$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/4a5da011-3c63-344e-8f4e-1b485c41f7dd.roa File: 4a5da011-3c63-344e-8f4e-1b485c41f7dd.roa (raw, json) Hash identifier: +Wqnqm6k30MGWWqYVRDcQGxnFJAqQb2fBWd9B4doRik= Subject key identifier: 49:B6:03:03:E8:EF:07:EF:61:27:A0:E5:18:BB:28:78:FC:84:70:FE Certificate issuer: /CN=70057aa1-544d-4237-b549-304fd45324ba Certificate serial: 010D0C9F4328584A62909FF64019C9B00F7FBF60 Authority key identifier: DE:4A:A5:D1:33:5C:FD:87:EF:30:91:0B:66:AF:F0:CE:61:36:64:D1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/4a5da011-3c63-344e-8f4e-1b485c41f7dd.roa Signing time: Wed 02 Jul 2025 13:01:04 +0000 ROA not before: Wed 02 Jul 2025 13:01:04 +0000 ROA not after: Tue 30 Sep 2025 13:01:04 +0000 asID: 30039 IP address blocks: 216.222.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/70057aa1-544d-4237-b549-304fd45324ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/70057aa1-544d-4237-b549-304fd45324ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:90:9f:f6:40:19:c9:b0:0f:7f:bf:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70057aa1-544d-4237-b549-304fd45324ba Validity Not Before: Jul 2 13:01:04 2025 GMT Not After : Sep 30 13:01:04 2025 GMT Subject: CN=cb8ad447-e13d-41e6-b753-fa92b699fa7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:77:68:93:ea:a3:45:b6:fe:b5:35:43:9a:49: b5:73:c4:96:33:72:7f:0c:6d:1f:e5:c6:10:e1:8b: f9:c5:ee:ed:54:96:25:c4:2a:35:f8:52:41:65:6d: fd:57:4d:3d:63:48:9b:67:92:e1:e1:e3:ba:fb:8d: ce:f5:f6:ac:48:0c:e4:e0:fa:7b:f0:d6:44:d9:e6: 78:6a:6d:50:1c:e4:8a:ef:c2:f5:f7:6b:df:30:d5: d4:50:ab:80:ee:e7:c9:6b:6a:d2:8c:d2:ea:98:9d: 1b:8b:61:b3:f9:eb:0c:95:5f:a1:d5:51:9a:73:0c: 08:cc:c2:27:23:97:16:70:d6:af:7e:d6:6e:91:50: b2:b3:14:d7:f0:84:86:cd:9a:1e:17:1b:3b:ec:ee: 37:80:ea:20:4c:aa:34:9c:72:eb:f3:f9:3f:60:c4: ff:b3:7b:7d:78:2b:88:62:c2:fc:20:46:7e:46:35: b1:cc:01:84:4f:07:c3:31:9d:2f:b7:e7:a2:82:35: c2:40:e2:d7:f6:4a:bd:8f:03:e3:9d:72:03:a6:cd: 4c:0a:0b:2f:4d:12:eb:1d:e6:81:9c:47:8e:0a:a6: 27:7a:7a:17:37:bf:28:77:6d:c3:be:1b:46:16:c8: f6:3c:29:fc:44:38:da:45:61:60:5f:df:ed:ef:e6: 99:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:B6:03:03:E8:EF:07:EF:61:27:A0:E5:18:BB:28:78:FC:84:70:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/4a5da011-3c63-344e-8f4e-1b485c41f7dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/70057aa1-544d-4237-b549-304fd45324ba.crl X509v3 Authority Key Identifier: keyid:DE:4A:A5:D1:33:5C:FD:87:EF:30:91:0B:66:AF:F0:CE:61:36:64:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba.cer sbgp-ipAddrBlock: critical IPv4: 216.222.219.