$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/9a1b0548-1d88-3285-bb31-d2afe85dad2f.roa File: 9a1b0548-1d88-3285-bb31-d2afe85dad2f.roa (raw, json) Hash identifier: mA4Gu6lly65F7I09OV7c0c+K4d2zChE9oXUbLzPucJc= Subject key identifier: F4:3C:29:2B:B7:1B:00:DE:84:44:75:03:B5:F8:4B:8B:50:C2:46:8D Certificate issuer: /CN=4d43adfd-f6e4-4504-86f0-2efadf9d4d21 Certificate serial: 010D0C9F43285849ED4FCB51A70E00A79EA0B100 Authority key identifier: 1C:B3:CA:54:75:F6:00:9C:AB:A9:BF:E4:15:40:09:40:A1:EF:39:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/9a1b0548-1d88-3285-bb31-d2afe85dad2f.roa Signing time: Wed 21 May 2025 13:01:04 +0000 ROA not before: Wed 21 May 2025 13:01:04 +0000 ROA not after: Tue 19 Aug 2025 13:01:04 +0000 asID: 11404 IP address blocks: 208.70.146.0/23 maxlen: 24 208.70.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/4d43adfd-f6e4-4504-86f0-2efadf9d4d21.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/4d43adfd-f6e4-4504-86f0-2efadf9d4d21.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ed:4f:cb:51:a7:0e:00:a7:9e:a0:b1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d43adfd-f6e4-4504-86f0-2efadf9d4d21 Validity Not Before: May 21 13:01:04 2025 GMT Not After : Aug 19 13:01:04 2025 GMT Subject: CN=e95d8c78-ddad-409b-9c3a-715ddc50fe5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a1:48:e7:b1:44:b5:43:91:f5:8a:f3:ca:f6: f6:f9:fb:d5:ff:ec:77:db:33:c4:ea:9c:63:f3:5b: 10:87:8b:f7:88:2f:98:a2:9a:0d:dd:16:e9:09:34: 33:16:5c:5c:04:51:75:4f:25:ab:3f:64:8e:35:35: 44:86:01:3d:7e:81:c1:02:19:83:b5:6a:cf:71:22: e3:37:2b:34:a8:b6:81:db:2c:24:6d:c2:93:e9:6c: 0f:9a:1e:c3:ff:63:0f:cf:af:50:40:bc:10:3a:3e: 1d:83:f2:3c:8b:aa:99:11:c0:04:b8:d7:e8:de:47: a8:be:93:2d:c0:b0:fb:f0:a2:cb:59:aa:4f:36:ce: 59:81:50:b4:3a:57:51:df:4e:2c:bf:ca:ef:92:55: 47:62:a8:34:57:32:09:70:f6:19:b2:ad:da:5d:d1: 9b:10:24:03:0a:98:d9:36:33:6a:89:53:8a:12:2b: ee:c2:db:42:51:76:41:4e:ba:e4:01:2b:14:c1:0f: 6b:bb:7b:a7:53:9f:f7:85:34:72:64:fb:a6:bc:53: 4a:80:ba:94:68:eb:c5:6f:b3:ca:58:d4:2a:bc:f7: 84:5c:f8:dd:c7:be:b9:e8:d6:a7:0f:e6:cf:bb:1d: fc:7e:67:4a:73:c3:cc:1e:c4:7c:5d:fd:5e:bc:69: fa:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:3C:29:2B:B7:1B:00:DE:84:44:75:03:B5:F8:4B:8B:50:C2:46:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/9a1b0548-1d88-3285-bb31-d2afe85dad2f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/4d43adfd-f6e4-4504-86f0-2efadf9d4d21.crl X509v3 Authority Key Identifier: keyid:1C:B3:CA:54:75:F6:00:9C:AB:A9:BF:E4:15:40:09:40:A1:EF:39:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21.cer sbgp-ipAddrBlock: critical IPv4: 208.70.146.0/23 208.70.150.