$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/3ffbb94c-c2ac-3005-bb52-81e2ce62be16.roa File: 3ffbb94c-c2ac-3005-bb52-81e2ce62be16.roa (raw, json) Hash identifier: 0mcuOM3CZ9BW9fIp02iuTIaNcpFZiknTTob/qHeYdlM= Subject key identifier: 6B:1B:94:4B:2A:A7:DC:48:5B:C1:37:28:3C:BF:54:9E:03:D7:16:59 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584A2ABAFC92D2BDC5D86528FF80 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/3ffbb94c-c2ac-3005-bb52-81e2ce62be16.roa Signing time: Thu 12 Jun 2025 13:01:03 +0000 ROA not before: Thu 12 Jun 2025 13:01:03 +0000 ROA not after: Wed 10 Sep 2025 13:01:03 +0000 asID: 11404 IP address blocks: 204.195.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2a:ba:fc:92:d2:bd:c5:d8:65:28:ff:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Jun 12 13:01:03 2025 GMT Not After : Sep 10 13:01:03 2025 GMT Subject: CN=fafe9fcc-dfee-45ae-bc35-5e52178f6a80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:98:e6:1d:2f:f7:eb:05:b4:44:1e:b9:34:1a: b6:84:61:e1:bc:4f:1a:8b:1c:8d:38:01:85:c6:6d: 3a:43:79:48:52:e2:13:3c:57:78:11:93:5f:3c:4b: d8:86:5d:03:d0:0d:9a:42:27:6c:74:a0:74:b5:8b: a2:48:eb:d9:c0:b2:28:dd:8d:a0:65:40:13:bd:22: bf:81:3e:e1:33:9c:04:1a:16:29:7f:bd:ac:fe:49: 5a:15:65:eb:b0:b7:61:1f:d6:fb:92:61:22:e1:84: 91:8d:e8:7f:ae:dc:98:5d:33:5c:55:49:62:92:ab: 42:49:31:e1:5a:cc:53:16:07:ed:0a:88:01:d5:f8: 4b:9a:9c:d7:08:b8:86:9c:79:24:b2:2f:78:51:9e: 72:9d:20:c5:9b:dc:ec:1a:99:ca:f6:4f:b5:d7:9e: 4c:fc:6d:fb:3c:f6:a5:3e:2b:25:7f:8c:f9:df:64: 89:ec:dd:44:31:c0:7f:7c:8a:c1:e9:d0:45:d0:5f: 53:07:ec:c0:ec:cc:d0:3e:2a:47:66:77:42:79:f6: 87:e1:a6:72:e2:ef:76:ff:aa:75:fd:93:13:ce:50: ee:62:8d:8d:79:05:12:d0:ad:2e:cb:5d:59:83:24: 8d:bf:10:04:2b:45:cb:1a:52:d9:9a:08:1a:fc:7d: ad:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:1B:94:4B:2A:A7:DC:48:5B:C1:37:28:3C:BF:54:9E:03:D7:16:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/3ffbb94c-c2ac-3005-bb52-81e2ce62be16.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 204.195.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:dd:dd:02:d4:99:12:0b:21:a0:7e:75:64:23:8e:09:43:f8: a4:b3:af:f7:cb:12:5e:ea:3f:d9:aa:0b:b9:66:41:b3:61:9a: fd:15:c6:07:5c:26:75:eb:ec:31:6c:2b:de:bd:0f:9a:15:9b: 82:4a:26:83:10:0e:94:09:29:23:4e:ef:57:9a:39:65:95:d1: c1:42:6c:74:3c:94:18:3a:5e:38:cc:99:70:17:72:06:bf:d3: 64:56:1e:ec:07:c6:87:a9:17:a2:fd:43:b8:59:06:48:ac:55: f6:e6:15:31:6f:76:09:56:c1:26:1d:72:1b:13:24:28:4b:d9: 5b:9e:1f:c8:91:6e:06:73:09:e8:9a:c3:2f:3b:16:ca:06:69: b4:c8:22:d7:a9:99:45:f8:0e:60:6c:cf:7a:11:f6:57:f7:96: fa:1a:76:79:15:58:71:da:5c:e6:a7:b6:93:61:d5:23:d3:f9: 5e:bd:00:65:08:01:a1:e3:ed:aa:fb:46:6e:4d:61:6f:3f:85: 18:2e:25:55:db:27:34:f9:1d:21:3e:5d:a8:9a:5e:f2:76:24: 81:8c:19:08:79:88:66:3b:29:38:ce:02:05:ca:d8:45:d2:bf: 92:a6:75:e3:3c:a5:d7:b2:40:87:dd:8d:12:96:f6:98:6b:3e: 55:65:6f:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoquvyS0r3F2GUo/4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDYxMjEzMDEwM1oXDTI1MDkxMDEzMDEwM1owLzEtMCsGA1UEAxMk ZmFmZTlmY2MtZGZlZS00NWFlLWJjMzUtNWU1MjE3OGY2YTgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpjmHS/36wW0RB65NBq2hGHhvE8aixyNOAGF xm06Q3lIUuITPFd4EZNfPEvYhl0D0A2aQidsdKB0tYuiSOvZwLIo3Y2gZUATvSK/ gT7hM5wEGhYpf72s/klaFWXrsLdhH9b7kmEi4YSRjeh/rtyYXTNcVUlikqtCSTHh WsxTFgftCogB1fhLmpzXCLiGnHkksi94UZ5ynSDFm9zsGpnK9k+1155M/G37PPal Pislf4z532SJ7N1EMcB/fIrB6dBF0F9TB+zA7MzQPipHZndCefaH4aZy4u92/6p1 /ZMTzlDuYo2NeQUS0K0uy11ZgySNvxAEK0XLGlLZmgga/H2tcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGsblEsqp9xIW8E3KDy/VJ4D1xZZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvM2ZmYmI5NGMtYzJhYy0z MDA1LWJiNTItODFlMmNlNjJiZTE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHzMMAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAArd3QLUmRILIaB+dWQjjglD+KSzr/fLEl7qP9mqC7lmQbNhmv0Vxgdc JnXr7DFsK969D5oVm4JKJoMQDpQJKSNO71eaOWWV0cFCbHQ8lBg6XjjMmXAXcga/ 02RWHuwHxoepF6L9Q7hZBkisVfbmFTFvdglWwSYdchsTJChL2VueH8iRbgZzCeia wy87FsoGabTIItepmUX4DmBsz3oR9lf3lvoadnkVWHHaXOantpNh1SPT+V69AGUI AaHj7ar7Rm5NYW8/hRguJVXbJzT5HSE+XaiaXvJ2JIGMGQh5iGY7KTjOAgXK2EXS v5KmdeM8pdeyQIfdjRKW9phrPlVlbwA= -----END CERTIFICATE-----Generated at Sun Jun 15 11:35:41 2025 by rpki-client