$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/7e3a02d1-78da-3e9b-96f6-0936d6fbeea4.roa File: 7e3a02d1-78da-3e9b-96f6-0936d6fbeea4.roa (raw, json) Hash identifier: yc8/rn0aVLZ7iEcbi2UU58HT9dD3p8v/Vu67H+dfZ14= Subject key identifier: 56:76:49:7C:DE:F2:86:7B:AA:51:A0:34:9A:DA:7C:CA:74:51:C0:2B Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584A2ABAFF4F3502C59FA142BDC0 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/7e3a02d1-78da-3e9b-96f6-0936d6fbeea4.roa Signing time: Thu 12 Jun 2025 13:01:03 +0000 ROA not before: Thu 12 Jun 2025 13:01:03 +0000 ROA not after: Wed 10 Sep 2025 13:01:03 +0000 asID: 395492 IP address blocks: 216.243.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2a:ba:ff:4f:35:02:c5:9f:a1:42:bd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Jun 12 13:01:03 2025 GMT Not After : Sep 10 13:01:03 2025 GMT Subject: CN=9da5f615-cd37-4f5b-a1b6-7d6d93da33aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:4c:30:ef:b2:21:fc:63:af:75:b9:4b:ec:0d: d0:34:c0:93:e8:e7:a7:0c:f3:c8:08:6f:ea:49:fc: 4c:8f:3a:3c:71:96:56:ff:6b:ee:69:21:ed:07:b0: 5a:a8:c5:ea:75:20:22:47:c7:c8:1f:34:4d:17:56: f0:00:22:d2:c9:1e:91:67:d0:c6:34:88:3a:b3:6a: d2:e9:63:1f:a7:3a:01:80:c9:0b:24:78:db:96:1a: b9:e8:d3:aa:57:32:df:66:76:0a:fd:48:b9:7b:9c: 4e:2f:27:44:b4:35:0c:93:92:f5:e9:4c:9d:0f:8f: 63:93:63:a2:5e:2a:67:d7:40:1a:3e:b7:29:d5:0d: 63:ba:6a:5f:26:2f:3c:80:3d:e0:85:09:5d:e6:d8: 86:60:91:05:be:2d:6e:1a:d4:0f:a9:9f:2c:30:0c: d3:a0:12:dd:62:23:99:36:db:64:2c:2a:7e:dd:18: fb:e4:3c:b7:36:80:51:c6:e9:ca:a0:52:02:f7:94: 0b:68:4b:03:5c:90:c3:af:0f:02:02:18:ff:de:7b: d6:8d:b6:80:fb:4d:6a:50:41:ec:e6:ff:bf:0d:77: 69:85:1c:ac:68:07:88:b7:e0:30:e4:2c:bb:7b:8c: 1a:a1:8d:63:b7:9e:4b:cc:df:11:34:80:c3:b5:da: 91:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:76:49:7C:DE:F2:86:7B:AA:51:A0:34:9A:DA:7C:CA:74:51:C0:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/7e3a02d1-78da-3e9b-96f6-0936d6fbeea4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 216.243.13.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:41:4a:fd:ad:89:87:6a:f9:01:6f:66:5a:5a:f8:c8:6c:da: b0:33:a5:12:87:28:8c:b5:78:ba:4b:11:f5:5b:d8:df:24:48: 96:8c:86:d4:74:40:ff:aa:af:b4:43:52:13:ed:5a:cd:0c:79: 0a:1e:5d:0e:4b:9c:93:98:e3:9c:06:6e:82:1a:6c:3f:ca:5d: a4:d1:88:14:06:7d:36:72:77:9b:15:b0:a5:7d:dc:4d:a9:ea: 81:b3:25:ca:93:55:91:08:8c:a1:b1:08:94:b9:cf:93:7c:8c: f5:2d:6d:2f:91:d9:dd:34:2b:af:58:cf:87:5d:df:d1:e9:d1: 84:97:5f:ff:47:b3:98:4f:8e:f3:3c:67:9b:91:3f:33:e2:27: 4c:76:a0:65:74:1d:d9:aa:e5:f8:e5:3e:22:6f:48:19:7c:bc: e0:fa:27:b7:ee:96:ff:e6:b4:44:2f:37:5e:e5:0e:c9:e9:1c: 51:f7:0c:a9:40:6d:07:0f:33:9e:ab:48:a8:4a:d1:4b:29:1a: be:e5:eb:92:72:00:c0:f2:d0:27:e4:1f:6e:7e:53:d8:fd:8a: c6:81:83:75:8b:f2:3a:2f:45:79:8a:49:66:9c:f0:6b:55:5e: 6c:9a:34:0f:3e:22:e9:d7:0b:c8:f0:f8:5c:91:05:c3:01:8c: a8:38:0e:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoquv9PNQLFn6FCvcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDYxMjEzMDEwM1oXDTI1MDkxMDEzMDEwM1owLzEtMCsGA1UEAxMk OWRhNWY2MTUtY2QzNy00ZjViLWExYjYtN2Q2ZDkzZGEzM2FhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Uww77Ih/GOvdblL7A3QNMCT6OenDPPICG/q SfxMjzo8cZZW/2vuaSHtB7BaqMXqdSAiR8fIHzRNF1bwACLSyR6RZ9DGNIg6s2rS 6WMfpzoBgMkLJHjblhq56NOqVzLfZnYK/Ui5e5xOLydEtDUMk5L16UydD49jk2Oi Xipn10AaPrcp1Q1jumpfJi88gD3ghQld5tiGYJEFvi1uGtQPqZ8sMAzToBLdYiOZ NttkLCp+3Rj75Dy3NoBRxunKoFIC95QLaEsDXJDDrw8CAhj/3nvWjbaA+01qUEHs 5v+/DXdphRysaAeIt+Aw5Cy7e4waoY1jt55LzN8RNIDDtdqRywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFZ2SXze8oZ7qlGgNJrafMp0UcArMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvN2UzYTAyZDEtNzhkYS0z ZTliLTk2ZjYtMDkzNmQ2ZmJlZWE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2PMNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFNBSv2tiYdq+QFvZlpa+Mhs2rAzpRKHKIy1eLpLEfVb2N8kSJaMhtR0 QP+qr7RDUhPtWs0MeQoeXQ5LnJOY45wGboIabD/KXaTRiBQGfTZyd5sVsKV93E2p 6oGzJcqTVZEIjKGxCJS5z5N8jPUtbS+R2d00K69Yz4dd39Hp0YSXX/9Hs5hPjvM8 Z5uRPzPiJ0x2oGV0Hdmq5fjlPiJvSBl8vOD6J7fulv/mtEQvN17lDsnpHFH3DKlA bQcPM56rSKhK0UspGr7l65JyAMDy0CfkH25+U9j9isaBg3WL8jovRXmKSWac8GtV XmyaNA8+IunXC8jw+FyRBcMBjKg4Dsw= -----END CERTIFICATE-----Generated at Sun Jun 15 15:28:15 2025 by rpki-client