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:ff:84:c1:03:b2:c2:ea:63:ba:c4:47:44:e5:5b:38:c5:2a: a2:09:4a:ac:f4:61:61:b2:2c:04:51:12:31:42:44:ce:f1:f6: 61:97:6c:ad:32:e6:d5:cb:e6:55:87:9f:6b:a8:d8:b1:8c:5f: 3a:17:80:0f:52:8e:78:9b:3d:82:55:c5:46:7d:ed:5d:62:9e: 78:0e:be:66:24:b3:17:97:79:8e:d9:b3:54:48:78:24:4c:90: 81:bf:a8:87:bc:2d:65:11:50:9a:5c:65:b9:75:47:f6:0a:5c: 7d:25:59:37:c5:b2:a7:c7:64:3e:05:aa:d0:73:f1:10:31:e1: 83:a0:c7:bc:30:57:83:bc:50:c0:28:a7:a4:78:a8:da:02:b8: 1d:45:a8:37:07:9a:00:f2:3d:2c:ef:20:5a:e1:f6:ef:fe:1f: a3:62:68:dd:d4:f0:d2:68:17:20:4e:6b:d3:da:d2:09:67:59: 4e:51:1c:cc:60:20:9e:00:09:f1:08:67:f4:ce:f6:e7:af:a3: 08:43:52:dd:69:13:b0:fe:88:ec:5b:f7:84:64:1a:6d:5a:8a: cd:fd:86:aa:d4:8b:78:72:29:42:b8:2e:1f:14:86:d5:c6:28: a3:39:ec:c2:ac:51:29:4a:77:3b:8d:82:67:e2:b3:d2:85:2e: 0f:1e:b6:34 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEntT8tRpw4Ap56gsQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGQ0M2FkZmQtZjZlNC00NTA0LTg2ZjAtMmVmYWRmOWQ0 ZDIxMB4XDTI1MDUyMTEzMDEwNFoXDTI1MDgxOTEzMDEwNFowLzEtMCsGA1UEAxMk ZTk1ZDhjNzgtZGRhZC00MDliLTljM2EtNzE1ZGRjNTBmZTVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqFI57FEtUOR9Yrzyvb2+fvV/+x32zPE6pxj 81sQh4v3iC+YopoN3RbpCTQzFlxcBFF1TyWrP2SONTVEhgE9foHBAhmDtWrPcSLj Nys0qLaB2ywkbcKT6WwPmh7D/2MPz69QQLwQOj4dg/I8i6qZEcAEuNfo3keovpMt wLD78KLLWapPNs5ZgVC0OldR304sv8rvklVHYqg0VzIJcPYZsq3aXdGbECQDCpjZ NjNqiVOKEivuwttCUXZBTrrkASsUwQ9ru3unU5/3hTRyZPumvFNKgLqUaOvFb7PK WNQqvPeEXPjdx7656NanD+bPux38fmdKc8PMHsR8Xf1evGn6nwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFPQ8KSu3GwDehER1A7X4S4tQwkaNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80ZDQz YWRmZC1mNmU0LTQ1MDQtODZmMC0yZWZhZGY5ZDRkMjEvOWExYjA1NDgtMWQ4OC0z Mjg1LWJiMzEtZDJhZmU4NWRhZDJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNGQ0M2FkZmQtZjZlNC00NTA0LTg2 ZjAtMmVmYWRmOWQ0ZDIxLzRkNDNhZGZkLWY2ZTQtNDUwNC04NmYwLTJlZmFkZjlk NGQyMS5jcmwwHwYDVR0jBBgwFoAUHLPKVHX2AJyrqb/kFUAJQKHvOZ0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80ZDQzYWRmZC1mNmU0LTQ1MDQtODZmMC0yZWZh ZGY5ZDRkMjEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQB0EaSAwQA 0EaWMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAG//hMEDssLqY7rER0TlWzjFKqIJSqz0YWGyLARREjFCRM7x 9mGXbK0y5tXL5lWHn2uo2LGMXzoXgA9SjnibPYJVxUZ97V1inngOvmYksxeXeY7Z s1RIeCRMkIG/qIe8LWURUJpcZbl1R/YKXH0lWTfFsqfHZD4FqtBz8RAx4YOgx7ww V4O8UMAop6R4qNoCuB1FqDcHmgDyPSzvIFrh9u/+H6NiaN3U8NJoFyBOa9Pa0gln WU5RHMxgIJ4ACfEIZ/TO9uevowhDUt1pE7D+iOxb94RkGm1ais39hqrUi3hyKUK4 Lh8UhtXGKKM57MKsUSlKdzuNgmfis9KFLg8etjQ= -----END CERTIFICATE-----Generated at Sun Jun 15 13:20:27 2025 by rpki-client