$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13/de7f958e-9b5b-3cec-a597-047e298cf30f.roa File: de7f958e-9b5b-3cec-a597-047e298cf30f.roa (raw, json) Hash identifier: YLzTxW/cOS/39laRA0Lk6hrhVQijdoaqq9CdXNN1auo= Subject key identifier: B8:52:FC:FB:E3:C6:6C:52:42:4A:B6:DB:C7:46:A2:34:21:A1:B0:F4 Certificate issuer: /CN=213e5365-5be3-42f4-a3d1-7f74bb44df13 Certificate serial: 010D0C9F4328584A331AF0796A676EBFC4C93B00 Authority key identifier: 7A:C1:C6:0D:0F:85:20:1F:B9:B4:4F:6C:D6:94:4C:4B:D1:88:FC:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13/de7f958e-9b5b-3cec-a597-047e298cf30f.roa Signing time: Sun 15 Jun 2025 13:01:02 +0000 ROA not before: Sun 15 Jun 2025 13:01:02 +0000 ROA not after: Sat 13 Sep 2025 13:01:02 +0000 asID: 14618 IP address blocks: 208.70.136.0/23 maxlen: 23 208.70.138.0/24 maxlen: 24 208.70.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13/213e5365-5be3-42f4-a3d1-7f74bb44df13.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13/213e5365-5be3-42f4-a3d1-7f74bb44df13.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:33:1a:f0:79:6a:67:6e:bf:c4:c9:3b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=213e5365-5be3-42f4-a3d1-7f74bb44df13 Validity Not Before: Jun 15 13:01:02 2025 GMT Not After : Sep 13 13:01:02 2025 GMT Subject: CN=900d39d5-c66e-45a4-b5d1-c6a8e4993420 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:9e:02:57:95:49:6a:73:69:58:7d:75:59:2f: 69:f2:0f:7c:be:21:cd:ae:f6:67:ba:86:23:c1:8a: fd:5b:a8:7c:4b:38:8b:b5:24:de:84:55:44:42:d2: d3:a0:4b:0c:04:c8:1e:84:3c:53:43:e7:e0:63:72: d0:c5:0e:da:d3:1b:1c:f0:aa:35:d2:0e:eb:8b:6a: 7f:cd:f5:e3:6a:3c:31:52:f3:3e:ce:95:2e:35:52: 15:59:43:d7:ea:ec:73:40:d9:ed:15:3e:fb:c9:23: 9b:4f:77:90:42:ea:9f:7d:60:ac:65:5c:9f:8c:98: 7a:3f:f0:09:93:a3:3a:7c:4e:3d:a0:fd:3d:af:8a: e6:60:7d:ce:a5:9b:77:0b:53:91:d6:50:60:23:53: 1c:0e:c3:db:60:87:62:65:08:17:f8:5b:54:b8:a3: 2e:9d:b3:0f:91:cc:8f:01:9a:34:b1:73:5b:c4:ba: 04:6e:67:83:78:4a:0f:f5:75:0a:f5:4f:6d:ab:f9: 68:84:52:e5:a0:4d:34:6b:95:5c:51:71:5f:d0:3f: 1d:c2:13:9e:12:b0:83:eb:75:5f:4e:86:60:88:39: 67:ee:7c:88:42:dc:37:63:62:ba:fe:9b:82:d0:59: 25:a9:da:c8:87:47:7f:c4:10:9e:73:9e:57:61:eb: d4:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:52:FC:FB:E3:C6:6C:52:42:4A:B6:DB:C7:46:A2:34:21:A1:B0:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13/de7f958e-9b5b-3cec-a597-047e298cf30f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13/213e5365-5be3-42f4-a3d1-7f74bb44df13.crl X509v3 Authority Key Identifier: keyid:7A:C1:C6:0D:0F:85:20:1F:B9:B4:4F:6C:D6:94:4C:4B:D1:88:FC:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13.cer sbgp-ipAddrBlock: critical IPv4: 208.70.