$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/4a8f56d0-8f8b-39e0-9b59-2cf32dce6769.roa File: 4a8f56d0-8f8b-39e0-9b59-2cf32dce6769.roa (raw, json) Hash identifier: 0DVqgfbR7RoV/qVzjnkzuJSwhR6+0Rno6SvV4lAzVHw= Subject key identifier: EA:44:90:44:0C:49:2F:FD:CF:54:9F:C1:78:FC:DF:73:0E:14:7D:50 Certificate issuer: /CN=69a80da8-69e1-4580-ab63-1ce23bea895b Certificate serial: 010D0C9F4328584A2ABADDF862BE10C851EC8500 Authority key identifier: 86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/4a8f56d0-8f8b-39e0-9b59-2cf32dce6769.roa Signing time: Thu 12 Jun 2025 13:01:03 +0000 ROA not before: Thu 12 Jun 2025 13:01:03 +0000 ROA not after: Wed 10 Sep 2025 13:01:03 +0000 asID: 11260 IP address blocks: 71.7.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2a:ba:dd:f8:62:be:10:c8:51:ec:85:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69a80da8-69e1-4580-ab63-1ce23bea895b Validity Not Before: Jun 12 13:01:03 2025 GMT Not After : Sep 10 13:01:03 2025 GMT Subject: CN=6ea04a38-372f-4fef-bff8-4b4aa8718bcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:ee:35:a7:df:42:62:b4:d2:06:4b:61:b4:a2: 0b:88:1e:8d:46:40:5a:56:9d:29:0e:55:5e:61:e8: 4f:79:ae:31:7f:a0:21:21:2a:cb:69:63:5d:6e:60: 82:c7:0b:5a:18:a8:90:11:cf:77:20:c9:0e:2b:f6: 6c:82:5b:b0:11:b4:dc:3a:0b:19:2d:6b:1d:7e:c5: a6:7c:ef:eb:25:75:40:4f:cf:79:0d:6b:20:19:1d: 13:6f:4f:28:4a:83:f3:4d:9c:ba:c0:c4:ce:6b:89: cc:c9:a2:3b:38:75:91:98:25:5e:af:12:ab:72:fe: bf:ac:b0:c9:9f:09:2d:19:cc:92:33:ae:47:62:54: b2:f1:18:ad:60:55:9b:4b:0f:d1:d9:2f:b4:a9:b8: 4d:41:0c:35:63:5f:ce:36:f2:7f:a9:82:f6:92:93: b8:4e:a8:41:e5:55:46:37:43:8d:f5:4e:db:fc:11: 52:a8:d6:02:e2:21:5f:5f:37:c2:d6:7f:73:9d:49: bf:37:4d:93:47:1b:a1:c8:cc:74:7e:c7:b5:02:0e: 0c:ce:e6:92:14:3f:f5:b4:0e:c9:c6:de:84:6b:9b: a9:b5:47:84:c3:4d:38:90:c9:d6:53:37:18:fa:05: 90:60:ee:1a:3d:14:84:bc:65:5f:59:13:23:eb:65: c4:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:44:90:44:0C:49:2F:FD:CF:54:9F:C1:78:FC:DF:73:0E:14:7D:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/4a8f56d0-8f8b-39e0-9b59-2cf32dce6769.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl X509v3 Authority Key Identifier: keyid:86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer sbgp-ipAddrBlock: critical IPv4: 71.7.