$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0670fa0c-1c69-3756-85a2-81fa79b0198b.roa File: 0670fa0c-1c69-3756-85a2-81fa79b0198b.roa (raw, json) Hash identifier: tZwaBdIy8KqZURtmO8612AK/3LMjDXtFi6ZUsApr6sk= Subject key identifier: 20:D7:A4:CE:19:96:F7:E6:35:5E:61:83:E8:BB:6B:C4:98:9E:F1:37 Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F4328584A374AC7CA1A2A9A134C93F000 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0670fa0c-1c69-3756-85a2-81fa79b0198b.roa Signing time: Tue 17 Jun 2025 01:00:48 +0000 ROA not before: Tue 17 Jun 2025 01:00:48 +0000 ROA not after: Mon 15 Sep 2025 01:00:48 +0000 asID: 22781 IP address blocks: 207.204.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Jul 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:37:4a:c7:ca:1a:2a:9a:13:4c:93:f0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Jun 17 01:00:48 2025 GMT Not After : Sep 15 01:00:48 2025 GMT Subject: CN=7b89c88e-96f6-4fb3-8de5-e9f21baa95c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e3:3d:28:ab:c4:4f:14:e7:08:75:48:88:be: fc:f6:9e:d3:c0:4a:6d:1f:74:de:b4:d5:40:07:e3: ef:4b:98:bf:16:3c:6a:3a:45:23:e9:e5:cd:47:d3: 2b:3c:53:fb:47:c7:90:82:5c:e3:2e:f7:fb:e1:f5: f5:f6:97:0e:d9:36:eb:ce:bb:26:da:90:a1:8d:67: 2f:d7:9d:e0:b3:f4:f0:dd:5a:a0:90:88:b9:cf:02: 56:a0:6c:b2:40:11:02:86:91:9e:b4:0c:b9:72:c0: 06:df:07:18:8c:7d:d1:7e:c9:3f:e4:e9:4e:c4:b1: 05:5c:0c:d1:2f:04:6f:8e:c1:ba:c2:38:c3:3b:82: af:9c:46:0f:92:cf:78:d7:3c:2c:93:aa:ff:99:33: 0a:d0:ee:ee:0b:6a:3e:b6:43:c3:4f:dc:6b:cc:4c: aa:aa:fb:43:9f:bc:10:d3:1a:cb:33:4a:19:ea:5c: 39:68:6d:e1:83:d3:21:70:54:ef:3e:f3:9e:d5:c1: 0c:a7:c2:ab:74:e0:73:65:f9:43:ee:5e:87:7e:24: 56:a7:0f:3a:d7:de:40:c7:22:6e:23:bf:66:1e:d6: 63:5c:6a:46:78:5e:d1:86:0f:07:8f:30:5d:7f:0e: 15:2d:75:55:9e:32:fe:6c:bc:69:27:93:ce:79:69: 17:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:D7:A4:CE:19:96:F7:E6:35:5E:61:83:E8:BB:6B:C4:98:9E:F1:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0670fa0c-1c69-3756-85a2-81fa79b0198b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 207.204.224.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:62:56:24:69:58:81:55:ac:24:be:0e:e2:27:da:f0:a1:c8: bb:9e:9c:60:6a:10:29:b5:1e:e4:e4:37:31:a9:b8:70:cc:af: be:a4:88:b2:22:43:5d:b9:2a:95:b9:ec:38:6b:3b:de:67:d9: 91:ce:47:71:06:70:75:24:19:ba:dd:9e:b5:2c:ee:18:e6:29: f7:b6:40:68:d9:12:c2:dc:a3:6d:e1:a4:6b:20:75:d1:aa:f1: 86:3c:62:b1:63:b9:95:8e:7c:d0:2e:84:b2:ab:86:60:e9:58: 42:cc:1c:83:05:30:af:d0:12:5f:3b:6a:12:2d:d8:f6:21:b4: 45:40:9b:f3:cb:e5:55:20:29:2d:75:89:35:eb:33:51:26:b7: 79:b3:73:c4:b5:e1:a7:ab:7d:26:32:30:46:54:1a:cb:e0:f9: fb:96:59:19:3e:63:31:5d:23:0e:68:39:a8:b4:f1:f1:a7:01: 53:87:61:ef:14:2b:ae:6a:d6:a1:ae:e5:62:1d:62:f8:af:a1: 98:e3:8e:09:d7:12:34:13:cf:ce:28:8a:65:3f:f0:0d:76:90: dd:32:6b:c6:f2:24:98:00:7d:98:e8:85:b4:67:fb:27:18:f8: 7a:d9:38:1c:77:02:b5:26:86:3a:ca:b5:2e:90:af:b2:12:ea: 70:79:ec:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo3SsfKGiqaE0yT8AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI1MDYxNzAxMDA0OFoXDTI1MDkxNTAxMDA0OFowLzEtMCsGA1UEAxMk N2I4OWM4OGUtOTZmNi00ZmIzLThkZTUtZTlmMjFiYWE5NWMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAouM9KKvETxTnCHVIiL789p7TwEptH3TetNVA B+PvS5i/FjxqOkUj6eXNR9MrPFP7R8eQglzjLvf74fX19pcO2Tbrzrsm2pChjWcv 153gs/Tw3VqgkIi5zwJWoGyyQBEChpGetAy5csAG3wcYjH3Rfsk/5OlOxLEFXAzR LwRvjsG6wjjDO4KvnEYPks941zwsk6r/mTMK0O7uC2o+tkPDT9xrzEyqqvtDn7wQ 0xrLM0oZ6lw5aG3hg9MhcFTvPvOe1cEMp8KrdOBzZflD7l6HfiRWpw86195AxyJu I79mHtZjXGpGeF7Rhg8HjzBdfw4VLXVVnjL+bLxpJ5POeWkX4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCDXpM4ZlvfmNV5hg+i7a8SYnvE3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvMDY3MGZhMGMtMWM2OS0z NzU2LTg1YTItODFmYTc5YjAxOThiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCz8zgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACRiViRpWIFVrCS+DuIn2vChyLuenGBqECm1HuTkNzGpuHDMr76kiLIi Q125KpW57DhrO95n2ZHOR3EGcHUkGbrdnrUs7hjmKfe2QGjZEsLco23hpGsgddGq 8YY8YrFjuZWOfNAuhLKrhmDpWELMHIMFMK/QEl87ahIt2PYhtEVAm/PL5VUgKS11 iTXrM1Emt3mzc8S14aerfSYyMEZUGsvg+fuWWRk+YzFdIw5oOai08fGnAVOHYe8U K65q1qGu5WIdYvivoZjjjgnXEjQTz84oimU/8A12kN0ya8byJJgAfZjohbRn+ycY +HrZOBx3ArUmhjrKtS6Qr7IS6nB57EA= -----END CERTIFICATE-----Generated at Thu Jul 3 23:02:38 2025 by rpki-client