$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/1d199482-8ff4-32b9-8354-66e0f89a6c86.roa File: 1d199482-8ff4-32b9-8354-66e0f89a6c86.roa (raw, json) Hash identifier: mEvCWlcs99PkaTB9GtANigZPzD3uS8t14ZuAOqXmjhQ= Subject key identifier: 39:C4:F3:DD:CD:0E:BE:C7:0D:CE:D7:00:8B:56:E4:BD:FC:96:A6:68 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584A2ABAEEAEA0FFC4FA6EBB7FC0 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/1d199482-8ff4-32b9-8354-66e0f89a6c86.roa Signing time: Thu 12 Jun 2025 13:01:03 +0000 ROA not before: Thu 12 Jun 2025 13:01:03 +0000 ROA not after: Wed 10 Sep 2025 13:01:03 +0000 asID: 11404 IP address blocks: 23.252.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2a:ba:ee:ae:a0:ff:c4:fa:6e:bb:7f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Jun 12 13:01:03 2025 GMT Not After : Sep 10 13:01:03 2025 GMT Subject: CN=17b7f184-f841-42d2-8c9c-4e461c673894 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:3f:5c:ea:8e:91:55:18:0b:a7:17:0d:42:76: 16:e9:61:e3:1e:6d:e8:28:26:48:86:52:93:44:21: 33:fc:74:e8:3b:a9:0a:91:78:4e:bf:2b:67:55:e6: d5:28:e3:b5:05:6c:4d:5e:ba:e6:89:9c:e4:c6:54: 3b:80:6a:7b:32:7f:7b:14:f7:95:16:fc:2a:9c:ed: 2d:62:6e:66:af:ba:64:dd:61:55:ed:30:ef:4d:b3: e1:cb:4a:18:15:89:5f:33:fb:14:ca:04:30:55:96: 4b:5a:2f:66:8f:3b:fd:45:98:aa:0a:81:70:19:d9: 8e:d9:49:99:19:66:14:a2:f5:f9:77:a5:51:64:cc: f0:3a:71:29:36:31:bf:6f:4d:eb:15:37:d0:91:bf: 17:20:f2:8d:ee:c5:a2:e7:76:2f:1b:fb:69:43:91: 04:f8:10:ba:66:1d:53:00:ca:22:d1:0e:ba:e6:a6: 6b:dc:c6:8a:a9:de:89:a9:41:04:8d:68:75:ec:2d: a2:35:11:0b:8c:00:ef:82:77:0e:f1:f6:73:42:01: 82:99:cf:51:cf:d8:ae:8d:49:bf:72:5c:02:92:be: 70:e2:89:c9:3e:40:b8:9c:54:95:67:97:e9:a3:65: 87:94:be:dc:2e:90:f7:7b:07:04:aa:05:7d:e5:54: 40:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:C4:F3:DD:CD:0E:BE:C7:0D:CE:D7:00:8B:56:E4:BD:FC:96:A6:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/1d199482-8ff4-32b9-8354-66e0f89a6c86.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 23.252.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:19:49:44:0a:9e:3a:bb:a8:dc:d5:8c:82:bc:c9:08:82:cf: 2b:ae:0b:29:00:67:b4:de:d4:35:31:3a:48:f6:35:1e:0d:ff: 9d:f3:e5:f4:6c:7d:ef:ef:b3:93:74:7b:c2:e4:3d:24:09:e5: 51:22:d5:d0:31:2b:d9:71:f3:80:e6:b5:ef:7b:19:da:8a:4b: c7:93:51:1f:73:fa:15:3d:10:b5:28:30:91:02:c5:20:30:3c: ac:b2:52:ce:44:28:71:43:09:e8:c6:eb:3b:6a:ae:ac:d9:22: 13:e0:d4:78:53:59:f6:ba:ce:8f:2b:b6:9f:d9:cd:8b:17:4f: 18:31:7b:0d:de:66:9b:1c:22:2a:0c:7b:64:c5:7a:fc:cd:89: 02:3d:13:51:88:40:99:10:b1:09:18:0f:ca:9d:dd:fb:ae:89: c1:bc:7f:f5:24:82:ef:e4:5d:5a:c5:2b:7b:6f:f7:4e:92:75: d1:01:30:63:a2:a3:df:22:16:0d:d0:a9:65:4e:04:ef:69:b1: b1:9a:c2:84:68:44:45:73:a1:67:19:7c:32:0e:70:a1:02:cf: 85:b3:20:b8:89:e6:d0:56:19:dc:a9:a3:19:a0:11:3a:55:e9: c2:d7:af:1d:3f:ae:b7:b9:19:cc:43:b1:08:55:a9:cc:d3:d5: 26:1f:82:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoquu6uoP/E+m67f8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDYxMjEzMDEwM1oXDTI1MDkxMDEzMDEwM1owLzEtMCsGA1UEAxMk MTdiN2YxODQtZjg0MS00MmQyLThjOWMtNGU0NjFjNjczODk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmT9c6o6RVRgLpxcNQnYW6WHjHm3oKCZIhlKT RCEz/HToO6kKkXhOvytnVebVKOO1BWxNXrrmiZzkxlQ7gGp7Mn97FPeVFvwqnO0t Ym5mr7pk3WFV7TDvTbPhy0oYFYlfM/sUygQwVZZLWi9mjzv9RZiqCoFwGdmO2UmZ GWYUovX5d6VRZMzwOnEpNjG/b03rFTfQkb8XIPKN7sWi53YvG/tpQ5EE+BC6Zh1T AMoi0Q665qZr3MaKqd6JqUEEjWh17C2iNRELjADvgncO8fZzQgGCmc9Rz9iujUm/ clwCkr5w4onJPkC4nFSVZ5fpo2WHlL7cLpD3ewcEqgV95VRAWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDnE893NDr7HDc7XAItW5L38lqZoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvMWQxOTk0ODItOGZmNC0z MmI5LTgzNTQtNjZlMGY4OWE2Yzg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF/wwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFAZSUQKnjq7qNzVjIK8yQiCzyuuCykAZ7Te1DUxOkj2NR4N/53z5fRs fe/vs5N0e8LkPSQJ5VEi1dAxK9lx84Dmte97GdqKS8eTUR9z+hU9ELUoMJECxSAw PKyyUs5EKHFDCejG6ztqrqzZIhPg1HhTWfa6zo8rtp/ZzYsXTxgxew3eZpscIioM e2TFevzNiQI9E1GIQJkQsQkYD8qd3fuuicG8f/Ukgu/kXVrFK3tv906SddEBMGOi o98iFg3QqWVOBO9psbGawoRoREVzoWcZfDIOcKECz4WzILiJ5tBWGdypoxmgETpV 6cLXrx0/rre5GcxDsQhVqczT1SYfglk= -----END CERTIFICATE-----Generated at Sun Jun 15 11:45:16 2025 by rpki-client