$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/ecedc2b1-c38b-3bcd-84aa-8b22e0aaafec.roa File: ecedc2b1-c38b-3bcd-84aa-8b22e0aaafec.roa (raw, json) Hash identifier: 8OmAG7RsdShkX87hPzDv0y1PfNIwTKxRbv3N3l+SlP8= Subject key identifier: 06:A5:F0:52:A7:09:94:68:2C:E6:D0:93:D8:F4:26:63:A8:AD:95:37 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584A2ABAFD9C75B5CAB6F03AA780 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/ecedc2b1-c38b-3bcd-84aa-8b22e0aaafec.roa Signing time: Thu 12 Jun 2025 13:01:03 +0000 ROA not before: Thu 12 Jun 2025 13:01:03 +0000 ROA not after: Wed 10 Sep 2025 13:01:03 +0000 asID: 54858 IP address blocks: 64.85.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2a:ba:fd:9c:75:b5:ca:b6:f0:3a:a7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Jun 12 13:01:03 2025 GMT Not After : Sep 10 13:01:03 2025 GMT Subject: CN=56c3f07d-a189-40e1-9251-8858091ee08b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:06:70:03:e3:da:f2:2b:fd:8b:6d:1f:2f:58: 71:fe:15:76:19:45:2d:cd:0c:70:1a:db:0c:1c:1e: ef:77:df:be:ab:bc:29:41:ad:5c:7a:2f:03:63:d7: 90:d4:d8:e5:12:39:8e:7d:bc:a0:b8:e2:d9:81:9d: c6:14:f1:39:f3:7a:0b:15:e9:59:f0:af:b8:c2:c0: cd:71:c8:66:e8:7a:27:59:f1:d8:9e:15:b5:61:a4: db:9c:26:68:a7:f8:82:fb:ac:25:66:47:97:6a:c7: e9:c7:d4:ca:aa:67:d4:17:a7:cf:38:04:e3:a8:f4: 3d:93:38:35:db:f0:31:4c:5e:87:f5:4f:1b:41:3b: 3e:12:9c:ff:0b:b5:f0:44:04:53:9c:4e:ef:bd:f4: c5:4f:d8:4c:a0:1c:57:e8:a7:50:21:34:9a:06:80: 98:74:55:3b:00:54:a8:36:09:ae:30:3f:8b:09:bf: 00:50:6e:d7:eb:60:a1:6c:2a:5f:e8:12:69:36:fd: 73:65:45:20:27:98:6d:d9:59:84:8c:c2:d3:0e:1b: ab:ff:a9:34:7a:0c:ea:60:4e:91:ac:d0:71:40:d8: 14:a0:9d:95:6f:36:a3:27:da:c7:81:76:77:c9:95: f6:64:81:4d:b3:1a:d1:c0:e0:5e:0b:95:e3:24:63: 38:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:A5:F0:52:A7:09:94:68:2C:E6:D0:93:D8:F4:26:63:A8:AD:95:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/ecedc2b1-c38b-3bcd-84aa-8b22e0aaafec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 64.85.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:f0:6f:79:02:8e:c9:60:57:cd:82:1b:72:fe:d2:b9:d1:2c: 75:9b:b9:41:16:b7:89:c7:18:3d:0f:d8:9a:25:1f:ba:f4:72: a8:c9:d0:4e:7b:ed:f4:f7:47:fa:17:3c:09:3a:40:54:83:9e: 76:84:e7:26:c2:24:1d:e6:b9:7f:d8:cc:d6:a7:7f:92:5c:7b: 43:1e:f5:57:ef:69:b9:6c:82:30:da:48:4f:4b:06:25:0e:7c: 00:66:5e:06:6d:27:43:65:42:98:8c:df:07:81:c3:e7:38:2d: e5:10:92:07:fe:b4:f7:ae:3e:05:d7:c7:b9:c8:6e:95:79:ac: 44:ba:43:48:c9:ce:b8:90:d7:0b:f8:ab:73:39:02:2c:30:ac: c0:dc:7c:36:71:40:ca:20:b8:ca:22:b2:64:05:1f:4a:9d:a7: 60:e9:07:29:82:e8:4a:8a:50:8e:fe:ab:8d:21:bd:0f:9e:7d: d1:a1:17:0a:38:83:b3:d4:f9:0c:a8:a1:e1:4f:3f:30:8e:40: 00:4e:f8:be:88:ab:39:58:09:03:ec:01:a6:bc:76:e6:6f:79: 84:bf:ae:1d:3c:3b:16:be:30:f6:ef:56:4d:90:b2:5b:d1:79: 8e:0a:a5:45:29:8b:b2:a4:f1:dd:d6:4f:d5:2b:e7:89:a9:1e: 6f:08:75:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoquv2cdbXKtvA6p4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDYxMjEzMDEwM1oXDTI1MDkxMDEzMDEwM1owLzEtMCsGA1UEAxMk NTZjM2YwN2QtYTE4OS00MGUxLTkyNTEtODg1ODA5MWVlMDhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQZwA+Pa8iv9i20fL1hx/hV2GUUtzQxwGtsM HB7vd9++q7wpQa1cei8DY9eQ1NjlEjmOfbyguOLZgZ3GFPE583oLFelZ8K+4wsDN cchm6HonWfHYnhW1YaTbnCZop/iC+6wlZkeXasfpx9TKqmfUF6fPOATjqPQ9kzg1 2/AxTF6H9U8bQTs+Epz/C7XwRARTnE7vvfTFT9hMoBxX6KdQITSaBoCYdFU7AFSo NgmuMD+LCb8AUG7X62ChbCpf6BJpNv1zZUUgJ5ht2VmEjMLTDhur/6k0egzqYE6R rNBxQNgUoJ2VbzajJ9rHgXZ3yZX2ZIFNsxrRwOBeC5XjJGM4qwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAal8FKnCZRoLObQk9j0JmOorZU3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvZWNlZGMyYjEtYzM4Yi0z YmNkLTg0YWEtOGIyMmUwYWFhZmVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQFXgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIXwb3kCjslgV82CG3L+0rnRLHWbuUEWt4nHGD0P2JolH7r0cqjJ0E57 7fT3R/oXPAk6QFSDnnaE5ybCJB3muX/YzNanf5Jce0Me9VfvablsgjDaSE9LBiUO fABmXgZtJ0NlQpiM3weBw+c4LeUQkgf+tPeuPgXXx7nIbpV5rES6Q0jJzriQ1wv4 q3M5AiwwrMDcfDZxQMoguMoismQFH0qdp2DpBymC6EqKUI7+q40hvQ+efdGhFwo4 g7PU+QyooeFPPzCOQABO+L6IqzlYCQPsAaa8duZveYS/rh08Oxa+MPbvVk2QslvR eY4KpUUpi7Kk8d3WT9Ur54mpHm8IdeU= -----END CERTIFICATE-----Generated at Sun Jun 15 15:25:55 2025 by rpki-client