$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/904cd0dc-6bbb-3f23-81a0-5bed7246840d.roa File: 904cd0dc-6bbb-3f23-81a0-5bed7246840d.roa (raw, json) Hash identifier: cwG+YwG5yNarE4zjzOXPZMTW0pebq9toK++Jzdjhsoc= Subject key identifier: 2F:91:CF:7A:A8:DD:E6:B9:18:6F:6D:FB:6D:60:D8:D5:A5:01:5F:F8 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584A2ABAF033E049C43EBDAD8380 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/904cd0dc-6bbb-3f23-81a0-5bed7246840d.roa Signing time: Thu 12 Jun 2025 13:01:03 +0000 ROA not before: Thu 12 Jun 2025 13:01:03 +0000 ROA not after: Wed 10 Sep 2025 13:01:03 +0000 asID: 11404 IP address blocks: 172.92.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2a:ba:f0:33:e0:49:c4:3e:bd:ad:83:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Jun 12 13:01:03 2025 GMT Not After : Sep 10 13:01:03 2025 GMT Subject: CN=35850c68-801f-4e08-b786-c412e8143d0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:ec:9c:2d:0b:db:7e:b9:09:19:a6:87:6a:55: a2:e9:05:d0:8a:77:7e:33:b3:cc:38:e8:21:ce:75: 55:05:62:b4:bd:54:d7:ce:aa:79:7b:44:07:c5:7b: 4e:47:37:5a:c8:34:a9:2b:5f:f3:47:0f:f0:89:04: 3a:27:d8:20:4e:f2:ff:57:9e:de:28:bf:20:6c:eb: bc:18:9b:64:8d:16:5e:e2:58:28:11:cf:1b:d9:e5: 50:51:37:01:a1:c8:ae:ec:ef:3d:d8:83:15:8f:f4: bf:76:8e:d2:af:41:1a:de:9e:87:75:88:e6:bd:0c: 9c:0c:53:24:a3:34:5f:39:52:e8:ce:c9:2f:67:27: 0c:98:36:29:16:59:4b:44:71:f9:5f:b7:36:4b:51: 86:4e:1a:e8:48:f1:ef:ce:09:6a:65:96:e3:cc:71: d9:df:a0:da:29:bd:00:98:c8:ee:e4:18:69:52:b0: 54:9f:df:fb:55:a1:73:b0:89:46:9e:d7:ed:ad:a8: 3a:e8:ac:ee:e1:76:e1:2b:12:8c:f7:6c:75:aa:ec: 5f:7e:cc:f9:42:e9:cf:b5:a1:97:2c:62:3d:5f:85: 10:82:f2:f5:41:a1:1b:af:03:74:6a:8d:46:9b:3b: a6:92:f9:e7:2f:32:ef:19:5f:57:be:ef:66:47:bb: dc:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:91:CF:7A:A8:DD:E6:B9:18:6F:6D:FB:6D:60:D8:D5:A5:01:5F:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/904cd0dc-6bbb-3f23-81a0-5bed7246840d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 172.92.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:d6:d6:ad:15:28:46:d2:57:7e:63:c6:3a:48:80:bb:8e:48: 42:10:2a:34:e8:0d:3e:35:34:d9:29:74:32:89:62:13:67:f6: c9:ab:fc:01:1a:87:6c:64:06:6d:db:f0:2d:f6:19:52:3c:a3: 01:d8:23:16:96:bf:05:f6:9a:1e:d4:16:cd:0a:44:a7:20:be: df:6e:5d:13:56:08:84:c2:90:ee:3d:52:ef:f4:18:38:f2:0b: e0:b5:09:82:79:1a:a0:ab:d8:8f:cb:56:88:58:f0:3c:7f:8c: 72:4b:1e:c6:f8:37:80:df:5d:49:4d:08:93:ac:cf:7a:61:6e: c1:24:a9:d3:03:f3:67:78:e8:da:a9:e7:68:e4:b5:43:38:f2: ef:ce:03:41:04:1d:bf:cb:fa:e7:83:39:d8:4c:9a:e3:72:b2: 2d:6a:79:75:b3:fa:bd:2e:38:fc:0b:d2:2f:51:28:09:a6:54: eb:bf:43:0f:d6:f2:0b:28:c1:38:fb:a1:8f:4b:47:13:3f:12: aa:d0:78:40:28:e8:b3:c5:69:fc:1e:95:d6:39:aa:19:08:23: 83:cc:c5:77:3b:10:d6:33:3c:95:21:63:7a:28:af:6c:08:45: 98:79:81:9d:93:da:f7:d7:52:09:37:30:ac:0f:5e:7e:0f:bb: b1:76:b6:58 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEoquvAz4EnEPr2tg4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDYxMjEzMDEwM1oXDTI1MDkxMDEzMDEwM1owLzEtMCsGA1UEAxMk MzU4NTBjNjgtODAxZi00ZTA4LWI3ODYtYzQxMmU4MTQzZDBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhOycLQvbfrkJGaaHalWi6QXQind+M7PMOOgh znVVBWK0vVTXzqp5e0QHxXtORzdayDSpK1/zRw/wiQQ6J9ggTvL/V57eKL8gbOu8 GJtkjRZe4lgoEc8b2eVQUTcBociu7O892IMVj/S/do7Sr0Ea3p6HdYjmvQycDFMk ozRfOVLozskvZycMmDYpFllLRHH5X7c2S1GGThroSPHvzglqZZbjzHHZ36DaKb0A mMju5BhpUrBUn9/7VaFzsIlGntftrag66Kzu4XbhKxKM92x1quxffsz5QunPtaGX LGI9X4UQgvL1QaEbrwN0ao1GmzumkvnnLzLvGV9Xvu9mR7vcXwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFC+Rz3qo3ea5GG9t+21g2NWlAV/4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvOTA0Y2QwZGMtNmJiYi0z ZjIzLTgxYTAtNWJlZDcyNDY4NDBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMArFwwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAINbWrRUoRtJXfmPGOkiAu45IQhAqNOgNPjU02Sl0MoliE2f2yav8ARqH bGQGbdvwLfYZUjyjAdgjFpa/BfaaHtQWzQpEpyC+325dE1YIhMKQ7j1S7/QYOPIL 4LUJgnkaoKvYj8tWiFjwPH+Mcksexvg3gN9dSU0Ik6zPemFuwSSp0wPzZ3jo2qnn aOS1Qzjy784DQQQdv8v654M52Eya43KyLWp5dbP6vS44/AvSL1EoCaZU679DD9by CyjBOPuhj0tHEz8SqtB4QCjos8Vp/B6V1jmqGQgjg8zFdzsQ1jM8lSFjeiivbAhF mHmBnZPa99dSCTcwrA9efg+7sXa2WA== -----END CERTIFICATE-----Generated at Sun Jun 15 18:49:14 2025 by rpki-client