$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530/d63709ba-efc4-3caf-83fd-1de3e9f77899.roa File: d63709ba-efc4-3caf-83fd-1de3e9f77899.roa (raw, json) Hash identifier: vML2OlZQNUCcrSCYlAu21draXS1BLTPAYp34htSeV/Q= Subject key identifier: C6:D0:42:4D:89:AC:C6:01:22:1A:E1:E0:A9:53:A1:D4:37:D5:39:1E Certificate issuer: /CN=5c24b227-71d8-4de3-9a17-e538fd673530 Certificate serial: 010D0C9F4328584AA160DD3AE83D90B4A6ADE700 Authority key identifier: 47:1C:36:F9:F2:BE:CC:7E:B9:E7:B7:F8:EA:51:AD:BC:CA:C2:D4:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530/d63709ba-efc4-3caf-83fd-1de3e9f77899.roa Signing time: Fri 25 Jul 2025 01:00:50 +0000 ROA not before: Fri 25 Jul 2025 01:00:50 +0000 ROA not after: Thu 23 Oct 2025 01:00:50 +0000 asID: 22418 IP address blocks: 70.34.104.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530/5c24b227-71d8-4de3-9a17-e538fd673530.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530/5c24b227-71d8-4de3-9a17-e538fd673530.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a1:60:dd:3a:e8:3d:90:b4:a6:ad:e7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c24b227-71d8-4de3-9a17-e538fd673530 Validity Not Before: Jul 25 01:00:50 2025 GMT Not After : Oct 23 01:00:50 2025 GMT Subject: CN=0a19e974-d7db-43e1-a86d-17adb3e6b8f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:1c:74:a4:59:fe:04:ee:61:9f:33:9a:e3:6a: 24:e1:82:0e:34:a7:8b:18:44:f5:9e:85:56:70:e6: a8:e8:bf:9c:a6:e8:9e:d4:8c:cb:9f:4c:6e:83:d5: f0:0c:94:07:b6:98:a9:27:ab:e1:36:b8:cf:38:05: 25:ec:91:b9:33:fd:65:f0:c9:37:57:66:4f:f9:0f: 56:f8:5d:9a:cc:8f:2a:ba:90:18:da:c4:e4:aa:e9: 2e:27:99:b7:41:98:c6:c2:a8:71:08:5c:d7:05:83: 62:29:a3:8a:85:f1:32:be:b9:5d:1c:be:0e:50:6e: 1f:e0:f3:77:19:bd:32:06:75:f7:58:c9:1b:91:08: 36:72:67:62:d3:c3:35:d1:99:6f:06:c1:cf:44:11: e3:95:8b:fa:6d:d1:ce:4e:9e:da:eb:97:fd:47:97: d1:52:66:11:f2:85:86:21:0b:dd:ac:d2:74:01:20: f2:c8:bc:e0:8d:56:92:31:01:14:ca:65:99:9f:84: 74:8a:ff:66:63:f3:44:3f:df:8f:de:35:5d:d6:81: 27:97:31:6e:e5:9b:c4:30:14:b1:ce:f4:cc:2a:ae: 32:37:e7:a0:86:d8:b1:a4:ab:6f:33:7d:44:96:5a: 6c:44:09:44:70:a9:d9:d3:94:f3:ab:24:8e:f4:02: 12:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:D0:42:4D:89:AC:C6:01:22:1A:E1:E0:A9:53:A1:D4:37:D5:39:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530/d63709ba-efc4-3caf-83fd-1de3e9f77899.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530/5c24b227-71d8-4de3-9a17-e538fd673530.crl X509v3 Authority Key Identifier: keyid:47:1C:36:F9:F2:BE:CC:7E:B9:E7:B7:F8:EA:51:AD:BC:CA:C2:D4:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530.cer sbgp-ipAddrBlock: critical IPv4: 70.34.