$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/720b7d31-5c11-39f9-be21-0ddbb9331386.roa File: 720b7d31-5c11-39f9-be21-0ddbb9331386.roa (raw, json) Hash identifier: dmcz0tXD+ZJJB2TkredUBOPp3CRjZa+yLQpMMhSTjXA= Subject key identifier: 6A:84:07:B7:5C:81:C6:38:98:B3:00:89:FB:9A:93:2A:E9:52:25:87 Certificate issuer: /CN=70057aa1-544d-4237-b549-304fd45324ba Certificate serial: 010D0C9F4328584A6290A0397E5933A91967CD00 Authority key identifier: DE:4A:A5:D1:33:5C:FD:87:EF:30:91:0B:66:AF:F0:CE:61:36:64:D1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/720b7d31-5c11-39f9-be21-0ddbb9331386.roa Signing time: Wed 02 Jul 2025 13:01:04 +0000 ROA not before: Wed 02 Jul 2025 13:01:04 +0000 ROA not after: Tue 30 Sep 2025 13:01:04 +0000 asID: 25617 IP address blocks: 216.222.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/70057aa1-544d-4237-b549-304fd45324ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/70057aa1-544d-4237-b549-304fd45324ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:90:a0:39:7e:59:33:a9:19:67:cd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70057aa1-544d-4237-b549-304fd45324ba Validity Not Before: Jul 2 13:01:04 2025 GMT Not After : Sep 30 13:01:04 2025 GMT Subject: CN=a49ea699-2f13-4958-95c2-8a7b33e7e867 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ea:11:84:0f:1e:a1:fc:da:5d:37:0b:eb:6e: 47:8d:e8:29:e6:ff:42:79:2d:8b:d9:9c:fc:8c:d4: 65:4b:27:ba:bf:d6:f2:5d:ae:b5:4e:8e:a6:3c:a5: 77:57:56:a8:13:27:b4:c0:55:21:e0:bc:31:98:7c: 37:70:e6:ab:6b:62:bb:0c:21:3b:37:da:92:b6:28: ef:f7:19:1b:a6:c1:c2:ff:8b:2f:3c:30:31:7f:48: ad:be:24:03:3c:00:20:d1:b6:73:a0:fb:5f:76:e0: 19:e2:c5:c8:a3:09:b6:fa:dc:03:21:d2:a5:bb:e0: 18:10:a7:5a:04:98:b2:07:ca:32:3c:34:52:0e:5b: 59:b4:fc:e5:4d:69:a9:d2:4e:fa:d7:64:ec:13:19: a8:18:51:a1:32:7f:55:a6:16:c0:a4:21:a9:8f:c7: 88:6b:a7:e8:d5:bc:ab:fe:8e:01:c6:1e:b9:32:e5: 19:ff:b4:ca:f8:54:78:8c:4d:2c:3b:56:1d:d6:30: c7:b3:2e:1c:c3:ad:65:1a:3f:74:e6:37:a4:9c:cc: ba:ad:1c:38:34:41:c6:b4:bf:01:e7:6a:a6:5c:79: 22:fc:1a:a0:7d:75:bb:46:46:02:a1:c3:bd:a7:7a: 18:23:45:12:fd:d5:ca:cd:aa:cc:c8:88:b1:ea:f8: eb:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:84:07:B7:5C:81:C6:38:98:B3:00:89:FB:9A:93:2A:E9:52:25:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/720b7d31-5c11-39f9-be21-0ddbb9331386.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/70057aa1-544d-4237-b549-304fd45324ba.crl X509v3 Authority Key Identifier: keyid:DE:4A:A5:D1:33:5C:FD:87:EF:30:91:0B:66:AF:F0:CE:61:36:64:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba.cer sbgp-ipAddrBlock: critical IPv4: 216.222.215.