$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/b295a349-2235-38dd-8685-35ebc511f0f7.roa File: b295a349-2235-38dd-8685-35ebc511f0f7.roa (raw, json) Hash identifier: 8e32ENgTRwQUSwGP4n6QfjHIBGDs8/eOMMi6emL2h5k= Subject key identifier: AC:E2:D7:A4:FA:8E:54:33:B4:5F:31:B8:C3:5B:CA:63:77:23:17:80 Certificate issuer: /CN=5c8c8316-08dc-4bef-99f6-a416ffa0b04a Certificate serial: 010D0C9F4328584A29555F690CE3E1C5DF43AC80 Authority key identifier: 31:34:9E:08:70:2C:AB:B2:9E:2F:B4:AA:52:28:26:14:F3:1C:09:22 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/b295a349-2235-38dd-8685-35ebc511f0f7.roa Signing time: Thu 12 Jun 2025 01:00:51 +0000 ROA not before: Thu 12 Jun 2025 01:00:51 +0000 ROA not after: Wed 10 Sep 2025 01:00:51 +0000 asID: 23528 IP address blocks: 156.70.116.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:29:55:5f:69:0c:e3:e1:c5:df:43:ac:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c8c8316-08dc-4bef-99f6-a416ffa0b04a Validity Not Before: Jun 12 01:00:51 2025 GMT Not After : Sep 10 01:00:51 2025 GMT Subject: CN=4826d06e-792c-4cec-b8da-1b0196674151 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:8d:9e:9e:b0:30:d0:9f:8c:e0:b8:d3:88:05: 61:07:89:0e:0d:43:86:21:f9:4f:43:1b:56:79:d3: 92:37:a2:d4:72:e8:89:be:a2:b5:70:c5:fa:4a:7b: d8:2c:a4:a5:a1:6f:f9:56:cf:2c:a5:64:96:49:98: 79:87:4e:ff:15:35:e4:b0:43:a1:77:34:50:83:03: a8:2d:62:57:4d:56:1d:a2:cf:f0:69:96:62:b1:93: be:89:3e:88:f4:45:74:4f:a7:3b:d7:bc:34:a9:40: 28:cf:90:d3:7b:21:8d:ba:9c:37:66:8e:6a:bf:96: 9f:47:97:c8:4b:0b:53:7f:d7:03:7a:07:fa:de:a9: f9:eb:3c:29:aa:f9:32:50:74:b4:55:6b:ce:d5:91: 9f:1b:d4:30:11:bd:11:2f:79:f9:ac:28:5d:b2:ee: 64:76:56:b4:00:76:36:3a:30:53:54:e5:d5:68:85: ac:34:13:eb:e9:c2:20:96:92:c2:e1:2c:79:4e:de: e1:b3:34:bc:b5:2e:9d:f9:eb:ba:1a:47:b3:8c:1f: c5:c6:d9:0a:2b:3c:0a:cc:87:a0:de:93:1b:5b:c5: e5:b8:f5:06:40:06:cc:10:f5:8f:bd:29:48:d4:20: 0d:49:5a:f8:ea:58:f4:5a:16:bc:c9:0c:d2:12:d3: ca:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:E2:D7:A4:FA:8E:54:33:B4:5F:31:B8:C3:5B:CA:63:77:23:17:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/b295a349-2235-38dd-8685-35ebc511f0f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.crl X509v3 Authority Key Identifier: keyid:31:34:9E:08:70:2C:AB:B2:9E:2F:B4:AA:52:28:26:14:F3:1C:09:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.cer sbgp-ipAddrBlock: critical IPv4: 156.70.116.