$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/ce1a12c4-15ec-3aa3-a527-a7a5b5cb55b1.roa File: ce1a12c4-15ec-3aa3-a527-a7a5b5cb55b1.roa (raw, json) Hash identifier: RMohU6EkRqAehRiGLuBo+GBIjBwbK7E0qmr2UspcrwY= Subject key identifier: D9:26:6E:E1:95:2E:AA:0C:72:00:FB:32:1D:BB:B3:36:3C:45:F9:73 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584A2ABAF07A51DAFA9A88CEA1A0 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/ce1a12c4-15ec-3aa3-a527-a7a5b5cb55b1.roa Signing time: Thu 12 Jun 2025 13:01:03 +0000 ROA not before: Thu 12 Jun 2025 13:01:03 +0000 ROA not after: Wed 10 Sep 2025 13:01:03 +0000 asID: 11404 IP address blocks: 216.129.96.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2a:ba:f0:7a:51:da:fa:9a:88:ce:a1:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Jun 12 13:01:03 2025 GMT Not After : Sep 10 13:01:03 2025 GMT Subject: CN=9e37b66c-b9ee-43ca-99f3-d70dc5a9fddf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:e5:5f:bc:28:d0:4e:5c:81:94:62:7b:a2:8d: b5:cc:ce:6c:27:cf:de:76:bd:08:bd:37:6e:35:0a: bc:f7:eb:18:4e:65:32:48:76:24:81:06:2c:b8:2e: c8:24:48:25:03:00:eb:12:8a:56:96:42:33:9a:76: ea:88:e6:18:3e:5c:5a:38:f8:ce:cd:0a:a8:e0:3c: b2:22:02:fd:7d:9b:2a:ee:d1:3a:d4:56:fb:90:10: 77:74:5e:f2:e4:11:3c:6f:06:01:d6:0e:12:91:2e: e3:c0:d3:81:e7:1f:ac:fb:46:e4:84:44:eb:f1:9c: 1a:49:fe:25:40:1e:04:2d:9b:19:9b:8f:fd:eb:ee: 63:3b:25:d6:90:e2:2f:34:70:77:18:cf:c1:1a:14: 23:71:dd:f6:e9:6e:53:ac:d0:33:ce:a2:9f:5b:73: 51:91:0d:07:cd:6b:98:9a:41:e8:99:5b:d5:54:1c: ae:4a:5a:2c:f1:1d:b6:60:75:6d:e5:19:db:91:67: 6b:d4:72:11:a7:b3:a5:83:93:ec:e5:80:b5:ac:e5: 00:76:20:ac:d2:01:c0:8d:97:1b:42:5a:04:d4:1f: 35:0b:b9:39:08:0b:47:61:45:88:1c:b7:af:59:0a: 7d:1d:eb:d4:a8:ad:7b:29:56:eb:f5:54:fb:6e:23: 76:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:26:6E:E1:95:2E:AA:0C:72:00:FB:32:1D:BB:B3:36:3C:45:F9:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/ce1a12c4-15ec-3aa3-a527-a7a5b5cb55b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 216.129.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:6f:cb:3b:6c:7e:49:5b:91:f2:f7:0f:43:f0:d4:81:00:3a: d2:03:0f:8f:5e:74:9e:bb:68:e8:00:74:55:6c:b8:c4:5f:f4: 90:17:1f:be:55:8f:97:99:81:c9:f7:c6:eb:01:fc:be:73:de: 62:bb:47:bd:61:45:05:73:54:38:06:ba:29:19:48:ff:be:b3: 3d:26:a6:e7:e5:1d:de:e2:31:da:dd:a8:a3:5c:b0:7a:97:d1: a4:e0:ed:7e:22:6f:b1:b1:48:47:86:8b:66:dc:29:21:0b:e1: 0a:4a:71:56:cf:c0:fa:e0:39:0f:70:bb:c0:7c:0a:ac:c3:5d: 4a:a1:0d:b8:0c:e6:e0:b2:50:8e:72:49:da:0f:f4:da:30:44: f7:85:82:63:a4:a0:76:3c:70:fc:fe:3b:5a:f2:44:24:d8:4a: c1:6c:3d:9f:ac:9f:37:66:71:13:d6:55:18:53:dc:22:4a:5c: 9e:40:d1:c8:b6:e2:d5:54:2a:d4:69:d1:ed:fa:78:83:59:aa: af:d0:78:ea:40:d7:a0:22:11:58:d0:6c:ea:b6:67:92:17:c3: 3a:9b:42:c0:d3:c9:77:70:76:38:8b:0e:8f:91:86:77:22:68: 53:26:1d:46:da:e1:bc:83:90:27:6a:9e:d4:85:f4:d3:28:48: b9:49:32:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoquvB6Udr6mojOoaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDYxMjEzMDEwM1oXDTI1MDkxMDEzMDEwM1owLzEtMCsGA1UEAxMk OWUzN2I2NmMtYjllZS00M2NhLTk5ZjMtZDcwZGM1YTlmZGRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjuVfvCjQTlyBlGJ7oo21zM5sJ8/edr0IvTdu NQq89+sYTmUySHYkgQYsuC7IJEglAwDrEopWlkIzmnbqiOYYPlxaOPjOzQqo4Dyy IgL9fZsq7tE61Fb7kBB3dF7y5BE8bwYB1g4SkS7jwNOB5x+s+0bkhETr8ZwaSf4l QB4ELZsZm4/96+5jOyXWkOIvNHB3GM/BGhQjcd326W5TrNAzzqKfW3NRkQ0HzWuY mkHomVvVVByuSlos8R22YHVt5RnbkWdr1HIRp7Olg5Ps5YC1rOUAdiCs0gHAjZcb QloE1B81C7k5CAtHYUWIHLevWQp9HevUqK17KVbr9VT7biN2hwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNkmbuGVLqoMcgD7Mh27szY8RflzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvY2UxYTEyYzQtMTVlYy0z YWEzLWE1MjctYTdhNWI1Y2I1NWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF2IFgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHVvyztsfklbkfL3D0Pw1IEAOtIDD49edJ67aOgAdFVsuMRf9JAXH75V j5eZgcn3xusB/L5z3mK7R71hRQVzVDgGuikZSP++sz0mpuflHd7iMdrdqKNcsHqX 0aTg7X4ib7GxSEeGi2bcKSEL4QpKcVbPwPrgOQ9wu8B8CqzDXUqhDbgM5uCyUI5y SdoP9NowRPeFgmOkoHY8cPz+O1ryRCTYSsFsPZ+snzdmcRPWVRhT3CJKXJ5A0ci2 4tVUKtRp0e36eINZqq/QeOpA16AiEVjQbOq2Z5IXwzqbQsDTyXdwdjiLDo+Rhnci aFMmHUba4byDkCdqntSF9NMoSLlJMm0= -----END CERTIFICATE-----Generated at Mon Jun 16 04:38:47 2025 by rpki-client