$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/df6aa9a0-b32f-3d29-a147-04d62aa1e742.roa File: df6aa9a0-b32f-3d29-a147-04d62aa1e742.roa (raw, json) Hash identifier: ML39FIpUqeaoIj+ADK8lw5Iv6iDngDxS4XoVSyaeqSs= Subject key identifier: C6:9A:5F:7D:49:F8:79:43:56:88:C8:13:8C:5B:E3:DE:04:E1:82:E9 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584A2ABAFEC1B1E64A9B052022B8 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/df6aa9a0-b32f-3d29-a147-04d62aa1e742.roa Signing time: Thu 12 Jun 2025 13:01:03 +0000 ROA not before: Thu 12 Jun 2025 13:01:03 +0000 ROA not after: Wed 10 Sep 2025 13:01:03 +0000 asID: 54858 IP address blocks: 172.81.152.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2a:ba:fe:c1:b1:e6:4a:9b:05:20:22:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Jun 12 13:01:03 2025 GMT Not After : Sep 10 13:01:03 2025 GMT Subject: CN=c2612197-7c1e-4087-abb0-e5ed076bc07d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:dc:c8:03:e6:5e:6a:0c:1e:78:84:f9:6c:d9: 46:1c:a2:88:cc:56:81:99:47:48:18:ae:0b:35:e5: 5a:6a:0a:9b:ad:ad:11:48:95:43:4d:cc:cf:3b:27: c8:ef:22:6b:19:4e:41:31:0e:61:fd:59:2e:dc:bc: a2:42:24:88:b3:14:b4:e6:26:d3:41:e3:cd:92:5e: 37:83:6c:5a:c5:2b:90:d8:28:f7:21:c3:a9:3b:73: 91:57:1e:06:de:37:76:04:32:bd:44:b5:4e:98:74: b1:04:67:ca:35:40:12:8f:ba:77:0f:b3:a1:f4:d0: bd:03:ca:fa:00:1c:46:f8:7a:ff:c2:f3:9d:09:f6: d8:69:45:37:a2:78:35:0f:a1:91:d4:64:a7:41:d9: 70:6d:ea:07:ab:86:71:d1:2f:35:f3:7b:bc:0d:87: 2c:9f:d2:dd:7b:45:17:3b:86:46:b6:a1:6d:85:24: cc:a8:a4:94:42:48:ec:87:ba:db:3b:07:7d:5e:12: cd:25:dc:2d:89:0d:0b:8c:5a:3e:27:c0:20:53:11: 6e:ea:21:e0:d4:f7:c8:4d:f7:62:e0:95:df:dd:a2: 1a:29:a4:e1:ab:c6:db:78:4b:98:9a:6a:d0:49:8c: 47:3a:ae:04:4f:30:33:12:d8:1b:77:8c:d8:c4:ba: b4:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:9A:5F:7D:49:F8:79:43:56:88:C8:13:8C:5B:E3:DE:04:E1:82:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/df6aa9a0-b32f-3d29-a147-04d62aa1e742.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 172.81.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:b5:0b:ca:ad:f8:5b:54:db:d8:67:aa:5b:b2:e7:70:b0:89: 79:1e:34:0f:7a:81:e0:75:d3:24:ba:cd:39:87:23:64:37:67: 7b:66:14:57:cc:ee:df:d2:54:4d:42:7c:7e:5d:96:af:63:2c: 66:c4:f6:6c:1a:4b:7d:5c:36:bc:b3:40:06:36:68:fa:ec:57: d5:5e:15:43:2d:ca:56:57:2c:47:03:1b:53:f2:78:5a:a7:56: b5:eb:96:fa:2e:84:8e:f4:5d:88:91:95:db:f8:52:8e:c9:24: a4:93:16:24:bb:07:61:02:15:59:27:b3:4d:a3:a8:48:8a:d6: 40:81:04:36:35:d5:d8:fe:75:d1:5b:79:1d:3b:e7:0c:23:40: 18:0a:fc:b6:e2:e9:6a:b5:e1:24:f5:56:59:96:41:e6:86:18: c4:36:b4:18:40:50:fd:a2:a9:72:65:34:0e:0c:0a:8c:01:c2: 8b:62:2b:cb:4a:8c:5f:ec:03:a0:e8:f0:7f:8e:a5:a3:37:72: 11:1e:e4:e2:98:a7:89:07:60:1a:65:e9:86:77:98:e5:5d:26: 02:63:b6:3c:d0:7a:fa:eb:06:8e:5c:d5:d7:4c:9b:d1:7c:57: 46:4e:e3:d5:e0:cd:7d:2d:22:0f:72:c8:c4:a8:e0:1d:34:87: b1:f9:ae:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoquv7BseZKmwUgIrgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDYxMjEzMDEwM1oXDTI1MDkxMDEzMDEwM1owLzEtMCsGA1UEAxMk YzI2MTIxOTctN2MxZS00MDg3LWFiYjAtZTVlZDA3NmJjMDdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAydzIA+ZeagweeIT5bNlGHKKIzFaBmUdIGK4L NeVaagqbra0RSJVDTczPOyfI7yJrGU5BMQ5h/Vku3LyiQiSIsxS05ibTQePNkl43 g2xaxSuQ2Cj3IcOpO3ORVx4G3jd2BDK9RLVOmHSxBGfKNUASj7p3D7Oh9NC9A8r6 ABxG+Hr/wvOdCfbYaUU3ong1D6GR1GSnQdlwbeoHq4Zx0S8183u8DYcsn9Lde0UX O4ZGtqFthSTMqKSUQkjsh7rbOwd9XhLNJdwtiQ0LjFo+J8AgUxFu6iHg1PfITfdi 4JXf3aIaKaThq8bbeEuYmmrQSYxHOq4ETzAzEtgbd4zYxLq0uwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMaaX31J+HlDVojIE4xb494E4YLpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvZGY2YWE5YTAtYjMyZi0z ZDI5LWExNDctMDRkNjJhYTFlNzQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrFGYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHe1C8qt+FtU29hnqluy53CwiXkeNA96geB10yS6zTmHI2Q3Z3tmFFfM 7t/SVE1CfH5dlq9jLGbE9mwaS31cNryzQAY2aPrsV9VeFUMtylZXLEcDG1PyeFqn VrXrlvouhI70XYiRldv4Uo7JJKSTFiS7B2ECFVkns02jqEiK1kCBBDY11dj+ddFb eR075wwjQBgK/Lbi6Wq14ST1VlmWQeaGGMQ2tBhAUP2iqXJlNA4MCowBwotiK8tK jF/sA6Do8H+OpaM3chEe5OKYp4kHYBpl6YZ3mOVdJgJjtjzQevrrBo5c1ddMm9F8 V0ZO49XgzX0tIg9yyMSo4B00h7H5rhQ= -----END CERTIFICATE-----Generated at Sun Jun 15 15:23:07 2025 by rpki-client