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:ba:3d:6a:6f:b8:43:92:5d:66:19:aa:18:a0:25:5f:04:43: a7:11:67:16:dc:38:96:85:2f:b1:3a:2b:ac:64:71:fa:5a:db: 2e:a4:11:a5:a2:f6:ff:9b:7c:b4:f1:06:81:9f:f6:a1:99:31: 84:2b:2c:c8:ac:46:38:6f:0a:7c:c0:22:22:09:df:f1:e7:01: 4b:66:80:2d:c9:92:9d:f5:6a:f4:fc:2d:06:73:af:80:46:28: 21:f3:65:d1:1c:c2:fb:7e:17:8c:3e:25:c8:94:76:05:cf:20: 45:1b:bc:4d:1f:6d:6c:36:54:5a:d7:61:b4:28:ce:3c:db:ad: f6:44:14:23:70:9a:06:78:24:3e:a3:aa:43:f2:60:d7:3d:39: 96:39:ef:21:9a:9c:14:8e:b1:f4:64:2d:70:3c:d8:d6:06:37: fc:bd:d4:bd:87:6d:3c:2d:63:d2:c1:6b:e8:5d:c6:d3:a9:4d: 2f:25:ff:d5:7b:7d:e3:fb:76:60:f4:a8:88:f8:6e:04:55:46: 82:99:ab:2a:ba:e9:f5:81:e8:09:29:86:3c:fc:65:b1:66:c3: 91:12:47:d9:b6:07:48:6d:9e:79:1a:85:4e:9b:ab:ec:24:81: f7:b0:4f:96:bb:b6:73:d5:10:f8:a3:de:db:df:91:99:42:eb: 85:44:e0:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpikKA5flkzqRlnzQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzAwNTdhYTEtNTQ0ZC00MjM3LWI1NDktMzA0ZmQ0NTMy NGJhMB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk YTQ5ZWE2OTktMmYxMy00OTU4LTk1YzItOGE3YjMzZTdlODY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOoRhA8eofzaXTcL625Hjegp5v9CeS2L2Zz8 jNRlSye6v9byXa61To6mPKV3V1aoEye0wFUh4LwxmHw3cOara2K7DCE7N9qStijv 9xkbpsHC/4svPDAxf0itviQDPAAg0bZzoPtfduAZ4sXIowm2+twDIdKlu+AYEKda BJiyB8oyPDRSDltZtPzlTWmp0k7612TsExmoGFGhMn9VphbApCGpj8eIa6fo1byr /o4Bxh65MuUZ/7TK+FR4jE0sO1Yd1jDHsy4cw61lGj905jeknMy6rRw4NEHGtL8B 52qmXHki/BqgfXW7RkYCocO9p3oYI0US/dXKzarMyIix6vjrPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGqEB7dcgcY4mLMAifuakyrpUiWHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS83MDA1 N2FhMS01NDRkLTQyMzctYjU0OS0zMDRmZDQ1MzI0YmEvNzIwYjdkMzEtNWMxMS0z OWY5LWJlMjEtMGRkYmI5MzMxMzg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNzAwNTdhYTEtNTQ0ZC00MjM3LWI1 NDktMzA0ZmQ0NTMyNGJhLzcwMDU3YWExLTU0NGQtNDIzNy1iNTQ5LTMwNGZkNDUz MjRiYS5jcmwwHwYDVR0jBBgwFoAU3kql0TNc/YfvMJELZq/wzmE2ZNEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS83MDA1N2FhMS01NDRkLTQyMzctYjU0OS0zMDRm ZDQ1MzI0YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2N7XMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHK6PWpvuEOSXWYZqhigJV8EQ6cRZxbcOJaFL7E6K6xkcfpa2y6kEaWi 9v+bfLTxBoGf9qGZMYQrLMisRjhvCnzAIiIJ3/HnAUtmgC3Jkp31avT8LQZzr4BG KCHzZdEcwvt+F4w+JciUdgXPIEUbvE0fbWw2VFrXYbQozjzbrfZEFCNwmgZ4JD6j qkPyYNc9OZY57yGanBSOsfRkLXA82NYGN/y91L2HbTwtY9LBa+hdxtOpTS8l/9V7 feP7dmD0qIj4bgRVRoKZqyq66fWB6Akphjz8ZbFmw5ESR9m2B0htnnkahU6bq+wk gfewT5a7tnPVEPij3tvfkZlC64VE4IU= -----END CERTIFICATE-----Generated at Thu Jul 3 23:23:32 2025 by rpki-client