$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/8e99d649-0b3a-393d-a5cd-c7971cabfb82.roa File: 8e99d649-0b3a-393d-a5cd-c7971cabfb82.roa (raw, json) Hash identifier: U3ufZzW7eIYhn9sjpEDjDLn6Qw7MywA+2zvmdATx4Xs= Subject key identifier: 0F:9F:74:91:01:FE:2E:85:C7:D7:F1:1E:FE:62:6A:7E:20:A6:29:1D Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584A2ABAEFDEC2691FFFB7CC2B00 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/8e99d649-0b3a-393d-a5cd-c7971cabfb82.roa Signing time: Thu 12 Jun 2025 13:01:03 +0000 ROA not before: Thu 12 Jun 2025 13:01:03 +0000 ROA not after: Wed 10 Sep 2025 13:01:03 +0000 asID: 11404 IP address blocks: 152.44.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2a:ba:ef:de:c2:69:1f:ff:b7:cc:2b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Jun 12 13:01:03 2025 GMT Not After : Sep 10 13:01:03 2025 GMT Subject: CN=3abcdb45-6925-4578-bd99-5bd6baf59e3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:32:e0:8d:44:a4:a5:80:15:42:96:da:aa:06: a3:da:4e:92:50:8a:c6:72:3a:b2:0b:75:78:b7:a3: 9e:5c:bb:29:c2:0c:82:92:d4:a8:d0:eb:5d:62:7e: 8a:48:b1:26:8b:a5:25:43:6e:ca:5b:5e:18:f6:9d: 93:51:54:3c:00:4b:4e:9b:6e:42:83:b3:83:7d:8a: 52:ac:02:bc:92:69:3e:e7:12:b7:a7:7d:87:ed:4a: 08:e3:68:c9:81:72:50:7a:3b:a7:9e:b3:08:4b:da: b4:d9:bd:62:8c:46:41:82:c3:23:c3:f9:e7:bf:21: 22:af:93:3a:7b:e1:01:f5:ff:a8:06:d9:20:bf:1d: 6e:20:9c:04:ec:a8:70:fb:7a:d4:2d:7a:c4:02:e4: d8:81:da:78:cf:f6:6d:7d:5c:dc:ad:76:2a:23:bf: c1:f0:88:f6:11:dd:a8:da:21:ac:23:9d:8f:6a:5e: 5a:86:a8:7f:ac:35:08:9e:af:56:6d:f0:0b:69:98: 9b:21:d6:57:c1:52:4b:2e:4b:24:04:ef:91:89:bf: 38:3e:10:5d:8f:3c:48:cc:9c:a5:be:a3:87:24:b6: 4a:9a:c3:6c:68:92:a6:aa:23:0d:b7:3a:3b:93:35: e1:7c:7f:f0:cc:06:b5:59:94:e6:ea:84:84:7a:80: e6:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:9F:74:91:01:FE:2E:85:C7:D7:F1:1E:FE:62:6A:7E:20:A6:29:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/8e99d649-0b3a-393d-a5cd-c7971cabfb82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 152.44.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:c5:44:46:e9:7e:3e:32:44:14:f4:02:9b:1e:86:66:aa:f7: 26:c7:b1:4f:9e:0b:61:b6:ed:58:11:3d:8f:28:e3:5c:28:cf: db:3f:09:f7:e7:14:0d:d1:cc:01:62:46:ec:1c:58:da:77:60: b5:ea:4f:60:ca:35:13:86:09:b7:77:61:02:bb:ce:d5:cc:1b: 69:d6:52:01:52:65:99:05:8e:88:53:03:49:39:00:6a:25:c6: 6f:47:e4:58:bb:dd:90:50:c3:91:64:70:12:0b:7f:27:dd:53: 0c:da:5f:e6:40:d4:ee:ab:7c:e2:4c:b8:f7:45:55:1e:54:7c: c9:74:15:fe:a1:f3:e1:4f:c5:8b:c6:f1:24:26:46:06:0f:a6: 84:cf:82:50:01:b3:c0:80:1d:ec:df:57:88:00:99:14:a6:13: cf:63:12:5f:f4:40:05:15:dd:22:20:96:bf:3e:f4:97:00:c6: d8:16:78:d1:ec:7b:87:28:96:30:cd:79:5d:a5:56:19:5b:e4: 4a:74:90:97:cd:bd:fe:dc:f4:9d:d3:a2:2d:0c:e2:3f:96:9b: 08:e6:8e:a5:17:3a:e9:28:61:65:32:1a:94:f5:34:85:49:8c: ff:19:b2:8e:66:39:06:74:95:9e:57:36:06:37:26:ae:3f:63: 3c:2f:fc:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoquu/ewmkf/7fMKwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDYxMjEzMDEwM1oXDTI1MDkxMDEzMDEwM1owLzEtMCsGA1UEAxMk M2FiY2RiNDUtNjkyNS00NTc4LWJkOTktNWJkNmJhZjU5ZTNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljLgjUSkpYAVQpbaqgaj2k6SUIrGcjqyC3V4 t6OeXLspwgyCktSo0OtdYn6KSLEmi6UlQ27KW14Y9p2TUVQ8AEtOm25Cg7ODfYpS rAK8kmk+5xK3p32H7UoI42jJgXJQejunnrMIS9q02b1ijEZBgsMjw/nnvyEir5M6 e+EB9f+oBtkgvx1uIJwE7Khw+3rULXrEAuTYgdp4z/ZtfVzcrXYqI7/B8Ij2Ed2o 2iGsI52Pal5ahqh/rDUInq9WbfALaZibIdZXwVJLLkskBO+Rib84PhBdjzxIzJyl vqOHJLZKmsNsaJKmqiMNtzo7kzXhfH/wzAa1WZTm6oSEeoDmBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA+fdJEB/i6Fx9fxHv5ian4gpikdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvOGU5OWQ2NDktMGIzYS0z OTNkLWE1Y2QtYzc5NzFjYWJmYjgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHmCyAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAATFREbpfj4yRBT0Apsehmaq9ybHsU+eC2G27VgRPY8o41woz9s/Cffn FA3RzAFiRuwcWNp3YLXqT2DKNROGCbd3YQK7ztXMG2nWUgFSZZkFjohTA0k5AGol xm9H5Fi73ZBQw5FkcBILfyfdUwzaX+ZA1O6rfOJMuPdFVR5UfMl0Ff6h8+FPxYvG 8SQmRgYPpoTPglABs8CAHezfV4gAmRSmE89jEl/0QAUV3SIglr8+9JcAxtgWeNHs e4coljDNeV2lVhlb5Ep0kJfNvf7c9J3Toi0M4j+WmwjmjqUXOukoYWUyGpT1NIVJ jP8Zso5mOQZ0lZ5XNgY3Jq4/Yzwv/HI= -----END CERTIFICATE-----Generated at Sun Jun 15 11:49:21 2025 by rpki-client