$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530/fcbb683d-69c1-3103-ba72-9ebfb8834220.roa File: fcbb683d-69c1-3103-ba72-9ebfb8834220.roa (raw, json) Hash identifier: HnGJBhqqGDeqt6SuODbO+RELS7spsgv7fQtLUkGshvs= Subject key identifier: 1D:B2:E0:47:AD:33:C4:FF:E8:51:5A:9A:32:18:99:A0:F0:24:02:CF Certificate issuer: /CN=5c24b227-71d8-4de3-9a17-e538fd673530 Certificate serial: 010D0C9F4328584AA160DD2CD0261237122F9340 Authority key identifier: 47:1C:36:F9:F2:BE:CC:7E:B9:E7:B7:F8:EA:51:AD:BC:CA:C2:D4:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530/fcbb683d-69c1-3103-ba72-9ebfb8834220.roa Signing time: Fri 25 Jul 2025 01:00:50 +0000 ROA not before: Fri 25 Jul 2025 01:00:50 +0000 ROA not after: Thu 23 Oct 2025 01:00:50 +0000 asID: 22418 IP address blocks: 70.34.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530/5c24b227-71d8-4de3-9a17-e538fd673530.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530/5c24b227-71d8-4de3-9a17-e538fd673530.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a1:60:dd:2c:d0:26:12:37:12:2f:93:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c24b227-71d8-4de3-9a17-e538fd673530 Validity Not Before: Jul 25 01:00:50 2025 GMT Not After : Oct 23 01:00:50 2025 GMT Subject: CN=bed24702-c76a-4fe1-8f0a-78bb3525ff07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:2f:21:13:d5:40:f5:35:d3:bc:ea:64:cd:77: 17:a6:6a:90:26:dc:1b:a8:c7:2e:57:43:3d:75:25: cc:dd:8b:73:ef:11:b7:08:ac:29:c5:b1:b6:fe:47: fa:66:35:f0:09:cb:fc:2e:21:40:94:cb:bf:ad:ed: d3:06:2f:ad:6d:e5:ee:46:1e:25:2c:a3:f6:6f:80: cc:ac:f8:d2:2e:8d:6e:97:e8:8b:31:fa:ca:19:47: e9:54:cb:93:b0:00:1b:ac:5b:3c:7a:2d:70:1e:bf: 5d:47:6b:db:50:b3:24:9b:3c:c2:a5:fe:e7:75:ca: 9e:ab:f4:df:56:78:dc:9d:23:40:31:ba:e4:df:d4: 25:ce:a0:e7:85:23:b5:4a:7c:4b:07:1e:13:79:6c: 30:2b:98:bd:f6:68:b7:15:ac:e5:e6:66:4b:69:90: 9c:a3:87:c0:42:8a:f4:66:d2:fa:2d:11:47:9d:74: 63:34:5b:a9:9c:5b:3c:25:3b:5f:cf:47:4f:f7:81: 24:c7:70:67:5e:d9:64:d7:8f:04:3b:82:02:60:ae: 51:be:8d:01:8d:da:37:46:82:d5:dc:12:cd:c2:f6: 34:ae:16:f7:60:f0:1b:ae:87:91:ab:23:89:8d:22: 18:d2:1e:e2:c3:e0:ee:eb:d3:e6:54:0d:d4:06:fa: 1c:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:B2:E0:47:AD:33:C4:FF:E8:51:5A:9A:32:18:99:A0:F0:24:02:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530/fcbb683d-69c1-3103-ba72-9ebfb8834220.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530/5c24b227-71d8-4de3-9a17-e538fd673530.crl X509v3 Authority Key Identifier: keyid:47:1C:36:F9:F2:BE:CC:7E:B9:E7:B7:F8:EA:51:AD:BC:CA:C2:D4:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530.cer sbgp-ipAddrBlock: critical IPv4: 70.34.