$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/df2ac65c-7d1c-3158-9dee-79f9e3a06b70.roa File: df2ac65c-7d1c-3158-9dee-79f9e3a06b70.roa (raw, json) Hash identifier: ScNIUFLxuglbi1QHJCs359GOcDs1nh3nadUxk8q/dBY= Subject key identifier: AC:8D:1B:D1:75:3A:3F:C8:68:73:01:8F:E1:97:31:0F:A8:D6:63:59 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584A2ABAEF784865A418393E3D80 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/df2ac65c-7d1c-3158-9dee-79f9e3a06b70.roa Signing time: Thu 12 Jun 2025 13:01:03 +0000 ROA not before: Thu 12 Jun 2025 13:01:03 +0000 ROA not after: Wed 10 Sep 2025 13:01:03 +0000 asID: 11404 IP address blocks: 76.191.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2a:ba:ef:78:48:65:a4:18:39:3e:3d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Jun 12 13:01:03 2025 GMT Not After : Sep 10 13:01:03 2025 GMT Subject: CN=2961bea7-c29c-4fa4-ab64-b44d6d73c78d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:a8:5a:a2:01:bf:68:d7:5e:fc:c4:cc:8a:30: be:55:aa:fb:81:d2:d5:b1:26:1e:b9:e8:23:b4:83: c0:8b:ac:f1:9d:56:49:5a:2a:1e:d8:10:db:18:1e: 09:d1:64:a8:1e:ac:69:0b:a6:5a:c8:44:ee:9c:b2: 6d:94:f2:ec:a6:f2:8b:13:84:36:55:ad:88:29:95: 24:66:2e:ce:96:4e:94:c5:e5:a7:80:7f:f3:af:4f: 86:1a:c9:9f:18:3f:6a:cf:4f:89:72:0a:e7:50:b1: c6:c8:00:a1:07:13:fe:12:cc:99:8a:55:53:ac:9a: ad:b9:17:1c:76:de:11:2a:2b:a5:92:c1:a0:83:72: f9:5b:e0:3b:c7:5c:c9:c8:70:ea:45:b7:a6:5d:07: f3:7d:a7:96:4d:2f:18:a0:e8:67:f2:ad:a9:0b:a4: b5:1c:c4:45:16:80:8b:16:d9:66:af:04:b6:05:01: 1f:3e:15:dc:3a:fb:6a:a2:90:a8:9c:12:29:e7:b4: cb:d2:40:19:47:ea:dc:2f:f0:db:70:af:df:34:89: b2:90:c3:5d:58:dc:89:e9:4d:ec:77:de:c6:d2:53: 38:29:0e:86:1a:60:2e:bc:40:63:3f:13:64:b9:22: f7:5b:02:63:67:ef:ad:81:70:d2:3b:ef:60:ef:c9: 42:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:8D:1B:D1:75:3A:3F:C8:68:73:01:8F:E1:97:31:0F:A8:D6:63:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/df2ac65c-7d1c-3158-9dee-79f9e3a06b70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 76.191.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:a3:36:94:b2:ca:eb:29:a4:14:1d:17:b8:38:96:84:14:fe: 84:3e:c4:dc:e0:84:24:e1:b2:50:2b:5a:a4:69:7f:65:36:60: cc:1f:5e:1b:b3:c1:34:6c:f2:d5:b2:4b:2a:42:2b:a6:ce:d8: 71:b1:b6:f1:46:73:d5:5e:b5:17:4c:43:4e:98:dc:ad:06:9e: 02:07:7d:8a:c0:dd:a8:51:02:7b:1d:71:65:00:06:00:b5:99: 34:30:ea:3b:84:64:af:ec:09:92:96:e6:46:e3:e6:f1:51:2b: e7:18:b2:35:2b:0a:40:1b:99:76:85:30:85:10:49:58:d4:24: e5:6b:ae:a1:2e:1b:1c:0b:dc:fa:08:3c:0d:1f:f9:f0:47:f2: 27:dd:8c:ad:1d:14:73:4d:90:9a:83:b0:4d:c3:80:ce:0c:c2: e1:a9:72:fa:12:1a:91:f5:58:db:1d:db:84:05:c4:95:42:e9: ea:c8:c4:76:7e:95:08:e6:7a:ff:79:f0:96:56:d9:08:53:cf: 9f:72:b1:1f:54:4f:0a:78:1f:ed:88:cf:85:cf:3c:b9:b8:a3: a1:ef:ea:f3:53:63:16:95:e6:f0:32:41:4c:59:4a:26:31:d1: a8:14:db:37:4e:78:18:84:fd:82:7f:62:ce:cc:bf:d8:30:3c: 77:e8:92:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoquu94SGWkGDk+PYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDYxMjEzMDEwM1oXDTI1MDkxMDEzMDEwM1owLzEtMCsGA1UEAxMk Mjk2MWJlYTctYzI5Yy00ZmE0LWFiNjQtYjQ0ZDZkNzNjNzhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqhaogG/aNde/MTMijC+Var7gdLVsSYeuegj tIPAi6zxnVZJWioe2BDbGB4J0WSoHqxpC6ZayETunLJtlPLspvKLE4Q2Va2IKZUk Zi7Olk6UxeWngH/zr0+GGsmfGD9qz0+JcgrnULHGyAChBxP+EsyZilVTrJqtuRcc dt4RKiulksGgg3L5W+A7x1zJyHDqRbemXQfzfaeWTS8YoOhn8q2pC6S1HMRFFoCL FtlmrwS2BQEfPhXcOvtqopConBIp57TL0kAZR+rcL/DbcK/fNImykMNdWNyJ6U3s d97G0lM4KQ6GGmAuvEBjPxNkuSL3WwJjZ++tgXDSO+9g78lCvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKyNG9F1Oj/IaHMBj+GXMQ+o1mNZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvZGYyYWM2NWMtN2QxYy0z MTU4LTlkZWUtNzlmOWUzYTA2YjcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGTL9AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGWjNpSyyusppBQdF7g4loQU/oQ+xNzghCThslArWqRpf2U2YMwfXhuz wTRs8tWySypCK6bO2HGxtvFGc9VetRdMQ06Y3K0GngIHfYrA3ahRAnsdcWUABgC1 mTQw6juEZK/sCZKW5kbj5vFRK+cYsjUrCkAbmXaFMIUQSVjUJOVrrqEuGxwL3PoI PA0f+fBH8ifdjK0dFHNNkJqDsE3DgM4MwuGpcvoSGpH1WNsd24QFxJVC6erIxHZ+ lQjmev958JZW2QhTz59ysR9UTwp4H+2Iz4XPPLm4o6Hv6vNTYxaV5vAyQUxZSiYx 0agU2zdOeBiE/YJ/Ys7Mv9gwPHfoknI= -----END CERTIFICATE-----Generated at Mon Jun 16 04:38:45 2025 by rpki-client