$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13/bb2f14dc-a3ff-3363-90ef-6771a8a01593.roa File: bb2f14dc-a3ff-3363-90ef-6771a8a01593.roa (raw, json) Hash identifier: M5zWn0teuEOcTLJ0EoQ+PUWqtXU2Nu2sY2yimSG1/k0= Subject key identifier: 5D:D5:98:26:5C:95:B7:BC:6F:F5:B6:7D:D1:C6:D2:B4:04:99:04:CF Certificate issuer: /CN=213e5365-5be3-42f4-a3d1-7f74bb44df13 Certificate serial: 010D0C9F4328584A9900C63A7485300B387DDD40 Authority key identifier: 7A:C1:C6:0D:0F:85:20:1F:B9:B4:4F:6C:D6:94:4C:4B:D1:88:FC:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13/bb2f14dc-a3ff-3363-90ef-6771a8a01593.roa Signing time: Tue 22 Jul 2025 01:00:50 +0000 ROA not before: Tue 22 Jul 2025 01:00:50 +0000 ROA not after: Mon 20 Oct 2025 01:00:50 +0000 asID: 19137 IP address blocks: 208.70.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13/213e5365-5be3-42f4-a3d1-7f74bb44df13.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13/213e5365-5be3-42f4-a3d1-7f74bb44df13.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:99:00:c6:3a:74:85:30:0b:38:7d:dd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=213e5365-5be3-42f4-a3d1-7f74bb44df13 Validity Not Before: Jul 22 01:00:50 2025 GMT Not After : Oct 20 01:00:50 2025 GMT Subject: CN=29cce2a1-cf5c-426e-9ea2-1746f71cae36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:40:08:a9:aa:05:df:70:89:b9:a7:4a:90:19: 66:6f:89:aa:be:f3:9f:b2:a9:20:e5:62:e2:87:f2: 1e:17:d2:23:fe:70:de:4c:7a:17:af:f2:21:59:3b: 48:04:84:0c:64:e3:94:66:08:7f:23:11:fa:de:50: a5:32:f7:ba:f3:92:f4:87:da:8f:57:d2:29:40:8e: 7a:4e:58:9c:0a:4b:ab:1b:54:13:d6:95:f1:a3:f2: 98:6e:dc:39:d3:c5:df:2e:d4:e8:56:da:d9:9d:20: 38:92:fb:16:1b:c1:c8:c3:38:e0:c0:c8:ab:6f:a0: d9:0a:5f:2b:b5:3e:a2:74:f9:c7:b5:8c:03:cd:8a: 69:03:f6:4f:d3:42:ee:2d:07:a6:e6:80:ec:32:19: be:b3:4f:89:db:43:0e:30:93:47:7d:69:2f:6e:f1: 3c:fb:b5:14:ae:1d:05:45:3b:c8:e0:51:3f:83:7e: e9:c2:4c:10:04:9f:55:6f:37:61:29:c6:34:ca:69: 50:92:4a:cb:f4:07:1b:42:42:1d:0c:1f:ff:a7:69: 40:50:12:c8:0d:9f:0d:f6:66:35:4a:ac:37:2d:c6: cf:9e:6a:2f:97:31:62:ec:29:e1:2a:a2:d9:0a:14: 67:cd:d0:17:1c:60:db:e0:87:22:b0:a9:33:c4:20: 58:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:D5:98:26:5C:95:B7:BC:6F:F5:B6:7D:D1:C6:D2:B4:04:99:04:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13/bb2f14dc-a3ff-3363-90ef-6771a8a01593.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13/213e5365-5be3-42f4-a3d1-7f74bb44df13.crl X509v3 Authority Key Identifier: keyid:7A:C1:C6:0D:0F:85:20:1F:B9:B4:4F:6C:D6:94:4C:4B:D1:88:FC:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13.cer sbgp-ipAddrBlock: critical IPv4: 208.70.