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:86:9b:9a:1c:50:7e:a1:72:fd:d7:9d:90:78:68:f9:81:91: 74:d6:8e:5c:96:f6:2d:33:95:22:42:4c:9d:b7:e2:62:32:cc: a3:e8:2d:f1:05:09:58:2f:ef:0a:a2:1c:8e:77:75:0a:03:3f: f4:a0:16:dc:dc:d9:c2:74:a6:97:f9:43:68:34:88:10:a3:de: e3:36:50:64:95:f7:d1:da:60:52:6f:1e:b4:6a:04:bf:9f:62: f8:61:2d:9f:a9:68:31:77:7d:3a:0c:d2:54:b2:67:c0:af:71: c9:fc:05:1e:be:91:11:fc:e9:da:44:3b:ea:0b:4e:3b:ff:ea: a6:3e:5d:a3:46:f9:4f:1e:93:a4:27:55:ac:34:8e:0a:e6:b6: a3:32:01:63:1f:72:10:04:9d:97:3b:98:f0:11:42:8a:fe:38: 9d:56:cb:d8:c9:3d:df:00:1f:5d:d7:0b:8a:b1:af:03:2e:ef: 4b:b9:4b:a7:1c:f2:62:5a:48:d8:a3:d2:8f:62:99:e1:30:93: 70:50:70:7a:20:fb:3f:77:11:21:a2:e9:71:b8:29:a3:9a:b5: 33:82:95:36:56:37:a0:4a:ac:e4:ba:ba:3f:92:68:53:8b:f6: bc:47:69:7a:03:1d:93:75:95:b3:f6:2c:63:b9:f2:04:5f:85: af:dc:92:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpikJ/2QBnJsA9/v2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzAwNTdhYTEtNTQ0ZC00MjM3LWI1NDktMzA0ZmQ0NTMy NGJhMB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk Y2I4YWQ0NDctZTEzZC00MWU2LWI3NTMtZmE5MmI2OTlmYTdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXdok+qjRbb+tTVDmkm1c8SWM3J/DG0f5cYQ 4Yv5xe7tVJYlxCo1+FJBZW39V009Y0ibZ5Lh4eO6+43O9fasSAzk4Pp78NZE2eZ4 am1QHOSK78L192vfMNXUUKuA7ufJa2rSjNLqmJ0bi2Gz+esMlV+h1VGacwwIzMIn I5cWcNavftZukVCysxTX8ISGzZoeFxs77O43gOogTKo0nHLr8/k/YMT/s3t9eCuI YsL8IEZ+RjWxzAGETwfDMZ0vt+eigjXCQOLX9kq9jwPjnXIDps1MCgsvTRLrHeaB nEeOCqYnenoXN78od23DvhtGFsj2PCn8RDjaRWFgX9/t7+aZ1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEm2AwPo7wfvYSeg5Ri7KHj8hHD+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS83MDA1 N2FhMS01NDRkLTQyMzctYjU0OS0zMDRmZDQ1MzI0YmEvNGE1ZGEwMTEtM2M2My0z NDRlLThmNGUtMWI0ODVjNDFmN2RkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNzAwNTdhYTEtNTQ0ZC00MjM3LWI1 NDktMzA0ZmQ0NTMyNGJhLzcwMDU3YWExLTU0NGQtNDIzNy1iNTQ5LTMwNGZkNDUz MjRiYS5jcmwwHwYDVR0jBBgwFoAU3kql0TNc/YfvMJELZq/wzmE2ZNEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS83MDA1N2FhMS01NDRkLTQyMzctYjU0OS0zMDRm ZDQ1MzI0YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2N7bMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABeGm5ocUH6hcv3XnZB4aPmBkXTWjlyW9i0zlSJCTJ234mIyzKPoLfEF CVgv7wqiHI53dQoDP/SgFtzc2cJ0ppf5Q2g0iBCj3uM2UGSV99HaYFJvHrRqBL+f YvhhLZ+paDF3fToM0lSyZ8Cvccn8BR6+kRH86dpEO+oLTjv/6qY+XaNG+U8ek6Qn Vaw0jgrmtqMyAWMfchAEnZc7mPARQor+OJ1Wy9jJPd8AH13XC4qxrwMu70u5S6cc 8mJaSNij0o9imeEwk3BQcHog+z93ESGi6XG4KaOatTOClTZWN6BKrOS6uj+SaFOL 9rxHaXoDHZN1lbP2LGO58gRfha/ckqs= -----END CERTIFICATE-----Generated at Thu Jul 3 23:22:35 2025 by rpki-client