$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/40b26335-b6d1-3420-9784-e80d92e5fd88.roa File: 40b26335-b6d1-3420-9784-e80d92e5fd88.roa (raw, json) Hash identifier: BXkY/D4lWiH7Pdk/2u+FCzfZy+tellZNZn9axeRtxOc= Subject key identifier: 54:B8:81:58:5D:65:0D:6C:BB:F6:32:AB:BE:A8:C0:18:F0:E1:28:67 Certificate issuer: /CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109 Certificate serial: 010D0C9F4328584A23C01BF17CBECDFC16BA2F80 Authority key identifier: 66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/40b26335-b6d1-3420-9784-e80d92e5fd88.roa Signing time: Tue 10 Jun 2025 01:00:50 +0000 ROA not before: Tue 10 Jun 2025 01:00:50 +0000 ROA not after: Mon 08 Sep 2025 01:00:50 +0000 asID: 4922 IP address blocks: 70.32.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:23:c0:1b:f1:7c:be:cd:fc:16:ba:2f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109 Validity Not Before: Jun 10 01:00:50 2025 GMT Not After : Sep 8 01:00:50 2025 GMT Subject: CN=18f9f1db-c95b-4305-a2c6-9ca935f2aa8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:75:4e:d4:44:02:77:b4:8a:fa:24:37:f8:98: 4d:c4:f6:bf:f1:7f:72:19:45:5f:72:ab:38:75:35: c3:1b:56:e2:74:af:89:12:0c:ee:2b:18:3c:8b:dc: f6:51:4e:55:7f:85:5a:47:03:ba:75:6d:fa:b1:76: a0:42:32:80:87:3f:75:6a:06:39:59:4a:9a:03:29: 7a:d8:20:28:f1:9e:b1:6b:e5:08:b1:7a:7b:2b:42: bb:a9:4c:ed:0a:b0:09:07:a8:d4:16:ac:50:00:eb: aa:2d:2a:a9:76:64:88:6c:3e:b2:67:f8:d3:8f:3f: 89:46:67:11:09:32:bb:a3:4d:4d:69:7a:b0:70:50: d4:cd:48:e4:a2:ad:f4:e5:82:fd:78:9e:5a:60:46: 3b:d9:96:aa:24:e9:ed:47:5c:4a:9e:a9:f9:c6:30: 25:3a:6f:0a:0c:53:8e:4e:4b:eb:cc:c7:b6:7a:81: 2f:3c:80:2b:b5:94:3e:f9:10:fd:9a:45:2e:ef:7c: 79:46:29:d5:b2:42:77:c5:56:72:cd:1b:b2:fa:ac: 4b:0d:69:31:d0:a8:2c:c3:8d:02:77:9e:c9:27:3f: b1:b7:0f:e2:a8:5e:a7:c9:96:ab:c0:ed:d3:32:72: 01:15:83:80:f1:32:37:e0:57:40:8a:b0:9c:42:a3: 18:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:B8:81:58:5D:65:0D:6C:BB:F6:32:AB:BE:A8:C0:18:F0:E1:28:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/40b26335-b6d1-3420-9784-e80d92e5fd88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl X509v3 Authority Key Identifier: keyid:66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer sbgp-ipAddrBlock: critical IPv4: 70.32.