$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c/970f160a-2451-3f79-8736-d3f6126072d1.roa File: 970f160a-2451-3f79-8736-d3f6126072d1.roa (raw, json) Hash identifier: 7XppV3qGGTiWcL1uyn/cBjRxfh9o0z22cjj+7PM0+ZI= Subject key identifier: A7:A1:9B:59:E4:A2:08:95:1A:4D:81:55:A0:1B:C8:F5:48:89:64:46 Certificate issuer: /CN=b7497a3b-a0f9-45bd-ab0b-4e737c88063c Certificate serial: 010D0C9F4328584A4AD591548C092A8714E35440 Authority key identifier: E5:D8:88:1A:9F:07:88:91:03:FC:90:32:EF:61:DF:4C:A9:16:FD:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c/970f160a-2451-3f79-8736-d3f6126072d1.roa Signing time: Tue 24 Jun 2025 01:00:50 +0000 ROA not before: Tue 24 Jun 2025 01:00:50 +0000 ROA not after: Mon 22 Sep 2025 01:00:50 +0000 asID: 40244 IP address blocks: 173.233.64.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c/b7497a3b-a0f9-45bd-ab0b-4e737c88063c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c/b7497a3b-a0f9-45bd-ab0b-4e737c88063c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4a:d5:91:54:8c:09:2a:87:14:e3:54:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7497a3b-a0f9-45bd-ab0b-4e737c88063c Validity Not Before: Jun 24 01:00:50 2025 GMT Not After : Sep 22 01:00:50 2025 GMT Subject: CN=c2cf3c82-025b-47df-95e7-5dbcd2de1e65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:93:eb:20:03:6c:26:f0:25:e6:c9:fa:21:47: ff:4d:69:df:f8:2c:8e:14:7b:00:a9:cb:ef:f0:83: d6:3e:70:4b:77:ea:2d:0f:d6:d0:38:fa:53:57:ca: f5:08:53:49:2d:9f:6d:d0:ae:d4:d5:78:2d:8e:53: dc:6c:36:7b:f5:0a:03:f8:e8:b4:85:81:8b:67:dc: fb:50:25:88:2e:5a:8c:73:70:76:18:23:04:5e:b3: e2:ba:50:84:ef:70:92:57:66:a6:63:33:66:5d:7e: fc:83:a2:e4:55:2b:4f:b6:de:51:5b:f9:fb:84:9d: 21:1e:ea:11:d5:c2:c6:b1:f0:a4:e2:86:47:25:62: 3d:23:d3:86:f7:b7:a2:fa:64:c1:6e:4e:09:29:47: 82:b7:ba:6c:b1:a7:20:a8:24:eb:b0:c5:e1:c6:65: a2:0e:4d:bd:3b:d0:0b:2c:58:a9:68:c7:d8:ee:df: 89:a5:4e:f1:0c:87:97:d8:b6:23:58:53:6b:1a:58: c6:32:7f:ad:54:27:11:a6:91:c1:c1:a4:dd:5c:91: 44:44:57:9a:db:5f:d5:2f:50:98:36:7d:4d:dd:b9: c8:b3:3e:4b:99:db:ef:ce:cc:62:df:4a:0d:3f:1a: 3d:67:31:69:2a:75:0a:57:1e:32:9f:76:e5:5d:26: 12:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:A1:9B:59:E4:A2:08:95:1A:4D:81:55:A0:1B:C8:F5:48:89:64:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c/970f160a-2451-3f79-8736-d3f6126072d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c/b7497a3b-a0f9-45bd-ab0b-4e737c88063c.crl X509v3 Authority Key Identifier: keyid:E5:D8:88:1A:9F:07:88:91:03:FC:90:32:EF:61:DF:4C:A9:16:FD:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c.cer sbgp-ipAddrBlock: critical IPv4: 173.233.