$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/940897aa-37fe-3fcf-805a-63ddb933a32a.roa File: 940897aa-37fe-3fcf-805a-63ddb933a32a.roa (raw, json) Hash identifier: ZhihB+kIrxLtd+ugJMH5GVS2bCXmXENt5sQoyMUM6XI= Subject key identifier: 09:3E:4D:3B:5E:09:F8:3C:1F:E5:2D:43:11:8D:90:10:C6:22:7D:83 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584A2ABAF26093D2E6F7FC038180 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/940897aa-37fe-3fcf-805a-63ddb933a32a.roa Signing time: Thu 12 Jun 2025 13:01:03 +0000 ROA not before: Thu 12 Jun 2025 13:01:03 +0000 ROA not after: Wed 10 Sep 2025 13:01:03 +0000 asID: 54858 IP address blocks: 208.52.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2a:ba:f2:60:93:d2:e6:f7:fc:03:81:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Jun 12 13:01:03 2025 GMT Not After : Sep 10 13:01:03 2025 GMT Subject: CN=ea007f49-a463-4e47-95e5-cd7636cd9e91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e9:37:d1:45:c2:e0:ea:26:d0:09:6e:09:00: e2:10:cc:3e:d7:00:93:ab:3b:95:54:89:fa:36:fc: 72:03:97:b1:7c:85:fb:65:e8:77:fd:54:97:f2:ae: d8:ac:cb:99:3a:44:28:ad:f7:82:c2:60:44:09:e2: 75:1e:cb:5a:bd:e9:74:fa:2b:c0:61:8f:e8:10:40: d6:86:34:ca:9e:5f:7b:11:94:2a:67:4e:7f:f9:66: 9a:12:49:b1:05:01:c6:b4:c8:c5:c1:b0:c8:b0:18: f9:30:c4:52:30:f2:96:dd:c8:4c:c1:6b:bc:ad:59: 88:f2:cb:bb:18:e0:0a:2e:ed:d5:9d:5b:ff:cb:18: d4:70:6b:8a:bc:2d:8e:f0:d4:e9:7c:70:40:b7:d7: 3e:1f:33:59:8a:cc:6b:52:7e:8e:74:e0:be:2f:3b: 8c:c5:46:71:b6:e1:84:dc:88:57:b8:13:84:64:78: de:c2:7d:5c:d8:97:1b:44:ff:f8:1f:ee:0d:4a:03: 39:d0:3d:99:b7:c2:e9:a7:bf:05:7d:32:00:02:d7: b5:46:16:d3:dd:e1:63:48:f4:d8:07:be:43:c7:98: 43:5f:f7:73:78:29:05:5e:64:50:c0:bf:de:bf:64: 2c:81:af:63:b5:33:11:69:ee:9b:89:4d:69:3f:55: eb:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:3E:4D:3B:5E:09:F8:3C:1F:E5:2D:43:11:8D:90:10:C6:22:7D:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/940897aa-37fe-3fcf-805a-63ddb933a32a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 208.52.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:4c:f3:c2:03:f4:53:01:c3:f9:99:b4:74:15:98:14:5a:ba: d2:13:04:45:f2:f5:35:0c:88:fc:15:db:ed:27:95:95:22:91: c7:a9:94:89:2f:38:31:54:79:54:4f:96:12:47:39:72:3d:5e: f1:b7:af:89:34:6c:e0:55:79:2d:4a:49:12:9e:8f:56:aa:5f: 84:92:27:ae:c9:14:bc:68:6e:51:aa:80:fd:93:41:6e:24:93: cc:39:19:68:71:73:8e:20:d9:c0:cf:93:50:de:83:21:2c:de: d2:62:01:a5:c3:aa:ca:12:51:4c:aa:b1:33:b5:26:80:c3:ce: 2a:1e:aa:ce:59:7f:9e:2b:c8:20:d8:71:b7:17:e2:06:39:c2: d6:c3:87:8c:05:28:72:42:08:0c:9a:25:7d:a3:48:01:12:3c: 6e:87:0d:bd:ea:29:e6:62:5c:6c:27:1e:f7:7b:23:cb:b4:3b: 84:ff:49:46:d8:3b:74:79:e7:94:1f:1a:3a:d3:c9:31:08:aa: bd:ae:11:ff:f1:a6:4d:e6:e4:0b:8d:32:89:12:ec:4b:15:a2: 27:bb:d4:87:91:71:cb:42:74:2b:45:6d:4c:88:66:af:fa:67: 05:a2:86:3d:d2:bd:60:31:d4:b7:02:d3:c4:78:95:98:ff:f4: cb:db:16:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoquvJgk9Lm9/wDgYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDYxMjEzMDEwM1oXDTI1MDkxMDEzMDEwM1owLzEtMCsGA1UEAxMk ZWEwMDdmNDktYTQ2My00ZTQ3LTk1ZTUtY2Q3NjM2Y2Q5ZTkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOk30UXC4Oom0AluCQDiEMw+1wCTqzuVVIn6 NvxyA5exfIX7Zeh3/VSX8q7YrMuZOkQorfeCwmBECeJ1Hstavel0+ivAYY/oEEDW hjTKnl97EZQqZ05/+WaaEkmxBQHGtMjFwbDIsBj5MMRSMPKW3chMwWu8rVmI8su7 GOAKLu3VnVv/yxjUcGuKvC2O8NTpfHBAt9c+HzNZisxrUn6OdOC+LzuMxUZxtuGE 3IhXuBOEZHjewn1c2JcbRP/4H+4NSgM50D2Zt8Lpp78FfTIAAte1RhbT3eFjSPTY B75Dx5hDX/dzeCkFXmRQwL/ev2Qsga9jtTMRae6biU1pP1XrKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAk+TTteCfg8H+UtQxGNkBDGIn2DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvOTQwODk3YWEtMzdmZS0z ZmNmLTgwNWEtNjNkZGI5MzNhMzJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQH0DQAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAlM88ID9FMBw/mZtHQVmBRautITBEXy9TUMiPwV2+0nlZUikceplIkv ODFUeVRPlhJHOXI9XvG3r4k0bOBVeS1KSRKej1aqX4SSJ67JFLxoblGqgP2TQW4k k8w5GWhxc44g2cDPk1DegyEs3tJiAaXDqsoSUUyqsTO1JoDDzioeqs5Zf54ryCDY cbcX4gY5wtbDh4wFKHJCCAyaJX2jSAESPG6HDb3qKeZiXGwnHvd7I8u0O4T/SUbY O3R555QfGjrTyTEIqr2uEf/xpk3m5AuNMokS7EsVoie71IeRcctCdCtFbUyIZq/6 ZwWihj3SvWAx1LcC08R4lZj/9MvbFlk= -----END CERTIFICATE-----Generated at Mon Jun 30 13:45:03 2025 by rpki-client