$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/4d58af25-f7ee-30be-8bbe-240b424b0891.roa File: 4d58af25-f7ee-30be-8bbe-240b424b0891.roa (raw, json) Hash identifier: DtQvwA0UjlsBEAlwpFRcGdzvjliNu4JZezae/rShrnU= Subject key identifier: 74:59:D7:79:6B:74:CB:81:DD:E4:F6:E7:C6:3C:39:6B:6A:6C:BA:76 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584A2ABAF2516F63D645121A2600 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/4d58af25-f7ee-30be-8bbe-240b424b0891.roa Signing time: Thu 12 Jun 2025 13:01:03 +0000 ROA not before: Thu 12 Jun 2025 13:01:03 +0000 ROA not after: Wed 10 Sep 2025 13:01:03 +0000 asID: 54858 IP address blocks: 216.243.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2a:ba:f2:51:6f:63:d6:45:12:1a:26:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Jun 12 13:01:03 2025 GMT Not After : Sep 10 13:01:03 2025 GMT Subject: CN=1d55cd94-98aa-455f-90a7-4d6194e14f84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:d9:4d:0e:bb:24:a3:03:e9:83:dd:f1:2d:aa: b7:cd:64:06:2a:1e:23:75:5f:25:17:c6:9f:7c:80: ee:52:24:b7:4d:0f:1f:ae:85:e4:1c:bc:1f:2c:25: a1:46:e8:f6:89:d9:df:fc:ef:90:1a:31:23:43:17: a6:67:b3:72:a3:58:b9:0d:30:1f:4e:23:80:d5:f8: 82:49:e6:65:7c:be:ee:73:8c:44:f6:70:6b:bd:ee: f7:25:1f:ad:a5:74:77:22:75:fe:67:2b:1a:0c:2f: 3a:fd:a5:73:fd:b0:43:b2:2a:ed:a8:b0:f5:e2:d5: 38:2a:2d:5d:8f:e6:4e:59:a3:7f:e0:94:3e:e8:63: ed:7f:e5:ce:98:c6:6a:fc:ca:b7:26:e6:c3:8f:d3: ad:b7:a7:c8:3c:ce:6a:7b:74:01:6b:e2:94:01:db: 91:b5:70:53:45:af:25:39:d4:f9:d7:98:d1:e8:fc: 15:c4:9e:f7:ec:aa:fc:e8:87:e4:f2:03:aa:9f:5d: 54:22:40:a9:cd:62:40:2a:e0:4a:8c:1a:dc:33:5f: 33:19:62:ef:bd:3f:1e:24:c2:6e:57:87:1c:7f:c4: 56:07:a6:94:d6:d1:f3:75:ef:57:de:37:d8:ff:ff: ee:8c:6d:0b:e4:7c:8f:d6:0c:46:e1:d0:77:2d:26: 26:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:59:D7:79:6B:74:CB:81:DD:E4:F6:E7:C6:3C:39:6B:6A:6C:BA:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/4d58af25-f7ee-30be-8bbe-240b424b0891.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 216.243.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:c9:86:88:c3:fe:0c:14:01:23:f1:46:3e:8a:1f:6c:d9:a9: 5c:07:53:75:4c:4a:a0:67:de:a4:cf:31:1f:9f:ce:a4:8d:a9: af:36:59:b5:a1:51:f0:56:80:2a:d2:ce:e6:3d:d1:61:c1:67: 0b:dc:cd:90:e6:6b:28:ae:49:26:14:b0:02:60:5d:99:b0:8c: 10:db:ad:48:bd:0c:99:43:ec:2f:23:a8:1d:d8:fa:05:f3:8f: a8:e2:62:71:1d:6b:30:fb:dc:95:a6:fd:e3:f0:81:45:04:d0: 37:96:7b:b1:04:d9:78:0c:15:c1:05:5f:4e:9d:22:cf:91:ba: ce:a7:ef:1e:36:b1:54:fe:f9:fb:8b:68:6a:ac:3f:00:ce:8d: b3:dc:1d:cd:1d:06:74:ed:2e:09:6e:fb:96:f0:b8:86:d8:c0: 19:dc:45:cb:57:05:a4:da:2d:81:68:2a:a8:ab:14:06:7c:7d: 71:cf:d5:2d:75:8a:43:be:7c:5d:63:4b:72:e2:50:59:48:13: 37:e4:cc:48:d3:34:bf:12:ca:df:80:6a:86:ee:5f:d6:05:12: 0c:7a:b9:e1:53:a0:9e:85:a1:a3:0c:39:52:76:bc:29:dd:cc: db:09:cf:bd:9c:51:7c:7e:c9:c1:b1:14:1c:3d:87:43:f4:93: 9f:79:24:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoquvJRb2PWRRIaJgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDYxMjEzMDEwM1oXDTI1MDkxMDEzMDEwM1owLzEtMCsGA1UEAxMk MWQ1NWNkOTQtOThhYS00NTVmLTkwYTctNGQ2MTk0ZTE0Zjg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3NlNDrskowPpg93xLaq3zWQGKh4jdV8lF8af fIDuUiS3TQ8froXkHLwfLCWhRuj2idnf/O+QGjEjQxemZ7Nyo1i5DTAfTiOA1fiC SeZlfL7uc4xE9nBrve73JR+tpXR3InX+ZysaDC86/aVz/bBDsirtqLD14tU4Ki1d j+ZOWaN/4JQ+6GPtf+XOmMZq/Mq3JubDj9Ott6fIPM5qe3QBa+KUAduRtXBTRa8l OdT515jR6PwVxJ737Kr86Ifk8gOqn11UIkCpzWJAKuBKjBrcM18zGWLvvT8eJMJu V4ccf8RWB6aU1tHzde9X3jfY///ujG0L5HyP1gxG4dB3LSYmeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHRZ13lrdMuB3eT258Y8OWtqbLp2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvNGQ1OGFmMjUtZjdlZS0z MGJlLThiYmUtMjQwYjQyNGIwODkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG2PMAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHbJhojD/gwUASPxRj6KH2zZqVwHU3VMSqBn3qTPMR+fzqSNqa82WbWh UfBWgCrSzuY90WHBZwvczZDmayiuSSYUsAJgXZmwjBDbrUi9DJlD7C8jqB3Y+gXz j6jiYnEdazD73JWm/ePwgUUE0DeWe7EE2XgMFcEFX06dIs+Rus6n7x42sVT++fuL aGqsPwDOjbPcHc0dBnTtLglu+5bwuIbYwBncRctXBaTaLYFoKqirFAZ8fXHP1S11 ikO+fF1jS3LiUFlIEzfkzEjTNL8Syt+AaobuX9YFEgx6ueFToJ6FoaMMOVJ2vCnd zNsJz72cUXx+ycGxFBw9h0P0k595JAY= -----END CERTIFICATE-----Generated at Mon Jun 16 12:04:13 2025 by rpki-client