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:03:6f:bd:24:d1:d5:30:44:61:c5:29:08:09:a2:61:80:d6: c0:53:93:03:c5:9f:f6:c5:5c:3e:91:f8:1d:13:2b:f1:47:e5: 6d:c9:f6:e8:88:78:17:01:77:25:fb:0c:97:2f:b7:76:53:f9: a0:97:47:d7:d3:6c:14:1d:9b:42:ae:93:01:06:4f:a7:32:09: 7f:54:3c:d4:ce:7e:af:8f:2b:07:a6:db:80:28:0c:5f:68:c5: 8d:13:50:ba:f2:81:13:5f:cf:03:1d:14:0e:7b:da:d9:41:50: 58:e1:1c:ed:05:60:80:9b:31:8f:e5:53:98:91:4d:f3:91:5f: 21:93:a7:a5:ea:4a:88:70:b0:10:7a:13:13:4e:27:d6:7b:28: 28:24:2f:45:a1:74:7c:6c:fe:8b:49:98:49:a9:4a:ab:0e:0b: 23:6e:dd:2d:1b:c3:fd:dd:38:6d:c8:99:0f:af:11:92:9d:20: 66:9c:c9:d1:95:e4:4d:d6:69:2f:f8:c1:30:7b:a5:fc:3a:8f: 66:51:22:2e:db:ae:fa:a3:92:2e:74:b7:a2:ec:7d:3b:3c:c3: 49:99:b5:92:9a:d7:af:4f:08:73:c0:44:61:81:83:58:0c:62: d8:d4:f3:83:ec:e0:b3:dd:85:ea:34:2d:d7:c4:99:4d:23:72: e5:0b:9d:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoqut34Yr4QyFHshQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlhODBkYTgtNjllMS00NTgwLWFiNjMtMWNlMjNiZWE4 OTViMB4XDTI1MDYxMjEzMDEwM1oXDTI1MDkxMDEzMDEwM1owLzEtMCsGA1UEAxMk NmVhMDRhMzgtMzcyZi00ZmVmLWJmZjgtNGI0YWE4NzE4YmNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhO41p99CYrTSBkthtKILiB6NRkBaVp0pDlVe YehPea4xf6AhISrLaWNdbmCCxwtaGKiQEc93IMkOK/ZsgluwEbTcOgsZLWsdfsWm fO/rJXVAT895DWsgGR0Tb08oSoPzTZy6wMTOa4nMyaI7OHWRmCVerxKrcv6/rLDJ nwktGcySM65HYlSy8RitYFWbSw/R2S+0qbhNQQw1Y1/ONvJ/qYL2kpO4TqhB5VVG N0ON9U7b/BFSqNYC4iFfXzfC1n9znUm/N02TRxuhyMx0fse1Ag4MzuaSFD/1tA7J xt6Ea5uptUeEw004kMnWUzcY+gWQYO4aPRSEvGVfWRMj62XEfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOpEkEQMSS/9z1SfwXj833MOFH1QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82OWE4 MGRhOC02OWUxLTQ1ODAtYWI2My0xY2UyM2JlYTg5NWIvNGE4ZjU2ZDAtOGY4Yi0z OWUwLTliNTktMmNmMzJkY2U2NzY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNjlhODBkYTgtNjllMS00NTgwLWFi NjMtMWNlMjNiZWE4OTViLzY5YTgwZGE4LTY5ZTEtNDU4MC1hYjYzLTFjZTIzYmVh ODk1Yi5jcmwwHwYDVR0jBBgwFoAUhqiB3KYHVFZrTqUs0M1hUuvpHc8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82OWE4MGRhOC02OWUxLTQ1ODAtYWI2My0xY2Uy M2JlYTg5NWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERwfwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEwDb70k0dUwRGHFKQgJomGA1sBTkwPFn/bFXD6R+B0TK/FH5W3J9uiI eBcBdyX7DJcvt3ZT+aCXR9fTbBQdm0KukwEGT6cyCX9UPNTOfq+PKwem24AoDF9o xY0TULrygRNfzwMdFA572tlBUFjhHO0FYICbMY/lU5iRTfORXyGTp6XqSohwsBB6 ExNOJ9Z7KCgkL0WhdHxs/otJmEmpSqsOCyNu3S0bw/3dOG3ImQ+vEZKdIGacydGV 5E3WaS/4wTB7pfw6j2ZRIi7brvqjki50t6LsfTs8w0mZtZKa169PCHPARGGBg1gM YtjU84Ps4LPdheo0LdfEmU0jcuULnVk= -----END CERTIFICATE-----Generated at Sun Jun 15 16:05:52 2025 by rpki-client