$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/f74fa0c9-0176-30b1-81ff-5ee642002cda.roa File: f74fa0c9-0176-30b1-81ff-5ee642002cda.roa (raw, json) Hash identifier: EVb1/VinKnhJbs7Olp2nJfE/KkB5BfvnMko5BVnaNA4= Subject key identifier: 58:B2:F4:51:EE:0F:30:3D:18:DC:40:13:C2:B2:8F:2B:4B:98:DE:F7 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584A2ABAF27CC48DDB68AE93B280 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/f74fa0c9-0176-30b1-81ff-5ee642002cda.roa Signing time: Thu 12 Jun 2025 13:01:03 +0000 ROA not before: Thu 12 Jun 2025 13:01:03 +0000 ROA not after: Wed 10 Sep 2025 13:01:03 +0000 asID: 396481 IP address blocks: 152.44.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2a:ba:f2:7c:c4:8d:db:68:ae:93:b2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Jun 12 13:01:03 2025 GMT Not After : Sep 10 13:01:03 2025 GMT Subject: CN=9bc2653d-7898-4afa-b96b-64ab075fbd33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:23:5a:49:c9:20:84:af:e7:f2:e4:3c:30:90: ca:1e:03:b4:af:53:b7:7e:9c:1d:ad:ad:46:1b:f0: 1a:40:8d:35:22:0e:7a:3c:82:38:44:63:2a:95:20: b4:2f:89:e7:cd:f2:05:a1:23:94:e3:56:17:45:a2: c9:75:37:e5:7a:22:40:4c:7f:69:d8:e2:52:ba:23: 33:c6:b3:8f:8d:9e:fd:7b:86:a1:3b:b6:f4:e3:42: 2c:dc:90:ea:29:52:a7:cd:b8:36:e1:14:fc:bc:5b: c7:b6:71:6d:90:df:8d:ac:bf:90:f7:30:2c:1f:fa: e6:99:09:19:11:49:85:29:aa:d7:7e:88:8f:8a:db: fa:1c:85:80:7d:e1:7b:34:6b:b4:09:f3:bb:e2:c3: a8:13:b9:bd:c3:52:5c:5e:e0:5c:3e:4b:d7:65:72: 9c:a9:95:39:45:37:f5:66:dc:cd:bd:b3:23:68:2b: ba:23:6e:1f:05:74:25:f1:d9:64:48:08:24:40:2b: 00:d0:52:29:d3:2c:b2:7e:b0:b5:55:6d:cd:84:5f: 50:15:45:cb:64:5b:d8:b1:46:e0:ec:bd:23:cf:72: f2:ee:6d:3c:ef:4d:24:79:75:ff:40:2a:29:07:8c: 17:02:57:1d:a1:9d:de:c4:68:8f:22:1e:aa:a8:77: 9e:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:B2:F4:51:EE:0F:30:3D:18:DC:40:13:C2:B2:8F:2B:4B:98:DE:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/f74fa0c9-0176-30b1-81ff-5ee642002cda.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 152.44.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:3d:b9:9b:86:1a:e7:fb:ce:78:2b:f8:fa:56:ee:e7:91:98: bf:00:f0:6f:a7:af:91:0c:bc:a2:2c:0e:fa:2e:3a:5b:9b:82: 52:a5:4d:73:8a:0d:40:8d:51:f2:b4:f5:c3:02:94:2c:9d:f4: 2f:ac:9e:42:17:7a:12:ab:55:42:02:80:a7:ef:b9:51:8a:14: 51:4a:29:a5:d1:b1:d3:59:b1:61:05:18:81:1f:ac:eb:eb:3d: 02:3e:e6:00:60:83:30:a2:e0:07:ad:92:b6:d2:1d:b4:96:93: 6f:af:38:5b:c4:4e:9f:ec:a2:48:03:df:b2:06:2d:f8:8f:19: 65:e2:d4:24:ce:d1:e1:85:3b:27:43:cf:17:a6:a7:68:93:c6: ee:1f:a5:69:6a:f7:39:36:75:30:37:77:f2:97:a9:b4:f6:f3: 42:f1:96:34:3e:fc:0b:30:18:93:73:f2:33:76:13:c9:6c:91: 72:3a:79:28:f7:f7:fd:47:63:c4:36:93:01:05:67:0c:d3:66: 1e:9f:9d:63:a2:9f:77:23:ae:b9:d2:91:13:f4:9a:c8:72:c7: b4:1e:e7:c2:cd:f5:18:40:8c:38:a6:35:9a:8f:37:ee:ca:fd: 1f:67:02:6d:57:28:64:86:a6:2d:b6:52:64:41:68:13:23:10: c0:2b:05:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoquvJ8xI3baK6TsoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDYxMjEzMDEwM1oXDTI1MDkxMDEzMDEwM1owLzEtMCsGA1UEAxMk OWJjMjY1M2QtNzg5OC00YWZhLWI5NmItNjRhYjA3NWZiZDMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAniNaSckghK/n8uQ8MJDKHgO0r1O3fpwdra1G G/AaQI01Ig56PII4RGMqlSC0L4nnzfIFoSOU41YXRaLJdTfleiJATH9p2OJSuiMz xrOPjZ79e4ahO7b040Is3JDqKVKnzbg24RT8vFvHtnFtkN+NrL+Q9zAsH/rmmQkZ EUmFKarXfoiPitv6HIWAfeF7NGu0CfO74sOoE7m9w1JcXuBcPkvXZXKcqZU5RTf1 ZtzNvbMjaCu6I24fBXQl8dlkSAgkQCsA0FIp0yyyfrC1VW3NhF9QFUXLZFvYsUbg 7L0jz3Ly7m08700keXX/QCopB4wXAlcdoZ3exGiPIh6qqHeeqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFiy9FHuDzA9GNxAE8KyjytLmN73MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvZjc0ZmEwYzktMDE3Ni0z MGIxLTgxZmYtNWVlNjQyMDAyY2RhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmCy9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEY9uZuGGuf7zngr+PpW7ueRmL8A8G+nr5EMvKIsDvouOlubglKlTXOK DUCNUfK09cMClCyd9C+snkIXehKrVUICgKfvuVGKFFFKKaXRsdNZsWEFGIEfrOvr PQI+5gBggzCi4AetkrbSHbSWk2+vOFvETp/sokgD37IGLfiPGWXi1CTO0eGFOydD zxemp2iTxu4fpWlq9zk2dTA3d/KXqbT280LxljQ+/AswGJNz8jN2E8lskXI6eSj3 9/1HY8Q2kwEFZwzTZh6fnWOin3cjrrnSkRP0mshyx7Qe58LN9RhAjDimNZqPN+7K /R9nAm1XKGSGpi22UmRBaBMjEMArBVI= -----END CERTIFICATE-----Generated at Sun Jun 29 16:08:27 2025 by rpki-client