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:80:71:0d:7d:6e:2c:7a:4c:c0:3c:82:f7:be:58:84:86:52: c1:d6:af:27:3c:29:b7:10:ea:1a:9f:e9:24:d2:9c:1d:e3:2f: c6:f2:dc:e7:f7:79:6f:2a:0b:40:be:0b:8c:06:e0:6f:d5:ee: fa:15:c7:49:8a:66:81:40:e5:9f:44:9f:c7:f2:24:46:9e:a1: 6e:e7:a8:e2:d5:d6:ea:5b:35:8f:dc:f3:e3:6a:6d:76:20:3b: 2d:aa:d0:09:05:00:38:47:d8:74:44:88:e0:19:71:94:92:4a: ab:3f:5c:7f:06:6e:63:3b:2d:d9:54:94:3c:4f:43:e5:03:72: 41:91:8b:9e:97:85:68:59:34:ca:ae:91:5d:11:e1:e8:4a:0f: 09:fa:ee:c5:0b:74:95:e8:48:fa:ea:30:3b:66:f8:70:e9:c5: 7b:c4:6a:7f:12:33:77:2f:84:7f:d1:73:7a:ed:82:a4:2b:5f: 79:4e:34:ad:40:2e:2d:71:d5:05:fb:13:6d:60:bb:88:89:55: 75:00:a0:f4:c2:5e:20:20:4f:f5:db:69:e8:80:1a:67:f3:22: a9:51:a7:99:40:39:fe:d7:4c:79:dd:76:d7:2c:78:c0:4b:2f: a5:d4:27:2b:28:b4:cb:04:79:fc:8e:c1:0a:6c:fe:98:43:1e: 47:c7:e8:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqhYN0s0CYSNxIvk0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWMyNGIyMjctNzFkOC00ZGUzLTlhMTctZTUzOGZkNjcz NTMwMB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk YmVkMjQ3MDItYzc2YS00ZmUxLThmMGEtNzhiYjM1MjVmZjA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgC8hE9VA9TXTvOpkzXcXpmqQJtwbqMcuV0M9 dSXM3Ytz7xG3CKwpxbG2/kf6ZjXwCcv8LiFAlMu/re3TBi+tbeXuRh4lLKP2b4DM rPjSLo1ul+iLMfrKGUfpVMuTsAAbrFs8ei1wHr9dR2vbULMkmzzCpf7ndcqeq/Tf VnjcnSNAMbrk39QlzqDnhSO1SnxLBx4TeWwwK5i99mi3Fazl5mZLaZCco4fAQor0 ZtL6LRFHnXRjNFupnFs8JTtfz0dP94Ekx3BnXtlk148EO4ICYK5Rvo0Bjdo3RoLV 3BLNwvY0rhb3YPAbroeRqyOJjSIY0h7iw+Du69PmVA3UBvocKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB2y4EetM8T/6FFamjIYmaDwJALPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi81YzI0 YjIyNy03MWQ4LTRkZTMtOWExNy1lNTM4ZmQ2NzM1MzAvZmNiYjY4M2QtNjljMS0z MTAzLWJhNzItOWViZmI4ODM0MjIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNWMyNGIyMjctNzFkOC00ZGUzLTlh MTctZTUzOGZkNjczNTMwLzVjMjRiMjI3LTcxZDgtNGRlMy05YTE3LWU1MzhmZDY3 MzUzMC5jcmwwHwYDVR0jBBgwFoAURxw2+fK+zH6557f46lGtvMrC1B8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi81YzI0YjIyNy03MWQ4LTRkZTMtOWExNy1lNTM4 ZmQ2NzM1MzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERiJgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIOAcQ19bix6TMA8gve+WISGUsHWryc8KbcQ6hqf6STSnB3jL8by3Of3 eW8qC0C+C4wG4G/V7voVx0mKZoFA5Z9En8fyJEaeoW7nqOLV1upbNY/c8+NqbXYg Oy2q0AkFADhH2HREiOAZcZSSSqs/XH8GbmM7LdlUlDxPQ+UDckGRi56XhWhZNMqu kV0R4ehKDwn67sULdJXoSPrqMDtm+HDpxXvEan8SM3cvhH/Rc3rtgqQrX3lONK1A Li1x1QX7E21gu4iJVXUAoPTCXiAgT/XbaeiAGmfzIqlRp5lAOf7XTHnddtcseMBL L6XUJysotMsEefyOwQps/phDHkfH6PE= -----END CERTIFICATE-----Generated at Wed Aug 6 10:57:00 2025 by rpki-client