$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86/70876b56-c403-3345-8194-f6fcf917a625.roa File: 70876b56-c403-3345-8194-f6fcf917a625.roa (raw, json) Hash identifier: pPqNirm4mha34SnONiOXHsGogUIFqF3pNxxTUaDmle8= Subject key identifier: 88:03:3D:5C:D9:C3:98:FB:77:7B:5A:67:CD:65:C2:88:D8:E4:2F:96 Certificate issuer: /CN=94543699-4d50-4a37-8000-038c38671a86 Certificate serial: 010D0C9F4328584AD23BA9E3E41A58EE3B5DB040 Authority key identifier: 03:F9:93:D0:3A:C4:C9:F5:95:7D:21:84:67:FF:6C:5B:D1:56:81:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86/70876b56-c403-3345-8194-f6fcf917a625.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 22115 IP address blocks: 172.111.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86/94543699-4d50-4a37-8000-038c38671a86.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86/94543699-4d50-4a37-8000-038c38671a86.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3b:a9:e3:e4:1a:58:ee:3b:5d:b0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94543699-4d50-4a37-8000-038c38671a86 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=b16a71b7-4005-4c12-9d75-492a7373dcdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:e2:a3:6b:36:4e:64:ba:3f:30:3d:bc:e7:3d: 8a:62:06:a6:f7:bd:0d:42:0b:9b:1f:e7:4a:63:79: f7:25:c1:8a:7b:06:57:79:a4:2b:83:cb:be:1c:43: 2d:d7:65:3a:ba:bb:de:f5:57:89:f2:d8:de:24:2e: 5b:c8:db:2f:d4:0d:3a:c5:4a:5e:4a:05:cc:68:13: fb:a3:0d:d0:19:b7:43:1d:80:6b:03:aa:f8:11:6b: ca:97:28:b4:7e:08:09:f2:82:48:9a:64:90:f1:1d: bf:37:40:eb:0d:af:b8:c6:5e:3c:11:d8:21:2d:6a: 2d:cd:84:e3:56:89:55:b9:b8:a2:ba:36:b2:79:dc: ce:c1:87:5b:0e:7e:ec:5f:ec:29:ae:3e:64:88:93: 49:10:71:c1:bb:c0:e2:9b:d8:76:f1:96:03:98:2e: 7a:8b:6d:1e:9b:eb:d7:34:45:da:d9:d6:56:2d:6e: 58:44:7b:06:4a:f5:bc:6e:31:c4:d4:e1:20:fe:e8: 26:4d:df:b7:06:b7:6e:e3:46:9e:93:a2:b9:de:84: 90:45:a5:1c:51:ed:3a:c6:61:56:ee:36:1e:ed:fb: b1:20:39:ba:19:93:fc:51:4c:72:84:6d:8c:db:af: 51:9e:6e:df:fc:ef:2b:89:55:1d:01:c2:fc:8c:f2: 3d:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:03:3D:5C:D9:C3:98:FB:77:7B:5A:67:CD:65:C2:88:D8:E4:2F:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86/70876b56-c403-3345-8194-f6fcf917a625.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86/94543699-4d50-4a37-8000-038c38671a86.crl X509v3 Authority Key Identifier: keyid:03:F9:93:D0:3A:C4:C9:F5:95:7D:21:84:67:FF:6C:5B:D1:56:81:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86.cer sbgp-ipAddrBlock: critical IPv4: 172.111.