$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/0be47df5-e448-3b23-b7b1-65b9fd6b8adf.roa File: 0be47df5-e448-3b23-b7b1-65b9fd6b8adf.roa (raw, json) Hash identifier: ckVrZWC7fUyhILkyQoQb6Nlkl+4tW32/eFiFsd6MVLA= Subject key identifier: 34:2C:08:39:AD:8F:3E:C6:9A:EC:60:C1:DE:64:61:F2:E7:37:39:3E Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584A2ABAFE1FA502D6DC36310300 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/0be47df5-e448-3b23-b7b1-65b9fd6b8adf.roa Signing time: Thu 12 Jun 2025 13:01:03 +0000 ROA not before: Thu 12 Jun 2025 13:01:03 +0000 ROA not after: Wed 10 Sep 2025 13:01:03 +0000 asID: 54858 IP address blocks: 152.44.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2a:ba:fe:1f:a5:02:d6:dc:36:31:03:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Jun 12 13:01:03 2025 GMT Not After : Sep 10 13:01:03 2025 GMT Subject: CN=ed3c3444-545c-4004-8a81-3d69ca2a0ab0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:ec:71:af:51:28:b1:2a:ba:1a:1b:b7:22:f2: 32:cb:3b:81:ed:57:61:fe:45:f7:02:3c:42:cf:ca: 51:fe:ec:25:47:2d:83:61:fe:8d:a8:52:fa:64:61: 83:21:3b:35:cd:aa:68:e2:51:2d:44:45:6e:c2:21: cb:2a:91:0e:07:f1:39:48:d7:55:5d:7d:15:c4:48: 30:e7:97:f2:d5:35:94:db:b3:91:62:b4:86:66:f3: 05:64:eb:63:8a:1c:6f:98:42:0d:96:3e:f1:6f:79: 9b:03:86:b9:f4:d8:68:7f:8f:0d:30:7c:5d:c8:15: cb:40:20:2c:83:11:03:3f:01:64:2d:a6:86:95:7d: 88:58:76:86:f3:fd:03:8b:d5:d8:7d:1d:7a:44:41: 15:0a:c0:d9:e9:63:e2:78:12:90:a4:de:ce:6a:65: 8c:8f:20:f5:d3:62:50:16:17:b7:41:2a:1e:18:d3: 9f:4f:45:fd:3e:b3:c9:f9:29:b5:ea:3b:da:c7:39: 9e:db:fa:4f:82:7b:cc:f2:c9:40:f8:d9:b9:27:db: 1a:b8:53:0f:e9:30:08:6a:d5:dd:ff:9c:e0:f9:b3: 2a:c4:d5:61:7c:04:61:0c:5e:b1:29:74:39:f3:0c: 7f:7c:24:ee:c1:99:b6:98:41:a9:e4:c9:ce:fc:3b: eb:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:2C:08:39:AD:8F:3E:C6:9A:EC:60:C1:DE:64:61:F2:E7:37:39:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/0be47df5-e448-3b23-b7b1-65b9fd6b8adf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 152.44.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:f7:a4:27:32:85:08:ea:09:bf:47:7f:b0:9e:89:48:96:72: 32:08:88:78:6e:e4:df:1f:28:2a:d9:79:03:72:68:26:d5:83: 60:95:7a:32:33:51:f0:75:89:04:de:bb:b1:56:47:39:47:fd: ff:5c:07:b7:dd:c8:1e:c6:7b:8e:ca:df:47:0c:1c:0a:de:d8: b4:df:13:f0:f5:85:41:93:26:48:06:45:ca:18:82:4e:e2:da: 1f:0d:35:b1:9e:95:b2:03:39:23:0b:9c:d8:ef:58:2f:1b:0b: ba:36:14:8d:d8:8b:a6:c9:78:24:7a:1d:72:3e:65:e6:72:bc: 6f:bc:22:ad:b9:bf:e4:40:af:ec:6b:18:42:20:e1:47:be:62: bf:cc:89:27:50:c4:48:24:0b:a1:21:57:e3:76:f7:a6:18:0d: 55:9e:6c:76:4f:36:9b:66:23:bd:de:69:e6:bd:af:4e:50:9a: 82:da:11:e9:4a:95:b3:14:18:2c:ec:42:42:be:72:04:96:13: 62:19:c7:67:d9:e0:56:22:87:df:cb:c3:f8:37:e0:89:4e:4b: 84:08:de:2b:dc:8d:a2:ec:ab:50:d6:37:da:70:3c:3d:34:42: 56:fa:3c:0c:2d:9f:aa:a4:6a:c5:59:86:52:37:7c:bb:f7:1d: 05:7e:8b:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoquv4fpQLW3DYxAwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDYxMjEzMDEwM1oXDTI1MDkxMDEzMDEwM1owLzEtMCsGA1UEAxMk ZWQzYzM0NDQtNTQ1Yy00MDA0LThhODEtM2Q2OWNhMmEwYWIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+xxr1EosSq6Ghu3IvIyyzuB7Vdh/kX3AjxC z8pR/uwlRy2DYf6NqFL6ZGGDITs1zapo4lEtREVuwiHLKpEOB/E5SNdVXX0VxEgw 55fy1TWU27ORYrSGZvMFZOtjihxvmEINlj7xb3mbA4a59Nhof48NMHxdyBXLQCAs gxEDPwFkLaaGlX2IWHaG8/0Di9XYfR16REEVCsDZ6WPieBKQpN7OamWMjyD102JQ Fhe3QSoeGNOfT0X9PrPJ+Sm16jvaxzme2/pPgnvM8slA+Nm5J9sauFMP6TAIatXd /5zg+bMqxNVhfARhDF6xKXQ58wx/fCTuwZm2mEGp5MnO/DvrFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDQsCDmtjz7Gmuxgwd5kYfLnNzk+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvMGJlNDdkZjUtZTQ0OC0z YjIzLWI3YjEtNjViOWZkNmI4YWRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHmCyAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGz3pCcyhQjqCb9Hf7CeiUiWcjIIiHhu5N8fKCrZeQNyaCbVg2CVejIz UfB1iQTeu7FWRzlH/f9cB7fdyB7Ge47K30cMHAre2LTfE/D1hUGTJkgGRcoYgk7i 2h8NNbGelbIDOSMLnNjvWC8bC7o2FI3Yi6bJeCR6HXI+ZeZyvG+8Iq25v+RAr+xr GEIg4Ue+Yr/MiSdQxEgkC6EhV+N296YYDVWebHZPNptmI73eaea9r05QmoLaEelK lbMUGCzsQkK+cgSWE2IZx2fZ4FYih9/Lw/g34IlOS4QI3ivcjaLsq1DWN9pwPD00 Qlb6PAwtn6qkasVZhlI3fLv3HQV+iyg= -----END CERTIFICATE-----Generated at Sun Jun 15 15:28:20 2025 by rpki-client