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:0b:8b:d6:63:b7:22:e4:3f:22:ac:34:ff:3f:8a:fa:80:ee: e7:f0:e4:3f:90:de:f2:8b:82:34:14:7c:ca:bd:97:45:18:b5: ea:27:22:97:91:71:25:fd:43:f7:d5:24:17:20:86:24:1d:11: e9:43:e9:a4:55:dc:94:02:28:aa:45:09:70:9f:b6:c5:49:c1: fc:a1:b9:f7:8c:2a:c2:97:1c:09:79:66:cd:d6:4c:88:36:65: e6:c6:0f:4b:f7:73:1a:03:d2:13:9a:2a:a0:1c:67:12:1f:d7: c9:ed:28:77:89:99:02:88:a1:db:f5:c9:c8:70:35:cd:1e:49: 43:6b:2a:79:e5:55:75:85:3e:cc:4c:90:8c:6b:1e:20:5c:49: 51:2d:c9:70:1d:3b:98:db:41:6d:3c:6b:f3:1b:3e:96:38:83: 60:b9:09:60:ed:7d:be:a7:be:2e:20:27:2f:2d:0f:f1:09:72: be:8a:5c:b2:ad:e6:3e:f9:85:cd:8d:9e:c9:fe:86:09:18:18: 7c:2d:4a:1b:ea:4e:bc:4c:0a:60:17:59:6e:99:4b:ec:b4:fd: 23:e5:d7:84:a7:7b:6d:39:a9:e1:73:35:5f:96:28:fa:54:de: 02:9f:a0:29:26:09:13:64:bb:f2:ba:d6:dc:08:a6:fc:e0:a0: 57:da:30:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEopVV9pDOPhxd9DrIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM4YzgzMTYtMDhkYy00YmVmLTk5ZjYtYTQxNmZmYTBi MDRhMB4XDTI1MDYxMjAxMDA1MVoXDTI1MDkxMDAxMDA1MVowLzEtMCsGA1UEAxMk NDgyNmQwNmUtNzkyYy00Y2VjLWI4ZGEtMWIwMTk2Njc0MTUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAho2enrAw0J+M4LjTiAVhB4kODUOGIflPQxtW edOSN6LUcuiJvqK1cMX6SnvYLKSloW/5Vs8spWSWSZh5h07/FTXksEOhdzRQgwOo LWJXTVYdos/waZZisZO+iT6I9EV0T6c717w0qUAoz5DTeyGNupw3Zo5qv5afR5fI SwtTf9cDegf63qn56zwpqvkyUHS0VWvO1ZGfG9QwEb0RL3n5rChdsu5kdla0AHY2 OjBTVOXVaIWsNBPr6cIglpLC4Sx5Tt7hszS8tS6d+eu6GkezjB/FxtkKKzwKzIeg 3pMbW8XluPUGQAbMEPWPvSlI1CANSVr46lj0Wha8yQzSEtPKOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKzi16T6jlQztF8xuMNbymN3IxeAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81Yzhj ODMxNi0wOGRjLTRiZWYtOTlmNi1hNDE2ZmZhMGIwNGEvYjI5NWEzNDktMjIzNS0z OGRkLTg2ODUtMzVlYmM1MTFmMGY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNWM4YzgzMTYtMDhkYy00YmVmLTk5 ZjYtYTQxNmZmYTBiMDRhLzVjOGM4MzE2LTA4ZGMtNGJlZi05OWY2LWE0MTZmZmEw YjA0YS5jcmwwHwYDVR0jBBgwFoAUMTSeCHAsq7KeL7SqUigmFPMcCSIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy81YzhjODMxNi0wOGRjLTRiZWYtOTlmNi1hNDE2 ZmZhMGIwNGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnEZ0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACcLi9ZjtyLkPyKsNP8/ivqA7ufw5D+Q3vKLgjQUfMq9l0UYteonIpeR cSX9Q/fVJBcghiQdEelD6aRV3JQCKKpFCXCftsVJwfyhufeMKsKXHAl5Zs3WTIg2 ZebGD0v3cxoD0hOaKqAcZxIf18ntKHeJmQKIodv1ychwNc0eSUNrKnnlVXWFPsxM kIxrHiBcSVEtyXAdO5jbQW08a/MbPpY4g2C5CWDtfb6nvi4gJy8tD/EJcr6KXLKt 5j75hc2Nnsn+hgkYGHwtShvqTrxMCmAXWW6ZS+y0/SPl14Sne205qeFzNV+WKPpU 3gKfoCkmCRNku/K61twIpvzgoFfaMCg= -----END CERTIFICATE-----Generated at Wed Jul 2 01:26:46 2025 by rpki-client