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:5c:9d:eb:7b:d0:3d:ad:99:20:d4:14:ba:9e:08:5d:a6:07: 75:ee:9e:e4:57:88:38:1b:25:23:1a:32:a0:35:a4:72:27:d1: 87:5d:1f:ee:84:a1:99:f6:bc:1c:ad:33:83:2e:2c:a7:9e:19: d4:0c:fb:ce:1f:a3:d7:e4:b8:21:24:cb:d7:e6:ed:0c:55:64: 49:a5:3f:ae:98:39:a1:74:25:9a:5e:a2:47:c0:29:45:d2:c9: 54:cb:31:ff:4b:27:1b:e5:3a:ef:51:53:d2:9c:60:78:fd:90: b6:0d:75:9e:14:e2:ec:44:d3:92:3d:00:d8:22:7d:76:51:b3: a0:6c:15:9b:da:56:a2:01:b9:8f:c2:4d:4e:1f:2c:1e:38:75: 27:84:08:24:41:fa:21:34:0f:8f:1a:28:d6:dd:63:54:3f:e1: 07:5f:b7:0b:cd:98:60:1b:df:ca:14:f5:d2:47:23:37:7c:ab: 8e:25:ec:a5:97:89:3c:7c:f7:e4:d0:10:73:77:78:a1:a7:07: 2a:5b:3a:60:6d:41:43:f2:83:d8:28:a7:a7:19:80:e6:5e:17: ec:44:17:e4:44:32:2b:43:6b:87:ad:4a:0d:51:78:c2:ea:7f: 1d:2b:67:bc:5c:a2:91:77:e8:cf:ec:99:3d:e9:86:92:c6:e3: 36:0f:62:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEozGvB5amduv8TJOwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjEzZTUzNjUtNWJlMy00MmY0LWEzZDEtN2Y3NGJiNDRk ZjEzMB4XDTI1MDYxNTEzMDEwMloXDTI1MDkxMzEzMDEwMlowLzEtMCsGA1UEAxMk OTAwZDM5ZDUtYzY2ZS00NWE0LWI1ZDEtYzZhOGU0OTkzNDIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqp4CV5VJanNpWH11WS9p8g98viHNrvZnuoYj wYr9W6h8SziLtSTehFVEQtLToEsMBMgehDxTQ+fgY3LQxQ7a0xsc8Ko10g7ri2p/ zfXjajwxUvM+zpUuNVIVWUPX6uxzQNntFT77ySObT3eQQuqffWCsZVyfjJh6P/AJ k6M6fE49oP09r4rmYH3OpZt3C1OR1lBgI1McDsPbYIdiZQgX+FtUuKMunbMPkcyP AZo0sXNbxLoEbmeDeEoP9XUK9U9tq/lohFLloE00a5VcUXFf0D8dwhOeErCD63Vf ToZgiDln7nyIQtw3Y2K6/puC0FklqdrIh0d/xBCec55XYevUSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLhS/PvjxmxSQkq228dGojQhobD0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8yMTNl NTM2NS01YmUzLTQyZjQtYTNkMS03Zjc0YmI0NGRmMTMvZGU3Zjk1OGUtOWI1Yi0z Y2VjLWE1OTctMDQ3ZTI5OGNmMzBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMjEzZTUzNjUtNWJlMy00MmY0LWEz ZDEtN2Y3NGJiNDRkZjEzLzIxM2U1MzY1LTViZTMtNDJmNC1hM2QxLTdmNzRiYjQ0 ZGYxMy5jcmwwHwYDVR0jBBgwFoAUesHGDQ+FIB+5tE9s1pRMS9GI/PwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8yMTNlNTM2NS01YmUzLTQyZjQtYTNkMS03Zjc0 YmI0NGRmMTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0EaIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFlcnet70D2tmSDUFLqeCF2mB3XunuRXiDgbJSMaMqA1pHIn0YddH+6E oZn2vBytM4MuLKeeGdQM+84fo9fkuCEky9fm7QxVZEmlP66YOaF0JZpeokfAKUXS yVTLMf9LJxvlOu9RU9KcYHj9kLYNdZ4U4uxE05I9ANgifXZRs6BsFZvaVqIBuY/C TU4fLB44dSeECCRB+iE0D48aKNbdY1Q/4QdftwvNmGAb38oU9dJHIzd8q44l7KWX iTx89+TQEHN3eKGnBypbOmBtQUPyg9gop6cZgOZeF+xEF+REMitDa4etSg1ReMLq fx0rZ7xcopF36M/smT3phpLG4zYPYow= -----END CERTIFICATE-----Generated at Sun Jun 29 00:30:25 2025 by rpki-client