$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/9f593d47-3a3d-306a-9551-03bd70997c05.roa File: 9f593d47-3a3d-306a-9551-03bd70997c05.roa (raw, json) Hash identifier: JKdkdnFNFjDH7y7UWLWuPr7lP8m7xOsYzApUcx3pCZc= Subject key identifier: 24:41:40:E4:39:97:A4:EC:08:C2:A3:78:40:4D:7C:A5:74:64:CA:E5 Certificate issuer: /CN=d001dd1f-946b-457b-98d8-41701665309e Certificate serial: 010D0C9F4328584A5335A2283B061B774DCCD630 Authority key identifier: 3E:C3:2E:ED:AD:93:A1:53:A6:1C:A5:62:9A:F1:95:4A:F2:60:33:2E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/9f593d47-3a3d-306a-9551-03bd70997c05.roa Signing time: Fri 27 Jun 2025 01:00:50 +0000 ROA not before: Fri 27 Jun 2025 01:00:50 +0000 ROA not after: Thu 25 Sep 2025 01:00:50 +0000 asID: 23465 IP address blocks: 70.97.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/d001dd1f-946b-457b-98d8-41701665309e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/d001dd1f-946b-457b-98d8-41701665309e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:53:35:a2:28:3b:06:1b:77:4d:cc:d6:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d001dd1f-946b-457b-98d8-41701665309e Validity Not Before: Jun 27 01:00:50 2025 GMT Not After : Sep 25 01:00:50 2025 GMT Subject: CN=ab56d609-f35e-492d-8fdd-5281d91d1bfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:50:39:d9:e2:01:7d:41:ee:e2:57:77:48:59: 12:0c:ef:00:c2:eb:c1:63:ad:2f:f9:2f:00:bc:ae: 11:98:96:9b:81:d2:04:b4:1e:b8:ee:e6:24:b5:ce: 03:7b:49:d1:a7:43:50:47:d6:af:44:3d:d8:38:ca: 75:23:cc:95:21:a4:b7:1c:6a:d8:66:b2:83:88:77: 57:15:a8:ef:c3:0f:66:22:19:8f:c9:73:f0:16:36: cd:6d:02:0d:f1:7f:da:fc:ac:41:7e:b3:ff:c7:08: 6f:10:02:4e:67:10:c9:28:7f:5f:1c:35:69:72:fa: 57:a2:31:f3:ba:f5:cd:01:7e:83:47:35:2c:da:7d: 90:cc:a4:49:fe:67:f7:59:5c:2a:64:43:f7:6d:5f: df:d6:7a:a1:9f:c5:46:bc:84:65:c1:fb:8e:12:b8: 0b:de:18:26:ab:48:95:36:67:cd:ad:2a:69:d6:b2: 57:63:7c:52:4b:9b:30:b4:8c:b1:35:4a:c6:1d:c0: dc:c3:5e:9e:ce:88:e4:ad:9d:d7:56:0c:b4:4f:93: 1e:64:68:0e:d5:21:0a:ae:8f:26:36:1d:22:54:4a: 41:0b:e6:91:1e:5b:52:97:62:17:d3:37:17:18:b4: 0a:94:41:dd:97:a9:57:a9:f7:4b:ff:e0:3c:8a:09: 91:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:41:40:E4:39:97:A4:EC:08:C2:A3:78:40:4D:7C:A5:74:64:CA:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/9f593d47-3a3d-306a-9551-03bd70997c05.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/d001dd1f-946b-457b-98d8-41701665309e.crl X509v3 Authority Key Identifier: keyid:3E:C3:2E:ED:AD:93:A1:53:A6:1C:A5:62:9A:F1:95:4A:F2:60:33:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer sbgp-ipAddrBlock: critical IPv4: 70.97.