$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/76185599-c73b-3b3a-a4cf-d4e8504e2275.roa File: 76185599-c73b-3b3a-a4cf-d4e8504e2275.roa (raw, json) Hash identifier: y5/E9Z5Q1AAPzke+gyaomUq5vTqdCjRytrgg5lcrx0Q= Subject key identifier: 23:20:FC:2F:DA:49:A2:E3:EF:67:E9:A5:E8:FF:56:36:C1:3D:3C:47 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584A2ABAFD3003B96EDE5B8E7980 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/76185599-c73b-3b3a-a4cf-d4e8504e2275.roa Signing time: Thu 12 Jun 2025 13:01:03 +0000 ROA not before: Thu 12 Jun 2025 13:01:03 +0000 ROA not after: Wed 10 Sep 2025 13:01:03 +0000 asID: 54858 IP address blocks: 216.243.4.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2a:ba:fd:30:03:b9:6e:de:5b:8e:79:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Jun 12 13:01:03 2025 GMT Not After : Sep 10 13:01:03 2025 GMT Subject: CN=84474bb7-3665-4ce2-a903-823b11032864 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:3a:84:4e:4b:56:fa:c8:ce:19:ca:8a:40:b1: c4:7e:a7:a8:d6:bd:a1:34:f1:5d:61:e3:0b:37:19: b7:e3:1f:e9:4d:ea:d3:66:a6:48:ac:45:c0:f4:2f: b5:49:86:c8:6b:fa:9a:f2:48:75:71:83:5d:6e:b9: f3:e2:e0:69:99:67:48:b3:be:61:50:ac:f0:0d:c7: 98:1f:99:15:2b:dc:a9:52:99:20:e1:3a:71:c5:1a: b6:a2:df:c0:37:32:ce:00:dc:dd:f4:ec:d5:ea:52: 61:2c:33:50:46:28:0a:a3:26:dc:f5:7c:fd:14:7c: ed:01:ce:85:30:e6:ca:55:98:f0:85:c2:a9:e5:9d: 93:e4:9e:84:d0:1e:e4:cb:98:f8:a4:96:19:e4:4b: 6b:64:98:df:77:a4:fb:46:63:0e:bf:1c:9e:b1:77: 06:a8:9d:5b:40:fd:ef:5e:cc:61:56:39:bc:00:37: db:1f:65:46:a8:78:7a:7e:97:f7:fd:5f:44:6e:0d: dd:6d:11:18:d0:1e:49:cf:0b:56:1b:cb:75:f8:6d: 8f:6f:0e:bd:25:31:66:26:ac:8d:cd:7d:21:37:59: eb:ab:cc:2f:45:05:bc:e6:ce:50:2e:e8:b6:fa:96: ab:cc:61:eb:92:c5:e4:90:66:5b:18:51:c4:18:53: 31:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:20:FC:2F:DA:49:A2:E3:EF:67:E9:A5:E8:FF:56:36:C1:3D:3C:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/76185599-c73b-3b3a-a4cf-d4e8504e2275.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 216.243.4.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:f3:ac:92:c9:e2:43:08:98:02:e1:c4:61:40:cc:90:60:61: 92:1e:a3:8b:a5:a8:f5:e7:70:3b:51:2f:82:23:d2:d3:79:b4: a0:0c:0f:38:5e:03:43:3a:9e:0f:e6:9f:ab:2d:c7:62:03:d8: 18:7e:33:af:96:02:22:28:cd:43:66:23:b5:8f:a8:bb:28:cd: 31:c1:08:49:a5:6d:52:7d:d1:05:a9:ce:36:03:cc:2a:36:47: b6:fe:1d:49:b8:99:be:0a:fe:d5:c0:c2:67:34:eb:c2:2e:72: a7:59:4a:cd:af:c4:f3:a1:7d:03:e1:f1:73:04:a0:ff:8f:2f: d9:4f:0b:1b:5d:7a:d0:2b:4d:e8:9e:26:2f:f0:25:2d:ec:52: 97:ca:f0:57:f3:3f:ae:df:f4:52:a3:e0:b9:ce:3b:f0:14:42: c5:66:95:85:4a:91:ad:75:86:6d:3d:63:db:8b:a5:d4:74:6f: 7d:73:45:a0:d0:26:bf:15:88:23:59:4f:53:29:a0:08:b3:72: 4a:28:14:b3:e6:e9:b4:68:6a:64:8f:e0:8b:ea:5c:c6:b7:80: d0:52:6d:75:aa:33:2a:e2:5a:f4:04:35:4b:cd:d6:48:aa:f2: b3:80:2b:d6:9e:48:29:d6:a2:03:17:1b:fe:77:e3:3a:1f:d7: 3f:53:8b:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoquv0wA7lu3luOeYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDYxMjEzMDEwM1oXDTI1MDkxMDEzMDEwM1owLzEtMCsGA1UEAxMk ODQ0NzRiYjctMzY2NS00Y2UyLWE5MDMtODIzYjExMDMyODY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujqETktW+sjOGcqKQLHEfqeo1r2hNPFdYeML Nxm34x/pTerTZqZIrEXA9C+1SYbIa/qa8kh1cYNdbrnz4uBpmWdIs75hUKzwDceY H5kVK9ypUpkg4TpxxRq2ot/ANzLOANzd9OzV6lJhLDNQRigKoybc9Xz9FHztAc6F MObKVZjwhcKp5Z2T5J6E0B7ky5j4pJYZ5EtrZJjfd6T7RmMOvxyesXcGqJ1bQP3v XsxhVjm8ADfbH2VGqHh6fpf3/V9Ebg3dbREY0B5JzwtWG8t1+G2Pbw69JTFmJqyN zX0hN1nrq8wvRQW85s5QLui2+parzGHrksXkkGZbGFHEGFMxtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCMg/C/aSaLj72fppej/VjbBPTxHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvNzYxODU1OTktYzczYi0z YjNhLWE0Y2YtZDRlODUwNGUyMjc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2PMEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB/zrJLJ4kMImALhxGFAzJBgYZIeo4ulqPXncDtRL4Ij0tN5tKAMDzhe A0M6ng/mn6stx2ID2Bh+M6+WAiIozUNmI7WPqLsozTHBCEmlbVJ90QWpzjYDzCo2 R7b+HUm4mb4K/tXAwmc068IucqdZSs2vxPOhfQPh8XMEoP+PL9lPCxtdetArTeie Ji/wJS3sUpfK8FfzP67f9FKj4LnOO/AUQsVmlYVKka11hm09Y9uLpdR0b31zRaDQ Jr8ViCNZT1MpoAizckooFLPm6bRoamSP4IvqXMa3gNBSbXWqMyriWvQENUvN1kiq 8rOAK9aeSCnWogMXG/534zof1z9Ti9A= -----END CERTIFICATE-----Generated at Sun Jun 29 16:15:59 2025 by rpki-client