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:8f:5f:13:fa:37:05:f7:a7:0e:d4:a0:16:c4:cc:99:5a:f6: c3:21:2e:39:bd:7a:b0:fd:a3:1e:ef:c7:af:98:f8:6b:0c:ef: aa:a3:db:0d:0b:a9:f9:49:a4:ec:c2:1a:28:f4:50:61:12:3b: d4:8d:7d:80:90:67:72:b3:be:3c:f4:e1:d8:01:ea:30:2e:63: 4b:5c:54:3f:f5:e9:6a:aa:c0:27:e2:e4:77:e2:9b:ca:37:2d: c0:e5:20:37:50:60:c3:92:79:6c:73:ed:c2:9a:67:0a:88:da: d9:20:08:d4:f3:bb:4a:99:31:30:4f:27:7a:d4:d8:7a:b9:c3: a5:fc:dd:ab:9f:78:b3:7b:0b:8e:a2:b0:e8:93:4d:91:0d:cd: b6:08:9e:f2:e9:88:fc:ca:10:a3:38:00:02:d3:c4:3d:a2:82: f1:a7:25:62:83:c8:cd:bb:3b:57:7b:5c:c8:db:9e:db:2b:53: 8e:70:a6:08:00:3a:62:3c:63:9d:1d:0d:52:70:d1:06:91:a6: 0b:8c:26:5a:0c:ef:c8:40:1c:e0:ca:25:cd:a9:2d:02:73:4d: 8a:31:f8:4c:4a:28:60:c6:47:db:a7:ac:e7:b5:20:d0:cc:05: 6e:37:39:9c:61:cf:a8:97:09:c0:db:80:1e:4c:ae:52:4b:bb: 42:81:a0:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSO6nj5BpY7jtdsEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTQ1NDM2OTktNGQ1MC00YTM3LTgwMDAtMDM4YzM4Njcx YTg2MB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk YjE2YTcxYjctNDAwNS00YzEyLTlkNzUtNDkyYTczNzNkY2RjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkeKjazZOZLo/MD285z2KYgam970NQgubH+dK Y3n3JcGKewZXeaQrg8u+HEMt12U6urve9VeJ8tjeJC5byNsv1A06xUpeSgXMaBP7 ow3QGbdDHYBrA6r4EWvKlyi0fggJ8oJImmSQ8R2/N0DrDa+4xl48EdghLWotzYTj VolVubiiujayedzOwYdbDn7sX+wprj5kiJNJEHHBu8Dim9h28ZYDmC56i20em+vX NEXa2dZWLW5YRHsGSvW8bjHE1OEg/ugmTd+3Brdu40aek6K53oSQRaUcUe06xmFW 7jYe7fuxIDm6GZP8UUxyhG2M269Rnm7f/O8riVUdAcL8jPI9iQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIgDPVzZw5j7d3taZ81lwojY5C+WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85NDU0 MzY5OS00ZDUwLTRhMzctODAwMC0wMzhjMzg2NzFhODYvNzA4NzZiNTYtYzQwMy0z MzQ1LTgxOTQtZjZmY2Y5MTdhNjI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOTQ1NDM2OTktNGQ1MC00YTM3LTgw MDAtMDM4YzM4NjcxYTg2Lzk0NTQzNjk5LTRkNTAtNGEzNy04MDAwLTAzOGMzODY3 MWE4Ni5jcmwwHwYDVR0jBBgwFoAUA/mT0DrEyfWVfSGEZ/9sW9FWgeAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85NDU0MzY5OS00ZDUwLTRhMzctODAwMC0wMzhj Mzg2NzFhODYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrG8UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGCPXxP6NwX3pw7UoBbEzJla9sMhLjm9erD9ox7vx6+Y+GsM76qj2w0L qflJpOzCGij0UGESO9SNfYCQZ3Kzvjz04dgB6jAuY0tcVD/16WqqwCfi5Hfim8o3 LcDlIDdQYMOSeWxz7cKaZwqI2tkgCNTzu0qZMTBPJ3rU2Hq5w6X83aufeLN7C46i sOiTTZENzbYInvLpiPzKEKM4AALTxD2igvGnJWKDyM27O1d7XMjbntsrU45wpggA OmI8Y50dDVJw0QaRpguMJloM78hAHODKJc2pLQJzTYox+ExKKGDGR9unrOe1INDM BW43OZxhz6iXCcDbgB5MrlJLu0KBoIE= -----END CERTIFICATE-----Generated at Sat Aug 23 23:37:03 2025 by rpki-client