$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/a14bef6f-3d0e-311d-9920-4d558906aa24.roa File: a14bef6f-3d0e-311d-9920-4d558906aa24.roa (raw, json) Hash identifier: d70xE5ZOEHomzqPRz9LQbYOZgCOQRxJNb/dLpuazBgI= Subject key identifier: 9D:E0:9D:FA:B8:C1:5F:4D:D8:06:00:1C:6A:15:0A:7A:85:B1:19:B0 Certificate issuer: /CN=d001dd1f-946b-457b-98d8-41701665309e Certificate serial: 010D0C9F4328584A5335A205011871AC8F7A4840 Authority key identifier: 3E:C3:2E:ED:AD:93:A1:53:A6:1C:A5:62:9A:F1:95:4A:F2:60:33:2E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/a14bef6f-3d0e-311d-9920-4d558906aa24.roa Signing time: Fri 27 Jun 2025 01:00:50 +0000 ROA not before: Fri 27 Jun 2025 01:00:50 +0000 ROA not after: Thu 25 Sep 2025 01:00:50 +0000 asID: 23465 IP address blocks: 70.96.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/d001dd1f-946b-457b-98d8-41701665309e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/d001dd1f-946b-457b-98d8-41701665309e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:53:35:a2:05:01:18:71:ac:8f:7a:48:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d001dd1f-946b-457b-98d8-41701665309e Validity Not Before: Jun 27 01:00:50 2025 GMT Not After : Sep 25 01:00:50 2025 GMT Subject: CN=01e5eccf-f545-4864-8b74-2ead0e22b930 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:87:28:ba:64:4d:ea:27:23:92:22:5a:45:45: cf:4d:74:61:d9:e7:78:65:4f:d2:5c:e3:2b:d2:3d: 5a:93:45:e2:e5:d9:3c:2e:34:07:6c:fd:ee:c5:55: 11:38:87:67:24:f0:31:5f:39:a2:5b:b4:87:0e:b7: 5b:eb:d1:35:9d:4d:9b:2b:ad:2b:31:70:b4:15:89: a0:04:3b:ec:26:ca:d6:27:34:b2:d9:7c:b9:06:7e: 01:f6:20:6d:00:cb:2e:12:38:9b:89:82:8d:f6:61: 8f:dc:13:3b:d9:c2:af:cb:af:79:14:e4:b4:3d:b2: 2a:73:75:e1:5c:98:b5:b7:2f:e9:94:38:d0:fc:7f: e8:6d:99:89:33:b1:18:df:d1:4f:08:9c:42:7e:fd: 4e:a5:cd:14:15:60:00:77:a7:4b:64:99:4f:f8:5a: e2:7d:d1:9c:92:c5:78:d2:53:fe:47:da:12:2c:5a: b0:bc:ff:ca:2d:99:68:be:7c:f6:b6:78:31:62:ff: 6d:17:55:2a:7f:6c:d3:2d:5e:b8:93:d5:c4:cc:a3: 63:67:61:25:59:36:bd:59:ba:9c:11:5e:8b:fe:d8: 33:f6:80:36:dd:32:46:db:aa:93:4c:bc:73:33:35: 33:f2:52:23:61:fa:53:e3:cf:46:e5:ae:1a:f7:0e: f5:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:E0:9D:FA:B8:C1:5F:4D:D8:06:00:1C:6A:15:0A:7A:85:B1:19:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/a14bef6f-3d0e-311d-9920-4d558906aa24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/d001dd1f-946b-457b-98d8-41701665309e.crl X509v3 Authority Key Identifier: keyid:3E:C3:2E:ED:AD:93:A1:53:A6:1C:A5:62:9A:F1:95:4A:F2:60:33:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer sbgp-ipAddrBlock: critical IPv4: 70.96.