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:bb:82:11:41:f3:ed:48:97:be:bf:36:d4:2b:62:48:8c:82: 6a:c0:d4:45:c1:3d:92:eb:30:5e:10:38:c4:35:45:39:9c:fd: c5:e8:7d:d2:8f:09:be:e8:a1:88:7e:7b:b9:3b:b1:5d:f9:f4: d0:a5:58:7f:b3:ff:36:97:d1:06:b9:c2:be:c5:11:71:da:60: 5e:39:71:9c:3c:8b:43:07:92:1f:53:01:61:9b:2a:f7:37:7f: 45:e8:1f:f0:dd:b0:49:b0:7b:0f:6c:85:57:df:49:54:0f:f8: 4f:7d:b7:57:98:d7:0b:79:d5:c6:ab:a1:47:89:6b:c0:e8:55: af:8b:1d:08:c6:bf:50:20:a6:7a:1b:ae:bb:dc:b6:5e:62:8f: 8f:ed:eb:ff:b9:5e:d9:6b:a5:b0:05:aa:9d:c1:6c:22:25:06: d1:32:51:15:2f:f6:90:59:5e:55:e4:29:c8:a8:0e:24:7a:2c: a6:ad:8c:d3:a6:3f:48:a0:36:d3:f9:77:e0:7a:7c:a2:fc:77: 77:29:7d:b8:6c:40:9b:0d:91:54:28:d1:52:21:30:0a:1a:03: a7:a7:d6:6c:f6:9c:a4:91:f3:33:4f:5b:ac:29:1b:de:de:7e: f5:f3:d3:c5:0a:30:2f:db:91:56:5c:71:ed:03:3d:09:5c:ff: 21:54:1d:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpK1ZFUjAkqhxTjVEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjc0OTdhM2ItYTBmOS00NWJkLWFiMGItNGU3MzdjODgw NjNjMB4XDTI1MDYyNDAxMDA1MFoXDTI1MDkyMjAxMDA1MFowLzEtMCsGA1UEAxMk YzJjZjNjODItMDI1Yi00N2RmLTk1ZTctNWRiY2QyZGUxZTY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpPrIANsJvAl5sn6IUf/TWnf+CyOFHsAqcvv 8IPWPnBLd+otD9bQOPpTV8r1CFNJLZ9t0K7U1XgtjlPcbDZ79QoD+Oi0hYGLZ9z7 UCWILlqMc3B2GCMEXrPiulCE73CSV2amYzNmXX78g6LkVStPtt5RW/n7hJ0hHuoR 1cLGsfCk4oZHJWI9I9OG97ei+mTBbk4JKUeCt7pssacgqCTrsMXhxmWiDk29O9AL LFipaMfY7t+JpU7xDIeX2LYjWFNrGljGMn+tVCcRppHBwaTdXJFERFea21/VL1CY Nn1N3bnIsz5Lmdvvzsxi30oNPxo9ZzFpKnUKVx4yn3blXSYStQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKehm1nkogiVGk2BVaAbyPVIiWRGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iNzQ5 N2EzYi1hMGY5LTQ1YmQtYWIwYi00ZTczN2M4ODA2M2MvOTcwZjE2MGEtMjQ1MS0z Zjc5LTg3MzYtZDNmNjEyNjA3MmQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYjc0OTdhM2ItYTBmOS00NWJkLWFi MGItNGU3MzdjODgwNjNjL2I3NDk3YTNiLWEwZjktNDViZC1hYjBiLTRlNzM3Yzg4 MDYzYy5jcmwwHwYDVR0jBBgwFoAU5diIGp8HiJED/JAy72HfTKkW/RYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9iNzQ5N2EzYi1hMGY5LTQ1YmQtYWIwYi00ZTcz N2M4ODA2M2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFrelAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAW7ghFB8+1Il76/NtQrYkiMgmrA1EXBPZLrMF4QOMQ1RTmc/cXofdKP Cb7ooYh+e7k7sV359NClWH+z/zaX0Qa5wr7FEXHaYF45cZw8i0MHkh9TAWGbKvc3 f0XoH/DdsEmwew9shVffSVQP+E99t1eY1wt51caroUeJa8DoVa+LHQjGv1Agpnob rrvctl5ij4/t6/+5XtlrpbAFqp3BbCIlBtEyURUv9pBZXlXkKcioDiR6LKatjNOm P0igNtP5d+B6fKL8d3cpfbhsQJsNkVQo0VIhMAoaA6en1mz2nKSR8zNPW6wpG97e fvXz08UKMC/bkVZcce0DPQlc/yFUHfc= -----END CERTIFICATE-----Generated at Sun Jun 29 09:28:29 2025 by rpki-client