46:46:bd:06:12:b0:c5:57:00:4b:7c:f3:d4:d2: 56:9a:67:27:1a:22:26:7e:50:c2:41:08:c0:52:19:fd:3e:e9: 36:1b:70:8d:82:4b:c0:71:7a:ea:5b:55:b2:54:db:1e:c3:85: 83:04:76:e8:00:41:67:3d:d3:1c:de:68:ff:1f:fb:f5:cb:32: dc:15:db:8b:43:a1:39:f2:f2:79:dd:d0:58:66:6d:f3:be:f5: d1:a8:8c:eb:1d:9d:14:b8:79:5a:71:b2:5e:f3:ed:51:bf:47: cb:2c:70:40:0d:07:33:ff:9e:bb:3e:08:d2:0d:76:43:94:66: 31:fd:48:d0:85:af:b3:48:8b:03:be:a1:0b:7d:0c:92:04:b9: f4:17:90:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnnun/jP31PlLSPWMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFmZTI1MzUtMmRjNS00ZDQ3LWIwM2UtZDQ0ZWVhMjYw MzJmMB4XDTI1MDUxOTEzMDEwMVoXDTI1MDgxNzEzMDEwMVowLzEtMCsGA1UEAxMk NDUzMThmYzktMTYzZi00ZTMwLWE3ZDktNDMxZDcyNDAyZjM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzSdeAHB70Pu6Rp4NYsf5PJ8L1JI6OO4N0ldz A0QxEnYXhcq5g/voI/w566t0J4XgOxytmUflPpvx2HkeFhpZ8Wpi0Z5jo+KLGnXi C5LdFJ93ETl4OPALba8SU5cbTy+h0BjENFuQF3AYNukn2Z1La6PB8jUzBkU8lyhg pxqgFMFPvYonTxIp69G7gov7P8q5ZU5phqDtQ79xBJ4f3jkIwZPIv3WCMqucQWut Vsip1pBGPUJCyuN3vUvfHisalWTnErkmFcMgapXetpJuN1H22YAGxGsdGgglAZS6 1nm4aPdyi1LOQPPeUDIJSRwYRvjjEfnmrn+Hi5/rwP09FeAlaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBVR8Mqf/q8KFmD0LtPNo6g28m0kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kYWZl MjUzNS0yZGM1LTRkNDctYjAzZS1kNDRlZWEyNjAzMmYvZGFlYTFkMzItOTMzMC0z MmE5LTg1NTktYWZiNTIxMjEyYjAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZGFmZTI1MzUtMmRjNS00ZDQ3LWIw M2UtZDQ0ZWVhMjYwMzJmL2RhZmUyNTM1LTJkYzUtNGQ0Ny1iMDNlLWQ0NGVlYTI2 MDMyZi5jcmwwHwYDVR0jBBgwFoAUN8t1jDs52bn6L7Uc75kQZ5e56xAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kYWZlMjUzNS0yZGM1LTRkNDctYjAzZS1kNDRl ZWEyNjAzMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQETArwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGj6JWAACA38PTOvPwL9svsdMrMFF6FnAQBaaLElGheTXnvZmycVxzxO fM/Fc+LNEQYdO1sN44Yy/xNeHOzAAls9gQGzMHyZ+L3C60IbWkg5KsK2cqoIFnTI Bl7xlgl4uD/aimEJ6brfDFsaWQ4ZbqBGRr0GErDFVwBLfPPU0laaZycaIiZ+UMJB CMBSGf0+6TYbcI2CS8BxeupbVbJU2x7DhYMEdugAQWc90xzeaP8f+/XLMtwV24tD oTny8nnd0FhmbfO+9dGojOsdnRS4eVpxsl7z7VG/R8sscEANBzP/nrs+CNINdkOU ZjH9SNCFr7NIiwO+oQt9DJIEufQXkE8= -----END CERTIFICATE-----Generated at Wed Jun 18 23:18:19 2025 by rpki-client