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:42:30:e2:f8:30:1f:44:16:9b:0a:2c:b3:d5:12:b3:11:87: 0b:21:65:dc:e3:38:13:18:60:77:5e:35:82:6a:a3:ff:9a:f7: af:99:df:e0:c6:9f:9b:e4:2f:c3:e4:89:05:6e:62:68:88:ab: 62:8a:1e:ee:14:e1:92:ae:4f:1d:e3:35:ef:39:40:7c:ad:a2: 09:ed:4d:7d:9f:b8:39:6c:09:ed:e0:15:b2:0e:8f:63:c8:ba: b8:18:8a:32:03:27:7e:e6:5f:18:be:dd:fe:ee:2a:33:80:fd: 46:66:be:ba:5f:b1:c3:9a:63:20:99:af:a9:9d:d7:a5:8e:52: e2:a9:ed:0e:a0:a0:47:12:82:87:af:4e:ba:43:a0:1d:b5:9d: 51:48:7d:04:e9:ea:11:a1:cd:10:d0:f4:30:70:a6:b1:d7:1a: 00:72:69:a4:dd:db:a0:e2:de:02:6c:22:64:10:f4:bd:ad:3a: bf:a3:02:07:af:79:e3:2b:e1:56:75:28:40:53:84:62:e5:86: 08:06:b4:50:97:7a:11:64:23:5f:5c:6f:da:06:4a:9a:e7:fd: ae:8d:03:ed:3d:2f:ad:98:b3:f6:5c:0d:40:df:ec:a2:62:f1: ab:b0:ba:a4:60:6a:e2:d2:25:11:0b:34:1e:0c:95:7d:a5:bd: a3:b8:c3:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEojwBvxfL7N/Ba6L4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGI2ZjIyZjktM2ViNi00NTM0LWFmNWUtOWQ1NzE1ZWEz MTA5MB4XDTI1MDYxMDAxMDA1MFoXDTI1MDkwODAxMDA1MFowLzEtMCsGA1UEAxMk MThmOWYxZGItYzk1Yi00MzA1LWEyYzYtOWNhOTM1ZjJhYThkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAknVO1EQCd7SK+iQ3+JhNxPa/8X9yGUVfcqs4 dTXDG1bidK+JEgzuKxg8i9z2UU5Vf4VaRwO6dW36sXagQjKAhz91agY5WUqaAyl6 2CAo8Z6xa+UIsXp7K0K7qUztCrAJB6jUFqxQAOuqLSqpdmSIbD6yZ/jTjz+JRmcR CTK7o01NaXqwcFDUzUjkoq305YL9eJ5aYEY72ZaqJOntR1xKnqn5xjAlOm8KDFOO TkvrzMe2eoEvPIArtZQ++RD9mkUu73x5RinVskJ3xVZyzRuy+qxLDWkx0Kgsw40C d57JJz+xtw/iqF6nyZarwO3TMnIBFYOA8TI34FdAirCcQqMYnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFS4gVhdZQ1su/Yyq76owBjw4ShnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84YjZm MjJmOS0zZWI2LTQ1MzQtYWY1ZS05ZDU3MTVlYTMxMDkvNDBiMjYzMzUtYjZkMS0z NDIwLTk3ODQtZTgwZDkyZTVmZDg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvOGI2ZjIyZjktM2ViNi00NTM0LWFm NWUtOWQ1NzE1ZWEzMTA5LzhiNmYyMmY5LTNlYjYtNDUzNC1hZjVlLTlkNTcxNWVh MzEwOS5jcmwwHwYDVR0jBBgwFoAUZlnDfJtBAob0x8/CZoobNxbE1hUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS84YjZmMjJmOS0zZWI2LTQ1MzQtYWY1ZS05ZDU3 MTVlYTMxMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiDJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABtCMOL4MB9EFpsKLLPVErMRhwshZdzjOBMYYHdeNYJqo/+a96+Z3+DG n5vkL8PkiQVuYmiIq2KKHu4U4ZKuTx3jNe85QHytogntTX2fuDlsCe3gFbIOj2PI urgYijIDJ37mXxi+3f7uKjOA/UZmvrpfscOaYyCZr6md16WOUuKp7Q6goEcSgoev TrpDoB21nVFIfQTp6hGhzRDQ9DBwprHXGgByaaTd26Di3gJsImQQ9L2tOr+jAgev eeMr4VZ1KEBThGLlhggGtFCXehFkI19cb9oGSprn/a6NA+09L62Ys/ZcDUDf7KJi 8auwuqRgauLSJRELNB4MlX2lvaO4w4E= -----END CERTIFICATE-----Generated at Sun Jun 15 16:11:56 2025 by rpki-client