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:ef:09:b3:1c:79:9e:2f:76:66:b2:b0:81:da:a2:88:a4:3e: 79:3a:4c:d0:74:8c:19:b0:55:71:84:8a:72:93:5f:73:52:88: 2e:40:b1:b3:df:d9:b5:f5:0b:b0:1a:53:0d:8b:ab:39:ad:a8: f8:d1:90:b8:ee:be:28:f1:1d:44:24:7a:6e:7b:d3:80:5d:4b: 99:33:2c:04:f2:b5:0a:2b:7d:6f:04:ef:04:d8:5a:52:25:03: d3:91:87:b4:bc:e8:6f:0b:7f:04:65:02:b8:da:51:3e:74:a0: 7f:80:97:3d:91:1a:9c:8e:c0:d7:98:18:7b:f8:95:72:d9:10: 7f:bf:b3:6a:f6:37:ee:57:e8:1b:35:da:4f:4c:52:7c:fe:6c: 58:c7:03:f8:2e:3b:d7:6c:41:25:71:f4:d6:dc:84:98:d1:e3: ef:1f:d2:c2:9a:c2:16:f3:8b:1b:1d:60:3a:f1:4d:95:27:46: ed:29:c4:fd:c0:37:a0:85:4e:c0:8a:59:3c:74:47:26:4f:29: d7:9b:a9:0d:a0:20:38:c8:43:4a:3b:5d:dd:02:ff:a5:2a:4b: bf:21:dc:da:86:a5:8b:d8:ea:31:f5:54:9d:a2:8f:ed:27:92: d0:0f:1d:79:12:aa:f8:48:a1:f8:b6:24:29:f0:dc:a7:fa:a5: ad:fd:0e:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpTNaIFARhxrI96SEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDAwMWRkMWYtOTQ2Yi00NTdiLTk4ZDgtNDE3MDE2NjUz MDllMB4XDTI1MDYyNzAxMDA1MFoXDTI1MDkyNTAxMDA1MFowLzEtMCsGA1UEAxMk MDFlNWVjY2YtZjU0NS00ODY0LThiNzQtMmVhZDBlMjJiOTMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh4coumRN6icjkiJaRUXPTXRh2ed4ZU/SXOMr 0j1ak0Xi5dk8LjQHbP3uxVUROIdnJPAxXzmiW7SHDrdb69E1nU2bK60rMXC0FYmg BDvsJsrWJzSy2Xy5Bn4B9iBtAMsuEjibiYKN9mGP3BM72cKvy695FOS0PbIqc3Xh XJi1ty/plDjQ/H/obZmJM7EY39FPCJxCfv1Opc0UFWAAd6dLZJlP+FrifdGcksV4 0lP+R9oSLFqwvP/KLZlovnz2tngxYv9tF1Uqf2zTLV64k9XEzKNjZ2ElWTa9Wbqc EV6L/tgz9oA23TJG26qTTLxzMzUz8lIjYfpT489G5a4a9w711QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ3gnfq4wV9N2AYAHGoVCnqFsRmwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kMDAx ZGQxZi05NDZiLTQ1N2ItOThkOC00MTcwMTY2NTMwOWUvYTE0YmVmNmYtM2QwZS0z MTFkLTk5MjAtNGQ1NTg5MDZhYTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDAwMWRkMWYtOTQ2Yi00NTdiLTk4 ZDgtNDE3MDE2NjUzMDllL2QwMDFkZDFmLTk0NmItNDU3Yi05OGQ4LTQxNzAxNjY1 MzA5ZS5jcmwwHwYDVR0jBBgwFoAUPsMu7a2ToVOmHKVimvGVSvJgMy4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kMDAxZGQxZi05NDZiLTQ1N2ItOThkOC00MTcw MTY2NTMwOWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRmDMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFDvCbMceZ4vdmaysIHaooikPnk6TNB0jBmwVXGEinKTX3NSiC5AsbPf 2bX1C7AaUw2LqzmtqPjRkLjuvijxHUQkem5704BdS5kzLATytQorfW8E7wTYWlIl A9ORh7S86G8LfwRlArjaUT50oH+Alz2RGpyOwNeYGHv4lXLZEH+/s2r2N+5X6Bs1 2k9MUnz+bFjHA/guO9dsQSVx9NbchJjR4+8f0sKawhbzixsdYDrxTZUnRu0pxP3A N6CFTsCKWTx0RyZPKdebqQ2gIDjIQ0o7Xd0C/6UqS78h3NqGpYvY6jH1VJ2ij+0n ktAPHXkSqvhIofi2JCnw3Kf6pa39Dj4= -----END CERTIFICATE-----Generated at Mon Jun 30 17:08:10 2025 by rpki-client