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:66:d7:2c:6e:4b:fe:20:58:ae:93:cb:be:29:bc:b4:c3:d4: 92:01:9c:92:cf:41:7d:b7:a1:39:51:43:f5:e7:15:b0:07:69: bf:37:8d:04:fe:36:29:55:fc:7b:0c:9c:24:7b:90:5c:b7:73: d6:68:44:d7:e9:4c:a2:f9:83:8c:5e:ff:52:35:ea:f4:09:94: 10:2a:46:83:de:5c:b9:bf:c0:ce:89:31:54:29:ed:3b:35:8b: b3:25:13:e0:a4:3a:99:f7:93:29:82:d4:00:56:1e:7c:f4:37: ca:f1:67:66:e2:73:62:c3:e2:f0:ff:6d:58:ec:db:44:e6:ea: 92:23:3b:ba:5f:ee:2c:5b:27:30:51:09:1b:0a:5d:ea:13:49: 96:65:7e:c3:de:ba:ed:23:40:38:98:03:02:d9:d3:f0:a1:5d: 44:7c:c6:a2:22:05:44:64:a7:b0:26:2e:69:d3:8b:17:7a:cd: d8:80:6d:29:b4:26:22:09:a3:56:1d:8e:e5:e1:64:e9:0c:3b: e2:5c:e9:c8:24:c2:fc:10:0f:f9:74:5c:54:b6:e8:db:6a:5c: 06:1e:c6:bb:5d:18:f1:25:c7:fb:d2:71:09:10:1c:7d:b0:b9: ca:67:f8:9f:a2:1c:44:dd:a8:94:71:cb:96:39:80:67:72:d0: 99:5e:5b:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqhYN066D2QtKat5wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWMyNGIyMjctNzFkOC00ZGUzLTlhMTctZTUzOGZkNjcz NTMwMB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk MGExOWU5NzQtZDdkYi00M2UxLWE4NmQtMTdhZGIzZTZiOGYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBx0pFn+BO5hnzOa42ok4YIONKeLGET1noVW cOao6L+cpuie1IzLn0xug9XwDJQHtpipJ6vhNrjPOAUl7JG5M/1l8Mk3V2ZP+Q9W +F2azI8qupAY2sTkqukuJ5m3QZjGwqhxCFzXBYNiKaOKhfEyvrldHL4OUG4f4PN3 Gb0yBnX3WMkbkQg2cmdi08M10ZlvBsHPRBHjlYv6bdHOTp7a65f9R5fRUmYR8oWG IQvdrNJ0ASDyyLzgjVaSMQEUymWZn4R0iv9mY/NEP9+P3jVd1oEnlzFu5ZvEMBSx zvTMKq4yN+eghtixpKtvM31EllpsRAlEcKnZ05TzqySO9AISgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMbQQk2JrMYBIhrh4KlTodQ31TkeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi81YzI0 YjIyNy03MWQ4LTRkZTMtOWExNy1lNTM4ZmQ2NzM1MzAvZDYzNzA5YmEtZWZjNC0z Y2FmLTgzZmQtMWRlM2U5Zjc3ODk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNWMyNGIyMjctNzFkOC00ZGUzLTlh MTctZTUzOGZkNjczNTMwLzVjMjRiMjI3LTcxZDgtNGRlMy05YTE3LWU1MzhmZDY3 MzUzMC5jcmwwHwYDVR0jBBgwFoAURxw2+fK+zH6557f46lGtvMrC1B8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi81YzI0YjIyNy03MWQ4LTRkZTMtOWExNy1lNTM4 ZmQ2NzM1MzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRiJoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACZm1yxuS/4gWK6Ty74pvLTD1JIBnJLPQX23oTlRQ/XnFbAHab83jQT+ NilV/HsMnCR7kFy3c9ZoRNfpTKL5g4xe/1I16vQJlBAqRoPeXLm/wM6JMVQp7Ts1 i7MlE+CkOpn3kymC1ABWHnz0N8rxZ2bic2LD4vD/bVjs20Tm6pIjO7pf7ixbJzBR CRsKXeoTSZZlfsPeuu0jQDiYAwLZ0/ChXUR8xqIiBURkp7AmLmnTixd6zdiAbSm0 JiIJo1YdjuXhZOkMO+Jc6cgkwvwQD/l0XFS26NtqXAYexrtdGPElx/vScQkQHH2w ucpn+J+iHETdqJRxy5Y5gGdy0JleW4w= -----END CERTIFICATE-----Generated at Wed Aug 6 13:16:04 2025 by rpki-client