$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/70569b66-8a2e-3715-85bd-ca4934dc5ab3.roa File: 70569b66-8a2e-3715-85bd-ca4934dc5ab3.roa (raw, json) Hash identifier: ws7deI+lmMQeDjsEsVfONrZPs/gAwATc84MmFzNrKZY= Subject key identifier: 55:30:72:F7:86:2F:E7:49:3D:FE:35:FB:66:1A:48:C0:23:74:11:90 Certificate issuer: /CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971 Certificate serial: 010D0C9F4328584A2D85841EF07ECE43427538E8 Authority key identifier: 57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/70569b66-8a2e-3715-85bd-ca4934dc5ab3.roa Signing time: Fri 13 Jun 2025 13:01:04 +0000 ROA not before: Fri 13 Jun 2025 13:01:04 +0000 ROA not after: Thu 11 Sep 2025 13:01:04 +0000 asID: 18434 IP address blocks: 156.55.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2d:85:84:1e:f0:7e:ce:43:42:75:38:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971 Validity Not Before: Jun 13 13:01:04 2025 GMT Not After : Sep 11 13:01:04 2025 GMT Subject: CN=67cb862e-df18-4b55-8eec-5797c6d7ba23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:21:bc:2d:6d:6b:35:c9:52:04:75:bd:95:74: fb:70:7b:41:e3:a5:da:52:74:fc:93:f7:6d:34:8e: 99:4f:20:98:bd:d1:64:34:96:74:83:fa:2f:99:33: e9:03:bb:bd:5f:21:7c:3a:92:19:48:29:e0:24:4b: f5:0b:32:8b:50:a5:a2:0c:c2:e0:57:e2:a1:12:6a: b9:1d:20:7f:d8:16:02:33:7a:98:9e:d9:10:35:3a: ae:90:ea:e8:99:7b:3b:9e:9a:73:d9:9a:c9:f1:46: 12:af:e2:91:13:94:20:1f:5e:8c:71:c3:de:76:07: 3c:bc:a3:a9:aa:67:52:8d:cb:04:a5:0c:06:81:04: ce:9a:38:d3:34:54:15:5a:c2:e5:e0:75:42:2d:3d: bf:e3:76:af:b3:30:6f:55:3e:81:07:8e:bc:7b:26: 88:33:5d:75:47:a8:c4:ce:41:97:49:35:5d:8a:d1: 44:47:e2:49:66:91:56:2e:23:49:ba:60:d4:0e:ed: 8b:5a:2b:33:67:7a:a4:94:94:6a:06:5b:f3:5b:a8: 07:5d:63:b6:1c:59:d0:fa:1f:cd:de:03:a8:c2:2e: 18:1d:ac:26:e9:3e:b6:c2:a7:65:46:43:d3:23:57: c3:67:c9:16:bf:49:96:7c:a2:d7:96:9e:ad:8e:a2: 1b:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:30:72:F7:86:2F:E7:49:3D:FE:35:FB:66:1A:48:C0:23:74:11:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/70569b66-8a2e-3715-85bd-ca4934dc5ab3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl X509v3 Authority Key Identifier: keyid:57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer sbgp-ipAddrBlock: critical IPv4: 156.55.218.