$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/70ae0c2d-c8f0-3600-abbd-d9559675009a.roa File: 70ae0c2d-c8f0-3600-abbd-d9559675009a.roa (raw, json) Hash identifier: Jj31vZjpct0aa99VV99pvLHBPPDH+00DT7xyuRVZKaE= Subject key identifier: FF:F3:3C:B3:2C:50:EF:F2:C7:A4:33:2F:96:5B:A6:7D:32:82:AC:76 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584A2ABAFCEDE3672B1B786CFF40 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/70ae0c2d-c8f0-3600-abbd-d9559675009a.roa Signing time: Thu 12 Jun 2025 13:01:03 +0000 ROA not before: Thu 12 Jun 2025 13:01:03 +0000 ROA not after: Wed 10 Sep 2025 13:01:03 +0000 asID: 21817 IP address blocks: 198.161.144.0/22 maxlen: 24 198.180.225.0/24 maxlen: 24 199.7.192.0/21 maxlen: 24 199.48.56.0/22 maxlen: 24 199.200.112.0/22 maxlen: 24 2606:8100::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2a:ba:fc:ed:e3:67:2b:1b:78:6c:ff:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Jun 12 13:01:03 2025 GMT Not After : Sep 10 13:01:03 2025 GMT Subject: CN=f62deabc-38fb-4f2e-9e01-505cc0a4e5e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:61:f3:51:f3:7e:39:52:4b:21:53:38:cc:cc: bd:a2:33:d8:4d:90:df:48:3b:6b:48:86:48:b4:81: 03:9e:12:10:d5:3f:61:37:ca:da:9a:ef:03:4d:e2: 5b:49:07:b0:f4:8f:4f:1b:f5:73:c8:9e:7f:1b:be: e6:2c:de:8a:73:ab:82:42:97:fb:98:d8:4c:e2:4a: 8a:db:e3:c8:a5:a6:f0:c9:39:e2:57:93:8f:7f:2d: e0:0f:c7:ad:31:dc:49:13:f6:0e:e3:fa:d3:86:1e: d1:22:7e:fc:21:49:f1:ed:7d:66:10:9c:21:6a:8c: 9b:46:54:a1:21:c3:7c:9c:75:31:f5:0e:8e:7f:1a: af:ca:94:cb:de:7f:18:30:41:c3:98:80:01:7e:d9: 4a:dc:4c:29:14:50:ba:c5:88:da:c1:d8:04:7c:6c: 20:bf:cc:e1:59:fb:d9:14:53:a7:e7:99:b5:98:e1: 22:7e:45:1d:1e:19:f6:26:04:d6:a0:b7:21:86:3f: 19:e1:ac:17:76:ae:ad:be:ef:34:26:0c:44:85:01: 29:95:80:e9:52:3d:a0:68:67:46:33:03:d1:ed:32: a1:44:2f:76:41:92:c6:c0:ba:83:0c:43:42:04:bc: da:a2:8f:30:35:7e:23:5c:30:9e:9a:ca:05:94:09: dd:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:F3:3C:B3:2C:50:EF:F2:C7:A4:33:2F:96:5B:A6:7D:32:82:AC:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/70ae0c2d-c8f0-3600-abbd-d9559675009a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 198.161.144.0/22 198.180.225.0/24 199.7.192.0/21 199.48.56.0/22 199.200.112.0/22 IPv6: 2606:8100::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:2a:22:b5:3c:15:1b:e7:2c:84:25:6c:60:d6:36:09:a6:dc: 75:65:47:1f:4e:b4:5a:1a:59:84:b9:82:66:fc:17:83:a7:ea: 9e:b4:66:da:70:06:85:8d:5c:b8:01:42:17:e8:22:93:ca:5c: a3:d5:9c:16:46:28:7a:74:b0:81:4a:5d:20:c9:e9:84:7b:1f: f5:45:fa:55:ad:8d:70:35:77:dd:d4:ff:f4:a1:a2:08:d7:7f: 3f:93:10:e0:a4:61:20:03:30:53:82:fd:29:d8:69:47:54:9d: 35:fb:14:ec:a3:1e:8c:f6:65:5f:2a:b4:46:55:44:4f:64:d5: 91:9d:4c:51:35:c5:4f:2a:9e:26:59:2b:72:fc:50:de:7c:80: d3:70:4d:40:cf:94:44:22:a3:3b:52:6a:9a:54:12:ba:e9:b1: 17:30:f5:6e:48:67:dd:da:8c:b2:76:30:c8:93:53:00:c8:66: 07:a7:61:e1:96:05:17:ba:7a:e3:4a:37:d0:3a:f8:46:c7:fc: 7c:7c:dc:0a:82:ef:9d:77:5c:d9:f3:40:70:b5:0b:13:31:f8: 8c:2c:fa:f9:44:e8:30:31:83:1a:5f:77:2c:e5:e9:77:cb:5d: 89:db:74:1f:22:f1:3a:62:f0:6b:7f:f5:49:ba:33:1e:4c:06: 67:51:89:4b -----BEGIN CERTIFICATE----- MIIGajCCBVKgAwIBAgIUAQ0Mn0MoWEoquvzt42crG3hs/0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDYxMjEzMDEwM1oXDTI1MDkxMDEzMDEwM1owLzEtMCsGA1UEAxMk ZjYyZGVhYmMtMzhmYi00ZjJlLTllMDEtNTA1Y2MwYTRlNWU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGHzUfN+OVJLIVM4zMy9ojPYTZDfSDtrSIZI tIEDnhIQ1T9hN8ramu8DTeJbSQew9I9PG/VzyJ5/G77mLN6Kc6uCQpf7mNhM4kqK 2+PIpabwyTniV5OPfy3gD8etMdxJE/YO4/rThh7RIn78IUnx7X1mEJwhaoybRlSh IcN8nHUx9Q6OfxqvypTL3n8YMEHDmIABftlK3EwpFFC6xYjawdgEfGwgv8zhWfvZ FFOn55m1mOEifkUdHhn2JgTWoLchhj8Z4awXdq6tvu80JgxEhQEplYDpUj2gaGdG MwPR7TKhRC92QZLGwLqDDENCBLzaoo8wNX4jXDCemsoFlAndcQIDAQABo4IDfDCC A3gwHQYDVR0OBBYEFP/zPLMsUO/yx6QzL5Zbpn0ygqx2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvNzBhZTBjMmQtYzhmMC0z NjAwLWFiYmQtZDk1NTk2NzUwMDlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQCxqGQAwQA xrThAwQDxwfAAwQCxzA4AwQCx8hwMA0EAgACMAcDBQAmBoEAMFQGA1UdIAEB/wRK MEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5u ZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBACoq IrU8FRvnLIQlbGDWNgmm3HVlRx9OtFoaWYS5gmb8F4On6p60ZtpwBoWNXLgBQhfo IpPKXKPVnBZGKHp0sIFKXSDJ6YR7H/VF+lWtjXA1d93U//ShogjXfz+TEOCkYSAD MFOC/SnYaUdUnTX7FOyjHoz2ZV8qtEZVRE9k1ZGdTFE1xU8qniZZK3L8UN58gNNw TUDPlEQioztSappUErrpsRcw9W5IZ93ajLJ2MMiTUwDIZgenYeGWBRe6euNKN9A6 +EbH/Hx83AqC7513XNnzQHC1CxMx+Iws+vlE6DAxgxpfdyzl6XfLXYnbdB8i8Tpi 8Gt/9Um6Mx5MBmdRiUs= -----END CERTIFICATE-----Generated at Sun Jun 15 15:29:42 2025 by rpki-client