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:51:4d:32:ec:7b:52:36:80:de:26:e5:53:86:53:05:6a:b9: 66:57:c6:11:85:02:97:72:f7:5e:69:53:45:9e:df:bb:82:16: 11:20:27:21:b3:48:ea:d6:c1:75:cd:46:c3:ab:0a:d3:5d:40: e2:92:8c:09:17:a1:cf:2f:a5:6d:76:b1:b6:4a:63:d3:e8:bb: b8:cb:f1:10:1d:10:cc:36:e4:fd:7e:f8:82:6e:82:cd:49:6c: 59:42:d8:ed:b7:12:59:14:86:c0:3e:d2:d2:36:fb:a0:bf:af: 11:ca:c4:9f:bc:ba:40:04:b9:be:f8:c9:e3:55:16:22:60:5a: c6:18:b9:75:81:4f:b2:d7:a2:3c:da:73:70:29:25:2e:ac:0c: 4e:a8:5b:0e:e2:3f:64:97:44:31:7a:52:43:3a:5e:df:31:1b: c7:74:e9:c0:09:0e:3b:02:fa:71:68:c2:44:2e:e9:10:e6:bb: ad:e1:52:bb:e2:4f:92:7d:77:90:25:5a:35:b1:38:74:1f:c7: 0a:2e:f1:53:2f:bc:d6:0b:9c:7b:e8:96:5f:94:d5:a6:02:79: fb:98:f6:50:30:ad:46:7d:fc:5f:70:00:07:8e:9d:9c:5d:93: 12:92:42:b5:cb:b9:bc:21:14:ab:d8:24:33:2c:ad:2c:5c:76: f6:a0:3a:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqZAMY6dIUwCzh93UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjEzZTUzNjUtNWJlMy00MmY0LWEzZDEtN2Y3NGJiNDRk ZjEzMB4XDTI1MDcyMjAxMDA1MFoXDTI1MTAyMDAxMDA1MFowLzEtMCsGA1UEAxMk MjljY2UyYTEtY2Y1Yy00MjZlLTllYTItMTc0NmY3MWNhZTM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjEAIqaoF33CJuadKkBlmb4mqvvOfsqkg5WLi h/IeF9Ij/nDeTHoXr/IhWTtIBIQMZOOUZgh/IxH63lClMve685L0h9qPV9IpQI56 TlicCkurG1QT1pXxo/KYbtw508XfLtToVtrZnSA4kvsWG8HIwzjgwMirb6DZCl8r tT6idPnHtYwDzYppA/ZP00LuLQem5oDsMhm+s0+J20MOMJNHfWkvbvE8+7UUrh0F RTvI4FE/g37pwkwQBJ9VbzdhKcY0ymlQkkrL9AcbQkIdDB//p2lAUBLIDZ8N9mY1 Sqw3LcbPnmovlzFi7CnhKqLZChRnzdAXHGDb4IcisKkzxCBY+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF3VmCZclbe8b/W2fdHG0rQEmQTPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8yMTNl NTM2NS01YmUzLTQyZjQtYTNkMS03Zjc0YmI0NGRmMTMvYmIyZjE0ZGMtYTNmZi0z MzYzLTkwZWYtNjc3MWE4YTAxNTkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMjEzZTUzNjUtNWJlMy00MmY0LWEz ZDEtN2Y3NGJiNDRkZjEzLzIxM2U1MzY1LTViZTMtNDJmNC1hM2QxLTdmNzRiYjQ0 ZGYxMy5jcmwwHwYDVR0jBBgwFoAUesHGDQ+FIB+5tE9s1pRMS9GI/PwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8yMTNlNTM2NS01YmUzLTQyZjQtYTNkMS03Zjc0 YmI0NGRmMTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EaIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACVRTTLse1I2gN4m5VOGUwVquWZXxhGFApdy915pU0We37uCFhEgJyGz SOrWwXXNRsOrCtNdQOKSjAkXoc8vpW12sbZKY9Pou7jL8RAdEMw25P1++IJugs1J bFlC2O23ElkUhsA+0tI2+6C/rxHKxJ+8ukAEub74yeNVFiJgWsYYuXWBT7LXojza c3ApJS6sDE6oWw7iP2SXRDF6UkM6Xt8xG8d06cAJDjsC+nFowkQu6RDmu63hUrvi T5J9d5AlWjWxOHQfxwou8VMvvNYLnHvoll+U1aYCefuY9lAwrUZ9/F9wAAeOnZxd kxKSQrXLubwhFKvYJDMsrSxcdvagOv4= -----END CERTIFICATE-----Generated at Mon Aug 4 14:54:30 2025 by rpki-client