$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/f12b80ea-acd8-3ac7-8605-38958184a82f.roa File: f12b80ea-acd8-3ac7-8605-38958184a82f.roa (raw, json) Hash identifier: pLKCXpmjSSVkz5aqG+GvttiH2FPfT2yijgTN+2JWsKU= Subject key identifier: 62:CC:48:3A:3E:28:BA:91:AC:F3:4B:21:21:D7:C6:53:58:FF:47:DE Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584A2ABAEEFB96C9B0588A4D2F50 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/f12b80ea-acd8-3ac7-8605-38958184a82f.roa Signing time: Thu 12 Jun 2025 13:01:03 +0000 ROA not before: Thu 12 Jun 2025 13:01:03 +0000 ROA not after: Wed 10 Sep 2025 13:01:03 +0000 asID: 11404 IP address blocks: 64.187.160.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2a:ba:ee:fb:96:c9:b0:58:8a:4d:2f:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Jun 12 13:01:03 2025 GMT Not After : Sep 10 13:01:03 2025 GMT Subject: CN=1f1f9625-1899-4ada-a1cf-4ac5cad15c48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:34:58:f7:4a:5f:17:d1:d8:be:97:8a:12:a6: 96:1d:1e:bc:b2:6e:da:4d:14:de:bf:e3:4e:15:b7: 7b:e3:7f:e7:83:c4:9e:bf:29:79:4b:a1:2a:fe:44: c7:54:23:0f:c4:c8:d8:c0:f8:32:84:b6:9e:2e:2d: 72:c2:dd:cd:1e:9f:6c:1b:6e:03:32:0c:18:88:7e: 44:04:bf:aa:0b:47:03:53:97:45:d5:65:a7:11:e3: 9d:fe:97:13:96:b7:19:19:1f:89:6d:21:26:10:40: a6:9c:e5:27:dc:61:8f:ff:8e:fe:12:1f:ac:30:46: cb:38:24:fa:7c:52:62:7a:a0:4c:26:47:1c:84:88: cf:3c:08:53:49:e1:b5:86:b3:44:25:8a:63:bd:9a: 86:e9:f1:90:73:b2:90:ee:96:9d:98:52:bd:3a:6f: 07:d4:a5:24:0d:7b:7e:4b:bd:f3:7a:9e:3a:5d:73: 6a:95:48:05:ee:e5:77:41:7d:96:de:41:07:1a:d7: 76:d7:99:54:9a:fd:48:ff:a3:0e:bf:ca:70:50:60: cc:f6:fb:39:56:99:10:42:75:01:4b:f4:27:6a:ab: 27:f0:dd:c6:57:f4:be:bc:ed:ab:07:37:72:1d:77: 4c:55:a6:b7:3d:92:3a:aa:bc:f5:a5:be:e3:98:8a: 62:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:CC:48:3A:3E:28:BA:91:AC:F3:4B:21:21:D7:C6:53:58:FF:47:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/f12b80ea-acd8-3ac7-8605-38958184a82f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 64.187.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:4d:20:f9:6c:f9:41:ff:2f:d5:3a:f3:fc:bf:5f:15:b9:fc: 88:4b:5c:51:bd:81:31:d3:f5:5a:9d:54:bc:6c:e3:c3:19:6f: 5c:ad:bd:05:e6:64:af:15:d0:95:c9:43:53:9e:dc:73:bd:48: 0c:4b:ac:f4:5a:37:1b:99:ec:ac:88:13:2c:11:51:2c:04:cf: 9f:20:d3:40:69:4f:cb:2b:9a:c2:fd:5d:fa:05:a8:30:4d:89: 8f:4a:c7:8e:b1:84:37:4b:8c:b2:bd:b0:1f:91:96:a7:ce:1f: ff:c8:75:40:a4:56:38:ba:f5:3c:93:6e:61:48:88:5d:f6:95: d9:78:ba:9e:85:97:6a:af:41:06:10:93:73:a3:34:de:c8:9b: 6c:7c:07:9b:69:bf:30:a6:87:e3:21:02:87:7d:ca:38:2c:09: 5b:0f:ca:bd:f6:ad:ae:42:be:96:63:82:36:0d:f0:1c:f6:6a: 8d:a5:a9:04:27:d8:d8:25:bd:bb:f5:1e:16:55:8b:7b:2e:86: 01:7d:84:74:95:80:08:77:8a:c7:c3:78:d1:16:c8:72:a5:27: 44:b2:e6:f2:a6:d5:a4:94:81:32:51:3a:8c:25:2b:55:7e:f2: 64:6e:c1:25:a4:75:26:f2:14:99:4f:d6:b8:55:58:f3:64:e2: 18:b2:64:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoquu77lsmwWIpNL1AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDYxMjEzMDEwM1oXDTI1MDkxMDEzMDEwM1owLzEtMCsGA1UEAxMk MWYxZjk2MjUtMTg5OS00YWRhLWExY2YtNGFjNWNhZDE1YzQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjRY90pfF9HYvpeKEqaWHR68sm7aTRTev+NO Fbd743/ng8Sevyl5S6Eq/kTHVCMPxMjYwPgyhLaeLi1ywt3NHp9sG24DMgwYiH5E BL+qC0cDU5dF1WWnEeOd/pcTlrcZGR+JbSEmEECmnOUn3GGP/47+Eh+sMEbLOCT6 fFJieqBMJkcchIjPPAhTSeG1hrNEJYpjvZqG6fGQc7KQ7padmFK9Om8H1KUkDXt+ S73zep46XXNqlUgF7uV3QX2W3kEHGtd215lUmv1I/6MOv8pwUGDM9vs5VpkQQnUB S/Qnaqsn8N3GV/S+vO2rBzdyHXdMVaa3PZI6qrz1pb7jmIpi/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGLMSDo+KLqRrPNLISHXxlNY/0feMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvZjEyYjgwZWEtYWNkOC0z YWM3LTg2MDUtMzg5NTgxODRhODJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQLugMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABtNIPls+UH/L9U68/y/XxW5/IhLXFG9gTHT9VqdVLxs48MZb1ytvQXm ZK8V0JXJQ1Oe3HO9SAxLrPRaNxuZ7KyIEywRUSwEz58g00BpT8srmsL9XfoFqDBN iY9Kx46xhDdLjLK9sB+RlqfOH//IdUCkVji69TyTbmFIiF32ldl4up6Fl2qvQQYQ k3OjNN7Im2x8B5tpvzCmh+MhAod9yjgsCVsPyr32ra5CvpZjgjYN8Bz2ao2lqQQn 2Nglvbv1HhZVi3suhgF9hHSVgAh3isfDeNEWyHKlJ0Sy5vKm1aSUgTJROowlK1V+ 8mRuwSWkdSbyFJlP1rhVWPNk4hiyZEk= -----END CERTIFICATE-----Generated at Sun Jun 15 11:37:52 2025 by rpki-client