$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/70ae0c2d-c8f0-3600-abbd-d9559675009a.roa File: 70ae0c2d-c8f0-3600-abbd-d9559675009a.roa (raw, json) Hash identifier: fB4MNKRnR1OyT4BOqDEqMheOYvVhbvb2a/3B0lBqWj0= Subject key identifier: A9:46:37:E6:70:74:C2:AB:11:E1:6E:A4:BA:D6:4E:D3:DD:F9:D6:9C Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F432858494B642F5A395F8F6DEB671400 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/70ae0c2d-c8f0-3600-abbd-d9559675009a.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 21817 IP address blocks: 198.161.144.0/22 maxlen: 24 198.180.225.0/24 maxlen: 24 199.7.192.0/21 maxlen: 24 199.48.56.0/22 maxlen: 24 199.200.112.0/22 maxlen: 24 2606:8100::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:64:2f:5a:39:5f:8f:6d:eb:67:14:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=214e03de-6e77-4efd-9010-72d63b98c96c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:a6:a3:20:29:b3:f2:ad:5f:85:56:01:6b:ce: 77:a1:02:a5:df:01:a9:df:7f:41:7f:a8:20:27:1c: 0b:fc:d0:18:60:c5:3b:42:ae:6b:fc:98:82:0d:9d: 6a:84:0a:0f:69:d8:d4:eb:a9:d9:b0:01:d3:c4:4a: 9a:81:52:90:fb:6c:da:8e:fb:8d:e0:6a:50:2c:c1: ff:09:68:14:c4:98:ae:8a:10:07:44:19:91:88:81: d3:a5:6f:5b:83:3a:c9:55:b4:0b:01:ca:10:53:e3: cf:bb:c8:42:3b:aa:41:85:2a:26:96:10:cd:09:00: 78:8c:39:83:ac:2b:c2:cc:75:ba:41:5f:e5:ec:48: 13:1d:61:59:70:e5:3b:74:19:fb:11:3b:c8:cc:82: 11:50:b7:13:df:53:36:75:2b:a5:d6:0a:ea:47:f4: 75:96:33:b2:cc:7f:6c:ab:e6:e5:00:ca:5f:5d:d3: 62:be:87:ab:1c:ee:e5:6c:bc:1d:15:2b:c8:d4:18: 1c:74:c7:73:41:45:74:76:d9:8b:c4:e9:2f:a0:76: eb:db:62:26:3c:14:65:95:09:da:d3:cf:68:67:11: e7:67:be:18:43:ab:84:e9:e5:96:84:aa:25:9d:48: 06:63:d0:59:24:43:0f:52:1c:df:07:79:e0:30:34: 93:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:46:37:E6:70:74:C2:AB:11:E1:6E:A4:BA:D6:4E:D3:DD:F9:D6:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/70ae0c2d-c8f0-3600-abbd-d9559675009a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 198.161.144.0/22 198.180.225.0/24 199.7.192.0/21 199.48.56.0/22 199.200.112.0/22 IPv6: 2606:8100::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:43:f3:3e:48:93:08:d5:ef:f3:ae:1a:82:25:b7:30:96:30: cb:80:ba:d8:47:70:da:7e:f8:98:55:49:5e:b4:16:ee:60:ff: 72:cb:55:3d:67:ec:ff:74:fa:3f:ec:eb:6c:d0:88:33:04:7e: 01:cf:fb:5b:2e:09:35:4c:5e:0b:56:8e:1a:ad:90:df:6a:1a: 79:c8:b9:d5:43:26:15:c8:db:84:25:3a:9e:0e:bd:e3:4e:db: d2:5e:87:21:8d:29:09:8f:e3:75:25:d5:e0:91:31:13:32:9e: d0:9c:58:94:d5:0d:a1:89:ea:3e:b3:65:dd:0e:8d:60:66:34: 69:1e:ef:73:94:95:2d:34:e7:33:50:16:8a:e9:a6:2f:55:74: 68:ce:71:b3:0e:f0:86:35:38:af:af:6a:a5:ef:26:4e:60:0c: ee:1c:0f:48:2c:36:32:b4:4a:3c:8b:01:f2:86:32:8c:f8:88: 57:42:6d:3f:3e:05:d7:71:40:90:86:f5:4a:d4:07:e4:1f:43: c1:98:c6:f6:cb:30:7e:65:a1:bf:2f:c6:9c:7e:e8:63:eb:be: 74:c1:10:8b:2e:cd:a9:8e:be:c2:95:a1:f3:72:fc:ad:b8:cc: 6d:1c:cf:92:49:fb:db:aa:8f:f3:d8:9b:d7:bb:b0:8f:b8:ce: a2:2f:00:be -----BEGIN CERTIFICATE----- MIIGajCCBVKgAwIBAgIUAQ0Mn0MoWElLZC9aOV+PbetnFAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk MjE0ZTAzZGUtNmU3Ny00ZWZkLTkwMTAtNzJkNjNiOThjOTZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3qajICmz8q1fhVYBa853oQKl3wGp339Bf6gg JxwL/NAYYMU7Qq5r/JiCDZ1qhAoPadjU66nZsAHTxEqagVKQ+2zajvuN4GpQLMH/ CWgUxJiuihAHRBmRiIHTpW9bgzrJVbQLAcoQU+PPu8hCO6pBhSomlhDNCQB4jDmD rCvCzHW6QV/l7EgTHWFZcOU7dBn7ETvIzIIRULcT31M2dSul1grqR/R1ljOyzH9s q+blAMpfXdNivoerHO7lbLwdFSvI1BgcdMdzQUV0dtmLxOkvoHbr22ImPBRllQna 089oZxHnZ74YQ6uE6eWWhKolnUgGY9BZJEMPUhzfB3ngMDSTqQIDAQABo4IDfDCC A3gwHQYDVR0OBBYEFKlGN+ZwdMKrEeFupLrWTtPd+dacMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvNzBhZTBjMmQtYzhmMC0z NjAwLWFiYmQtZDk1NTk2NzUwMDlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQCxqGQAwQA xrThAwQDxwfAAwQCxzA4AwQCx8hwMA0EAgACMAcDBQAmBoEAMFQGA1UdIAEB/wRK MEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5u ZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAIlD 8z5IkwjV7/OuGoIltzCWMMuAuthHcNp++JhVSV60Fu5g/3LLVT1n7P90+j/s62zQ iDMEfgHP+1suCTVMXgtWjhqtkN9qGnnIudVDJhXI24QlOp4OveNO29JehyGNKQmP 43Ul1eCRMRMyntCcWJTVDaGJ6j6zZd0OjWBmNGke73OUlS005zNQForppi9VdGjO cbMO8IY1OK+vaqXvJk5gDO4cD0gsNjK0SjyLAfKGMoz4iFdCbT8+BddxQJCG9UrU B+QfQ8GYxvbLMH5lob8vxpx+6GPrvnTBEIsuzamOvsKVofNy/K24zG0cz5JJ+9uq j/PYm9e7sI+4zqIvAL4= -----END CERTIFICATE-----Generated at Sun Apr 27 06:19:11 2025 by rpki-client