$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/152e606d-698b-3874-aba9-278a7980110a.roa File: 152e606d-698b-3874-aba9-278a7980110a.roa (raw, json) Hash identifier: Y7GX08o/BGHR6Iq66z+1oiMPIGUC+UbrKEkZtQIQQJQ= Subject key identifier: 1A:AC:84:CE:91:98:BB:F3:82:2E:00:F9:12:91:88:8D:07:AC:10:B5 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584A2ABAFB644F04F780D5EBD120 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/152e606d-698b-3874-aba9-278a7980110a.roa Signing time: Thu 12 Jun 2025 13:01:03 +0000 ROA not before: Thu 12 Jun 2025 13:01:03 +0000 ROA not after: Wed 10 Sep 2025 13:01:03 +0000 asID: 11404 IP address blocks: 64.85.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2a:ba:fb:64:4f:04:f7:80:d5:eb:d1:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Jun 12 13:01:03 2025 GMT Not After : Sep 10 13:01:03 2025 GMT Subject: CN=7ab22b31-173a-49d6-910c-c2de9c3c378e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:0d:f4:e1:6d:15:38:5e:2f:05:38:48:6f:13: 17:b8:0b:c2:64:2a:79:72:2b:85:c2:cc:85:7c:69: e2:38:0b:cf:14:c1:63:d9:18:c0:fa:3e:17:7a:50: ab:35:c4:f8:fc:08:fe:12:97:f8:51:d5:c0:92:ee: b3:1a:77:42:51:f5:96:51:ae:e4:de:b4:95:7d:b4: 6d:41:9c:9f:db:49:66:63:61:5b:2a:f9:d8:11:82: 4d:c1:f4:65:7e:39:97:80:6e:f7:da:28:20:20:26: ab:53:d0:c4:fb:8a:42:2a:bc:6e:b9:89:d1:2e:bd: 81:62:de:e8:0e:dc:c0:f5:d4:73:1c:47:42:32:f9: 06:d5:3f:0d:cc:9d:06:4a:2d:c1:af:b2:5e:f9:9d: 0e:29:67:a9:ce:c7:b5:f9:56:1e:1d:3d:6d:29:2a: d1:fe:e5:7f:66:25:06:86:a2:a0:b2:ca:94:3e:cb: dd:3b:34:cb:ea:3e:1a:e5:f3:3c:ae:3d:23:f0:26: 9d:18:03:e5:a1:a1:7d:36:59:b3:92:d9:34:b5:c7: 5c:dd:0a:d6:16:7a:f4:56:73:1d:6b:52:1c:22:ef: 2b:37:6e:50:13:a5:47:6b:86:e2:35:bb:4e:9b:bd: f2:f0:2f:fc:27:45:e2:4f:e2:c1:2f:af:26:8a:65: 07:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:AC:84:CE:91:98:BB:F3:82:2E:00:F9:12:91:88:8D:07:AC:10:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/152e606d-698b-3874-aba9-278a7980110a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 64.85.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:1b:a9:8b:95:e8:1b:44:26:18:1c:2a:03:a1:82:6d:2c:d8: 97:74:33:80:38:52:4a:c3:27:2e:93:76:ac:6e:d1:ac:51:d2: 13:31:27:5f:91:e6:64:38:40:33:f4:35:d7:b8:aa:71:ac:72: cd:7b:3f:39:06:a9:a6:54:6a:a7:0b:ea:2b:6c:af:ec:d7:72: 4a:a0:a4:75:a0:02:c6:6f:d8:22:55:00:2d:c5:91:3f:9c:20: a6:56:16:25:f5:ca:c0:b1:89:24:d7:d3:94:aa:93:55:99:25: 21:61:4b:9b:71:66:c1:d9:61:64:a7:e1:68:62:29:91:64:4f: c7:e7:22:fc:9d:d9:9e:3c:44:fa:52:b7:5f:2b:1b:be:ac:40: 94:08:62:86:34:f2:6d:69:da:88:1f:a9:6e:5c:f8:a9:0c:e0: 72:f0:8d:16:39:cd:6f:bb:91:06:48:6a:fa:1a:26:54:42:0b: b0:f5:d4:c4:e1:b7:53:30:aa:54:3d:e6:79:ef:83:ce:0f:8a: 7f:e1:19:91:ff:6e:0a:a0:09:5f:ff:d5:ae:d1:2b:ff:57:07: 70:71:d2:09:25:69:b2:53:c7:0a:a3:66:ac:71:ed:9b:b3:e5: da:ea:e1:91:80:97:c3:de:ad:e0:ac:e9:23:52:25:74:f5:79: 20:a0:31:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoquvtkTwT3gNXr0SAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDYxMjEzMDEwM1oXDTI1MDkxMDEzMDEwM1owLzEtMCsGA1UEAxMk N2FiMjJiMzEtMTczYS00OWQ2LTkxMGMtYzJkZTljM2MzNzhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQ304W0VOF4vBThIbxMXuAvCZCp5ciuFwsyF fGniOAvPFMFj2RjA+j4XelCrNcT4/Aj+Epf4UdXAku6zGndCUfWWUa7k3rSVfbRt QZyf20lmY2FbKvnYEYJNwfRlfjmXgG732iggICarU9DE+4pCKrxuuYnRLr2BYt7o DtzA9dRzHEdCMvkG1T8NzJ0GSi3Br7Je+Z0OKWepzse1+VYeHT1tKSrR/uV/ZiUG hqKgssqUPsvdOzTL6j4a5fM8rj0j8CadGAPloaF9Nlmzktk0tcdc3QrWFnr0VnMd a1IcIu8rN25QE6VHa4biNbtOm73y8C/8J0XiT+LBL68mimUHpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBqshM6RmLvzgi4A+RKRiI0HrBC1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvMTUyZTYwNmQtNjk4Yi0z ODc0LWFiYTktMjc4YTc5ODAxMTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQFXgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABcbqYuV6BtEJhgcKgOhgm0s2Jd0M4A4UkrDJy6Tdqxu0axR0hMxJ1+R 5mQ4QDP0Nde4qnGscs17PzkGqaZUaqcL6itsr+zXckqgpHWgAsZv2CJVAC3FkT+c IKZWFiX1ysCxiSTX05Sqk1WZJSFhS5txZsHZYWSn4WhiKZFkT8fnIvyd2Z48RPpS t18rG76sQJQIYoY08m1p2ogfqW5c+KkM4HLwjRY5zW+7kQZIavoaJlRCC7D11MTh t1MwqlQ95nnvg84Pin/hGZH/bgqgCV//1a7RK/9XB3Bx0gklabJTxwqjZqxx7Zuz 5drq4ZGAl8PereCs6SNSJXT1eSCgMYU= -----END CERTIFICATE-----Generated at Sun Jun 15 13:07:25 2025 by rpki-client