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:0f:10:c9:a3:6a:90:c0:19:00:83:04:a9:5e:e2:5b:a0:86: 0d:e2:6f:51:c7:70:a1:26:fc:5f:30:08:e5:2a:ae:57:de:cd: 62:23:0c:f4:c8:c6:f7:a2:ad:2e:51:49:91:58:da:12:cd:94: 77:89:c0:4d:e2:f4:ae:a3:82:6f:91:68:8a:f7:25:50:f5:b6: 12:13:61:d4:ce:97:1c:fd:fe:e8:1b:14:28:f7:c9:c1:d1:37: e4:80:1d:2e:dd:ff:38:12:7a:5a:61:17:95:5d:ff:52:3d:5e: 6e:cd:84:06:2a:63:34:25:16:5d:36:62:53:2f:45:be:42:87: 4a:63:1c:dd:28:e6:6f:8a:9f:80:82:5f:c7:da:73:f9:b7:08: 00:70:75:f5:5f:2e:bb:04:4d:1e:9e:2e:12:c7:ad:79:3c:1f: 8c:05:58:9f:56:f1:d3:06:f0:31:e3:cd:93:5d:7c:a7:38:e6: 71:47:b0:fb:30:17:42:9c:61:83:dc:63:f8:f0:de:8f:22:83: a5:11:7a:37:46:53:e1:1a:70:a4:fb:5c:3c:23:91:31:1f:50: d7:16:b8:de:11:31:83:ad:77:21:b2:7c:77:08:7d:c6:f2:a2: 11:02:bd:21:01:55:1d:70:9e:73:2b:94:3f:11:5b:83:cd:df: 28:1e:5e:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpTNaIoOwYbd03M1jAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDAwMWRkMWYtOTQ2Yi00NTdiLTk4ZDgtNDE3MDE2NjUz MDllMB4XDTI1MDYyNzAxMDA1MFoXDTI1MDkyNTAxMDA1MFowLzEtMCsGA1UEAxMk YWI1NmQ2MDktZjM1ZS00OTJkLThmZGQtNTI4MWQ5MWQxYmZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVA52eIBfUHu4ld3SFkSDO8AwuvBY60v+S8A vK4RmJabgdIEtB647uYktc4De0nRp0NQR9avRD3YOMp1I8yVIaS3HGrYZrKDiHdX Fajvww9mIhmPyXPwFjbNbQIN8X/a/KxBfrP/xwhvEAJOZxDJKH9fHDVpcvpXojHz uvXNAX6DRzUs2n2QzKRJ/mf3WVwqZEP3bV/f1nqhn8VGvIRlwfuOErgL3hgmq0iV NmfNrSpp1rJXY3xSS5swtIyxNUrGHcDcw16ezojkrZ3XVgy0T5MeZGgO1SEKro8m Nh0iVEpBC+aRHltSl2IX0zcXGLQKlEHdl6lXqfdL/+A8igmRvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCRBQOQ5l6TsCMKjeEBNfKV0ZMrlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kMDAx ZGQxZi05NDZiLTQ1N2ItOThkOC00MTcwMTY2NTMwOWUvOWY1OTNkNDctM2EzZC0z MDZhLTk1NTEtMDNiZDcwOTk3YzA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDAwMWRkMWYtOTQ2Yi00NTdiLTk4 ZDgtNDE3MDE2NjUzMDllL2QwMDFkZDFmLTk0NmItNDU3Yi05OGQ4LTQxNzAxNjY1 MzA5ZS5jcmwwHwYDVR0jBBgwFoAUPsMu7a2ToVOmHKVimvGVSvJgMy4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kMDAxZGQxZi05NDZiLTQ1N2ItOThkOC00MTcw MTY2NTMwOWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERmGwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL8PEMmjapDAGQCDBKle4lughg3ib1HHcKEm/F8wCOUqrlfezWIjDPTI xveirS5RSZFY2hLNlHeJwE3i9K6jgm+RaIr3JVD1thITYdTOlxz9/ugbFCj3ycHR N+SAHS7d/zgSelphF5Vd/1I9Xm7NhAYqYzQlFl02YlMvRb5Ch0pjHN0o5m+Kn4CC X8fac/m3CABwdfVfLrsETR6eLhLHrXk8H4wFWJ9W8dMG8DHjzZNdfKc45nFHsPsw F0KcYYPcY/jw3o8ig6URejdGU+EacKT7XDwjkTEfUNcWuN4RMYOtdyGyfHcIfcby ohECvSEBVR1wnnMrlD8RW4PN3ygeXlc= -----END CERTIFICATE-----Generated at Wed Jul 2 20:52:39 2025 by rpki-client