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:67:64:8f:d7:5b:1c:84:fd:c1:56:87:63:8b:d6:c4:45:8c: d3:69:f6:d3:ae:0b:b2:eb:40:26:d3:c8:db:65:ff:96:2a:8e: f7:11:b9:e6:f1:d4:42:c8:88:0e:ba:16:10:a3:9d:ba:0a:6e: d5:ea:dd:56:d2:b4:7c:46:28:09:1e:47:48:9b:97:9a:f3:dd: e9:70:12:0b:f9:33:b9:74:a9:ee:25:56:30:df:f3:b8:f7:8a: 17:28:ba:2e:0a:52:64:a5:64:f5:d9:1a:3c:25:26:65:f4:f3: 6f:82:32:49:09:2b:ce:79:cc:2e:45:bc:59:d8:2e:89:45:87: be:3e:c9:62:48:38:0f:99:37:70:1e:c9:64:7c:55:aa:9c:4f: e5:b5:0c:07:b6:61:0b:c8:c5:6b:f5:bc:ea:2d:4b:4c:f2:0e: d9:9f:31:05:25:30:06:c6:c3:ce:bb:f8:a6:96:c3:78:31:a0: 61:20:d2:5c:0e:60:7c:f3:d5:29:18:3f:fa:49:09:fe:c1:c9: d7:d3:1f:63:58:db:25:b9:c2:49:05:40:9c:02:dc:5a:5c:34: 1d:08:f1:24:dc:da:65:64:c6:3d:dd:06:1d:50:c1:de:6d:f9: 28:24:86:5d:ec:a3:6d:be:43:27:0b:7f:a2:0a:ce:08:fd:89: 5d:4e:e5:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEothYQe8H7OQ0J1OOgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQzYTU2OTktM2ViOC00ZWNiLTgwYTUtZTg3NjFhMTli OTcxMB4XDTI1MDYxMzEzMDEwNFoXDTI1MDkxMTEzMDEwNFowLzEtMCsGA1UEAxMk NjdjYjg2MmUtZGYxOC00YjU1LThlZWMtNTc5N2M2ZDdiYTIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjyG8LW1rNclSBHW9lXT7cHtB46XaUnT8k/dt NI6ZTyCYvdFkNJZ0g/ovmTPpA7u9XyF8OpIZSCngJEv1CzKLUKWiDMLgV+KhEmq5 HSB/2BYCM3qYntkQNTqukOromXs7nppz2ZrJ8UYSr+KRE5QgH16MccPedgc8vKOp qmdSjcsEpQwGgQTOmjjTNFQVWsLl4HVCLT2/43avszBvVT6BB468eyaIM111R6jE zkGXSTVditFER+JJZpFWLiNJumDUDu2LWiszZ3qklJRqBlvzW6gHXWO2HFnQ+h/N 3gOowi4YHawm6T62wqdlRkPTI1fDZ8kWv0mWfKLXlp6tjqIbAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFUwcveGL+dJPf41+2YaSMAjdBGQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wZDNh NTY5OS0zZWI4LTRlY2ItODBhNS1lODc2MWExOWI5NzEvNzA1NjliNjYtOGEyZS0z NzE1LTg1YmQtY2E0OTM0ZGM1YWIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGQzYTU2OTktM2ViOC00ZWNiLTgw YTUtZTg3NjFhMTliOTcxLzBkM2E1Njk5LTNlYjgtNGVjYi04MGE1LWU4NzYxYTE5 Yjk3MS5jcmwwHwYDVR0jBBgwFoAUVxqlJ+wXkXeMcXkDc2JxxVMXZGYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wZDNhNTY5OS0zZWI4LTRlY2ItODBhNS1lODc2 MWExOWI5NzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnDfaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAABnZI/XWxyE/cFWh2OL1sRFjNNp9tOuC7LrQCbTyNtl/5YqjvcRuebx 1ELIiA66FhCjnboKbtXq3VbStHxGKAkeR0ibl5rz3elwEgv5M7l0qe4lVjDf87j3 ihcoui4KUmSlZPXZGjwlJmX082+CMkkJK855zC5FvFnYLolFh74+yWJIOA+ZN3Ae yWR8VaqcT+W1DAe2YQvIxWv1vOotS0zyDtmfMQUlMAbGw867+KaWw3gxoGEg0lwO YHzz1SkYP/pJCf7BydfTH2NY2yW5wkkFQJwC3FpcNB0I8STc2mVkxj3dBh1Qwd5t +Sgkhl3so22+QycLf6IKzgj9iV1O5bA= -----END CERTIFICATE-----Generated at Tue Jul 1 00:30:20 2025 by rpki-client